[#391139] TESTED (try 3) nss.git=3.114-alt1 ca-certificates.git=2025.07.29-alt1 ...
Girar awaiter (rauty)
girar-builder at altlinux.org
Wed Jul 30 02:13:22 MSK 2025
https://git.altlinux.org/tasks/391139/logs/events.3.1.log
https://packages.altlinux.org/tasks/391139
subtask name aarch64 i586 x86_64
#210 firefox 1:03:28 - 31:22
#340 thunderbird 1:02:38 - 35:40
2025-Jul-29 20:49:58 :: test-only task #391139 for sisyphus resumed by rauty:
#100 build 3.114-alt1 from /people/rauty/packages/nss.git fetched at 2025-Jul-29 12:26:27
#200 build 2025.07.29-alt1 from /people/rauty/packages/ca-certificates.git fetched at 2025-Jul-29 12:26:40
#210 build 141.0-alt1 from /people/rauty/packages/firefox.git fetched at 2025-Jul-29 20:49:48
#220 removed
#240 removed
#300 removed
#340 build 141.0-alt1 from /people/rauty/packages/thunderbird.git fetched at 2025-Jul-29 20:37:10
#400 removed
2025-Jul-29 20:49:58 :: created build repo
2025-Jul-29 20:50:00 :: [i586] #100 nss.git 3.114-alt1: build start
2025-Jul-29 20:50:00 :: [x86_64] #100 nss.git 3.114-alt1: build start
2025-Jul-29 20:50:00 :: [aarch64] #100 nss.git 3.114-alt1: build start
2025-Jul-29 20:50:19 :: [i586] #100 nss.git 3.114-alt1: build OK (cached)
2025-Jul-29 20:50:19 :: [i586] #200 ca-certificates.git 2025.07.29-alt1: build start
2025-Jul-29 20:50:19 :: [x86_64] #100 nss.git 3.114-alt1: build OK (cached)
2025-Jul-29 20:50:20 :: [x86_64] #200 ca-certificates.git 2025.07.29-alt1: build start
2025-Jul-29 20:50:32 :: [i586] #200 ca-certificates.git 2025.07.29-alt1: build OK (cached)
2025-Jul-29 20:50:33 :: [i586] #210 firefox.git 141.0-alt1: build start
2025-Jul-29 20:50:34 :: [x86_64] #200 ca-certificates.git 2025.07.29-alt1: build OK (cached)
2025-Jul-29 20:50:34 :: [x86_64] #210 firefox.git 141.0-alt1: build start
2025-Jul-29 20:50:38 :: [aarch64] #100 nss.git 3.114-alt1: build OK (cached)
2025-Jul-29 20:50:38 :: [aarch64] #200 ca-certificates.git 2025.07.29-alt1: build start
2025-Jul-29 20:51:01 :: [i586] #210 firefox.git 141.0-alt1: build SKIPPED
2025-Jul-29 20:51:01 :: [i586] #340 thunderbird.git 141.0-alt1: build start
2025-Jul-29 20:51:04 :: [aarch64] #200 ca-certificates.git 2025.07.29-alt1: build OK (cached)
2025-Jul-29 20:51:05 :: [aarch64] #210 firefox.git 141.0-alt1: build start
2025-Jul-29 20:51:25 :: [i586] #340 thunderbird.git 141.0-alt1: build SKIPPED
2025-Jul-29 21:21:56 :: [x86_64] #210 firefox.git 141.0-alt1: build OK
2025-Jul-29 21:21:56 :: [x86_64] #340 thunderbird.git 141.0-alt1: build start
2025-Jul-29 21:54:33 :: [aarch64] #210 firefox.git 141.0-alt1: build OK
2025-Jul-29 21:54:34 :: [aarch64] #340 thunderbird.git 141.0-alt1: build start
2025-Jul-29 21:57:36 :: [x86_64] #340 thunderbird.git 141.0-alt1: build OK
2025-Jul-29 22:57:12 :: [aarch64] #340 thunderbird.git 141.0-alt1: build OK
2025-Jul-29 22:57:38 :: #100: nss.git 3.114-alt1: build check OK
2025-Jul-29 22:57:47 :: #200: ca-certificates.git 2025.07.29-alt1: build check OK
2025-Jul-29 22:58:16 :: #210: firefox.git 141.0-alt1: build check OK
2025-Jul-29 22:58:45 :: #340: thunderbird.git 141.0-alt1: build check OK
2025-Jul-29 22:58:47 :: build check OK
warning (#100): libnss-nssckbi-checkinstall-3.114-alt1.x86_64.rpm should be .noarch.rpm
2025-Jul-29 23:02:26 :: noarch check OK
2025-Jul-29 23:02:28 :: plan: src +4 -4 =20449, aarch64 +12 -12 =35886, i586 +7 -7 =34524, noarch +1 -1 =21513, x86_64 +12 -12 =36710
#200 ca-certificates 2025.05.12-alt1 -> 2025.07.29-alt1
Tue Jul 29 2025 Ajrat Makhmutov <rauty at altlinux> 2025.07.29-alt1
- mozilla: sync with nss-3.114.
#210 firefox 140.0.4-alt1 -> 141.0-alt1
Tue Jul 29 2025 Ajrat Makhmutov <rauty at altlinux> 141.0-alt1
- New version (141.0).
- Fixes:
+ CVE-2025-8027: JavaScript engine only wrote partial return value to stack
+ CVE-2025-8028: Large branch table could lead to truncated instruction
+ CVE-2025-8041: Incorrect URL truncation in Firefox for Android
+ CVE-2025-8042: Sandboxed iframe could start downloads
+ CVE-2025-8029: javascript: URLs executed on object and embed tags
+ CVE-2025-8036: DNS rebinding circumvents CORS
+ CVE-2025-8037: Nameless cookies shadow secure cookies
[...]
#100 nss 3.113.1-alt1 -> 3.114-alt1
Tue Jul 29 2025 Ajrat Makhmutov <rauty at altlinux> 3.114-alt1
- New version (3.114).
- Certificate Authority Changes:
+ Remove CN=Baltimore CyberTrust Root,OU=CyberTrust
+ Add CN=SwissSign RSA SMIME Root CA 2022 - 1
+ Add CN=SwissSign RSA TLS Root CA 2022 - 1
+ Add CN=TrustAsia SMIME ECC Root CA
+ Add CN=TrustAsia SMIME RSA Root CA
+ Add CN=TrustAsia TLS ECC Root CA
+ Add CN=TrustAsia TLS RSA Root CA
#340 thunderbird 140.0.1-alt1 -> 141.0-alt1
Tue Jul 29 2025 Ajrat Makhmutov <rauty at altlinux> 141.0-alt1
- New version.
- Fixes:
+ CVE-2025-8027: JavaScript engine only wrote partial return value to stack
+ CVE-2025-8028: Large branch table could lead to truncated instruction
+ CVE-2025-8029: javascript: URLs executed on object and embed tags
+ CVE-2025-8036: DNS rebinding circumvents CORS
+ CVE-2025-8037: Nameless cookies shadow secure cookies
+ CVE-2025-8030: Potential user-assisted code execution in "Copy as cURL" command
+ CVE-2025-8043: Incorrect URL truncation
[...]
2025-Jul-29 23:02:28 :: firefox: fixes vulnerabilities: CVE-2025-8027 CVE-2025-8028 CVE-2025-8041 CVE-2025-8042 CVE-2025-8029 CVE-2025-8036 CVE-2025-8037 CVE-2025-8030 CVE-2025-8043 CVE-2025-8031 CVE-2025-8032 CVE-2025-8038 CVE-2025-8039 CVE-2025-8033 CVE-2025-8044 CVE-2025-8034 CVE-2025-8040 CVE-2025-8035
2025-Jul-29 23:02:28 :: thunderbird: fixes vulnerabilities: CVE-2025-8027 CVE-2025-8028 CVE-2025-8029 CVE-2025-8036 CVE-2025-8037 CVE-2025-8030 CVE-2025-8043 CVE-2025-8031 CVE-2025-8032 CVE-2025-8038 CVE-2025-8039 CVE-2025-8033 CVE-2025-8044 CVE-2025-8034 CVE-2025-8040 CVE-2025-8035
2025-Jul-29 23:03:29 :: patched apt indices
2025-Jul-29 23:03:38 :: created next repo
2025-Jul-29 23:03:48 :: duplicate provides check OK
2025-Jul-29 23:04:26 :: dependencies check OK
2025-Jul-29 23:05:07 :: [x86_64 i586 aarch64] ELF symbols check OK
warning [i586]: ca-certificates=2025.07.29-alt1: circular dependencies on ca-trust=0.2.0-alt1 p11-kit-trust=1:0.25.5-alt1
2025-Jul-29 23:05:23 :: [i586] #200 ca-certificates: install check OK
warning [x86_64]: ca-certificates=2025.07.29-alt1: circular dependencies on ca-trust=0.2.0-alt1 p11-kit-trust=1:0.25.5-alt1
2025-Jul-29 23:05:24 :: [x86_64] #200 ca-certificates: install check OK
2025-Jul-29 23:05:29 :: [i586] #100 libnss: install check OK
warning [aarch64]: ca-certificates=2025.07.29-alt1: circular dependencies on ca-trust=0.2.0-alt1 p11-kit-trust=1:0.25.5-alt1
2025-Jul-29 23:05:33 :: [aarch64] #200 ca-certificates: install check OK
2025-Jul-29 23:05:38 :: [i586] #100 libnss-debuginfo: install check OK
x86_64: firefox=141.0-alt1 post-install unowned files:
/usr/share/gnome-shell
/usr/share/gnome-shell/search-providers
/usr/share/icons/hicolor/22x22
/usr/share/icons/hicolor/22x22/apps
/usr/share/icons/hicolor/24x24
/usr/share/icons/hicolor/24x24/apps
/usr/share/icons/hicolor/256x256
/usr/share/icons/hicolor/256x256/apps
2025-Jul-29 23:05:41 :: [x86_64] #210 firefox: install check OK
2025-Jul-29 23:05:45 :: [i586] #100 libnss-devel: install check OK
2025-Jul-29 23:05:56 :: [i586] #100 libnss-devel-static: install check OK
2025-Jul-29 23:05:58 :: [x86_64] #210 firefox-config-privacy: install check OK
aarch64: firefox=141.0-alt1 post-install unowned files:
/usr/share/gnome-shell
/usr/share/gnome-shell/search-providers
/usr/share/icons/hicolor/22x22
/usr/share/icons/hicolor/22x22/apps
/usr/share/icons/hicolor/24x24
/usr/share/icons/hicolor/24x24/apps
/usr/share/icons/hicolor/256x256
/usr/share/icons/hicolor/256x256/apps
2025-Jul-29 23:06:04 :: [aarch64] #210 firefox: install check OK
2025-Jul-29 23:06:04 :: [i586] #100 libnss-nssckbi-checkinstall: install check OK
2025-Jul-29 23:06:10 :: [i586] #100 nss-utils: install check OK
2025-Jul-29 23:06:19 :: [i586] #100 nss-utils-debuginfo: install check OK
2025-Jul-29 23:06:34 :: [aarch64] #210 firefox-config-privacy: install check OK
2025-Jul-29 23:06:52 :: [x86_64] #210 firefox-debuginfo: install check OK
2025-Jul-29 23:07:00 :: [x86_64] #100 libnss: install check OK
2025-Jul-29 23:07:08 :: [x86_64] #100 libnss-debuginfo: install check OK
2025-Jul-29 23:07:16 :: [x86_64] #100 libnss-devel: install check OK
2025-Jul-29 23:07:26 :: [x86_64] #100 libnss-devel-static: install check OK
2025-Jul-29 23:07:34 :: [x86_64] #100 libnss-nssckbi-checkinstall: install check OK
2025-Jul-29 23:07:41 :: [x86_64] #100 nss-utils: install check OK
2025-Jul-29 23:07:50 :: [x86_64] #100 nss-utils-debuginfo: install check OK
2025-Jul-29 23:07:57 :: [aarch64] #210 firefox-debuginfo: install check OK
x86_64: thunderbird=141.0-alt1 post-install unowned files:
/usr/lib64/mozilla
/usr/lib64/mozilla/extensions
/usr/share/icons/hicolor/128x128
/usr/share/icons/hicolor/128x128/apps
/usr/share/icons/hicolor/22x22
/usr/share/icons/hicolor/22x22/apps
/usr/share/icons/hicolor/24x24
/usr/share/icons/hicolor/24x24/apps
/usr/share/icons/hicolor/256x256
/usr/share/icons/hicolor/256x256/apps
/usr/share/icons/hicolor/64x64
/usr/share/icons/hicolor/64x64/apps
/usr/share/icons/hicolor/symbolic
/usr/share/icons/hicolor/symbolic/apps
/usr/share/mozilla
/usr/share/mozilla/extensions
2025-Jul-29 23:08:06 :: [x86_64] #340 thunderbird: install check OK
2025-Jul-29 23:08:10 :: [aarch64] #100 libnss: install check OK
2025-Jul-29 23:08:24 :: [aarch64] #100 libnss-debuginfo: install check OK
2025-Jul-29 23:08:38 :: [aarch64] #100 libnss-devel: install check OK
2025-Jul-29 23:09:02 :: [aarch64] #100 libnss-devel-static: install check OK
2025-Jul-29 23:09:03 :: [x86_64] #340 thunderbird-debuginfo: install check OK
2025-Jul-29 23:09:21 :: [aarch64] #100 libnss-nssckbi-checkinstall: install check OK
2025-Jul-29 23:09:38 :: [aarch64] #100 nss-utils: install check OK
2025-Jul-29 23:09:52 :: [aarch64] #100 nss-utils-debuginfo: install check OK
aarch64: thunderbird=141.0-alt1 post-install unowned files:
/usr/lib64/mozilla
/usr/lib64/mozilla/extensions
/usr/share/icons/hicolor/128x128
/usr/share/icons/hicolor/128x128/apps
/usr/share/icons/hicolor/22x22
/usr/share/icons/hicolor/22x22/apps
/usr/share/icons/hicolor/24x24
/usr/share/icons/hicolor/24x24/apps
/usr/share/icons/hicolor/256x256
/usr/share/icons/hicolor/256x256/apps
/usr/share/icons/hicolor/64x64
/usr/share/icons/hicolor/64x64/apps
/usr/share/icons/hicolor/symbolic
/usr/share/icons/hicolor/symbolic/apps
/usr/share/mozilla
/usr/share/mozilla/extensions
2025-Jul-29 23:10:18 :: [aarch64] #340 thunderbird: install check OK
2025-Jul-29 23:11:43 :: [aarch64] #340 thunderbird-debuginfo: install check OK
2025-Jul-29 23:11:45 :: [x86_64-i586] plan: #3 +3 -3 =11744
2025-Jul-29 23:12:09 :: [x86_64-i586] arepo build OK
2025-Jul-29 23:12:24 :: [x86_64-i586] generated apt indices
2025-Jul-29 23:12:26 :: [x86_64-i586] created next repo
2025-Jul-29 23:12:36 :: [x86_64-i586] dependencies check OK
2025-Jul-29 23:12:41 :: gears inheritance check OK
2025-Jul-29 23:12:41 :: srpm inheritance check OK
girar-check-perms: access to nss ALLOWED for rauty: approved builder
check-subtask-perms: #100: nss: allowed for rauty
girar-check-perms: access to ca-certificates ALLOWED for rauty: approved builder
check-subtask-perms: #200: ca-certificates: allowed for rauty
girar-check-perms: access to firefox ALLOWED for rauty: approved builder
check-subtask-perms: #210: firefox: allowed for rauty
girar-check-perms: access to thunderbird ALLOWED for rauty: project leader
check-subtask-perms: #340: thunderbird: allowed for rauty
2025-Jul-29 23:12:42 :: acl check OK
2025-Jul-29 23:13:05 :: created contents_index files
2025-Jul-29 23:13:18 :: created hash files: aarch64 i586 noarch src x86_64-i586 x86_64
2025-Jul-29 23:13:22 :: task #391139 for sisyphus TESTED
More information about the Sisyphus-incominger
mailing list