[#303604] p9 EPERM curl.git=7.83.1-alt1

Girar awaiter (rider) girar-builder at altlinux.org
Wed Jul 13 11:27:19 MSK 2022


https://git.altlinux.org/tasks/303604/logs/events.1.1.log

subtask  name  aarch64   armh  i586  ppc64le  x86_64
   #100  curl    10:58  14:10  8:45    12:23    8:23

2022-Jul-13 08:08:50 :: task #303604 for p9 started by rider:
2022-Jul-13 08:08:50 :: message: security update
#100 build 7.83.1-alt1 from /gears/c/curl.git fetched at 2022-Jul-13 08:08:36 from p10
2022-Jul-13 08:08:51 :: [aarch64] #100 curl.git 7.83.1-alt1: build start
2022-Jul-13 08:08:51 :: [armh] #100 curl.git 7.83.1-alt1: build start
2022-Jul-13 08:08:51 :: [i586] #100 curl.git 7.83.1-alt1: build start
2022-Jul-13 08:08:51 :: [ppc64le] #100 curl.git 7.83.1-alt1: build start
2022-Jul-13 08:08:51 :: [x86_64] #100 curl.git 7.83.1-alt1: build start
2022-Jul-13 08:17:14 :: [x86_64] #100 curl.git 7.83.1-alt1: build OK
2022-Jul-13 08:17:36 :: [i586] #100 curl.git 7.83.1-alt1: build OK
2022-Jul-13 08:19:49 :: [aarch64] #100 curl.git 7.83.1-alt1: build OK
2022-Jul-13 08:21:14 :: [ppc64le] #100 curl.git 7.83.1-alt1: build OK
2022-Jul-13 08:23:01 :: [armh] #100 curl.git 7.83.1-alt1: build OK
2022-Jul-13 08:23:28 :: #100: curl.git 7.83.1-alt1: build check OK
2022-Jul-13 08:23:29 :: build check OK
2022-Jul-13 08:23:37 :: noarch check OK
2022-Jul-13 08:23:39 :: plan: src +1 -1 =18280, aarch64 +6 -6 =30607, armh +6 -6 =28234, i586 +6 -6 =32574, ppc64le +6 -6 =30910, x86_64 +6 -6 =33031
#100 curl 7.79.0-alt2 -> 7.83.1-alt1
 Wed May 11 2022 Anton Farygin <rider at altlinux.ru> 7.83.1-alt1
 - 7.83.1
 - Fixes:
   * CVE-2022-30115: HSTS bypass via trailing dot
   * CVE-2022-27782: TLS and SSH connection too eager reuse
   * CVE-2022-27781: CERTINFO never-ending busy-loop
   * CVE-2022-27780: percent-encoded path separator in URL host
   * CVE-2022-27779: cookie for trailing dot TLD
   * CVE-2022-27778: curl removes wrong file on error
 Thu Apr 28 2022 Anton Farygin <rider at altlinux.ru> 7.83.0-alt1
 [...]
2022-Jul-13 08:23:39 :: curl: fixes vulnerabilities: CVE-2022-22576 CVE-2022-27774 CVE-2022-27775 CVE-2022-27776
2022-Jul-13 08:23:39 :: curl: mentions vulnerabilities: CVE-2022-30115 CVE-2022-27782 CVE-2022-27781 CVE-2022-27780 CVE-2022-27779 CVE-2022-27778
2022-Jul-13 08:24:15 :: patched apt indices
2022-Jul-13 08:24:26 :: created next repo
2022-Jul-13 08:24:33 :: duplicate provides check OK
2022-Jul-13 08:25:06 :: dependencies check OK
2022-Jul-13 08:25:34 :: [x86_64 i586 aarch64 ppc64le armh] ELF symbols check OK
2022-Jul-13 08:25:44 :: [x86_64] #100 curl: install check OK
2022-Jul-13 08:25:44 :: [i586] #100 curl: install check OK
2022-Jul-13 08:25:49 :: [x86_64] #100 curl-debuginfo: install check OK
2022-Jul-13 08:25:50 :: [i586] #100 curl-debuginfo: install check OK
2022-Jul-13 08:25:52 :: [x86_64] #100 libcurl: install check OK
2022-Jul-13 08:25:53 :: [i586] #100 libcurl: install check OK
2022-Jul-13 08:25:57 :: [x86_64] #100 libcurl-debuginfo: install check OK
2022-Jul-13 08:25:59 :: [i586] #100 libcurl-debuginfo: install check OK
2022-Jul-13 08:26:00 :: [x86_64] #100 libcurl-devel: install check OK
2022-Jul-13 08:26:03 :: [i586] #100 libcurl-devel: install check OK
2022-Jul-13 08:26:06 :: [x86_64] #100 libcurl-devel-static: install check OK
2022-Jul-13 08:26:09 :: [i586] #100 libcurl-devel-static: install check OK
2022-Jul-13 08:26:10 :: [x86_64-i586] plan: #3 +3 -3 =10814
2022-Jul-13 08:26:27 :: [x86_64-i586] arepo build OK
2022-Jul-13 08:26:40 :: [x86_64-i586] generated apt indices
2022-Jul-13 08:26:42 :: [x86_64-i586] created next repo
2022-Jul-13 08:26:51 :: [x86_64-i586] dependencies check OK
2022-Jul-13 08:26:51 :: gears inheritance check OK
2022-Jul-13 08:26:51 :: srpm inheritance check OK
girar-check-perms: access to curl DENIED for rider: project `curl' is not listed in the acl file for repository `p9', and the policy for such projects in `p9' is to deny
check-subtask-perms: #100: curl: needs approvals from members of @maint and @tester groups
2022-Jul-13 08:26:58 :: acl check FAILED
2022-Jul-13 08:27:06 :: created contents_index files
2022-Jul-13 08:27:17 :: created hash files: aarch64 armh i586 ppc64le src x86_64-i586 x86_64
2022-Jul-13 08:27:18 :: task #303604 for p9 EPERM


More information about the Sisyphus-incominger mailing list