https://git.altlinux.org/tasks/archive/done/_426/436407/logs/events.2.1.log https://packages.altlinux.org/tasks/436407
2026-Oct-11 10:40:59 :: task #436407 for sisyphus resumed by lav: #100 build 13.1.0-alt1 from /people/lav/packages/node-gyp.git fetched at 2026-Oct-11 09:51:31 2026-Oct-11 10:41:00 :: [i586] #100 node-gyp.git 13.1.0-alt1: build start 2026-Oct-11 10:41:00 :: [aarch64] #100 node-gyp.git 13.1.0-alt1: build start 2026-Oct-11 10:41:00 :: [x86_64] #100 node-gyp.git 13.1.0-alt1: build start 2026-Oct-11 10:41:07 :: [x86_64] #100 node-gyp.git 13.1.0-alt1: build OK (cached) 2026-Oct-11 10:41:13 :: [i586] #100 node-gyp.git 13.1.0-alt1: build OK (cached) 2026-Oct-11 10:41:15 :: [aarch64] #100 node-gyp.git 13.1.0-alt1: build OK (cached) 2026-Oct-11 10:41:15 :: 100: build check OK (cached) 2026-Oct-11 10:41:16 :: build check OK 2026-Oct-11 10:41:22 :: #100: node-gyp.git 13.1.0-alt1: version check OK 2026-Oct-11 10:41:22 :: build version check OK 2026-Oct-11 10:41:25 :: noarch check OK 2026-Oct-11 10:41:26 :: plan: src +1 -1 =22924, noarch +1 -1 =23928 #100 node-gyp 12.2.0-alt1 -> 13.1.0-alt1 Sun Oct 11 2026 Vitaly Lipatov <[email protected]> 13.1.0-alt1 - new version 13.1.0 - require node >= 22.22.2 (upstream engines) - security fixes: + CVE-2026-53655, GHSA-vmf3-w455-68vh: fix tar parser interpretation differential via PAX size override on GNU long-name/long-link headers. + CVE-2026-59871, GHSA-w8wr-v893-vjvp: fix tar process crash via PAX numeric path type confusion. + CVE-2026-59873, GHSA-23hp-3jrh-7fpw: fix tar decompression/parse DoS via unlimited input. + CVE-2026-59874, GHSA-8x88-c5mf-7j5w: fix tar infinite loop on negative entry size in archive replace. + CVE-2026-59875, GHSA-gvwx-54wh-qm9j: fix tar uncaught exception DoS via NUL byte in PAX path/linkpath. + CVE-2026-73566, GHSA-r292-9mhp-454m: fix tar stack overflow DoS via crafted long-path archive. [...] 2026-Oct-11 10:41:27 :: node-gyp: mentions vulnerabilities: CVE-2026-53655 CVE-2026-59871 CVE-2026-59873 CVE-2026-59874 CVE-2026-59875 CVE-2026-73566 CVE-2026-33671 CVE-2026-33672 2026-Oct-11 10:41:58 :: patched apt indices 2026-Oct-11 10:42:09 :: created next repo 2026-Oct-11 10:42:21 :: duplicate provides check OK 2026-Oct-11 10:43:07 :: dependencies check OK 2026-Oct-11 10:43:16 :: [x86_64] #100 node-gyp: install check OK (cached) 2026-Oct-11 10:43:21 :: [i586] #100 node-gyp: install check OK (cached) 2026-Oct-11 10:43:23 :: [aarch64] #100 node-gyp: install check OK (cached) 2026-Oct-11 10:43:24 :: gears inheritance check OK 2026-Oct-11 10:43:24 :: srpm inheritance check OK girar-check-perms: access to node-gyp ALLOWED for lav: project leader check-subtask-perms: #100: node-gyp: allowed for lav 2026-Oct-11 10:43:24 :: acl check OK 2026-Oct-11 10:43:52 :: created contents_index files 2026-Oct-11 10:44:01 :: created hash files: noarch src 2026-Oct-11 10:44:05 :: task #436407 for sisyphus TESTED 2026-Oct-11 10:44:05 :: task is ready for commit 2026-Oct-11 10:44:12 :: repo clone OK 2026-Oct-11 10:44:12 :: packages update OK 2026-Oct-11 10:44:16 :: [noarch] update OK 2026-Oct-11 10:44:16 :: repo update OK 2026-Oct-11 10:44:27 :: repo save OK 2026-Oct-11 10:44:27 :: src index update OK 2026-Oct-11 10:44:27 :: updated /gears/n/node-gyp.git branch `sisyphus' 2026-Oct-11 10:44:33 :: gears update OK 2026-Oct-11 10:44:33 :: task #436407 for sisyphus DONE _______________________________________________ Sisyphus-incominger mailing list [email protected] https://lists.altlinux.org/mailman/listinfo/sisyphus-incominger
