https://git.altlinux.org/tasks/431719/logs/events.1.1.log
https://packages.altlinux.org/tasks/431719
subtask name aarch64 i586 x86_64
#100 thunderbird 58:49 - 43:06
2026-Sep-02 22:14:53 :: task #431719 for p11 started by rauty:
2026-Sep-02 22:14:53 :: message: New version (153.0.3 -> 155.0)
#100 build 155.0-alt1 from /people/rauty/packages/thunderbird.git fetched at
2026-Sep-02 20:31:20
2026-Sep-02 22:14:55 :: [aarch64] #100 thunderbird.git 155.0-alt1: build start
2026-Sep-02 22:14:55 :: [x86_64] #100 thunderbird.git 155.0-alt1: build start
2026-Sep-02 22:14:55 :: [i586] #100 thunderbird.git 155.0-alt1: build start
2026-Sep-02 22:15:12 :: [i586] #100 thunderbird.git 155.0-alt1: build SKIPPED
2026-Sep-02 22:58:01 :: [x86_64] #100 thunderbird.git 155.0-alt1: build OK
2026-Sep-02 23:13:44 :: [aarch64] #100 thunderbird.git 155.0-alt1: build OK
2026-Sep-02 23:14:15 :: 100: build check OK
2026-Sep-02 23:14:16 :: build check OK
2026-Sep-02 23:14:22 :: #100: thunderbird.git 155.0-alt1: version check OK
2026-Sep-02 23:14:22 :: build version check OK
2026-Sep-02 23:16:47 :: noarch check OK
2026-Sep-02 23:16:49 :: plan: src +1 -1 =20652, aarch64 +2 -2 =37070, x86_64 +2
-2 =38085
#100 thunderbird 153.0.3-alt1 -> 155.0-alt1
Wed Sep 02 2026 Ajrat Makhmutov <rauty@altlinux> 155.0-alt1
- New version.
- Fixes:
+ CVE-2026-84639: Uninitialized memory in MIME parsing
+ CVE-2026-84640: One byte overflow read in mail parser
+ CVE-2026-84641: Information disclosure due to malicious IMAP server
response
+ CVE-2026-84642: Allowed UNC hostnames for attachments interpreted as a
regular expression
+ CVE-2026-84118: Use-after-free in the JavaScript: GC component
+ CVE-2026-84119: Sandbox escape due to use-after-free in the DOM:
Navigation component
+ CVE-2026-84120: Use-after-free in the Audio/Video component
[...]
2026-Sep-02 23:16:50 :: thunderbird: fixes vulnerabilities: CVE-2026-84639
CVE-2026-84640 CVE-2026-84641 CVE-2026-84642 CVE-2026-84118 CVE-2026-84119
CVE-2026-84120 CVE-2026-84121 CVE-2026-84122 CVE-2026-84123 CVE-2026-84124
CVE-2026-84125 CVE-2026-84126 CVE-2026-84128 CVE-2026-84129 CVE-2026-84130
CVE-2026-84131 CVE-2026-84132 CVE-2026-84133 CVE-2026-84134 CVE-2026-84136
CVE-2026-84137 CVE-2026-84138 CVE-2026-84139 CVE-2026-84140 CVE-2026-84141
CVE-2026-84142 CVE-2026-84143 CVE-2026-84144 CVE-2026-84145 CVE-2026-75874
CVE-2026-74934 CVE-2026-74935 CVE-2026-74936 CVE-2026-74937 CVE-2026-74938
CVE-2026-74939 CVE-2026-74940 CVE-2026-74941 CVE-2026-74942 CVE-2026-74943
CVE-2026-74944 CVE-2026-74945 CVE-2026-74946 CVE-2026-74947 CVE-2026-74948
CVE-2026-74949 CVE-2026-74950 CVE-2026-74952 CVE-2026-74953 CVE-2026-74954
CVE-2026-74955 CVE-2026-74956 CVE-2026-74957 CVE-2026-74958 CVE-2026-74959
CVE-2026-74960 CVE-2026-74961 CVE-2026-74962 CVE-2026-74963 CVE-2026-74964
CVE-2026-74965 CVE-2026
-74966 CVE-2026-74967 CVE-2026-74968 CVE-2026-74969 CVE-2026-74970
CVE-2026-74971 CVE-2026-74972 CVE-2026-74973 CVE-2026-74974 CVE-2026-74976
CVE-2026-74977 CVE-2026-74978 CVE-2026-74979 CVE-2026-74981 CVE-2026-74982
CVE-2026-74983 CVE-2026-74984 CVE-2026-74985 CVE-2026-74986 CVE-2026-74987
CVE-2026-74988 CVE-2026-74989 CVE-2026-74990
2026-Sep-02 23:17:48 :: patched apt indices
2026-Sep-02 23:18:00 :: created next repo
2026-Sep-02 23:18:12 :: duplicate provides check OK
2026-Sep-02 23:18:56 :: dependencies check OK
2026-Sep-02 23:19:42 :: [x86_64 aarch64] ELF symbols check OK
x86_64: thunderbird=155.0-alt1 post-install unowned files:
/usr/lib64/mozilla
/usr/lib64/mozilla/extensions
/usr/share/icons/hicolor/128x128
/usr/share/icons/hicolor/128x128/apps
/usr/share/icons/hicolor/22x22
/usr/share/icons/hicolor/22x22/apps
/usr/share/icons/hicolor/24x24
/usr/share/icons/hicolor/24x24/apps
/usr/share/icons/hicolor/256x256
/usr/share/icons/hicolor/256x256/apps
/usr/share/icons/hicolor/64x64
/usr/share/icons/hicolor/64x64/apps
/usr/share/icons/hicolor/symbolic
/usr/share/icons/hicolor/symbolic/apps
/usr/share/mozilla
/usr/share/mozilla/extensions
2026-Sep-02 23:20:07 :: [x86_64] #100 thunderbird: install check OK
aarch64: thunderbird=155.0-alt1 post-install unowned files:
/usr/lib64/mozilla
/usr/lib64/mozilla/extensions
/usr/share/icons/hicolor/128x128
/usr/share/icons/hicolor/128x128/apps
/usr/share/icons/hicolor/22x22
/usr/share/icons/hicolor/22x22/apps
/usr/share/icons/hicolor/24x24
/usr/share/icons/hicolor/24x24/apps
/usr/share/icons/hicolor/256x256
/usr/share/icons/hicolor/256x256/apps
/usr/share/icons/hicolor/64x64
/usr/share/icons/hicolor/64x64/apps
/usr/share/icons/hicolor/symbolic
/usr/share/icons/hicolor/symbolic/apps
/usr/share/mozilla
/usr/share/mozilla/extensions
2026-Sep-02 23:20:19 :: [aarch64] #100 thunderbird: install check OK
2026-Sep-02 23:21:06 :: [x86_64] #100 thunderbird-debuginfo: install check OK
2026-Sep-02 23:21:45 :: [aarch64] #100 thunderbird-debuginfo: install check OK
2026-Sep-02 23:22:07 :: [x86_64-i586] generated apt indices
2026-Sep-02 23:22:07 :: [x86_64-i586] created next repo
2026-Sep-02 23:22:21 :: [x86_64-i586] dependencies check OK
2026-Sep-02 23:22:22 :: gears inheritance check OK
2026-Sep-02 23:22:22 :: srpm inheritance check OK
girar-check-perms: access to thunderbird DENIED for rauty: project
`thunderbird' is not listed in the acl file for repository `p11', and the
policy for such projects in `p11' is to deny
check-subtask-perms: #100: thunderbird: needs approvals from members of @maint
and @tester groups
2026-Sep-02 23:22:23 :: acl check FAILED
2026-Sep-02 23:22:37 :: created contents_index files
2026-Sep-02 23:22:50 :: created hash files: aarch64 src x86_64
2026-Sep-02 23:22:54 :: task #431719 for p11 EPERM
_______________________________________________
Sisyphus-incominger mailing list
[email protected]
https://lists.altlinux.org/mailman/listinfo/sisyphus-incominger
