https://git.altlinux.org/tasks/437759/logs/events.2.1.log
https://packages.altlinux.org/tasks/437759
subtask name aarch64 armh i586 x86_64
#40 roundcube 1:06 1:37 45 42
2026-Oct-23 10:15:03 :: test-only task #437759 for p10 resumed by lav:
2026-Oct-23 10:15:03 :: message: security fixes
#40 build 1.7.5-alt1 from /people/lav/packages/roundcube.git fetched at
2026-Oct-20 00:31:14
#100 removed
2026-Oct-23 10:15:04 :: [i586] #40 roundcube.git 1.7.5-alt1: build start
2026-Oct-23 10:15:04 :: [armh] #40 roundcube.git 1.7.5-alt1: build start
2026-Oct-23 10:15:04 :: [x86_64] #40 roundcube.git 1.7.5-alt1: build start
2026-Oct-23 10:15:04 :: [aarch64] #40 roundcube.git 1.7.5-alt1: build start
2026-Oct-23 10:15:46 :: [x86_64] #40 roundcube.git 1.7.5-alt1: build OK
2026-Oct-23 10:15:49 :: [i586] #40 roundcube.git 1.7.5-alt1: build OK
2026-Oct-23 10:16:10 :: [aarch64] #40 roundcube.git 1.7.5-alt1: build OK
2026-Oct-23 10:16:41 :: [armh] #40 roundcube.git 1.7.5-alt1: build OK
2026-Oct-23 10:16:47 :: 40: build check OK
2026-Oct-23 10:16:48 :: build check OK
2026-Oct-23 10:16:56 :: #40: roundcube.git 1.7.5-alt1: version check OK
2026-Oct-23 10:16:56 :: build version check OK
2026-Oct-23 10:17:03 :: noarch check OK
2026-Oct-23 10:17:05 :: plan: src +1 -1 =19181, noarch +2 -2 =20376
#40 roundcube 1.4.11-alt2 -> 1.7.5-alt1
Tue Oct 20 2026 Vitaly Lipatov <[email protected]> 1.7.5-alt1
- new version 1.7.5
- security: fix IMAP command injection via CRLF in _uid parameter
- security: fix IMAP command injection via CRLF in _flag parameter
- security: fix alias login not qualified by IMAP host
- security: add a size limit to the CSS proxy content processing
- security: fix SSRF filter (is_local_url()) bypass via NAT64
- security: fix remote content blocking bypass via SVG SMIL by attribute
- security: fix remote content blocking bypass via CSS escapes in FuncIRI
- security: fix unsafe attachment content passed to ImageMagick on resize
[...]
2026-Oct-23 10:17:05 :: roundcube: mentions vulnerabilities: CVE-2026-54432
CVE-2026-54433 CVE-2026-54432 CVE-2026-54433 CVE-2025-49113 CVE-2024-42009
CVE-2024-42008 CVE-2024-42010 CVE-2023-43770 CVE-2023-5631
2026-Oct-23 10:17:38 :: patched apt indices
2026-Oct-23 10:17:51 :: created next repo
2026-Oct-23 10:17:58 :: duplicate provides check OK
2026-Oct-23 10:18:35 :: dependencies check OK
2026-Oct-23 10:18:51 :: [x86_64] #40 roundcube: install check OK
2026-Oct-23 10:18:51 :: [i586] #40 roundcube: install check OK
2026-Oct-23 10:18:59 :: [aarch64] #40 roundcube: install check OK
2026-Oct-23 10:19:01 :: [x86_64] #40 roundcube-apache2: install check OK
2026-Oct-23 10:19:02 :: [i586] #40 roundcube-apache2: install check OK
2026-Oct-23 10:19:09 :: [armh] #40 roundcube: install check OK
2026-Oct-23 10:19:16 :: [aarch64] #40 roundcube-apache2: install check OK
2026-Oct-23 10:19:33 :: [armh] #40 roundcube-apache2: install check OK
2026-Oct-23 10:19:35 :: gears inheritance check OK
2026-Oct-23 10:19:35 :: srpm inheritance check OK
girar-check-perms: access to roundcube DENIED for lav: project `roundcube' is
not listed in the acl file for repository `p10', and the policy for such
projects in `p10' is to deny
check-subtask-perms: #40: roundcube: needs approvals from members of @maint and
@tester groups
2026-Oct-23 10:19:37 :: acl check IGNORED
2026-Oct-23 10:19:56 :: created contents_index files
2026-Oct-23 10:20:04 :: created hash files: noarch src
2026-Oct-23 10:20:07 :: task #437759 for p10 TESTED
_______________________________________________
Sisyphus-incominger mailing list
[email protected]
https://lists.altlinux.org/mailman/listinfo/sisyphus-incominger
