https://git.altlinux.org/tasks/390836/logs/events.5.1.log
https://packages.altlinux.org/tasks/390836
subtask name aarch64 i586 x86_64
#500 firefox-esr 51:36 - 26:30
2025-Aug-22 12:24:48 :: test-only task #390836 for sisyphus resumed by pav:
#100 removed
#200 removed
#300 removed
#400 removed
#500 build firefox-esr/128.13.0-alt1 from /people/pav/packages/firefox-esr.git
fetched at 2025-Aug-22 12:24:06
2025-Aug-22 12:24:50 :: [i586] #500 firefox-esr.git firefox-esr/128.13.0-alt1:
build start
2025-Aug-22 12:24:50 :: [aarch64] #500 firefox-esr.git
firefox-esr/128.13.0-alt1: build start
2025-Aug-22 12:24:50 :: [x86_64] #500 firefox-esr.git
firefox-esr/128.13.0-alt1: build start
2025-Aug-22 12:25:14 :: [i586] #500 firefox-esr.git firefox-esr/128.13.0-alt1:
build SKIPPED
2025-Aug-22 12:51:20 :: [x86_64] #500 firefox-esr.git
firefox-esr/128.13.0-alt1: build OK
2025-Aug-22 13:16:26 :: [aarch64] #500 firefox-esr.git
firefox-esr/128.13.0-alt1: build OK
2025-Aug-22 13:16:57 :: #500: firefox-esr.git firefox-esr/128.13.0-alt1: build
check OK
2025-Aug-22 13:16:58 :: build check OK
2025-Aug-22 13:19:05 :: noarch check OK
2025-Aug-22 13:19:07 :: plan: src +1 -1 =20535, aarch64 +3 -3 =36315, i586 +0
-3 =34899, x86_64 +3 -3 =37141
#500 firefox-esr 128.10.1-alt1 -> 128.13.0-alt1
Sat Jul 26 2025 Pavel Vasenkov <pav@altlinux> 128.13.0-alt1
- New ESR version.
- Security fixes:
+ CVE-2025-8027 JavaScript engine only wrote partial return value to stack
+ CVE-2025-8028 Large branch table could lead to truncated instruction
+ CVE-2025-8029 javascript: URLs executed on object and embed tags
+ CVE-2025-8030 Potential user-assisted code execution in "Copy as cURL"
command
+ CVE-2025-8031 Incorrect URL stripping in CSP reports
+ CVE-2025-8032 XSLT documents could bypass CSP
+ CVE-2025-8033 Incorrect JavaScript state machine for generators
[...]
2025-Aug-22 13:19:08 :: firefox-esr: mentions vulnerabilities: CVE-2025-8027
CVE-2025-8028 CVE-2025-8029 CVE-2025-8030 CVE-2025-8031 CVE-2025-8032
CVE-2025-8033 CVE-2025-8034 CVE-2025-8035 CVE-2025-6424 CVE-2025-6425
CVE-2025-6426 CVE-2025-6429 CVE-2025-6430 CVE-2025-5283 CVE-2025-5263
CVE-2025-5264 CVE-2025-5265 CVE-2025-5266 CVE-2025-5267 CVE-2025-5268
CVE-2025-5269
2025-Aug-22 13:20:08 :: patched apt indices
2025-Aug-22 13:20:19 :: created next repo
2025-Aug-22 13:20:30 :: duplicate provides check OK
i586: NEW unmet dependencies detected:
alt-mate-ayatana-settings#0.01-alt2:sisyphus+375381.100.1.1@1739978022
firefox-esr
gnome-kiosk-search-appliance#48.0-alt1.1:sisyphus+389151.200.1.1@1751826043
/usr/bin/firefox
kde-small#25.07.1-alt1:sisyphus+390539.100.1.1@1753184990
/usr/bin/x-www-browser
ACLs of affected packages (3):
alt-mate-ayatana-settings snk @qa
gnome-kiosk aris
kde-set zerg
2025-Aug-22 13:21:17 :: unmets: i586 +3 -0 =3
2025-Aug-22 13:21:17 :: dependencies check FAILED
2025-Aug-22 13:21:17 :: task #390836 for sisyphus FAILED
_______________________________________________
Sisyphus-incominger mailing list
[email protected]
https://lists.altlinux.org/mailman/listinfo/sisyphus-incominger
