[#339548] TESTED (try 2) shim.git=15.8-alt1

Girar awaiter (egori) girar-builder at altlinux.org
Thu Feb 1 12:22:22 MSK 2024


https://git.altlinux.org/tasks/339548/logs/events.2.1.log

subtask  name  aarch64  armh  i586  ppc64le  x86_64
   #200  shim        -     -     -        -      27

2024-Feb-01 09:19:01 :: test-only task #339548 for sisyphus resumed by egori:
#100 removed
#200 build 15.8-alt1 from /people/egori/packages/shim.git fetched at 2024-Feb-01 09:18:56
2024-Feb-01 09:19:03 :: [x86_64] #200 shim.git 15.8-alt1: build start
2024-Feb-01 09:19:03 :: [armh] #200 shim.git 15.8-alt1: build start
2024-Feb-01 09:19:03 :: [aarch64] #200 shim.git 15.8-alt1: build start
2024-Feb-01 09:19:03 :: [i586] #200 shim.git 15.8-alt1: build start
2024-Feb-01 09:19:03 :: [ppc64le] #200 shim.git 15.8-alt1: build start
2024-Feb-01 09:19:12 :: [i586] #200 shim.git 15.8-alt1: build SKIPPED
2024-Feb-01 09:19:20 :: [aarch64] #200 shim.git 15.8-alt1: build SKIPPED
2024-Feb-01 09:19:22 :: [ppc64le] #200 shim.git 15.8-alt1: build SKIPPED
2024-Feb-01 09:19:29 :: [armh] #200 shim.git 15.8-alt1: build SKIPPED
2024-Feb-01 09:19:30 :: [x86_64] #200 shim.git 15.8-alt1: build OK
2024-Feb-01 09:19:35 :: #200: shim.git 15.8-alt1: build check OK
2024-Feb-01 09:19:37 :: build check OK
2024-Feb-01 09:19:37 :: noarch check OK
2024-Feb-01 09:19:39 :: plan: src +1 -1 =18974, x86_64 +1 -1 =32737
#200 shim 15.7-alt4 -> 15.8-alt1
 Thu Feb 01 2024 Egor Ignatov <egori at altlinux> 15.8-alt1
 - new version
 - update shim-15.8-alt-Bump-grub-SBAT-revocation-to-4 patch
 - Fixes:
   + CVE-2023-40546 mok: fix LogError() invocation
   + CVE-2023-40547 - avoid incorrectly trusting HTTP headers
   + CVE-2023-40548 Fix integer overflow on SBAT section size on 32-bit system
   + CVE-2023-40549 Authenticode: verify that the signature header is in bounds.
   + CVE-2023-40550 pe: Fix an out-of-bound read in verify_buffer_sbat()
   + CVE-2023-40551: pe-relocate: Fix bounds check for MZ binaries
2024-Feb-01 09:19:40 :: shim: mentions vulnerabilities: CVE-2023-40546 CVE-2023-40547 CVE-2023-40548 CVE-2023-40549 CVE-2023-40550 CVE-2023-40551
2024-Feb-01 09:20:19 :: patched apt indices
2024-Feb-01 09:20:33 :: created next repo
2024-Feb-01 09:20:42 :: duplicate provides check OK
2024-Feb-01 09:21:19 :: dependencies check OK
2024-Feb-01 09:21:20 :: [x86_64] ELF symbols check OK
2024-Feb-01 09:21:31 :: [x86_64] #200 shim-unsigned: install check OK
2024-Feb-01 09:21:48 :: [x86_64-i586] generated apt indices
2024-Feb-01 09:21:48 :: [x86_64-i586] created next repo
2024-Feb-01 09:21:58 :: [x86_64-i586] dependencies check OK
2024-Feb-01 09:21:59 :: gears inheritance check OK
2024-Feb-01 09:21:59 :: srpm inheritance check OK
girar-check-perms: access to shim DENIED for egori: does not belong to approved builders list: nickel mike rider @qa
check-subtask-perms: #200: shim: Operation not permitted
2024-Feb-01 09:22:00 :: acl check IGNORED
2024-Feb-01 09:22:10 :: created contents_index files
2024-Feb-01 09:22:20 :: created hash files: src x86_64
2024-Feb-01 09:22:22 :: task #339548 for sisyphus TESTED


More information about the Sisyphus-incominger mailing list