https://git.altlinux.org/tasks/436407/logs/events.1.1.log https://packages.altlinux.org/tasks/436407
subtask name aarch64 i586 x86_64 #100 node-gyp 34 19 18 2026-Oct-11 09:53:06 :: test-only task #436407 for sisyphus started by lav: #100 build 13.1.0-alt1 from /people/lav/packages/node-gyp.git fetched at 2026-Oct-11 09:51:31 2026-Oct-11 09:53:08 :: [aarch64] #100 node-gyp.git 13.1.0-alt1: build start 2026-Oct-11 09:53:08 :: [i586] #100 node-gyp.git 13.1.0-alt1: build start 2026-Oct-11 09:53:08 :: [x86_64] #100 node-gyp.git 13.1.0-alt1: build start 2026-Oct-11 09:53:26 :: [x86_64] #100 node-gyp.git 13.1.0-alt1: build OK 2026-Oct-11 09:53:27 :: [i586] #100 node-gyp.git 13.1.0-alt1: build OK 2026-Oct-11 09:53:42 :: [aarch64] #100 node-gyp.git 13.1.0-alt1: build OK 2026-Oct-11 09:53:45 :: 100: build check OK 2026-Oct-11 09:53:45 :: build check OK 2026-Oct-11 09:53:51 :: #100: node-gyp.git 13.1.0-alt1: version check OK 2026-Oct-11 09:53:51 :: build version check OK 2026-Oct-11 09:53:53 :: noarch check OK 2026-Oct-11 09:53:55 :: plan: src +1 -1 =22924, noarch +1 -1 =23928 #100 node-gyp 12.2.0-alt1 -> 13.1.0-alt1 Sun Oct 11 2026 Vitaly Lipatov <[email protected]> 13.1.0-alt1 - new version 13.1.0 - require node >= 22.22.2 (upstream engines) - security fixes: + CVE-2026-53655, GHSA-vmf3-w455-68vh: fix tar parser interpretation differential via PAX size override on GNU long-name/long-link headers. + CVE-2026-59871, GHSA-w8wr-v893-vjvp: fix tar process crash via PAX numeric path type confusion. + CVE-2026-59873, GHSA-23hp-3jrh-7fpw: fix tar decompression/parse DoS via unlimited input. + CVE-2026-59874, GHSA-8x88-c5mf-7j5w: fix tar infinite loop on negative entry size in archive replace. + CVE-2026-59875, GHSA-gvwx-54wh-qm9j: fix tar uncaught exception DoS via NUL byte in PAX path/linkpath. + CVE-2026-73566, GHSA-r292-9mhp-454m: fix tar stack overflow DoS via crafted long-path archive. [...] 2026-Oct-11 09:53:55 :: node-gyp: mentions vulnerabilities: CVE-2026-53655 CVE-2026-59871 CVE-2026-59873 CVE-2026-59874 CVE-2026-59875 CVE-2026-73566 CVE-2026-33671 CVE-2026-33672 2026-Oct-11 09:54:35 :: patched apt indices 2026-Oct-11 09:54:46 :: created next repo 2026-Oct-11 09:54:58 :: duplicate provides check OK 2026-Oct-11 09:55:46 :: dependencies check OK 2026-Oct-11 09:56:02 :: [x86_64] #100 node-gyp: install check OK 2026-Oct-11 09:56:03 :: [i586] #100 node-gyp: install check OK 2026-Oct-11 09:56:15 :: [aarch64] #100 node-gyp: install check OK 2026-Oct-11 09:56:16 :: gears inheritance check OK 2026-Oct-11 09:56:16 :: srpm inheritance check OK girar-check-perms: access to node-gyp ALLOWED for lav: project leader check-subtask-perms: #100: node-gyp: allowed for lav 2026-Oct-11 09:56:17 :: acl check OK 2026-Oct-11 09:56:43 :: created contents_index files 2026-Oct-11 09:56:50 :: created hash files: noarch src 2026-Oct-11 09:56:54 :: task #436407 for sisyphus TESTED _______________________________________________ Sisyphus-incominger mailing list [email protected] https://lists.altlinux.org/mailman/listinfo/sisyphus-incominger
