https://git.altlinux.org/tasks/archive/done/_416/426483/logs/events.2.3.log
https://packages.altlinux.org/tasks/426483
2026-Jul-23 19:24:29 :: task #426483 for sisyphus resumed by rauty:
#100 build 153.0-alt1 from /people/rauty/packages/thunderbird.git fetched at
2026-Jul-23 17:07:16
2026-Jul-23 19:24:31 :: [aarch64] #100 thunderbird.git 153.0-alt1: build start
2026-Jul-23 19:24:31 :: [i586] #100 thunderbird.git 153.0-alt1: build start
2026-Jul-23 19:24:31 :: [x86_64] #100 thunderbird.git 153.0-alt1: build start
2026-Jul-23 19:24:42 :: [i586] #100 thunderbird.git 153.0-alt1: build SKIPPED
2026-Jul-23 19:24:55 :: [x86_64] #100 thunderbird.git 153.0-alt1: build OK
(cached)
2026-Jul-23 19:25:13 :: [aarch64] #100 thunderbird.git 153.0-alt1: build OK
(cached)
2026-Jul-23 19:25:14 :: 100: build check OK (cached)
2026-Jul-23 19:25:14 :: build check OK
2026-Jul-23 19:25:22 :: #100: thunderbird.git 153.0-alt1: version check OK
2026-Jul-23 19:25:23 :: build version check OK
2026-Jul-23 19:27:24 :: noarch check OK
2026-Jul-23 19:27:26 :: plan: src +1 -1 =22521, aarch64 +2 -2 =39879, x86_64 +2
-2 =40959
#100 thunderbird 152.0.1-alt1 -> 153.0-alt1
Wed Jul 22 2026 Ajrat Makhmutov <rauty@altlinux> 153.0-alt1
- New version.
- Fixes:
+ CVE-2026-14899: Off-by-one out of bounds read in MIME header parser for
forwarding
+ CVE-2026-16349: Same-origin policy bypass in the DOM: Navigation component
+ CVE-2026-16350: Incorrect boundary conditions in the Audio/Video: cubeb
component
+ CVE-2026-16362: Use-after-free in the WebRTC: Audio/Video component
+ CVE-2026-16351: Sandbox escape due to use-after-free in the DOM:
Navigation component
+ CVE-2026-16352: Sandbox escape due to use-after-free in the Disability
Access APIs component
+ CVE-2026-16363: JIT miscompilation in the JavaScript: WebAssembly component
[...]
2026-Jul-23 19:27:27 :: thunderbird: fixes vulnerabilities: CVE-2026-14899
CVE-2026-16349 CVE-2026-16350 CVE-2026-16362 CVE-2026-16351 CVE-2026-16352
CVE-2026-16363 CVE-2026-16364 CVE-2026-16365 CVE-2026-16366 CVE-2026-16353
CVE-2026-16354 CVE-2026-16367 CVE-2026-16368 CVE-2026-16369 CVE-2026-16355
CVE-2026-16356 CVE-2026-16357 CVE-2026-16370 CVE-2026-16371 CVE-2026-16372
CVE-2026-16374 CVE-2026-16375 CVE-2026-16376 CVE-2026-16377 CVE-2026-16378
CVE-2026-16379 CVE-2026-16358 CVE-2026-16380 CVE-2026-16381 CVE-2026-16382
CVE-2026-16383 CVE-2026-16384 CVE-2026-16385 CVE-2026-16386 CVE-2026-16387
CVE-2026-16388 CVE-2026-16389 CVE-2026-16390 CVE-2026-16391 CVE-2026-16392
CVE-2026-16393 CVE-2026-16359 CVE-2026-16394 CVE-2026-16395 CVE-2026-16396
CVE-2026-16398 CVE-2026-16399 CVE-2026-16400 CVE-2026-16401 CVE-2026-16402
CVE-2026-16403 CVE-2026-16405 CVE-2026-16406 CVE-2026-16407 CVE-2026-16408
CVE-2026-16409 CVE-2026-16410 CVE-2026-16411 CVE-2026-16412 CVE-2026-16360
2026-Jul-23 19:28:24 :: patched apt indices
2026-Jul-23 19:28:36 :: created next repo
2026-Jul-23 19:28:49 :: duplicate provides check OK
2026-Jul-23 19:29:37 :: dependencies check OK
2026-Jul-23 19:30:19 :: [x86_64 aarch64] ELF symbols check OK
x86_64: thunderbird=153.0-alt1 post-install unowned files:
/usr/lib64/mozilla
/usr/lib64/mozilla/extensions
/usr/share/icons/hicolor/128x128
/usr/share/icons/hicolor/128x128/apps
/usr/share/icons/hicolor/22x22
/usr/share/icons/hicolor/22x22/apps
/usr/share/icons/hicolor/24x24
/usr/share/icons/hicolor/24x24/apps
/usr/share/icons/hicolor/256x256
/usr/share/icons/hicolor/256x256/apps
/usr/share/icons/hicolor/64x64
/usr/share/icons/hicolor/64x64/apps
/usr/share/icons/hicolor/symbolic
/usr/share/icons/hicolor/symbolic/apps
/usr/share/mozilla
/usr/share/mozilla/extensions
2026-Jul-23 19:30:29 :: [x86_64] #100 thunderbird: install check OK (cached)
2026-Jul-23 19:30:34 :: [x86_64] #100 thunderbird-debuginfo: install check OK
(cached)
aarch64: thunderbird=153.0-alt1 post-install unowned files:
/usr/lib64/mozilla
/usr/lib64/mozilla/extensions
/usr/share/icons/hicolor/128x128
/usr/share/icons/hicolor/128x128/apps
/usr/share/icons/hicolor/22x22
/usr/share/icons/hicolor/22x22/apps
/usr/share/icons/hicolor/24x24
/usr/share/icons/hicolor/24x24/apps
/usr/share/icons/hicolor/256x256
/usr/share/icons/hicolor/256x256/apps
/usr/share/icons/hicolor/64x64
/usr/share/icons/hicolor/64x64/apps
/usr/share/icons/hicolor/symbolic
/usr/share/icons/hicolor/symbolic/apps
/usr/share/mozilla
/usr/share/mozilla/extensions
2026-Jul-23 19:30:37 :: [aarch64] #100 thunderbird: install check OK (cached)
2026-Jul-23 19:30:46 :: [aarch64] #100 thunderbird-debuginfo: install check OK
(cached)
2026-Jul-23 19:31:05 :: [x86_64-i586] generated apt indices
2026-Jul-23 19:31:05 :: [x86_64-i586] created next repo
2026-Jul-23 19:31:18 :: [x86_64-i586] dependencies check OK
2026-Jul-23 19:31:19 :: gears inheritance check OK
2026-Jul-23 19:31:19 :: srpm inheritance check OK
girar-check-perms: access to thunderbird ALLOWED for rauty: project leader
check-subtask-perms: #100: thunderbird: allowed for rauty
2026-Jul-23 19:31:20 :: acl check OK
2026-Jul-23 19:31:32 :: created contents_index files
2026-Jul-23 19:31:44 :: created hash files: aarch64 src x86_64
2026-Jul-23 19:31:48 :: task #426483 for sisyphus TESTED
2026-Jul-23 19:31:50 :: task is ready for commit
2026-Jul-23 19:31:56 :: repo clone OK
2026-Jul-23 19:31:58 :: packages update OK
2026-Jul-23 19:32:03 :: [x86_64 aarch64] update OK
2026-Jul-23 19:32:03 :: repo update OK
2026-Jul-23 19:32:18 :: repo save OK
2026-Jul-23 19:32:18 :: src index update OK
2026-Jul-23 19:32:40 :: updated /gears/t/thunderbird.git branch `sisyphus'
2026-Jul-23 19:32:45 :: gears update OK
2026-Jul-23 19:32:45 :: task #426483 for sisyphus DONE
_______________________________________________
Sisyphus-incominger mailing list
[email protected]
https://lists.altlinux.org/mailman/listinfo/sisyphus-incominger
