https://git.altlinux.org/tasks/293697/logs/events.3.1.log
2022-Feb-02 13:20:44 :: task #293697 for p8 resumed by vseleznv:
2022-Feb-02 13:20:44 :: message: Security backport
#100 build 2.4.3-alt1 from /people/vseleznv/packages/expat.git fetched at
2022-Jan-18 12:26:47
2022-Feb-02 13:20:45 :: [x86_64] #100 expat.git 2.4.3-alt1: build start
2022-Feb-02 13:20:45 :: [i586] #100 expat.git 2.4.3-alt1: build start
2022-Feb-02 13:21:06 :: [i586] #100 expat.git 2.4.3-alt1: build OK (cached)
2022-Feb-02 13:21:06 :: [x86_64] #100 expat.git 2.4.3-alt1: build OK (cached)
2022-Feb-02 13:21:14 :: #100: expat.git 2.4.3-alt1: build check OK
2022-Feb-02 13:21:14 :: build check OK
2022-Feb-02 13:21:17 :: noarch check OK
2022-Feb-02 13:21:18 :: plan: src +1 -1 =18243, i586 +5 -5 =35350, x86_64 +5 -5
=35354
#100 expat 2.2.4-alt0.M80P.1 -> 2.4.3-alt1
Tue Jan 18 2022 Vladimir D. Seleznev <vseleznv@altlinux> 2.4.3-alt1
- Updated to 2.4.3 (with multiple security fixes).
- Fixes:
+ CVE-2021-45960 issues with left shift by >= 29 places in function
storeAtts that
can lead to realloc misbehavior;
+ CVE-2021-46143 Integer overflow on variable m_groupSize in function
doProlog;
+ CVE-2022-22822 Integer overflows near memory allocation in function
addBinding;
+ CVE-2022-22823 Integer overflows near memory allocation in function
build_model;
+ CVE-2022-22824 Integer overflows near memory allocation in function
defineAttribute;
+ CVE-2022-22825 Integer overflows near memory allocation in function lookup;
[...]
2022-Feb-02 13:21:18 :: expat: closes bugs: 41571
2022-Feb-02 13:21:18 :: expat: fixes vulnerabilities: CVE-2018-20843
CVE-2019-15903
2022-Feb-02 13:21:18 :: expat: mentions vulnerabilities: CVE-2021-45960
CVE-2021-46143 CVE-2022-22822 CVE-2022-22823 CVE-2022-22824 CVE-2022-22825
CVE-2022-22826 CVE-2022-22827
2022-Feb-02 13:21:52 :: patched apt indices
2022-Feb-02 13:21:57 :: created next repo
2022-Feb-02 13:22:05 :: duplicate provides check OK
2022-Feb-02 13:22:37 :: dependencies check OK
2022-Feb-02 13:23:06 :: [i586 x86_64] ELF symbols check OK
2022-Feb-02 13:23:29 :: [i586] #100 expat: install check OK (cached)
2022-Feb-02 13:23:30 :: [x86_64] #100 expat: install check OK (cached)
2022-Feb-02 13:23:32 :: [i586] #100 expat-debuginfo: install check OK (cached)
2022-Feb-02 13:23:34 :: [x86_64] #100 expat-debuginfo: install check OK (cached)
2022-Feb-02 13:23:36 :: [i586] #100 libexpat: install check OK (cached)
2022-Feb-02 13:23:38 :: [x86_64] #100 libexpat: install check OK (cached)
2022-Feb-02 13:23:40 :: [i586] #100 libexpat-debuginfo: install check OK
(cached)
2022-Feb-02 13:23:42 :: [x86_64] #100 libexpat-debuginfo: install check OK
(cached)
i586: libexpat-devel=2.4.3-alt1 post-install unowned files:
/usr/lib/cmake
2022-Feb-02 13:23:44 :: [i586] #100 libexpat-devel: install check OK (cached)
x86_64: libexpat-devel=2.4.3-alt1 post-install unowned files:
/usr/lib64/cmake
2022-Feb-02 13:23:46 :: [x86_64] #100 libexpat-devel: install check OK (cached)
2022-Feb-02 13:23:46 :: [x86_64-i586] plan: #0 +2 -2 =11977
2022-Feb-02 13:24:00 :: [x86_64-i586] generated apt indices
2022-Feb-02 13:24:02 :: [x86_64-i586] created next repo
2022-Feb-02 13:24:11 :: [x86_64-i586] dependencies check OK
warning: #100: expat.git tag `2.4.3-alt1' is not inherited from
/gears/e/expat.git branch `p8' (relaxed by sotor)
2022-Feb-02 13:24:12 :: gears inheritance check COND-OK for: #100
error: #100: expat-2.4.3-alt1.src.rpm: missing last changelog entry from
expat-2.2.4-alt0.M80P.1.src.rpm:
* Mon Aug 28 2017 at@altlinux 2.2.4-alt0
2022-Feb-02 13:24:12 :: srpm inheritance check FAILED for: #100
2022-Feb-02 13:24:12 :: task #293697 for p8 FAILED
_______________________________________________
Sisyphus-incominger mailing list
[email protected]
https://lists.altlinux.org/mailman/listinfo/sisyphus-incominger
