[#408091] p11 EPERM (try 2) openvpn.git=2.6.19-alt1

[Girar awaiter (naf)]

https://git.altlinux.org/tasks/408091/logs/events.2.1.log
https://packages.altlinux.org/tasks/408091

2026-Feb-13 06:08:56 :: task #408091 for p11 resumed by naf:
2026-Feb-13 06:08:56 :: message: Fixes: CVE-2025-13086 (and Windows-only CVE-2025-13751)
#100 build 2.6.19-alt1 from /people/naf/packages/openvpn.git fetched at 2026-Feb-13 05:46:59
2026-Feb-13 06:08:58 :: [aarch64] #100 openvpn.git 2.6.19-alt1: build start
2026-Feb-13 06:08:58 :: [x86_64] #100 openvpn.git 2.6.19-alt1: build start
2026-Feb-13 06:08:58 :: [i586] #100 openvpn.git 2.6.19-alt1: build start
2026-Feb-13 06:09:09 :: [i586] #100 openvpn.git 2.6.19-alt1: build OK (cached)
2026-Feb-13 06:09:10 :: [x86_64] #100 openvpn.git 2.6.19-alt1: build OK (cached)
2026-Feb-13 06:09:16 :: [aarch64] #100 openvpn.git 2.6.19-alt1: build OK (cached)
2026-Feb-13 06:09:17 :: 100: build check OK (cached)
2026-Feb-13 06:09:18 :: build check OK
2026-Feb-13 06:09:31 :: #100: openvpn.git 2.6.19-alt1: version check OK
2026-Feb-13 06:09:31 :: build version check OK
2026-Feb-13 06:09:37 :: noarch check OK
2026-Feb-13 06:09:39 :: plan: src +1 -1 =20018, aarch64 +4 -4 =35312, i586 +4 -4 =34223, noarch +2 -2 =21067, x86_64 +4 -4 =36121
#100 openvpn 2.6.15-alt1 -> 2.6.19-alt1
 Thu Feb 12 2026 Nikolay A. Fetisov <naf at altlinux> 2.6.19-alt1
 - New version
 - Fixes:
    + CVE-2025-13751: Windows/interactive service erroneous exit on error
    + CVE-2025-13086: fix memcmp check for the HMAC 3-way handshake verification
    + Fix errors checks in auth plugin/script handling
    + Fix socket FDs leaking to child processes for incoming TCP connections
    + Repair client-side interaction on reconnect between DCO event handling
      and '--persist-tun'
2026-Feb-13 06:09:39 :: openvpn: fixes vulnerabilities: CVE-2025-13751 CVE-2025-13086
2026-Feb-13 06:10:22 :: patched apt indices
2026-Feb-13 06:10:31 :: created next repo
2026-Feb-13 06:10:41 :: duplicate provides check OK
2026-Feb-13 06:11:18 :: dependencies check OK
2026-Feb-13 06:11:18 :: [x86_64 i586 aarch64] no need to repeat ELF symbols check
2026-Feb-13 06:11:18 :: [x86_64 i586 aarch64] ELF symbols check OK
	i586: openvpn=2.6.19-alt1 post-install unowned files:
 /var/lib/openvpn/dev/urandom
 /var/lib/openvpn/etc/host.conf
 /var/lib/openvpn/etc/hosts
 /var/lib/openvpn/etc/nsswitch.conf
 /var/lib/openvpn/etc/resolv.conf
 /var/lib/openvpn/etc/services
 /var/lib/openvpn/lib/libnss_files.so.2
 /var/lib/openvpn/lib/libresolv.so.2
2026-Feb-13 06:11:31 :: [i586] #100 openvpn: install check OK (cached)
	x86_64: openvpn=2.6.19-alt1 post-install unowned files:
 /var/lib/openvpn/dev/urandom
 /var/lib/openvpn/etc/host.conf
 /var/lib/openvpn/etc/hosts
 /var/lib/openvpn/etc/nsswitch.conf
 /var/lib/openvpn/etc/resolv.conf
 /var/lib/openvpn/etc/services
 /var/lib/openvpn/lib64/libnss_files.so.2
 /var/lib/openvpn/lib64/libresolv.so.2
2026-Feb-13 06:11:32 :: [x86_64] #100 openvpn: install check OK (cached)
2026-Feb-13 06:11:35 :: [i586] #100 openvpn-debuginfo: install check OK (cached)
2026-Feb-13 06:11:36 :: [x86_64] #100 openvpn-debuginfo: install check OK (cached)
	aarch64: openvpn=2.6.19-alt1 post-install unowned files:
 /var/lib/openvpn/dev/urandom
 /var/lib/openvpn/etc/host.conf
 /var/lib/openvpn/etc/hosts
 /var/lib/openvpn/etc/nsswitch.conf
 /var/lib/openvpn/etc/resolv.conf
 /var/lib/openvpn/etc/services
 /var/lib/openvpn/lib64/libnss_files.so.2
 /var/lib/openvpn/lib64/libresolv.so.2
2026-Feb-13 06:11:39 :: [aarch64] #100 openvpn: install check OK (cached)
2026-Feb-13 06:11:39 :: [i586] #100 openvpn-devel: install check OK (cached)
2026-Feb-13 06:11:41 :: [x86_64] #100 openvpn-devel: install check OK (cached)
2026-Feb-13 06:11:43 :: [i586] #100 openvpn-docs: install check OK (cached)
2026-Feb-13 06:11:45 :: [x86_64] #100 openvpn-docs: install check OK (cached)
2026-Feb-13 06:11:47 :: [aarch64] #100 openvpn-debuginfo: install check OK (cached)
2026-Feb-13 06:11:48 :: [i586] #100 openvpn-plugins: install check OK (cached)
2026-Feb-13 06:11:50 :: [x86_64] #100 openvpn-plugins: install check OK (cached)
2026-Feb-13 06:11:52 :: [i586] #100 openvpn-plugins-debuginfo: install check OK (cached)
2026-Feb-13 06:11:54 :: [aarch64] #100 openvpn-devel: install check OK (cached)
2026-Feb-13 06:11:55 :: [x86_64] #100 openvpn-plugins-debuginfo: install check OK (cached)
2026-Feb-13 06:12:02 :: [aarch64] #100 openvpn-docs: install check OK (cached)
2026-Feb-13 06:12:10 :: [aarch64] #100 openvpn-plugins: install check OK (cached)
2026-Feb-13 06:12:17 :: [aarch64] #100 openvpn-plugins-debuginfo: install check OK (cached)
2026-Feb-13 06:12:19 :: [x86_64-i586] plan: #0 +1 -1 =11803
2026-Feb-13 06:12:43 :: [x86_64-i586] generated apt indices
2026-Feb-13 06:12:45 :: [x86_64-i586] created next repo
2026-Feb-13 06:12:57 :: [x86_64-i586] dependencies check OK
2026-Feb-13 06:12:58 :: gears inheritance check OK
2026-Feb-13 06:12:59 :: srpm inheritance check OK
girar-check-perms: access to openvpn DENIED for naf: project `openvpn' is not listed in the acl file for repository `p11', and the policy for such projects in `p11' is to deny
check-subtask-perms: #100: openvpn: needs approvals from members of @maint and @tester groups
2026-Feb-13 06:13:01 :: acl check FAILED
2026-Feb-13 06:13:25 :: created contents_index files
2026-Feb-13 06:13:34 :: created hash files: aarch64 i586 noarch src x86_64-i586 x86_64
2026-Feb-13 06:13:38 :: task #408091 for p11 EPERM