[#398481] p10 EPERM (try 3) flannel.git=0.27.3-alt1 cni-plugin-flannel.git=1.1.2-alt1

Tue Oct 28 11:13:30 MSK 2025

https://git.altlinux.org/tasks/398481/logs/events.3.1.log
https://packages.altlinux.org/tasks/398481

2025-Oct-28 08:08:24 :: task #398481 for p10 resumed by geochip:
2025-Oct-28 08:08:24 :: message: Fix CVE
#100 build 0.27.3-alt1 from /gears/f/flannel.git fetched at 2025-Oct-27 15:03:32 from sisyphus
#200 build 1.1.2-alt1 from /gears/c/cni-plugin-flannel.git fetched at 2025-Oct-27 16:37:58 from p10
2025-Oct-28 08:08:25 :: created build repo
2025-Oct-28 08:08:27 :: [armh] #100 flannel.git 0.27.3-alt1: build start
2025-Oct-28 08:08:27 :: [i586] #100 flannel.git 0.27.3-alt1: build start
2025-Oct-28 08:08:27 :: [x86_64] #100 flannel.git 0.27.3-alt1: build start
2025-Oct-28 08:08:27 :: [aarch64] #100 flannel.git 0.27.3-alt1: build start
2025-Oct-28 08:08:41 :: [i586] #100 flannel.git 0.27.3-alt1: build OK (cached)
2025-Oct-28 08:08:42 :: [i586] #200 cni-plugin-flannel.git 1.1.2-alt1: build start
2025-Oct-28 08:08:42 :: [x86_64] #100 flannel.git 0.27.3-alt1: build OK (cached)
2025-Oct-28 08:08:42 :: [x86_64] #200 cni-plugin-flannel.git 1.1.2-alt1: build start
2025-Oct-28 08:08:53 :: [i586] #200 cni-plugin-flannel.git 1.1.2-alt1: build OK (cached)
2025-Oct-28 08:08:54 :: [x86_64] #200 cni-plugin-flannel.git 1.1.2-alt1: build OK (cached)
2025-Oct-28 08:08:55 :: [aarch64] #100 flannel.git 0.27.3-alt1: build OK (cached)
2025-Oct-28 08:08:55 :: [aarch64] #200 cni-plugin-flannel.git 1.1.2-alt1: build start
2025-Oct-28 08:09:06 :: [armh] #100 flannel.git 0.27.3-alt1: build OK (cached)
2025-Oct-28 08:09:06 :: [armh] #200 cni-plugin-flannel.git 1.1.2-alt1: build start
2025-Oct-28 08:09:15 :: [aarch64] #200 cni-plugin-flannel.git 1.1.2-alt1: build OK (cached)
2025-Oct-28 08:09:34 :: [armh] #200 cni-plugin-flannel.git 1.1.2-alt1: build OK (cached)
2025-Oct-28 08:09:35 :: 100: build check OK (cached)
2025-Oct-28 08:09:35 :: 200: build check OK (cached)
2025-Oct-28 08:09:36 :: build check OK
2025-Oct-28 08:09:44 :: #100: flannel.git 0.27.3-alt1: version check OK
2025-Oct-28 08:09:48 :: #200: cni-plugin-flannel.git 1.1.2-alt1: version check OK
2025-Oct-28 08:09:48 :: build version check OK
2025-Oct-28 08:10:05 :: noarch check OK
2025-Oct-28 08:10:07 :: plan: src +2 -2 =19070, aarch64 +4 -3 =31813, armh +4 -3 =29609, i586 +4 -3 =32103, x86_64 +4 -3 =33144
#100 flannel 0.21.4-alt1 -> 0.27.3-alt1
 Tue Sep 09 2025 Alexander Stepchenko <geochip at altlinux> 0.27.3-alt1
 - Update to 0.27.3.
 - Fixes:
   + CVE-2025-22868: Unexpected memory consumption during token parsing in golang.org/x/oauth2
 Tue Jun 10 2025 Alexander Stepchenko <geochip at altlinux> 0.27.0-alt1
 - 0.26.7 -> 0.27.0
 Wed May 21 2025 Alexander Stepchenko <geochip at altlinux> 0.26.7-alt2
 - Add security fixes information to changelog
 Fri May 16 2025 Nadezhda Fedorova <fedor at altlinux> 0.26.7-alt1
 - 0.25.7 -> 0.26.7
 [...]
2025-Oct-28 08:10:07 :: flannel: fixes vulnerabilities: CVE-2025-22868 CVE-2023-45288 CVE-2024-24786 CVE-2023-48795 CVE-2023-44487 CVE-2023-39325
2025-Oct-28 08:10:07 :: flannel: mentions vulnerabilities: CVE-2024-45337 CVE-2024-45338
2025-Oct-28 08:10:46 :: patched apt indices
2025-Oct-28 08:10:57 :: created next repo
2025-Oct-28 08:11:03 :: duplicate provides check OK
2025-Oct-28 08:11:38 :: dependencies check OK
2025-Oct-28 08:11:39 :: [x86_64 i586 aarch64 armh] no need to repeat ELF symbols check
2025-Oct-28 08:11:39 :: [x86_64 i586 aarch64 armh] ELF symbols check OK
	i586: cni-plugin-flannel=1:1.1.2-alt1 post-install unowned files:
 /usr/libexec/cni
2025-Oct-28 08:11:50 :: [i586] #200 cni-plugin-flannel: install check OK (cached)
	x86_64: cni-plugin-flannel=1:1.1.2-alt1 post-install unowned files:
 /usr/libexec/cni
2025-Oct-28 08:11:50 :: [x86_64] #200 cni-plugin-flannel: install check OK (cached)
2025-Oct-28 08:11:54 :: [i586] #200 cni-plugin-flannel-debuginfo: install check OK (cached)
2025-Oct-28 08:11:54 :: [x86_64] #200 cni-plugin-flannel-debuginfo: install check OK (cached)
	aarch64: cni-plugin-flannel=1:1.1.2-alt1 post-install unowned files:
 /usr/libexec/cni
2025-Oct-28 08:11:57 :: [aarch64] #200 cni-plugin-flannel: install check OK (cached)
	i586: flannel=0.27.3-alt1 post-install unowned files:
 /lib/systemd/system/docker.service.d
2025-Oct-28 08:11:58 :: [i586] #100 flannel: install check OK (cached)
	x86_64: flannel=0.27.3-alt1 post-install unowned files:
 /lib/systemd/system/docker.service.d
2025-Oct-28 08:11:58 :: [x86_64] #100 flannel: install check OK (cached)
2025-Oct-28 08:12:02 :: [i586] #100 flannel-debuginfo: install check OK (cached)
2025-Oct-28 08:12:02 :: [x86_64] #100 flannel-debuginfo: install check OK (cached)
	armh: cni-plugin-flannel=1:1.1.2-alt1 post-install unowned files:
 /usr/libexec/cni
2025-Oct-28 08:12:03 :: [armh] #200 cni-plugin-flannel: install check OK (cached)
2025-Oct-28 08:12:04 :: [aarch64] #200 cni-plugin-flannel-debuginfo: install check OK (cached)
	aarch64: flannel=0.27.3-alt1 post-install unowned files:
 /lib/systemd/system/docker.service.d
2025-Oct-28 08:12:10 :: [aarch64] #100 flannel: install check OK (cached)
2025-Oct-28 08:12:14 :: [armh] #200 cni-plugin-flannel-debuginfo: install check OK (cached)
2025-Oct-28 08:12:17 :: [aarch64] #100 flannel-debuginfo: install check OK (cached)
	armh: flannel=0.27.3-alt1 post-install unowned files:
 /lib/systemd/system/docker.service.d
2025-Oct-28 08:12:25 :: [armh] #100 flannel: install check OK (cached)
2025-Oct-28 08:12:36 :: [armh] #100 flannel-debuginfo: install check OK (cached)
2025-Oct-28 08:12:53 :: [x86_64-i586] generated apt indices
2025-Oct-28 08:12:53 :: [x86_64-i586] created next repo
2025-Oct-28 08:13:03 :: [x86_64-i586] dependencies check OK
2025-Oct-28 08:13:05 :: gears inheritance check OK
2025-Oct-28 08:13:05 :: srpm inheritance check OK
girar-check-perms: access to flannel DENIED for geochip: project `flannel' is not listed in the acl file for repository `p10', and the policy for such projects in `p10' is to deny
check-subtask-perms: #100: flannel: needs approvals from members of @maint and @tester groups
girar-check-perms: access to cni-plugin-flannel DENIED for geochip: project `cni-plugin-flannel' is not listed in the acl file for repository `p10', and the policy for such projects in `p10' is to deny
check-subtask-perms: #200: cni-plugin-flannel: needs approvals from members of @maint and @tester groups
2025-Oct-28 08:13:09 :: acl check FAILED
2025-Oct-28 08:13:18 :: created contents_index files
2025-Oct-28 08:13:27 :: created hash files: aarch64 armh i586 src x86_64
2025-Oct-28 08:13:30 :: task #398481 for p10 EPERM