[#402494] p11 EPERM (try 2) cni-plugins.git=1.9.0-alt1

[Girar awaiter (geochip)]

https://git.altlinux.org/tasks/402494/logs/events.2.1.log
https://packages.altlinux.org/tasks/402494

subtask  name         aarch64  i586  x86_64
   #100  cni-plugins     1:45  1:11    1:08

2025-Dec-11 10:45:28 :: task #402494 for p11 resumed by geochip:
2025-Dec-11 10:45:28 :: message: CVE-2025-67499
#100 build 1.9.0-alt1 from /gears/c/cni-plugins.git fetched at 2025-Dec-11 10:43:51 from sisyphus
2025-Dec-11 10:45:30 :: [i586] #100 cni-plugins.git 1.9.0-alt1: build start
2025-Dec-11 10:45:30 :: [x86_64] #100 cni-plugins.git 1.9.0-alt1: build start
2025-Dec-11 10:45:30 :: [aarch64] #100 cni-plugins.git 1.9.0-alt1: build start
2025-Dec-11 10:46:38 :: [x86_64] #100 cni-plugins.git 1.9.0-alt1: build OK
2025-Dec-11 10:46:41 :: [i586] #100 cni-plugins.git 1.9.0-alt1: build OK
2025-Dec-11 10:47:15 :: [aarch64] #100 cni-plugins.git 1.9.0-alt1: build OK
2025-Dec-11 10:47:20 :: 100: build check OK
2025-Dec-11 10:47:21 :: build check OK
2025-Dec-11 10:47:29 :: #100: cni-plugins.git 1.9.0-alt1: version check OK
2025-Dec-11 10:47:29 :: build version check OK
2025-Dec-11 10:47:42 :: noarch check OK
2025-Dec-11 10:47:43 :: plan: src +1 -1 =19952, aarch64 +2 -2 =35203, i586 +2 -2 =34157, x86_64 +2 -2 =35989
#100 cni-plugins 1.7.1-alt1 -> 1.9.0-alt1
 Thu Dec 11 2025 Alexander Stepchenko <geochip at altlinux> 1.9.0-alt1
 - New version 1.9.0.
 - Fixes:
   + CVE-2025-67499: CNI Plugins Portmap nftables backend intercepts non-local traffic
 Thu Oct 30 2025 Alexander Stepchenko <geochip at altlinux> 1.8.0-alt1
 - New version 1.8.0.
2025-Dec-11 10:47:44 :: cni-plugins: fixes vulnerabilities: CVE-2025-67499
2025-Dec-11 10:48:36 :: patched apt indices
2025-Dec-11 10:48:47 :: created next repo
2025-Dec-11 10:48:59 :: duplicate provides check OK
2025-Dec-11 10:49:39 :: dependencies check OK
2025-Dec-11 10:50:14 :: [x86_64 i586 aarch64] ELF symbols check OK
2025-Dec-11 10:50:28 :: [i586] #100 cni-plugins: install check OK
2025-Dec-11 10:50:29 :: [x86_64] #100 cni-plugins: install check OK
2025-Dec-11 10:50:37 :: [aarch64] #100 cni-plugins: install check OK
2025-Dec-11 10:50:38 :: [i586] #100 cni-plugins-debuginfo: install check OK
2025-Dec-11 10:50:38 :: [x86_64] #100 cni-plugins-debuginfo: install check OK
2025-Dec-11 10:50:52 :: [aarch64] #100 cni-plugins-debuginfo: install check OK
2025-Dec-11 10:51:14 :: [x86_64-i586] generated apt indices
2025-Dec-11 10:51:14 :: [x86_64-i586] created next repo
2025-Dec-11 10:51:30 :: [x86_64-i586] dependencies check OK
2025-Dec-11 10:51:31 :: gears inheritance check OK
2025-Dec-11 10:51:31 :: srpm inheritance check OK
girar-check-perms: access to cni-plugins DENIED for geochip: project `cni-plugins' is not listed in the acl file for repository `p11', and the policy for such projects in `p11' is to deny
check-subtask-perms: #100: cni-plugins: needs approvals from members of @maint and @tester groups
2025-Dec-11 10:51:33 :: acl check FAILED
2025-Dec-11 10:51:52 :: created contents_index files
2025-Dec-11 10:52:05 :: created hash files: aarch64 i586 src x86_64
2025-Dec-11 10:52:08 :: task #402494 for p11 EPERM