[#388567] p11 EPERM (try 2) nss.git=3.113-alt1 cbindgen.git=0.29.0-alt1 firefox.git=140.0.2-alt1

Tue Jul 1 11:11:32 MSK 2025

https://git.altlinux.org/tasks/388567/logs/events.2.1.log
https://packages.altlinux.org/tasks/388567

2025-Jul-01 08:01:11 :: task #388567 for p11 resumed by rauty:
2025-Jul-01 08:01:11 :: message: Firefox new version!
#100 build 3.113-alt1 from /people/rauty/packages/nss.git fetched at 2025-Jun-30 16:08:46
#140 build 0.29.0-alt1 from /people/rauty/packages/cbindgen.git fetched at 2025-Jun-30 16:17:24
#200 build 140.0.2-alt1 from /people/rauty/packages/firefox.git fetched at 2025-Jun-30 16:16:16
2025-Jul-01 08:01:11 :: created build repo
2025-Jul-01 08:01:13 :: [aarch64] #100 nss.git 3.113-alt1: build start
2025-Jul-01 08:01:13 :: [i586] #100 nss.git 3.113-alt1: build start
2025-Jul-01 08:01:13 :: [x86_64] #100 nss.git 3.113-alt1: build start
2025-Jul-01 08:01:26 :: [i586] #100 nss.git 3.113-alt1: build OK (cached)
2025-Jul-01 08:01:27 :: [i586] #140 cbindgen.git 0.29.0-alt1: build start
2025-Jul-01 08:01:27 :: [x86_64] #100 nss.git 3.113-alt1: build OK (cached)
2025-Jul-01 08:01:27 :: [x86_64] #140 cbindgen.git 0.29.0-alt1: build start
2025-Jul-01 08:01:38 :: [aarch64] #100 nss.git 3.113-alt1: build OK (cached)
2025-Jul-01 08:01:38 :: [aarch64] #140 cbindgen.git 0.29.0-alt1: build start
2025-Jul-01 08:01:39 :: [i586] #140 cbindgen.git 0.29.0-alt1: build OK (cached)
2025-Jul-01 08:01:40 :: [i586] #200 firefox.git 140.0.2-alt1: build start
2025-Jul-01 08:01:41 :: [x86_64] #140 cbindgen.git 0.29.0-alt1: build OK (cached)
2025-Jul-01 08:01:41 :: [x86_64] #200 firefox.git 140.0.2-alt1: build start
2025-Jul-01 08:02:02 :: [aarch64] #140 cbindgen.git 0.29.0-alt1: build OK (cached)
2025-Jul-01 08:02:02 :: [aarch64] #200 firefox.git 140.0.2-alt1: build start
2025-Jul-01 08:02:07 :: [i586] #200 firefox.git 140.0.2-alt1: build SKIPPED
2025-Jul-01 08:02:08 :: [x86_64] #200 firefox.git 140.0.2-alt1: build OK (cached)
2025-Jul-01 08:02:49 :: [aarch64] #200 firefox.git 140.0.2-alt1: build OK (cached)
2025-Jul-01 08:03:13 :: #100: nss.git 3.113-alt1: build check OK
2025-Jul-01 08:03:23 :: #140: cbindgen.git 0.29.0-alt1: build check OK
2025-Jul-01 08:03:54 :: #200: firefox.git 140.0.2-alt1: build check OK
2025-Jul-01 08:03:56 :: build check OK
warning (#100): libnss-nssckbi-checkinstall-3.113-alt1.x86_64.rpm should be .noarch.rpm
2025-Jul-01 08:06:07 :: noarch check OK
2025-Jul-01 08:06:09 :: plan: src +3 -3 =19693, aarch64 +12 -12 =34702, i586 +9 -12 =33796, x86_64 +12 -12 =35468
#140 cbindgen 0.28.0-alt1 -> 0.29.0-alt1
 Sat May 24 2025 Ajrat Makhmutov <rauty at altlinux> 0.29.0-alt1
 - New version.
#200 firefox 138.0.1-alt1 -> 140.0.2-alt1
 Sat Jun 28 2025 Ajrat Makhmutov <rauty at altlinux> 140.0.2-alt1
 - New version (140.0.2).
 Thu Jun 26 2025 Ajrat Makhmutov <rauty at altlinux> 140.0-alt1
 - New version (140.0).
 - Security fixes:
   + CVE-2025-6424: Use-after-free in FontFaceSet
   + CVE-2025-6425: The WebCompat WebExtension shipped with Firefox exposed a persistent UUID
   + CVE-2025-6426: No warning when opening executable terminal files on macOS
   + CVE-2025-6427: connect-src Content Security Policy restriction could be bypassed
   + CVE-2025-6428: Firefox for Android opened URLs specified in a link querystring parameter
 [...]
#100 nss 3.110-alt1 -> 3.113-alt1
 Thu Jun 26 2025 Ajrat Makhmutov <rauty at altlinux> 3.113-alt1
 - New version (3.113).
 Sat Jun 07 2025 Ajrat Makhmutov <rauty at altlinux> 3.112-alt1
 - New version (3.112).
 Mon May 12 2025 Ajrat Makhmutov <rauty at altlinux> 3.111-alt1
 - New version (3.111).
2025-Jul-01 08:06:10 :: firefox: mentions vulnerabilities: CVE-2025-6424 CVE-2025-6425 CVE-2025-6426 CVE-2025-6427 CVE-2025-6428 CVE-2025-6429 CVE-2025-6430 CVE-2025-6431 CVE-2025-6432 CVE-2025-6433 CVE-2025-6434 CVE-2025-6435 CVE-2025-6436 CVE-2025-49709 CVE-2025-49710 CVE-2025-5263 CVE-2025-5264 CVE-2025-5265 CVE-2025-5266 CVE-2025-5270 CVE-2025-5271 CVE-2025-5267 CVE-2025-5268 CVE-2025-5272 CVE-2025-4920 CVE-2025-4921
2025-Jul-01 08:06:57 :: patched apt indices
2025-Jul-01 08:07:06 :: created next repo
2025-Jul-01 08:07:18 :: duplicate provides check OK
2025-Jul-01 08:08:01 :: dependencies check OK
2025-Jul-01 08:08:01 :: [x86_64 i586 aarch64] no need to repeat ELF symbols check
2025-Jul-01 08:08:02 :: [x86_64 i586 aarch64] ELF symbols check OK
2025-Jul-01 08:08:13 :: [i586] #140 cbindgen: install check OK (cached)
2025-Jul-01 08:08:14 :: [x86_64] #140 cbindgen: install check OK (cached)
2025-Jul-01 08:08:17 :: [i586] #140 cbindgen-debuginfo: install check OK (cached)
2025-Jul-01 08:08:18 :: [x86_64] #140 cbindgen-debuginfo: install check OK (cached)
2025-Jul-01 08:08:21 :: [i586] #100 libnss: install check OK (cached)
	x86_64: firefox=140.0.2-alt1 post-install unowned files:
 /usr/share/gnome-shell
 /usr/share/gnome-shell/search-providers
 /usr/share/icons/hicolor/22x22
 /usr/share/icons/hicolor/22x22/apps
 /usr/share/icons/hicolor/24x24
 /usr/share/icons/hicolor/24x24/apps
 /usr/share/icons/hicolor/256x256
 /usr/share/icons/hicolor/256x256/apps
2025-Jul-01 08:08:23 :: [x86_64] #200 firefox: install check OK (cached)
2025-Jul-01 08:08:23 :: [aarch64] #140 cbindgen: install check OK (cached)
2025-Jul-01 08:08:25 :: [i586] #100 libnss-debuginfo: install check OK (cached)
2025-Jul-01 08:08:28 :: [x86_64] #200 firefox-config-privacy: install check OK (cached)
2025-Jul-01 08:08:30 :: [i586] #100 libnss-devel: install check OK (cached)
2025-Jul-01 08:08:31 :: [aarch64] #140 cbindgen-debuginfo: install check OK (cached)
2025-Jul-01 08:08:34 :: [x86_64] #200 firefox-debuginfo: install check OK (cached)
2025-Jul-01 08:08:34 :: [i586] #100 libnss-devel-static: install check OK (cached)
2025-Jul-01 08:08:38 :: [x86_64] #100 libnss: install check OK (cached)
2025-Jul-01 08:08:38 :: [i586] #100 libnss-nssckbi-checkinstall: install check OK (cached)
	aarch64: firefox=140.0.2-alt1 post-install unowned files:
 /usr/share/gnome-shell
 /usr/share/gnome-shell/search-providers
 /usr/share/icons/hicolor/22x22
 /usr/share/icons/hicolor/22x22/apps
 /usr/share/icons/hicolor/24x24
 /usr/share/icons/hicolor/24x24/apps
 /usr/share/icons/hicolor/256x256
 /usr/share/icons/hicolor/256x256/apps
2025-Jul-01 08:08:39 :: [aarch64] #200 firefox: install check OK (cached)
2025-Jul-01 08:08:42 :: [i586] #100 nss-utils: install check OK (cached)
2025-Jul-01 08:08:42 :: [x86_64] #100 libnss-debuginfo: install check OK (cached)
2025-Jul-01 08:08:46 :: [i586] #100 nss-utils-debuginfo: install check OK (cached)
2025-Jul-01 08:08:46 :: [x86_64] #100 libnss-devel: install check OK (cached)
2025-Jul-01 08:08:47 :: [aarch64] #200 firefox-config-privacy: install check OK (cached)
2025-Jul-01 08:08:51 :: [x86_64] #100 libnss-devel-static: install check OK (cached)
2025-Jul-01 08:08:55 :: [x86_64] #100 libnss-nssckbi-checkinstall: install check OK (cached)
2025-Jul-01 08:08:58 :: [aarch64] #200 firefox-debuginfo: install check OK (cached)
2025-Jul-01 08:08:59 :: [x86_64] #100 nss-utils: install check OK (cached)
2025-Jul-01 08:09:03 :: [x86_64] #100 nss-utils-debuginfo: install check OK (cached)
2025-Jul-01 08:09:06 :: [aarch64] #100 libnss: install check OK (cached)
2025-Jul-01 08:09:13 :: [aarch64] #100 libnss-debuginfo: install check OK (cached)
2025-Jul-01 08:09:21 :: [aarch64] #100 libnss-devel: install check OK (cached)
2025-Jul-01 08:09:28 :: [aarch64] #100 libnss-devel-static: install check OK (cached)
2025-Jul-01 08:09:36 :: [aarch64] #100 libnss-nssckbi-checkinstall: install check OK (cached)
2025-Jul-01 08:09:43 :: [aarch64] #100 nss-utils: install check OK (cached)
2025-Jul-01 08:09:51 :: [aarch64] #100 nss-utils-debuginfo: install check OK (cached)
2025-Jul-01 08:09:53 :: [x86_64-i586] plan: #0 +3 -4 =11685
2025-Jul-01 08:10:18 :: [x86_64-i586] generated apt indices
2025-Jul-01 08:10:20 :: [x86_64-i586] created next repo
2025-Jul-01 08:10:32 :: [x86_64-i586] dependencies check OK
2025-Jul-01 08:10:59 :: gears inheritance check OK
2025-Jul-01 08:11:00 :: srpm inheritance check OK
girar-check-perms: access to nss DENIED for rauty: project `nss' is not listed in the acl file for repository `p11', and the policy for such projects in `p11' is to deny
check-subtask-perms: #100: nss: needs approvals from members of @maint and @tester groups
girar-check-perms: access to cbindgen DENIED for rauty: project `cbindgen' is not listed in the acl file for repository `p11', and the policy for such projects in `p11' is to deny
check-subtask-perms: #140: cbindgen: needs approvals from members of @maint and @tester groups
girar-check-perms: access to firefox DENIED for rauty: project `firefox' is not listed in the acl file for repository `p11', and the policy for such projects in `p11' is to deny
check-subtask-perms: #200: firefox: needs approvals from members of @maint and @tester groups
2025-Jul-01 08:11:04 :: acl check FAILED
2025-Jul-01 08:11:17 :: created contents_index files
2025-Jul-01 08:11:28 :: created hash files: aarch64 i586 src x86_64-i586 x86_64
2025-Jul-01 08:11:31 :: task #388567 for p11 EPERM