* [FAILED] Nightly Build of core202 (dfcc64b) for aarch64 on arm64-01.zrh.ipfire.org
@ 2026-05-21 9:48 IPFire Nightly Builder
0 siblings, 0 replies; only message in thread
From: IPFire Nightly Builder @ 2026-05-21 9:48 UTC (permalink / raw)
To: Nightly Builds List
https://nightly.ipfire.org/core202/2026-05-21%2008%3A59%3A06%20%2B0000-dfcc64bd/aarch64
commit dfcc64bd8aac6809d1c058cd891fddb373cb94d5
Author: Michael Tremer <michael.tremer@ipfire.org>
Date: Thu May 21 08:59:06 2026 +0000
unbound: Update to 1.25.1
This release consolidates security fixes for issues reported over
a period of time. There are fixes for CVE-2026-33278,
CVE-2026-42944, CVE-2026-42959, CVE-2026-32792, CVE-2026-40622,
CVE-2026-41292, CVE-2026-42534, CVE-2026-42923, CVE-2026-42960,
CVE-2026-44390 and CVE-2026-44608.
Bug Fixes
Fix CVE-2026-33278, Possible remote code execution during DNSSEC
validation. Thanks to Qifan Zhang, Palo Alto Networks, for the report.
Fix CVE-2026-42944, Heap overflow and crash with multiple nsid,
cookie, padding EDNS options. Thanks to Qifan Zhang, Palo Alto
Networks, for the report.
Fix CVE-2026-42959, Crash during DNSSEC validation of malicious
content. Thanks to Qifan Zhang, Palo Alto Networks, for the report.
Fix CVE-2026-32792, Packet of death with DNSCrypt. Thanks to Andrew
Griffiths from 'calif.io' for the report.
Fix CVE-2026-40622, "Ghost domain name" variant. Thanks to Qifan
Zhang, Palo Alto Networks, for the report.
Fix CVE-2026-41292, Parsing a long list of incoming EDNS options
degrades performance. Thanks to GitHub user 'N0zoM1z0', also Qifan
Zhang from Palo Alto Networks, for the report.
Fix CVE-2026-42534, Jostle logic bypass degrades resolution
performance. Thanks to Qifan Zhang, Palo Alto Networks, for the
report.
Fix CVE-2026-42923, Degradation of service with unbounded NSEC3
hash calculations. Thanks to Qifan Zhang, Palo Alto Networks, for
the report.
Fix CVE-2026-42960, Possible cache poisoning attack while following
delegation. Thanks to TaoFei Guo from Peking University, Yang Luo
and JianJun Chen, Tsinghua University, for the report.
Fix CVE-2026-44390, Unbounded name compression in certain cases
causes degradation of service. Thanks to Qifan Zhang, Palo Alto
Networks, for the report.
Fix CVE-2026-44608, Use after free and crash in RPZ code. Thanks
to Qifan Zhang, Palo Alto Networks, for the report.
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
https://git.ipfire.org/?p=ipfire-2.x.git;a=shortlog;h=dfcc64bd8aac6809d1c058cd891fddb373cb94d5
Packaged toolchain compilation
Building IPFire
stage2 [ 1 ][ DONE ]
linux (6.18.32) HEADERS=1 [ 27 ][ DONE ]
man-pages (6.18) [ 15 ][ DONE ]
glibc (2.43) [ 4:59 ][ DONE ]
tzdata (2026b) [ 2 ][ DONE ]
cleanup-toolchain [ 0 ][ DONE ]
zlib-ng (2.3.3) [ 6 ][ DONE ]
zstd (1.5.7) [ 1 ][ DONE ]
autoconf (2.73) [ 1 ][ DONE ]
autoconf-archive (2024.10.16) [ 3 ][ DONE ]
automake (1.18.1) [ 2 ][ DONE ]
help2man (1.49.3) [ 1 ][ DONE ]
libtool (2.5.4) [ 7 ][ DONE ]
binutils (2.46.0) [ 53 ][ DONE ]
gmp (6.3.0) [ 30 ][ DONE ]
mpfr (4.2.2) [ 16 ][ DONE ]
libmpc (1.4.1) [ 6 ][ DONE ]
pkg-config (0.29.2) [ 24 ][ DONE ]
libxcrypt (4.5.2) [ 17 ][ DONE ]
file (5.47) [ 7 ][ DONE ]
gcc (15.2.0) [ 5:12 ][ DONE ]
attr (2.5.2) [ 5 ][ DONE ]
acl (2.3.2) [ 7 ][ DONE ]
sed (4.10) [ 36 ][ DONE ]
berkeley (5.3.28) [ 24 ][ DONE ]
coreutils (9.10) [ 1:09 ][ DONE ]
iana-etc (20260409) [ 0 ][ DONE ]
m4 (1.4.21) [ 41 ][ DONE ]
bison (3.8.2) [ 30 ][ DONE ]
ncurses (6.6) [ 29 ][ DONE ]
perl (5.36.0) [ 1:54 ][ DONE ]
readline (8.3) [ 6 ][ DONE ]
bzip2 (1.0.8) [ 1 ][ DONE ]
xz (5.8.3) [ 13 ][ DONE ]
lzip (1.25) [ 0 ][ DONE ]
pcre (8.45) [ 8 ][ DONE ]
pcre2 (10.47) [ 8 ][ DONE ]
gettext (1.0) [ 3:36 ][ DONE ]
bash (5.3) [ 29 ][ DONE ]
diffutils (3.12) [ 37 ][ DONE ]
ed (1.22.2) [ 0 ][ DONE ]
findutils (4.10.0) [ 40 ][ DONE ]
flex (2.6.4) [ 9 ][ DONE ]
gawk (5.3.2) [ 14 ][ DONE ]
go (1.20.4) [ 21 ][ DONE ]
grep (3.12) [ 36 ][ DONE ]
groff (1.24.1) [ 53 ][ DONE ]
gperf (3.3) [ 10 ][ DONE ]
gzip (1.14) [ 17 ][ DONE ]
hostname (3.20) [ 0 ][ DONE ]
whois (5.6.5) [ 1 ][ DONE ]
kbd (2.9.0) [ 14 ][ DONE ]
less (692) [ 4 ][ DONE ]
procps (4.0.6) [ 19 ][ DONE ]
make (4.4.1) [ 15 ][ DONE ]
libpipeline (1.5.8) [ 20 ][ DONE ]
man (2.13.1) [ 55 ][ DONE ]
net-tools (2.10) [ 1 ][ DONE ]
patch (2.8) [ 22 ][ DONE ]
psmisc (23.7) [ 6 ][ DONE ]
shadow (4.18.0) [ 16 ][ DONE ]
sysklogd (2.7.2) [ 3 ][ DONE ]
sysvinit (3.14) [ 1 ][ DONE ]
tar (1.35) [ 34 ][ DONE ]
texinfo (7.3) [ 48 ][ DONE ]
util-linux (2.41.2) [ 33 ][ DONE ]
vim (9.2.0089) [ 18 ][ DONE ]
e2fsprogs (1.47.3) [ 13 ][ DONE ]
jq (1.8.1) [ 10 ][ DONE ]
configroot [ 1 ][ DONE ]
initscripts [ 1 ][ DONE ]
backup [ 0 ][ DONE ]
rust (1.92.0) [ 17 ][ DONE ]
openssl (3.6.2) [ 2:43 ][ DONE ]
popt (1.19) [ 5 ][ DONE ]
libedit (20251016-3.1) [ 6 ][ DONE ]
expat (2.8.0) [ 6 ][ DONE ]
libffi (3.5.2) [ 6 ][ DONE ]
gdbm (1.26) [ 12 ][ DONE ]
sqlite (3530000) [ 56 ][ DONE ]
python3 (3.10.8) [ 52 ][ DONE ]
python3-wheel (0.45.1) [ 1 ][ DONE ]
python3-toml (0.10.2) [ 0 ][ DONE ]
python3-setuptools (80.9.0) [ 3 ][ DONE ]
python3-pyproject2setuppy (22) [ 0 ][ DONE ]
python3-packaging (25.0) [ 1 ][ DONE ]
python3-pep517 (0.13.0) [ 1 ][ DONE ]
python3-build (0.8.0) [ 1 ][ DONE ]
python3-install (0.0.3) [ 0 ][ DONE ]
python3-urllib3 (1.26.12) [ 1 ][ DONE ]
python3-charset-normalizer (2.1.1) [ 1 ][ DONE ]
python3-idna (3.4) [ 1 ][ DONE ]
python3-certifi (2022.9.24) [ 0 ][ DONE ]
python3-requests (2.28.1) [ 1 ][ DONE ]
python3-docutils (0.19) [ 2 ][ DONE ]
python3-flit (3.7.1) [ 2 ][ DONE ]
python3-more_itertools (10.7.0) [ 0 ][ DONE ]
cython (3.2.4) [ 23 ][ DONE ]
ninja (1.13.2) [ 1 ][ DONE ]
meson (1.10.1) [ 2 ][ DONE ]
pam (1.7.2) [ 8 ][ DONE ]
libcap (2.78) [ 2 ][ DONE ]
libcap-ng (0.9.3) [ 14 ][ DONE ]
libpcap (1.10.6) [ 5 ][ DONE ]
ppp (2.5.2) [ 18 ][ DONE ]
pptp (1.10.0) [ 0 ][ DONE ]
unzip (60) [ 3 ][ DONE ]
which (2.23) [ 3 ][ DONE ]
bc (1.08.1) [ 3 ][ DONE ]
cpio (2.15) [ 27 ][ DONE ]
libaio (0.3.113) [ 1 ][ DONE ]
freetype (2.14.3) [ 5 ][ DONE ]
jansson (2.15.0) [ 5 ][ DONE ]
libmnl (1.0.5) [ 3 ][ DONE ]
libnfnetlink (1.0.2) [ 3 ][ DONE ]
libnetfilter_queue (1.0.5) [ 4 ][ DONE ]
libnetfilter_conntrack (1.1.1) [ 4 ][ DONE ]
libnetfilter_cthelper (1.0.1) [ 4 ][ DONE ]
libnetfilter_cttimeout (1.0.1) [ 3 ][ DONE ]
iptables (1.8.13) [ 7 ][ DONE ]
iproute2 (7.0.0) [ 3 ][ DONE ]
screen (5.0.1) [ 5 ][ DONE ]
elfutils (0.194) [ 12 ][ DONE ]
libconfig (1.8.1) [ 17 ][ DONE ]
curl (8.20.0) [ 33 ][ DONE ]
libarchive (3.8.7) [ 28 ][ DONE ]
cmake (4.1.1) [ 24 ][ DONE ]
json-c (0.18) [ 8 ][ DONE ]
tcl (8.6.14) [ 29 ][ DONE ]
expect (5.45.4) [ 8 ][ DONE ]
python3-MarkupSafe (2.1.3) [ 1 ][ DONE ]
python3-Jinja2 (3.1.2) [ 1 ][ DONE ]
kmod (34.2) [ 3 ][ DONE ]
systemd (260.1) [ 21 ][ DONE ]
libusb (1.0.29) [ 5 ][ DONE ]
mdadm (4.6) [ 1 ][ DONE ]
dracut-ng (108) [ 2 ][ DONE ]
lvm2 (2.03.40) [ 11 ][ DONE ]
multipath-tools (0.8.9) [ 0 ][ DONE ]
glib (2.88.1) [ 26 ][ DONE ]
json-glib (1.10.6) [ 3 ][ DONE ]
libgudev (238) [ 2 ][ DONE ]
libgpg-error (1.58) [ 14 ][ DONE ]
libgcrypt (1.12.2) [ 20 ][ DONE ]
libassuan (3.0.2) [ 9 ][ DONE ]
nettle (3.10.2) [ 9 ][ DONE ]
libsodium (1.0.22) [ 15 ][ DONE ]
libevent2 (2.1.12-stable) [ 13 ][ DONE ]
apr (1.7.6) [ 22 ][ DONE ]
aprutil (1.6.3) [ 5 ][ DONE ]
unbound (1.25.1)
----------------------------------------------------------------------
Libraries have been installed in:
/usr/lib
If you ever happen to want to link against installed libraries
in a given directory, LIBDIR, you must either use libtool, and
specify the full pathname of the library, or use the '-LLIBDIR'
flag during linking and do at least one of the following:
- add LIBDIR to the 'LD_LIBRARY_PATH' environment variable
during execution
- add LIBDIR to the 'LD_RUN_PATH' environment variable
during linking
- use the '-Wl,-rpath -Wl,LIBDIR' linker flag
- have your system administrator add LIBDIR to '/etc/ld.so.conf'
See any operating system documentation about shared libraries for
more information, such as the ld(1) and ld.so(8) manual pages.
----------------------------------------------------------------------
/usr/bin/install -c -m 644 aprutil.exp /usr/lib
/usr/bin/install -c -m 755 apu-config.out /usr/bin/apu-1-config
make[1]: Leaving directory '/usr/src/apr-util-1.6.3'
Updating linker cache...
Install done; saving file list to /usr/src/log/apr-util-1.6.3 ...
make: Leaving directory '/usr/src/lfs'
May 21 09:48:23: Building unbound make: Entering directory '/build/nightly/core/lfs'
-e Download: https://source.ipfire.org/source-2.x/unbound-1.25.1.tar.gz
2026-05-21 09:48:31 URL:https://source.ipfire.org/source-2.x/unbound-1.25.1.tar.gz [6832247/6832247] -> "/tmp/unbound-1.25.1.tar.gz" [1]
make: *** [unbound:61: /build/nightly/core/cache/unbound-1.25.1.tar.gz] Error 1
make: Leaving directory '/build/nightly/core/lfs'
ERROR: Downloading unbound [ FAIL ]
Check /build/nightly/core/log_aarch64/_build.ipfire.log for errors if applicable[ FAIL ]
^ permalink raw reply [flat|nested] only message in threadonly message in thread, other threads:[~2026-05-21 9:48 UTC | newest] Thread overview: (only message) (download: mbox.gz / follow: Atom feed) -- links below jump to the message on this page -- 2026-05-21 9:48 [FAILED] Nightly Build of core202 (dfcc64b) for aarch64 on arm64-01.zrh.ipfire.org IPFire Nightly Builder
This is a public inbox, see mirroring instructions for how to clone and mirror all data and code used for this inbox