os icon indicating copy to clipboard operation
os copied to clipboard

src/5.5.0-r0: cve remediation

Open octo-sts[bot] opened this issue 1 year ago • 8 comments

src/5.5.0-r0: fix CVE-2024-34158

Advisory data: https://github.com/wolfi-dev/advisories/blob/main/src.advisories.yaml

octo-sts[bot] avatar Sep 18 '24 17:09 octo-sts[bot]

Open AI suggestions to solve the build error:

The error message is: "ERROR: failed to build package. the build environment has been preserved:
INFO   workspace dir: /temp/melange-workspace-311273463
INFO   guest dir: /temp/melange-guest-1491453392
ERRO failed to build package: unable to run package src pipeline: unable to run pipeline: unable to run pipeline: exit status 1
make[1]: *** [Makefile:111: packages/aarch64/src-5.5.0-r1.apk] Error 1
make: *** [Makefile:101: package/src] Error 2
make[1]: Leaving directory '/github/home'
##[error]Process completed with exit code 2."

1. Check logs in /temp/melange-workspace-311273463 and /temp/melange-guest-1491453392.
2. Ensure all dependencies are installed.
3. Verify Makefile targets and paths.
4. Run `make clean` to clear previous build artifacts.
5. Retry the build process.

octo-sts[bot] avatar Sep 18 '24 17:09 octo-sts[bot]

Open AI suggestions to solve the build error:

The error message is: "ERROR: failed to build package. the build environment has been preserved:
INFO   workspace dir: /temp/melange-workspace-354581851
INFO   guest dir: /temp/melange-guest-1444073826
ERRO failed to build package: unable to run package src pipeline: unable to run pipeline: unable to run pipeline: exit status 1
make[1]: *** [Makefile:111: packages/aarch64/src-5.5.0-r1.apk] Error 1
make: *** [Makefile:101: package/src] Error 2
make[1]: Leaving directory '/github/home'
##[error]Process completed with exit code 2."

1. Check logs in /temp/melange-workspace-354581851.
2. Verify dependencies and environment variables in the Makefile.
3. Ensure all required tools and libraries are installed.
4. Run `make clean` to clear previous build artifacts.
5. Retry the build process.

octo-sts[bot] avatar Sep 18 '24 22:09 octo-sts[bot]

Open AI suggestions to solve the build error:

The error message is: "ERROR: failed to build package. the build environment has been preserved:
INFO   workspace dir: /temp/melange-workspace-3665907790
INFO   guest dir: /temp/melange-guest-170545487
ERRO failed to build package: unable to run package src pipeline: unable to run pipeline: unable to run pipeline: exit status 1
make[1]: *** [Makefile:111: packages/aarch64/src-5.5.0-r1.apk] Error 1
make: *** [Makefile:101: package/src] Error 2
make[1]: Leaving directory '/github/home'
##[error]Process completed with exit code 2."

1. Check logs in `/temp/melange-workspace-3665907790` and `/temp/melange-guest-170545487`.
2. Ensure dependencies are installed and up-to-date.
3. Verify Makefile targets and paths.
4. Run `make clean`.
5. Re-run build with increased verbosity.
6. Review recent changes in `packages/aarch64/src-5.5.0-r1.apk` target.

octo-sts[bot] avatar Sep 18 '24 23:09 octo-sts[bot]

Open AI suggestions to solve the build error:

The error message is: "ERROR: failed to build package. the build environment has been preserved:
INFO   workspace dir: /temp/melange-workspace-4160815162
INFO   guest dir: /temp/melange-guest-840242903
ERRO failed to build package: unable to run package src pipeline: unable to run pipeline: unable to run pipeline: exit status 1
make[1]: *** [Makefile:111: packages/aarch64/src-5.5.0-r1.apk] Error 1
make: *** [Makefile:101: package/src] Error 2
make[1]: Leaving directory '/github/home'
##[error]Process completed with exit code 2."

1. Check logs in /temp/melange-workspace-4160815162.
2. Verify dependencies and environment variables in the Makefile.
3. Ensure all required tools and libraries are installed.
4. Run `make clean` to clear previous build artifacts.
5. Retry the build process.

octo-sts[bot] avatar Sep 18 '24 23:09 octo-sts[bot]

This package looks broken for the moment.

hectorj2f avatar Sep 19 '24 10:09 hectorj2f

Open AI suggestions to solve the build error:

The error message is: "ERROR: failed to build package. the build environment has been preserved:
INFO   workspace dir: /temp/melange-workspace-1826167843
INFO   guest dir: /temp/melange-guest-1584913197
ERRO failed to build package: unable to run package src pipeline: unable to run pipeline: unable to run pipeline: exit status 1
make[1]: *** [Makefile:111: packages/aarch64/src-5.5.0-r1.apk] Error 1
make: *** [Makefile:101: package/src] Error 2
make[1]: Leaving directory '/github/home'
##[error]Process completed with exit code 2."

1. Check logs in `/temp/melange-workspace-1826167843` and `/temp/melange-guest-1584913197`.
2. Ensure all dependencies are installed and up-to-date.
3. Verify Makefile targets and paths.
4. Run `make clean` to clear previous build artifacts.
5. Retry the build process.
6. Review recent changes in the repository.

octo-sts[bot] avatar Sep 20 '24 16:09 octo-sts[bot]

Open AI suggestions to solve the build error:

The error message indicates a failure to build the package, with the build environment preserved in the specified workspace and guest directories. Here are some suggestions to fix the error:

1. Check the logs in `/temp/melange-workspace-786891543` for more detailed information.
2. Verify that all dependencies and environment variables are correctly set up.
3. Ensure that the pipeline scripts are executable.
4. Re-run the build process with increased verbosity to gather more information.
5. Review any recent changes in the build scripts or dependencies that might have caused the issue.

octo-sts[bot] avatar Oct 03 '24 22:10 octo-sts[bot]

Filed upstream issue for broken build:

  • https://github.com/sourcegraph/src-cli/issues/1114

mamccorm avatar Oct 06 '24 01:10 mamccorm

As per our discussion during standup, we're going to ignore the update check and merge, and hope a proper PR is opened for the version update, but we'll follow up on that.

hbh7 avatar Oct 21 '24 15:10 hbh7

lgtm

cpanato avatar Oct 21 '24 16:10 cpanato