https://git.altlinux.org/tasks/438946/logs/events.1.1.log https://packages.altlinux.org/tasks/438946
subtask name aarch64 i586 x86_64 #100 libcurl4-openssl 1:43 44 41 2026-Oct-28 21:06:27 :: test-only task #438946 for sisyphus started by lav: #100 build 8.23.0-alt1 from /people/lav/packages/libcurl4-openssl.git fetched at 2026-Oct-28 21:06:25 2026-Oct-28 21:06:29 :: [i586] #100 libcurl4-openssl.git 8.23.0-alt1: build start 2026-Oct-28 21:06:29 :: [x86_64] #100 libcurl4-openssl.git 8.23.0-alt1: build start 2026-Oct-28 21:06:29 :: [aarch64] #100 libcurl4-openssl.git 8.23.0-alt1: build start 2026-Oct-28 21:07:10 :: [x86_64] #100 libcurl4-openssl.git 8.23.0-alt1: build OK 2026-Oct-28 21:07:13 :: [i586] #100 libcurl4-openssl.git 8.23.0-alt1: build OK 2026-Oct-28 21:08:12 :: [aarch64] #100 libcurl4-openssl.git 8.23.0-alt1: build OK 2026-Oct-28 21:08:15 :: 100: build check OK 2026-Oct-28 21:08:16 :: build check OK 2026-Oct-28 21:08:24 :: #100: libcurl4-openssl.git 8.23.0-alt1: version check OK 2026-Oct-28 21:08:24 :: build version check OK 2026-Oct-28 21:08:27 :: noarch check OK 2026-Oct-28 21:08:29 :: plan: src +1 -1 =23100, aarch64 +2 -2 =40873, i586 +2 -2 =37878, x86_64 +2 -2 =41904 #100 libcurl4-openssl 8.22.0-alt1 -> 8.23.0-alt1 Wed Oct 28 2026 Vitaly Lipatov <[email protected]> 8.23.0-alt1 - new version 8.23.0 - fixes: + CVE-2026-107928: info leak uploading over WebSockets with GnuTLS + CVE-2026-107929: local interface connection reuse mixup + CVE-2026-86412: server-set cookie erases cookie jar + CVE-2026-86413: negotiate credentials sent to redirected origin + CVE-2026-86414: leaking host credentials to HTTP proxy + CVE-2026-86415: auto client cert connection reuse mixup + CVE-2026-87861: cross-origin reuse of a negotiate connection [...] 2026-Oct-28 21:08:30 :: libcurl4-openssl: fixes vulnerabilities: CVE-2026-107928 CVE-2026-107929 CVE-2026-86412 CVE-2026-86413 CVE-2026-86414 CVE-2026-86415 CVE-2026-87861 CVE-2026-87862 CVE-2026-87863 CVE-2026-87865 CVE-2026-87866 CVE-2026-92386 CVE-2026-92387 CVE-2026-92388 CVE-2026-92389 CVE-2026-92390 CVE-2026-92391 CVE-2026-92392 CVE-2026-94265 CVE-2026-94266 2026-Oct-28 21:09:24 :: patched apt indices 2026-Oct-28 21:09:37 :: created next repo 2026-Oct-28 21:09:50 :: duplicate provides check OK 2026-Oct-28 21:10:39 :: dependencies check OK 2026-Oct-28 21:11:24 :: [x86_64 i586 aarch64] ELF symbols check OK 2026-Oct-28 21:11:35 :: [i586] #100 libcurl4-openssl: install check OK 2026-Oct-28 21:11:36 :: [x86_64] #100 libcurl4-openssl: install check OK 2026-Oct-28 21:11:41 :: [i586] #100 libcurl4-openssl-debuginfo: install check OK 2026-Oct-28 21:11:42 :: [x86_64] #100 libcurl4-openssl-debuginfo: install check OK 2026-Oct-28 21:11:46 :: [aarch64] #100 libcurl4-openssl: install check OK 2026-Oct-28 21:12:00 :: [aarch64] #100 libcurl4-openssl-debuginfo: install check OK 2026-Oct-28 21:12:01 :: [x86_64-i586] plan: #1 +1 -1 =12750 2026-Oct-28 21:12:15 :: [x86_64-i586] arepo build OK 2026-Oct-28 21:12:34 :: [x86_64-i586] generated apt indices 2026-Oct-28 21:12:36 :: [x86_64-i586] created next repo 2026-Oct-28 21:12:51 :: [x86_64-i586] dependencies check OK 2026-Oct-28 21:12:52 :: gears inheritance check OK 2026-Oct-28 21:12:52 :: srpm inheritance check OK girar-check-perms: access to libcurl4-openssl ALLOWED for lav: project leader check-subtask-perms: #100: libcurl4-openssl: allowed for lav 2026-Oct-28 21:12:53 :: acl check OK 2026-Oct-28 21:13:10 :: created contents_index files 2026-Oct-28 21:13:22 :: created hash files: aarch64 i586 src x86_64-i586 x86_64 2026-Oct-28 21:13:26 :: task #438946 for sisyphus TESTED _______________________________________________ Sisyphus-incominger mailing list [email protected] https://lists.altlinux.org/mailman/listinfo/sisyphus-incominger
