https://git.altlinux.org/tasks/426483/logs/events.1.1.log
https://packages.altlinux.org/tasks/426483
subtask name aarch64 i586 x86_64
#100 thunderbird 35:05 - 21:54
2026-Jul-23 17:07:21 :: test-only task #426483 for sisyphus started by rauty:
#100 build 153.0-alt1 from /people/rauty/packages/thunderbird.git fetched at
2026-Jul-23 17:07:16
2026-Jul-23 17:07:21 :: waiting for a shared lock on sisyphus
2026-Jul-23 17:08:11 :: acquired a shared lock on sisyphus
2026-Jul-23 17:08:13 :: [aarch64] #100 thunderbird.git 153.0-alt1: build start
2026-Jul-23 17:08:13 :: [i586] #100 thunderbird.git 153.0-alt1: build start
2026-Jul-23 17:08:13 :: [x86_64] #100 thunderbird.git 153.0-alt1: build start
2026-Jul-23 17:08:32 :: [i586] #100 thunderbird.git 153.0-alt1: build SKIPPED
2026-Jul-23 17:30:07 :: [x86_64] #100 thunderbird.git 153.0-alt1: build OK
2026-Jul-23 17:43:18 :: [aarch64] #100 thunderbird.git 153.0-alt1: build OK
2026-Jul-23 17:43:50 :: 100: build check OK
2026-Jul-23 17:43:51 :: build check OK
2026-Jul-23 17:43:59 :: #100: thunderbird.git 153.0-alt1: version check OK
2026-Jul-23 17:43:59 :: build version check OK
2026-Jul-23 17:46:17 :: noarch check OK
2026-Jul-23 17:46:19 :: plan: src +1 -1 =22520, aarch64 +2 -2 =39877, x86_64 +2
-2 =40957
#100 thunderbird 152.0.1-alt1 -> 153.0-alt1
Wed Jul 22 2026 Ajrat Makhmutov <rauty@altlinux> 153.0-alt1
- New version.
- Fixes:
+ CVE-2026-14899: Off-by-one out of bounds read in MIME header parser for
forwarding
+ CVE-2026-16349: Same-origin policy bypass in the DOM: Navigation component
+ CVE-2026-16350: Incorrect boundary conditions in the Audio/Video: cubeb
component
+ CVE-2026-16362: Use-after-free in the WebRTC: Audio/Video component
+ CVE-2026-16351: Sandbox escape due to use-after-free in the DOM:
Navigation component
+ CVE-2026-16352: Sandbox escape due to use-after-free in the Disability
Access APIs component
+ CVE-2026-16363: JIT miscompilation in the JavaScript: WebAssembly component
[...]
2026-Jul-23 17:46:19 :: thunderbird: fixes vulnerabilities: CVE-2026-14899
CVE-2026-16349 CVE-2026-16350 CVE-2026-16362 CVE-2026-16351 CVE-2026-16352
CVE-2026-16363 CVE-2026-16364 CVE-2026-16365 CVE-2026-16366 CVE-2026-16353
CVE-2026-16354 CVE-2026-16367 CVE-2026-16368 CVE-2026-16369 CVE-2026-16355
CVE-2026-16356 CVE-2026-16357 CVE-2026-16370 CVE-2026-16371 CVE-2026-16372
CVE-2026-16374 CVE-2026-16375 CVE-2026-16376 CVE-2026-16377 CVE-2026-16378
CVE-2026-16379 CVE-2026-16358 CVE-2026-16380 CVE-2026-16381 CVE-2026-16382
CVE-2026-16383 CVE-2026-16384 CVE-2026-16385 CVE-2026-16386 CVE-2026-16387
CVE-2026-16388 CVE-2026-16389 CVE-2026-16390 CVE-2026-16391 CVE-2026-16392
CVE-2026-16393 CVE-2026-16359 CVE-2026-16394 CVE-2026-16395 CVE-2026-16396
CVE-2026-16398 CVE-2026-16399 CVE-2026-16400 CVE-2026-16401 CVE-2026-16402
CVE-2026-16403 CVE-2026-16405 CVE-2026-16406 CVE-2026-16407 CVE-2026-16408
CVE-2026-16409 CVE-2026-16410 CVE-2026-16411 CVE-2026-16412 CVE-2026-16360
2026-Jul-23 17:47:29 :: patched apt indices
2026-Jul-23 17:47:42 :: created next repo
2026-Jul-23 17:47:56 :: duplicate provides check OK
2026-Jul-23 17:48:59 :: dependencies check OK
2026-Jul-23 17:49:56 :: [x86_64 aarch64] ELF symbols check OK
x86_64: thunderbird=153.0-alt1 post-install unowned files:
/usr/lib64/mozilla
/usr/lib64/mozilla/extensions
/usr/share/icons/hicolor/128x128
/usr/share/icons/hicolor/128x128/apps
/usr/share/icons/hicolor/22x22
/usr/share/icons/hicolor/22x22/apps
/usr/share/icons/hicolor/24x24
/usr/share/icons/hicolor/24x24/apps
/usr/share/icons/hicolor/256x256
/usr/share/icons/hicolor/256x256/apps
/usr/share/icons/hicolor/64x64
/usr/share/icons/hicolor/64x64/apps
/usr/share/icons/hicolor/symbolic
/usr/share/icons/hicolor/symbolic/apps
/usr/share/mozilla
/usr/share/mozilla/extensions
2026-Jul-23 17:50:14 :: [x86_64] #100 thunderbird: install check OK
aarch64: thunderbird=153.0-alt1 post-install unowned files:
/usr/lib64/mozilla
/usr/lib64/mozilla/extensions
/usr/share/icons/hicolor/128x128
/usr/share/icons/hicolor/128x128/apps
/usr/share/icons/hicolor/22x22
/usr/share/icons/hicolor/22x22/apps
/usr/share/icons/hicolor/24x24
/usr/share/icons/hicolor/24x24/apps
/usr/share/icons/hicolor/256x256
/usr/share/icons/hicolor/256x256/apps
/usr/share/icons/hicolor/64x64
/usr/share/icons/hicolor/64x64/apps
/usr/share/icons/hicolor/symbolic
/usr/share/icons/hicolor/symbolic/apps
/usr/share/mozilla
/usr/share/mozilla/extensions
2026-Jul-23 17:50:28 :: [aarch64] #100 thunderbird: install check OK
2026-Jul-23 17:50:56 :: [x86_64] #100 thunderbird-debuginfo: install check OK
2026-Jul-23 17:51:30 :: [aarch64] #100 thunderbird-debuginfo: install check OK
2026-Jul-23 17:51:51 :: [x86_64-i586] generated apt indices
2026-Jul-23 17:51:51 :: [x86_64-i586] created next repo
2026-Jul-23 17:52:03 :: [x86_64-i586] dependencies check OK
2026-Jul-23 17:52:04 :: gears inheritance check OK
2026-Jul-23 17:52:05 :: srpm inheritance check OK
girar-check-perms: access to thunderbird ALLOWED for rauty: project leader
check-subtask-perms: #100: thunderbird: allowed for rauty
2026-Jul-23 17:52:05 :: acl check OK
2026-Jul-23 17:52:19 :: created contents_index files
2026-Jul-23 17:52:32 :: created hash files: aarch64 src x86_64
2026-Jul-23 17:52:35 :: task #426483 for sisyphus TESTED
_______________________________________________
Sisyphus-incominger mailing list
[email protected]
https://lists.altlinux.org/mailman/listinfo/sisyphus-incominger
