https://git.altlinux.org/tasks/429170/logs/events.1.1.log https://packages.altlinux.org/tasks/429170
subtask name aarch64 i586 x86_64 #100 yarn 1:07 40 39 2026-Aug-11 10:44:00 :: task #429170 for p11 started by admsasha: 2026-Aug-11 10:44:00 :: message: fix_CVE-2023-26136,CVE-2025-8262,CVE-2025-8263,CVE-2025-9308 #100 build yarn-1.22.22-alt2.src.rpm from sisyphus 2026-Aug-11 10:44:01 :: [aarch64] #100 yarn-1.22.22-alt2.src.rpm: build start 2026-Aug-11 10:44:01 :: [i586] #100 yarn-1.22.22-alt2.src.rpm: build start 2026-Aug-11 10:44:01 :: [x86_64] #100 yarn-1.22.22-alt2.src.rpm: build start 2026-Aug-11 10:44:40 :: [x86_64] #100 yarn-1.22.22-alt2.src.rpm: build OK 2026-Aug-11 10:44:41 :: [i586] #100 yarn-1.22.22-alt2.src.rpm: build OK 2026-Aug-11 10:45:08 :: [aarch64] #100 yarn-1.22.22-alt2.src.rpm: build OK 2026-Aug-11 10:45:13 :: 100: build check OK 2026-Aug-11 10:45:14 :: build check OK 2026-Aug-11 10:45:19 :: #100: yarn-1.22.22-alt2.src.rpm: version check OK 2026-Aug-11 10:45:20 :: build version check OK 2026-Aug-11 10:45:21 :: noarch check OK 2026-Aug-11 10:45:23 :: plan: src +1 -1 =20597, noarch +1 -1 =21460 #100 yarn 1.22.22-alt1 -> 1.22.22-alt2 Fri Jun 26 2026 Alexey Shabalin <shaba@altlinux> 1.22.22-alt2 - Rebuild the self-contained lib/cli.js bundle from source against a refreshed, security-patched dependency tree instead of shipping the upstream prebuilt bundle (devDependencies reduced, js-yaml bumped to 4.x and mkdirp pinned via prebundle patches, dependencies refreshed via `yarn install`+`yarn audit fix`). - The refreshed dependency tree also pulls newer, fixed versions of other bundled runtime modules; build-only dependencies are no longer shipped. - Fixes: + CVE-2025-8262 ReDoS in explodeHostedGitFragment (yarn hosted-git-resolver) + CVE-2025-9308 ReDoS in RequestManager.setOptions cafile parsing (yarn) [...] 2026-Aug-11 10:45:23 :: yarn: fixes vulnerabilities: CVE-2025-8262 CVE-2025-9308 CVE-2025-8263 CVE-2023-26136 2026-Aug-11 10:45:57 :: patched apt indices 2026-Aug-11 10:46:07 :: created next repo 2026-Aug-11 10:46:19 :: duplicate provides check OK 2026-Aug-11 10:47:01 :: dependencies check OK 2026-Aug-11 10:47:17 :: [i586] #100 yarn: install check OK 2026-Aug-11 10:47:17 :: [x86_64] #100 yarn: install check OK 2026-Aug-11 10:47:26 :: [aarch64] #100 yarn: install check OK 2026-Aug-11 10:47:27 :: gears inheritance check OK 2026-Aug-11 10:47:27 :: srpm inheritance check OK girar-check-perms: access to yarn DENIED for admsasha: project `yarn' is not listed in the acl file for repository `p11', and the policy for such projects in `p11' is to deny check-subtask-perms: #100: yarn: needs approvals from members of @maint and @tester groups 2026-Aug-11 10:47:28 :: acl check FAILED 2026-Aug-11 10:47:51 :: created contents_index files 2026-Aug-11 10:47:58 :: created hash files: noarch src 2026-Aug-11 10:48:01 :: task #429170 for p11 EPERM _______________________________________________ Sisyphus-incominger mailing list [email protected] https://lists.altlinux.org/mailman/listinfo/sisyphus-incominger
