https://git.altlinux.org/tasks/434978/logs/events.2.1.log https://packages.altlinux.org/tasks/434978
2026-Oct-02 12:04:50 :: task #434978 for p11 resumed by lav: 2026-Oct-02 12:04:50 :: message: CVE fixes #100 build 4.0.0-alt1 from /people/lav/packages/python3-module-oauthlib.git fetched at 2026-Oct-01 08:39:49 2026-Oct-02 12:04:51 :: [x86_64] #100 python3-module-oauthlib.git 4.0.0-alt1: build start 2026-Oct-02 12:04:51 :: [aarch64] #100 python3-module-oauthlib.git 4.0.0-alt1: build start 2026-Oct-02 12:04:51 :: [i586] #100 python3-module-oauthlib.git 4.0.0-alt1: build start 2026-Oct-02 12:05:01 :: [i586] #100 python3-module-oauthlib.git 4.0.0-alt1: build OK (cached) 2026-Oct-02 12:05:02 :: [x86_64] #100 python3-module-oauthlib.git 4.0.0-alt1: build OK (cached) 2026-Oct-02 12:05:08 :: [aarch64] #100 python3-module-oauthlib.git 4.0.0-alt1: build OK (cached) 2026-Oct-02 12:05:08 :: 100: build check OK (cached) 2026-Oct-02 12:05:09 :: build check OK 2026-Oct-02 12:05:15 :: #100: python3-module-oauthlib.git 4.0.0-alt1: version check OK 2026-Oct-02 12:05:15 :: build version check OK 2026-Oct-02 12:05:16 :: noarch check OK 2026-Oct-02 12:05:18 :: plan: src +1 -1 =20701, noarch +1 -1 =21598 #100 python3-module-oauthlib 3.3.1-alt1 -> 4.0.0-alt1 Thu Oct 01 2026 Vitaly Lipatov <[email protected]> 4.0.0-alt1 - new version 4.0.0 (with rpmrb script) - (GHSA-hj66-6f7g-4r5v, CVE-2026-49264) SECURITY: unsafe JSONP callback injection in RevocationEndpoint (JSONP support removed) - (GHSA-xpv3-w29h-x7cv, CVE-2026-49265) SECURITY: timing attack in PKCE code_verifier comparison - enable %check 2026-Oct-02 12:05:18 :: python3-module-oauthlib: mentions vulnerabilities: CVE-2026-49264 CVE-2026-49265 2026-Oct-02 12:05:53 :: patched apt indices 2026-Oct-02 12:06:06 :: created next repo 2026-Oct-02 12:06:19 :: duplicate provides check OK 2026-Oct-02 12:07:05 :: dependencies check OK 2026-Oct-02 12:07:17 :: [i586] #100 python3-module-oauthlib: install check OK (cached) 2026-Oct-02 12:07:17 :: [x86_64] #100 python3-module-oauthlib: install check OK (cached) 2026-Oct-02 12:07:24 :: [aarch64] #100 python3-module-oauthlib: install check OK (cached) 2026-Oct-02 12:07:25 :: gears inheritance check OK 2026-Oct-02 12:07:25 :: srpm inheritance check OK girar-check-perms: access to python3-module-oauthlib DENIED for lav: project `python3-module-oauthlib' is not listed in the acl file for repository `p11', and the policy for such projects in `p11' is to deny check-subtask-perms: #100: python3-module-oauthlib: needs approvals from members of @maint and @tester groups 2026-Oct-02 12:07:27 :: acl check FAILED 2026-Oct-02 12:07:50 :: created contents_index files 2026-Oct-02 12:07:58 :: created hash files: noarch src 2026-Oct-02 12:08:01 :: task #434978 for p11 EPERM _______________________________________________ Sisyphus-incominger mailing list [email protected] https://lists.altlinux.org/mailman/listinfo/sisyphus-incominger
