[#333866] p10 EPERM (try 3) sudo.git=1.9.15p1-alt1

Tue Nov 28 23:58:11 MSK 2023

https://git.altlinux.org/tasks/333866/logs/events.3.1.log

subtask  name  aarch64  armh  i586  ppc64le  x86_64
   #100  sudo     2:00  2:55  1:17     2:23    1:11

2023-Nov-28 20:48:40 :: task #333866 for p10 resumed by sin:
2023-Nov-28 20:48:40 :: message: security_update
#100 build 1.9.15p1-alt1 from /people/sin/packages/sudo.git fetched at 2023-Nov-08 03:42:43
2023-Nov-28 20:48:42 :: [aarch64] #100 sudo.git 1.9.15p1-alt1: build start
2023-Nov-28 20:48:42 :: [ppc64le] #100 sudo.git 1.9.15p1-alt1: build start
2023-Nov-28 20:48:42 :: [x86_64] #100 sudo.git 1.9.15p1-alt1: build start
2023-Nov-28 20:48:42 :: [armh] #100 sudo.git 1.9.15p1-alt1: build start
2023-Nov-28 20:48:42 :: [i586] #100 sudo.git 1.9.15p1-alt1: build start
2023-Nov-28 20:49:53 :: [x86_64] #100 sudo.git 1.9.15p1-alt1: build OK
2023-Nov-28 20:49:59 :: [i586] #100 sudo.git 1.9.15p1-alt1: build OK
2023-Nov-28 20:50:42 :: [aarch64] #100 sudo.git 1.9.15p1-alt1: build OK
2023-Nov-28 20:51:05 :: [ppc64le] #100 sudo.git 1.9.15p1-alt1: build OK
2023-Nov-28 20:51:37 :: [armh] #100 sudo.git 1.9.15p1-alt1: build OK
2023-Nov-28 20:52:08 :: #100: sudo.git 1.9.15p1-alt1: build check OK
2023-Nov-28 20:52:10 :: build check OK
2023-Nov-28 20:52:18 :: noarch check OK
2023-Nov-28 20:52:21 :: plan: src +1 -1 =18668, aarch64 +6 -6 =31100, armh +6 -6 =28928, i586 +6 -6 =31522, noarch +1 -1 =20035, ppc64le +6 -6 =30604, x86_64 +6 -6 =32401
#100 sudo 1.9.14p1-alt2 -> 1:1.9.15p1-alt1
 Wed Nov 08 2023 Evgeny Sinelnikov <sin at altlinux> 1:1.9.15p1-alt1
 - Update to latest stable bugfix and security release (fixes: CVE-2023-42465):
  + The sudoers plugin has been modified to make it more resilient to ROWHAMMER
    attacks on authentication and policy matching.
  + The sudoers plugin now constructs the user time stamp file path name using
    the user-ID instead of the user name. This avoids a potential problem with
    user names that contain a path separator ('/') being interpreted as part of
    the path name. A similar issue in sudo-rs has been assigned CVE-2023-42456.
 - Fixes in behavior:
  + The visudo utility will no longer create an empty file when the specified
 [...]
2023-Nov-28 20:52:21 :: sudo: fixes vulnerabilities: CVE-2023-42465
2023-Nov-28 20:52:21 :: sudo: mentions vulnerabilities: CVE-2023-42456
2023-Nov-28 20:53:06 :: patched apt indices
2023-Nov-28 20:53:18 :: created next repo
2023-Nov-28 20:53:25 :: duplicate provides check OK
2023-Nov-28 20:54:03 :: dependencies check OK
2023-Nov-28 20:54:30 :: [x86_64 i586 aarch64 ppc64le armh] ELF symbols check OK
2023-Nov-28 20:54:42 :: [i586] #100 sudo: install check OK
2023-Nov-28 20:54:42 :: [x86_64] #100 sudo: install check OK
2023-Nov-28 20:54:48 :: [i586] #100 sudo-debuginfo: install check OK
2023-Nov-28 20:54:48 :: [x86_64] #100 sudo-debuginfo: install check OK
2023-Nov-28 20:54:50 :: [aarch64] #100 sudo: install check OK
2023-Nov-28 20:54:52 :: [ppc64le] #100 sudo: install check OK
2023-Nov-28 20:54:53 :: [i586] #100 sudo-devel: install check OK
2023-Nov-28 20:54:53 :: [x86_64] #100 sudo-devel: install check OK
2023-Nov-28 20:54:58 :: [i586] #100 sudo-logsrvd: install check OK
2023-Nov-28 20:54:58 :: [x86_64] #100 sudo-logsrvd: install check OK
2023-Nov-28 20:55:00 :: [armh] #100 sudo: install check OK
2023-Nov-28 20:55:01 :: [aarch64] #100 sudo-debuginfo: install check OK
2023-Nov-28 20:55:04 :: [i586] #100 sudo-logsrvd-debuginfo: install check OK
2023-Nov-28 20:55:04 :: [x86_64] #100 sudo-logsrvd-debuginfo: install check OK
2023-Nov-28 20:55:05 :: [ppc64le] #100 sudo-debuginfo: install check OK
2023-Nov-28 20:55:10 :: [i586] #100 sudo-python: install check OK
2023-Nov-28 20:55:11 :: [x86_64] #100 sudo-python: install check OK
2023-Nov-28 20:55:11 :: [aarch64] #100 sudo-devel: install check OK
2023-Nov-28 20:55:17 :: [ppc64le] #100 sudo-devel: install check OK
2023-Nov-28 20:55:18 :: [i586] #100 sudo-python-debuginfo: install check OK
2023-Nov-28 20:55:18 :: [armh] #100 sudo-debuginfo: install check OK
2023-Nov-28 20:55:18 :: [x86_64] #100 sudo-python-debuginfo: install check OK
2023-Nov-28 20:55:22 :: [aarch64] #100 sudo-logsrvd: install check OK
2023-Nov-28 20:55:29 :: [ppc64le] #100 sudo-logsrvd: install check OK
2023-Nov-28 20:55:33 :: [aarch64] #100 sudo-logsrvd-debuginfo: install check OK
2023-Nov-28 20:55:34 :: [armh] #100 sudo-devel: install check OK
2023-Nov-28 20:55:42 :: [ppc64le] #100 sudo-logsrvd-debuginfo: install check OK
2023-Nov-28 20:55:45 :: [aarch64] #100 sudo-python: install check OK
2023-Nov-28 20:55:51 :: [armh] #100 sudo-logsrvd: install check OK
2023-Nov-28 20:55:57 :: [ppc64le] #100 sudo-python: install check OK
2023-Nov-28 20:55:59 :: [aarch64] #100 sudo-python-debuginfo: install check OK
2023-Nov-28 20:56:09 :: [armh] #100 sudo-logsrvd-debuginfo: install check OK
2023-Nov-28 20:56:13 :: [ppc64le] #100 sudo-python-debuginfo: install check OK
2023-Nov-28 20:56:29 :: [armh] #100 sudo-python: install check OK
2023-Nov-28 20:56:50 :: [armh] #100 sudo-python-debuginfo: install check OK
2023-Nov-28 20:56:53 :: [x86_64-i586] plan: #2 +2 -2 =10944
2023-Nov-28 20:57:08 :: [x86_64-i586] arepo build OK
2023-Nov-28 20:57:23 :: [x86_64-i586] generated apt indices
2023-Nov-28 20:57:25 :: [x86_64-i586] created next repo
2023-Nov-28 20:57:35 :: [x86_64-i586] dependencies check OK
2023-Nov-28 20:57:36 :: gears inheritance check OK
2023-Nov-28 20:57:36 :: srpm inheritance check OK
girar-check-perms: access to sudo DENIED for sin: project `sudo' is not listed in the acl file for repository `p10', and the policy for such projects in `p10' is to deny
check-subtask-perms: #100: sudo: needs approvals from members of @maint and @tester groups
2023-Nov-28 20:57:40 :: acl check FAILED
2023-Nov-28 20:57:58 :: created contents_index files
2023-Nov-28 20:58:08 :: created hash files: aarch64 armh i586 noarch ppc64le src x86_64-i586 x86_64
2023-Nov-28 20:58:11 :: task #333866 for p10 EPERM