https://git.altlinux.org/tasks/437759/logs/events.3.1.log https://packages.altlinux.org/tasks/437759
2026-Oct-24 15:46:20 :: task #437759 for p10 resumed by lav: 2026-Oct-24 15:46:20 :: message: security fixes #40 build 1.7.5-alt1 from /people/lav/packages/roundcube.git fetched at 2026-Oct-20 00:31:14 #100 removed 2026-Oct-24 15:46:22 :: [x86_64] #40 roundcube.git 1.7.5-alt1: build start 2026-Oct-24 15:46:22 :: [i586] #40 roundcube.git 1.7.5-alt1: build start 2026-Oct-24 15:46:22 :: [armh] #40 roundcube.git 1.7.5-alt1: build start 2026-Oct-24 15:46:22 :: [aarch64] #40 roundcube.git 1.7.5-alt1: build start 2026-Oct-24 15:46:31 :: [i586] #40 roundcube.git 1.7.5-alt1: build OK (cached) 2026-Oct-24 15:46:32 :: [x86_64] #40 roundcube.git 1.7.5-alt1: build OK (cached) 2026-Oct-24 15:46:37 :: [aarch64] #40 roundcube.git 1.7.5-alt1: build OK (cached) 2026-Oct-24 15:46:44 :: [armh] #40 roundcube.git 1.7.5-alt1: build OK (cached) 2026-Oct-24 15:46:45 :: 40: build check OK (cached) 2026-Oct-24 15:46:46 :: build check OK 2026-Oct-24 15:46:54 :: #40: roundcube.git 1.7.5-alt1: version check OK 2026-Oct-24 15:46:54 :: build version check OK 2026-Oct-24 15:47:00 :: noarch check OK 2026-Oct-24 15:47:02 :: plan: src +1 -1 =19181, noarch +2 -2 =20375 #40 roundcube 1.4.11-alt2 -> 1.7.5-alt1 Tue Oct 20 2026 Vitaly Lipatov <[email protected]> 1.7.5-alt1 - new version 1.7.5 - security: fix IMAP command injection via CRLF in _uid parameter - security: fix IMAP command injection via CRLF in _flag parameter - security: fix alias login not qualified by IMAP host - security: add a size limit to the CSS proxy content processing - security: fix SSRF filter (is_local_url()) bypass via NAT64 - security: fix remote content blocking bypass via SVG SMIL by attribute - security: fix remote content blocking bypass via CSS escapes in FuncIRI - security: fix unsafe attachment content passed to ImageMagick on resize [...] 2026-Oct-24 15:47:02 :: roundcube: mentions vulnerabilities: CVE-2026-54432 CVE-2026-54433 CVE-2026-54432 CVE-2026-54433 CVE-2025-49113 CVE-2024-42009 CVE-2024-42008 CVE-2024-42010 CVE-2023-43770 CVE-2023-5631 2026-Oct-24 15:47:29 :: patched apt indices 2026-Oct-24 15:47:40 :: created next repo 2026-Oct-24 15:47:47 :: duplicate provides check OK 2026-Oct-24 15:48:24 :: dependencies check OK 2026-Oct-24 15:48:35 :: [i586] #40 roundcube: install check OK (cached) 2026-Oct-24 15:48:35 :: [x86_64] #40 roundcube: install check OK (cached) 2026-Oct-24 15:48:39 :: [i586] #40 roundcube-apache2: install check OK (cached) 2026-Oct-24 15:48:39 :: [x86_64] #40 roundcube-apache2: install check OK (cached) 2026-Oct-24 15:48:41 :: [aarch64] #40 roundcube: install check OK (cached) 2026-Oct-24 15:48:48 :: [aarch64] #40 roundcube-apache2: install check OK (cached) 2026-Oct-24 15:48:48 :: [armh] #40 roundcube: install check OK (cached) 2026-Oct-24 15:48:59 :: [armh] #40 roundcube-apache2: install check OK (cached) 2026-Oct-24 15:49:00 :: gears inheritance check OK 2026-Oct-24 15:49:01 :: srpm inheritance check OK girar-check-perms: access to roundcube DENIED for lav: project `roundcube' is not listed in the acl file for repository `p10', and the policy for such projects in `p10' is to deny check-subtask-perms: #40: roundcube: needs approvals from members of @maint and @tester groups 2026-Oct-24 15:49:02 :: acl check FAILED 2026-Oct-24 15:49:23 :: created contents_index files 2026-Oct-24 15:49:32 :: created hash files: noarch src 2026-Oct-24 15:49:35 :: task #437759 for p10 EPERM _______________________________________________ Sisyphus-incominger mailing list [email protected] https://lists.altlinux.org/mailman/listinfo/sisyphus-incominger
