https://git.altlinux.org/tasks/293697/logs/events.1.1.log
subtask name i586 x86_64
#100 expat 1:19 1:16
2022-Jan-31 15:13:02 :: task #293697 for p8 started by vseleznv:
2022-Jan-31 15:13:02 :: message: Security backport
#100 build 2.4.3-alt1 from /people/vseleznv/packages/expat.git fetched at
2022-Jan-18 12:26:47
2022-Jan-31 15:13:02 :: [i586] #100 expat.git 2.4.3-alt1: build start
2022-Jan-31 15:13:02 :: [x86_64] #100 expat.git 2.4.3-alt1: build start
2022-Jan-31 15:14:18 :: [x86_64] #100 expat.git 2.4.3-alt1: build OK
2022-Jan-31 15:14:21 :: [i586] #100 expat.git 2.4.3-alt1: build OK
2022-Jan-31 15:14:29 :: #100: expat.git 2.4.3-alt1: build check OK
2022-Jan-31 15:14:29 :: build check OK
2022-Jan-31 15:14:32 :: noarch check OK
2022-Jan-31 15:14:33 :: plan: src +1 -1 =18242, i586 +5 -5 =35350, x86_64 +5 -5
=35354
#100 expat 2.2.4-alt0.M80P.1 -> 2.4.3-alt1
Tue Jan 18 2022 Vladimir D. Seleznev <vseleznv@altlinux> 2.4.3-alt1
- Updated to 2.4.3 (with multiple security fixes).
- Fixes:
+ CVE-2021-45960 issues with left shift by >= 29 places in function
storeAtts that
can lead to realloc misbehavior;
+ CVE-2021-46143 Integer overflow on variable m_groupSize in function
doProlog;
+ CVE-2022-22822 Integer overflows near memory allocation in function
addBinding;
+ CVE-2022-22823 Integer overflows near memory allocation in function
build_model;
+ CVE-2022-22824 Integer overflows near memory allocation in function
defineAttribute;
+ CVE-2022-22825 Integer overflows near memory allocation in function lookup;
[...]
2022-Jan-31 15:14:33 :: expat: closes bugs: 41571
2022-Jan-31 15:14:33 :: expat: fixes vulnerabilities: CVE-2018-20843
CVE-2019-15903
2022-Jan-31 15:14:33 :: expat: mentions vulnerabilities: CVE-2021-45960
CVE-2021-46143 CVE-2022-22822 CVE-2022-22823 CVE-2022-22824 CVE-2022-22825
CVE-2022-22826 CVE-2022-22827
2022-Jan-31 15:15:03 :: patched apt indices
2022-Jan-31 15:15:08 :: created next repo
2022-Jan-31 15:15:16 :: duplicate provides check OK
2022-Jan-31 15:15:48 :: dependencies check OK
2022-Jan-31 15:16:15 :: [i586 x86_64] ELF symbols check OK
2022-Jan-31 15:16:41 :: [x86_64] #100 expat: install check OK
2022-Jan-31 15:16:41 :: [i586] #100 expat: install check OK
2022-Jan-31 15:16:50 :: [x86_64] #100 expat-debuginfo: install check OK
2022-Jan-31 15:16:50 :: [i586] #100 expat-debuginfo: install check OK
2022-Jan-31 15:16:57 :: [x86_64] #100 libexpat: install check OK
2022-Jan-31 15:16:57 :: [i586] #100 libexpat: install check OK
2022-Jan-31 15:17:05 :: [x86_64] #100 libexpat-debuginfo: install check OK
2022-Jan-31 15:17:05 :: [i586] #100 libexpat-debuginfo: install check OK
x86_64: libexpat-devel=2.4.3-alt1 post-install unowned files:
/usr/lib64/cmake
2022-Jan-31 15:17:13 :: [x86_64] #100 libexpat-devel: install check OK
i586: libexpat-devel=2.4.3-alt1 post-install unowned files:
/usr/lib/cmake
2022-Jan-31 15:17:13 :: [i586] #100 libexpat-devel: install check OK
2022-Jan-31 15:17:14 :: [x86_64-i586] plan: #2 +2 -2 =11977
2022-Jan-31 15:17:43 :: [x86_64-i586] arepo build OK
2022-Jan-31 15:17:57 :: [x86_64-i586] generated apt indices
2022-Jan-31 15:17:59 :: [x86_64-i586] created next repo
2022-Jan-31 15:18:09 :: [x86_64-i586] dependencies check OK
error: #100: expat.git tag `2.4.3-alt1' is not inherited from
/gears/e/expat.git branch `p8'
2022-Jan-31 15:18:10 :: gears inheritance check FAILED for: #100
2022-Jan-31 15:18:10 :: task #293697 for p8 FAILED
_______________________________________________
Sisyphus-incominger mailing list
[email protected]
https://lists.altlinux.org/mailman/listinfo/sisyphus-incominger
