[#413998] p11 EPERM (try 2) firefox-esr.git=firefox-esr/140.9.0-alt1

[Girar awaiter (pav)]

https://git.altlinux.org/tasks/413998/logs/events.2.1.log
https://packages.altlinux.org/tasks/413998

subtask  name         aarch64     i586  x86_64
   #100  firefox-esr    54:12  1:07:38   32:19

2026-Apr-03 17:26:29 :: task #413998 for p11 resumed by pav:
2026-Apr-03 17:26:29 :: message: New_version_with_CVE
#100 build firefox-esr/140.9.0-alt1 from /gears/f/firefox-esr.git fetched at 2026-Apr-03 11:06:07 from sisyphus
2026-Apr-03 17:26:30 :: [i586] #100 firefox-esr.git firefox-esr/140.9.0-alt1: build start
2026-Apr-03 17:26:30 :: [x86_64] #100 firefox-esr.git firefox-esr/140.9.0-alt1: build start
2026-Apr-03 17:26:30 :: [aarch64] #100 firefox-esr.git firefox-esr/140.9.0-alt1: build start
2026-Apr-03 17:58:49 :: [x86_64] #100 firefox-esr.git firefox-esr/140.9.0-alt1: build OK
2026-Apr-03 18:20:42 :: [aarch64] #100 firefox-esr.git firefox-esr/140.9.0-alt1: build OK
2026-Apr-03 18:34:08 :: [i586] #100 firefox-esr.git firefox-esr/140.9.0-alt1: build OK
2026-Apr-03 18:34:35 :: 100: build check OK
2026-Apr-03 18:34:36 :: build check OK
2026-Apr-03 18:34:44 :: #100: firefox-esr.git firefox-esr/140.9.0-alt1: version check OK
2026-Apr-03 18:34:44 :: build version check OK
warning (#100): firefox-esr-config-privacy-140.9.0-alt1.x86_64.rpm should be .noarch.rpm
2026-Apr-03 18:36:32 :: noarch check OK
2026-Apr-03 18:36:33 :: plan: src +1 -1 =20213, aarch64 +3 -3 =36060, i586 +3 -3 =34816, x86_64 +3 -3 =37035
#100 firefox-esr 140.8.0-alt2 -> 140.9.0-alt1
 Fri Mar 27 2026 Pavel Vasenkov <pav at altlinux> 140.9.0-alt1
 - New ESR version.
 - Security fixes:
   + CVE-2026-4684 Race condition, use-after-free in the Graphics: WebRender component
   + CVE-2026-4685 Incorrect boundary conditions in the Graphics: Canvas2D component
   + CVE-2026-4686 Incorrect boundary conditions in the Graphics: Canvas2D component
   + CVE-2026-4687 Sandbox escape due to incorrect boundary conditions in the Telemetry component
   + CVE-2026-4688 Sandbox escape due to use-after-free in the Disability Access APIs component
   + CVE-2026-4689 Sandbox escape due to incorrect boundary conditions, integer overflow in the XPCOM component
   + CVE-2026-4690 Sandbox escape due to incorrect boundary conditions, integer overflow in the XPCOM component
 [...]
2026-Apr-03 18:36:34 :: firefox-esr: mentions vulnerabilities: CVE-2026-4684 CVE-2026-4685 CVE-2026-4686 CVE-2026-4687 CVE-2026-4688 CVE-2026-4689 CVE-2026-4690 CVE-2026-4691 CVE-2026-4692 CVE-2026-4693 CVE-2026-4694 CVE-2026-4695 CVE-2026-4696 CVE-2026-4697 CVE-2026-4698 CVE-2026-4699 CVE-2026-4700 CVE-2026-4701 CVE-2026-4702 CVE-2026-4704 CVE-2026-4705 CVE-2026-4706 CVE-2026-4707 CVE-2026-4708 CVE-2026-4709 CVE-2026-4710 CVE-2026-4711 CVE-2026-4712 CVE-2026-4713 CVE-2026-4714 CVE-2026-4715 CVE-2026-4716 CVE-2026-4717 CVE-2025-59375 CVE-2026-4718 CVE-2026-4719 CVE-2026-4720 CVE-2026-4721
2026-Apr-03 18:37:27 :: patched apt indices
2026-Apr-03 18:37:37 :: created next repo
2026-Apr-03 18:37:47 :: duplicate provides check OK
2026-Apr-03 18:38:28 :: dependencies check OK
2026-Apr-03 18:39:06 :: [x86_64 i586 aarch64] ELF symbols check OK
	x86_64: firefox-esr=140.9.0-alt1 post-install unowned files:
 /usr/share/gnome-shell
 /usr/share/gnome-shell/search-providers
 /usr/share/icons/hicolor/22x22
 /usr/share/icons/hicolor/22x22/apps
 /usr/share/icons/hicolor/24x24
 /usr/share/icons/hicolor/24x24/apps
 /usr/share/icons/hicolor/256x256
 /usr/share/icons/hicolor/256x256/apps
2026-Apr-03 18:39:31 :: [x86_64] #100 firefox-esr: install check OK
	i586: firefox-esr=140.9.0-alt1 post-install unowned files:
 /usr/share/gnome-shell
 /usr/share/gnome-shell/search-providers
 /usr/share/icons/hicolor/22x22
 /usr/share/icons/hicolor/22x22/apps
 /usr/share/icons/hicolor/24x24
 /usr/share/icons/hicolor/24x24/apps
 /usr/share/icons/hicolor/256x256
 /usr/share/icons/hicolor/256x256/apps
2026-Apr-03 18:39:33 :: [i586] #100 firefox-esr: install check OK
	aarch64: firefox-esr=140.9.0-alt1 post-install unowned files:
 /usr/share/gnome-shell
 /usr/share/gnome-shell/search-providers
 /usr/share/icons/hicolor/22x22
 /usr/share/icons/hicolor/22x22/apps
 /usr/share/icons/hicolor/24x24
 /usr/share/icons/hicolor/24x24/apps
 /usr/share/icons/hicolor/256x256
 /usr/share/icons/hicolor/256x256/apps
2026-Apr-03 18:39:45 :: [aarch64] #100 firefox-esr: install check OK
2026-Apr-03 18:39:48 :: [x86_64] #100 firefox-esr-config-privacy: install check OK
2026-Apr-03 18:39:53 :: [i586] #100 firefox-esr-config-privacy: install check OK
2026-Apr-03 18:40:11 :: [aarch64] #100 firefox-esr-config-privacy: install check OK
2026-Apr-03 18:40:22 :: [i586] #100 firefox-esr-debuginfo: install check OK
2026-Apr-03 18:40:42 :: [x86_64] #100 firefox-esr-debuginfo: install check OK
2026-Apr-03 18:41:33 :: [aarch64] #100 firefox-esr-debuginfo: install check OK
2026-Apr-03 18:41:34 :: [x86_64-i586] plan: #1 +1 -1 =12008
2026-Apr-03 18:42:08 :: [x86_64-i586] arepo build OK
2026-Apr-03 18:42:27 :: [x86_64-i586] generated apt indices
2026-Apr-03 18:42:28 :: [x86_64-i586] created next repo
2026-Apr-03 18:42:41 :: [x86_64-i586] dependencies check OK
2026-Apr-03 18:42:42 :: gears inheritance check OK
2026-Apr-03 18:42:43 :: srpm inheritance check OK
girar-check-perms: access to firefox-esr DENIED for pav: project `firefox-esr' is not listed in the acl file for repository `p11', and the policy for such projects in `p11' is to deny
check-subtask-perms: #100: firefox-esr: needs approvals from members of @maint and @tester groups
2026-Apr-03 18:42:45 :: acl check FAILED
2026-Apr-03 18:42:57 :: created contents_index files
2026-Apr-03 18:43:08 :: created hash files: aarch64 i586 src x86_64-i586 x86_64
2026-Apr-03 18:43:11 :: task #413998 for p11 EPERM