https://git.altlinux.org/tasks/432534/logs/events.2.1.log
https://packages.altlinux.org/tasks/432534
2026-Sep-11 09:29:17 :: task #432534 for p11 resumed by geochip:
2026-Sep-11 09:29:17 :: message: CVE fix
#100 build 1.33.13-alt1 from /gears/c/cri-o1.33.git fetched at 2026-Sep-11
08:18:52 from sisyphus
#200 build 1.34.13-alt1 from /gears/c/cri-o1.34.git fetched at 2026-Sep-11
08:19:00 from sisyphus
#300 build 1.35.8-alt1 from /gears/c/cri-o1.35.git fetched at 2026-Sep-11
08:19:09 from sisyphus
#400 build 1.36.5-alt1 from /gears/c/cri-o1.36.git fetched at 2026-Sep-11
08:19:19 from sisyphus
2026-Sep-11 09:29:18 :: created build repo
2026-Sep-11 09:29:19 :: [aarch64] #100 cri-o1.33.git 1.33.13-alt1: build start
2026-Sep-11 09:29:19 :: [i586] #100 cri-o1.33.git 1.33.13-alt1: build start
2026-Sep-11 09:29:19 :: [x86_64] #100 cri-o1.33.git 1.33.13-alt1: build start
2026-Sep-11 09:29:37 :: [i586] #100 cri-o1.33.git 1.33.13-alt1: build OK
(cached)
2026-Sep-11 09:29:38 :: [i586] #200 cri-o1.34.git 1.34.13-alt1: build start
2026-Sep-11 09:29:39 :: [x86_64] #100 cri-o1.33.git 1.33.13-alt1: build OK
(cached)
2026-Sep-11 09:29:39 :: [x86_64] #200 cri-o1.34.git 1.34.13-alt1: build start
2026-Sep-11 09:29:52 :: [i586] #200 cri-o1.34.git 1.34.13-alt1: build OK
(cached)
2026-Sep-11 09:29:52 :: [i586] #300 cri-o1.35.git 1.35.8-alt1: build start
2026-Sep-11 09:29:54 :: [x86_64] #200 cri-o1.34.git 1.34.13-alt1: build OK
(cached)
2026-Sep-11 09:29:54 :: [x86_64] #300 cri-o1.35.git 1.35.8-alt1: build start
2026-Sep-11 09:29:54 :: [aarch64] #100 cri-o1.33.git 1.33.13-alt1: build OK
(cached)
2026-Sep-11 09:29:54 :: [aarch64] #200 cri-o1.34.git 1.34.13-alt1: build start
2026-Sep-11 09:30:06 :: [i586] #300 cri-o1.35.git 1.35.8-alt1: build OK (cached)
2026-Sep-11 09:30:06 :: [i586] #400 cri-o1.36.git 1.36.5-alt1: build start
2026-Sep-11 09:30:09 :: [x86_64] #300 cri-o1.35.git 1.35.8-alt1: build OK
(cached)
2026-Sep-11 09:30:09 :: [x86_64] #400 cri-o1.36.git 1.36.5-alt1: build start
2026-Sep-11 09:30:20 :: [aarch64] #200 cri-o1.34.git 1.34.13-alt1: build OK
(cached)
2026-Sep-11 09:30:20 :: [i586] #400 cri-o1.36.git 1.36.5-alt1: build OK (cached)
2026-Sep-11 09:30:20 :: [aarch64] #300 cri-o1.35.git 1.35.8-alt1: build start
2026-Sep-11 09:30:24 :: [x86_64] #400 cri-o1.36.git 1.36.5-alt1: build OK
(cached)
2026-Sep-11 09:30:45 :: [aarch64] #300 cri-o1.35.git 1.35.8-alt1: build OK
(cached)
2026-Sep-11 09:30:46 :: [aarch64] #400 cri-o1.36.git 1.36.5-alt1: build start
2026-Sep-11 09:31:11 :: [aarch64] #400 cri-o1.36.git 1.36.5-alt1: build OK
(cached)
2026-Sep-11 09:31:12 :: 100: build check OK (cached)
2026-Sep-11 09:31:12 :: 200: build check OK (cached)
2026-Sep-11 09:31:12 :: 300: build check OK (cached)
2026-Sep-11 09:31:12 :: 400: build check OK (cached)
2026-Sep-11 09:31:13 :: build check OK
2026-Sep-11 09:31:20 :: #100: cri-o1.33.git 1.33.13-alt1: version check OK
2026-Sep-11 09:31:23 :: #200: cri-o1.34.git 1.34.13-alt1: version check OK
2026-Sep-11 09:31:26 :: #300: cri-o1.35.git 1.35.8-alt1: version check OK
2026-Sep-11 09:31:30 :: #400: cri-o1.36.git 1.36.5-alt1: version check OK
2026-Sep-11 09:31:30 :: build version check OK
2026-Sep-11 09:32:35 :: noarch check OK
2026-Sep-11 09:32:37 :: plan: src +4 -4 =20672, aarch64 +8 -8 =37126, i586 +8
-8 =35573, x86_64 +8 -8 =38139
#100 cri-o1.33 1.33.12-alt1 -> 1.33.13-alt1
Mon Aug 10 2026 Alexander Stepchenko <geochip@altlinux> 1.33.13-alt1
- 1.33.12 -> 1.33.13.
- Fixes:
+ CVE-2026-15809: Github.com/cri-o/cri-o: fix bypass for cve-2022-4318 -
/etc/passwd injection via home env
+ CVE-2026-34986: Go JOSE affect by a panic in JWE decryption
+ CVE-2026-62146: CRI-O sandbox state poisoning after restart can expose
crio.sock
+ CVE-2026-17113: Cri-o: cri-o: unvalidated image env var causes daemon crash
#200 cri-o1.34 1.34.8-alt1 -> 1.34.13-alt1
Tue Sep 08 2026 Alexander Stepchenko <geochip@altlinux> 1.34.13-alt1
- 1.34.11 -> 1.34.13.
- Fixes:
+ CVE-2026-15809: Github.com/cri-o/cri-o: fix bypass for cve-2022-4318 -
/etc/passwd injection via home env
+ CVE-2026-17113: Cri-o: cri-o: unvalidated image env var causes daemon crash
+ CVE-2026-62146: CRI-O sandbox state poisoning after restart can expose
crio.sock
Mon Aug 10 2026 Alexander Stepchenko <geochip@altlinux> 1.34.11-alt1
- 1.34.8 -> 1.34.11.
- Fixes:
+ CVE-2026-29181: OpenTelemetry-Go multi-value `baggage` header extraction
causes excessive allocations (remote dos amplification)
[...]
#300 cri-o1.35 1.35.3-alt1 -> 1.35.8-alt1
Wed Sep 09 2026 Alexander Stepchenko <geochip@altlinux> 1.35.8-alt1
- 1.35.3 -> 1.35.8.
- Fixes:
+ CVE-2026-15809: Github.com/cri-o/cri-o: fix bypass for cve-2022-4318 -
/etc/passwd injection via home env
+ CVE-2026-17113: Cri-o: cri-o: unvalidated image env var causes daemon crash
+ CVE-2026-29181: OpenTelemetry-Go multi-value `baggage` header extraction
causes excessive allocations (remote dos amplification)
+ CVE-2026-34986: Go JOSE affect by a panic in JWE decryption
+ CVE-2026-62146: CRI-O sandbox state poisoning after restart can expose
crio.sock
#400 cri-o1.36 1.36.0-alt1 -> 1.36.5-alt1
Wed Sep 09 2026 Alexander Stepchenko <geochip@altlinux> 1.36.5-alt1
- 1.36.0 -> 1.36.5.
- Fixes:
+ CVE-2026-15809: Github.com/cri-o/cri-o: fix bypass for cve-2022-4318 -
/etc/passwd injection via home env
+ CVE-2026-17113: Cri-o: cri-o: unvalidated image env var causes daemon crash
+ CVE-2026-62146: CRI-O sandbox state poisoning after restart can expose
crio.sock
2026-Sep-11 09:32:37 :: cri-o1.33: fixes vulnerabilities: CVE-2026-15809
CVE-2026-34986 CVE-2026-62146 CVE-2026-17113
2026-Sep-11 09:32:37 :: cri-o1.34: fixes vulnerabilities: CVE-2026-15809
CVE-2026-17113 CVE-2026-62146 CVE-2026-29181 CVE-2026-34986
2026-Sep-11 09:32:37 :: cri-o1.35: fixes vulnerabilities: CVE-2026-15809
CVE-2026-17113 CVE-2026-29181 CVE-2026-34986 CVE-2026-62146
2026-Sep-11 09:32:37 :: cri-o1.36: fixes vulnerabilities: CVE-2026-15809
CVE-2026-17113 CVE-2026-62146
2026-Sep-11 09:33:28 :: patched apt indices
2026-Sep-11 09:33:37 :: created next repo
2026-Sep-11 09:33:48 :: duplicate provides check OK
2026-Sep-11 09:34:31 :: dependencies check OK
2026-Sep-11 09:34:31 :: [x86_64 i586 aarch64] no need to repeat ELF symbols
check
2026-Sep-11 09:34:31 :: [x86_64 i586 aarch64] ELF symbols check OK
i586: cri-o1.33=1.33.13-alt1 post-install unowned files:
/usr/share/fish
/usr/share/fish/completions
2026-Sep-11 09:34:43 :: [i586] #100 cri-o1.33: install check OK (cached)
x86_64: cri-o1.33=1.33.13-alt1 post-install unowned files:
/usr/share/fish
/usr/share/fish/completions
2026-Sep-11 09:34:44 :: [x86_64] #100 cri-o1.33: install check OK (cached)
2026-Sep-11 09:34:48 :: [i586] #100 cri-o1.33-debuginfo: install check OK
(cached)
2026-Sep-11 09:34:49 :: [x86_64] #100 cri-o1.33-debuginfo: install check OK
(cached)
aarch64: cri-o1.33=1.33.13-alt1 post-install unowned files:
/usr/share/fish
/usr/share/fish/completions
2026-Sep-11 09:34:51 :: [aarch64] #100 cri-o1.33: install check OK (cached)
i586: cri-o1.34=1.34.13-alt1 post-install unowned files:
/usr/share/fish
/usr/share/fish/completions
2026-Sep-11 09:34:52 :: [i586] #200 cri-o1.34: install check OK (cached)
x86_64: cri-o1.34=1.34.13-alt1 post-install unowned files:
/usr/share/fish
/usr/share/fish/completions
2026-Sep-11 09:34:54 :: [x86_64] #200 cri-o1.34: install check OK (cached)
2026-Sep-11 09:34:57 :: [i586] #200 cri-o1.34-debuginfo: install check OK
(cached)
2026-Sep-11 09:34:58 :: [x86_64] #200 cri-o1.34-debuginfo: install check OK
(cached)
2026-Sep-11 09:34:59 :: [aarch64] #100 cri-o1.33-debuginfo: install check OK
(cached)
i586: cri-o1.35=1.35.8-alt1 post-install unowned files:
/usr/share/fish
/usr/share/fish/completions
2026-Sep-11 09:35:01 :: [i586] #300 cri-o1.35: install check OK (cached)
x86_64: cri-o1.35=1.35.8-alt1 post-install unowned files:
/usr/share/fish
/usr/share/fish/completions
2026-Sep-11 09:35:03 :: [x86_64] #300 cri-o1.35: install check OK (cached)
2026-Sep-11 09:35:05 :: [i586] #300 cri-o1.35-debuginfo: install check OK
(cached)
aarch64: cri-o1.34=1.34.13-alt1 post-install unowned files:
/usr/share/fish
/usr/share/fish/completions
2026-Sep-11 09:35:07 :: [aarch64] #200 cri-o1.34: install check OK (cached)
2026-Sep-11 09:35:08 :: [x86_64] #300 cri-o1.35-debuginfo: install check OK
(cached)
i586: cri-o1.36=1.36.5-alt1 post-install unowned files:
/usr/share/fish
/usr/share/fish/completions
2026-Sep-11 09:35:10 :: [i586] #400 cri-o1.36: install check OK (cached)
x86_64: cri-o1.36=1.36.5-alt1 post-install unowned files:
/usr/share/fish
/usr/share/fish/completions
2026-Sep-11 09:35:12 :: [x86_64] #400 cri-o1.36: install check OK (cached)
2026-Sep-11 09:35:14 :: [i586] #400 cri-o1.36-debuginfo: install check OK
(cached)
2026-Sep-11 09:35:15 :: [aarch64] #200 cri-o1.34-debuginfo: install check OK
(cached)
2026-Sep-11 09:35:17 :: [x86_64] #400 cri-o1.36-debuginfo: install check OK
(cached)
aarch64: cri-o1.35=1.35.8-alt1 post-install unowned files:
/usr/share/fish
/usr/share/fish/completions
2026-Sep-11 09:35:22 :: [aarch64] #300 cri-o1.35: install check OK (cached)
2026-Sep-11 09:35:30 :: [aarch64] #300 cri-o1.35-debuginfo: install check OK
(cached)
aarch64: cri-o1.36=1.36.5-alt1 post-install unowned files:
/usr/share/fish
/usr/share/fish/completions
2026-Sep-11 09:35:38 :: [aarch64] #400 cri-o1.36: install check OK (cached)
2026-Sep-11 09:35:46 :: [aarch64] #400 cri-o1.36-debuginfo: install check OK
(cached)
2026-Sep-11 09:36:05 :: [x86_64-i586] generated apt indices
2026-Sep-11 09:36:05 :: [x86_64-i586] created next repo
2026-Sep-11 09:36:18 :: [x86_64-i586] dependencies check OK
2026-Sep-11 09:36:20 :: gears inheritance check OK
2026-Sep-11 09:36:20 :: srpm inheritance check OK
girar-check-perms: access to cri-o1.33 DENIED for geochip: project `cri-o1.33'
is not listed in the acl file for repository `p11', and the policy for such
projects in `p11' is to deny
check-subtask-perms: #100: cri-o1.33: needs approvals from members of @maint
and @tester groups
girar-check-perms: access to cri-o1.34 DENIED for geochip: project `cri-o1.34'
is not listed in the acl file for repository `p11', and the policy for such
projects in `p11' is to deny
check-subtask-perms: #200: cri-o1.34: needs approvals from members of @maint
and @tester groups
girar-check-perms: access to cri-o1.35 DENIED for geochip: project `cri-o1.35'
is not listed in the acl file for repository `p11', and the policy for such
projects in `p11' is to deny
check-subtask-perms: #300: cri-o1.35: needs approvals from members of @maint
and @tester groups
girar-check-perms: access to cri-o1.36 DENIED for geochip: project `cri-o1.36'
is not listed in the acl file for repository `p11', and the policy for such
projects in `p11' is to deny
check-subtask-perms: #400: cri-o1.36: needs approvals from members of @maint
and @tester groups
2026-Sep-11 09:36:24 :: acl check FAILED
2026-Sep-11 09:36:36 :: created contents_index files
2026-Sep-11 09:36:46 :: created hash files: aarch64 i586 src x86_64
2026-Sep-11 09:36:49 :: task #432534 for p11 EPERM
_______________________________________________
Sisyphus-incominger mailing list
[email protected]
https://lists.altlinux.org/mailman/listinfo/sisyphus-incominger
