Skip to content

kserve-modelmesh/0.12.0-r12: cve remediation#61860

Closed
octo-sts[bot] wants to merge 1 commit into
mainfrom
cve-kserve-modelmesh-0.12.0-r12-aae6647fcfc8585ec1f565eb1891bc20
Closed

kserve-modelmesh/0.12.0-r12: cve remediation#61860
octo-sts[bot] wants to merge 1 commit into
mainfrom
cve-kserve-modelmesh-0.12.0-r12-aae6647fcfc8585ec1f565eb1891bc20

kserve-modelmesh/0.12.0-r12: fix GHSA-4g8c-wm8x-jfhw

7b4558d
Select commit
Loading
Failed to load commit list.
Chainguard Internal / elastic-build (eco-2-28) completed Aug 7, 2025 in 3m 55s

Failed to build APKs

Build ID: 1f31b69b-5b3c-4a3b-b54b-16fe193eab1c
Error: failed to build kserve-modelmesh: building group: pod failed: build failed
did not test because building group: pod failed: build failed

Details

x86_64 Logs

Click to expand
installing wolfi-baselayout (20230201-r23)
installing ca-certificates-bundle (20250619-r5)
installing glibc-locale-posix (2.41-r56)
installing glibc (2.41-r56)
installing ld-linux (2.41-r56)
installing alsa-lib (1.2.14-r2)
installing libstdc++ (15.1.0-r4)
installing libzstd1 (1.5.7-r3)
installing binutils (2.45-r0)
installing libquadmath (15.1.0-r4)
installing libstdc++-14 (14.3.0-r5)
installing libstdc++-14-dev (14.3.0-r5)
installing posix-cc-wrappers (1-r7)
installing gmp (6.3.0-r8)
installing isl (0.27-r4)
installing mpfr (4.2.2-r2)
installing mpc (1.3.1-r7)
installing zlib (1.3.1-r51)
installing libxcrypt (4.4.38-r3)

aarch64 Logs

Click to expand
parsed env
configuring puller identity "e2fa069c57acc83f3f2748a8bed50e44dff064dc/dcb8fb2f15475910"...
running command chainctl [auth login --audience apk.cgr.dev --identity e2fa069c57acc83f3f2748a8bed50e44dff064dc/dcb8fb2f15475910]
Successfully exchanged token.
Valid! Id: e2fa069c57acc83f3f2748a8bed50e44dff064dc/dcb8fb2f15475910
Updates are available for chainctl (current version: 0.2.114; latest: 0.2.116). To install, please run:
    $ chainctl update
command "chainctl" completed successfully
puller identity configured successfully
puller identity configured successfully
running build...
running command melange [build kserve-modelmesh.yaml --gcplog --source-dir kserve-modelmesh --arch aarch64 --arch=aarch64 --env-file=build-aarch64.env --namespace=chainguard --pipeline-dir=pipelines --out-dir=./packages/ --runner=bubblewrap --repository-append=https://apk.cgr.dev/chainguard --repository-append=https://apk.cgr.dev/chainguard-private --repository-append=https://apk.cgr.dev/chainguard-2.28 --repository-append=https://apk.cgr.dev/chainguard-2.28-presubmit/8bb6afb8dbabec97ab6b7729f48d9227537b3c5a --package-append=ct-manylinux-2.28 --package-append=gcc-14-default --repository-append=https://apk.cgr.dev/chainguard-2.28-presubmit/8bb6afb8dbabec97ab6b7729f48d9227537b3c5a --git-repo-url=https://github.com/wolfi-dev/os]
melange v0.30.4+dirty is building:
populating workspace /tmp/melange-workspace-3803034400 from kserve-modelmesh
image configuration:
  contents:
    build repositories: [https://apk.cgr.dev/chainguard https://apk.cgr.dev/chainguard-2.28 https://apk.cgr.dev/chainguard-2.28-presubmit/8bb6afb8dbabec97ab6b7729f48d9227537b3c5a https://apk.cgr.dev/chainguard-private]
    runtime repositories: []
    repositories: []
    keyring:      []
    packages:     [alsa-lib=1.2.14-r2 binutils=2.45-r0 build-base=1-r8 busybox=1.37.0-r48 ca-certificates-bundle=20250619-r5 ca-certificates=20250619-r5 ct-manylinux-2.28=1.27.0-r1 curl=8.15.0-r4 cyrus-sasl=2.1.28-r44 fontconfig-config=2.17.1-r1 freetype=2.13.3-r2 gcc-14-default=14.3.0-r5 gcc-14=14.3.0-r5 gdbm=1.26-r1 gfortran-14=14.3.0-r5 giflib=5.2.2-r10 git=2.50.1-r1 glibc-dev=2.41-r56 glibc-locale-posix=2.41-r56 glibc=2.41-r56 gmp=6.3.0-r8 heimdal-libs=7.8.0-r42 isl=0.27-r4 java-cacerts=20250619-r4 jq=1.8.1-r2 keyutils-libs=1.6.3-r37 krb5-conf=1.0-r7 krb5-libs=1.22-r2 lcms2=2.17-r5 ld-linux=2.41-r56 libbrotlicommon1=1.1.0-r7 libbrotlidec1=1.1.0-r7 libbz2-1=1.0.8-r21 libcom_err=1.47.3-r1 libcrypt1=2.41-r56 libcrypto3=3.5.2-r0 libcurl-openssl4=8.15.0-r4 libexpat1=2.7.1-r3 libffi=3.5.2-r0 libfontconfig1=2.17.1-r1 libgcc=15.1.0-r4 libgfortran-14=14.3.0-r5 libgfortran=15.1.0-r4 libidn2=2.3.8-r3 libjpeg-turbo=3.1.1-r1 libldap=2.6.10-r5 libnghttp2-14=1.66.0-r1 libpcre2-8-0=10.45-r3 libpng=1.6.50-r1 libpsl=0.21.5-r6 libquadmath=15.1.0-r4 libssl3=3.5.2-r0 libstdc++-14-dev=14.3.0-r5 libstdc++-14=14.3.0-r5 libstdc++=15.1.0-r4 libtasn1=4.20.0-r5 libunistring=1.3-r4 libverto=0.3.2-r6 libx11=1.8.12-r3 libxau=1.0.12-r3 libxcb=1.17.0-r7 libxcrypt-dev=4.4.38-r3 libxcrypt=4.4.38-r3 libxdmcp=1.1.5-r8 libxext=1.3.6-r6 libxi=1.8.2-r3 libxrender=0.9.12-r4 libxtst=1.2.5-r3 libzstd1=1.5.7-r3 linux-headers=6.16-r0 make=4.4.1-r8 maven-3.9=3.9.11-r1 mpc=1.3.1-r7 mpfr=4.2.2-r2 ncurses-terminfo-base=6.5_p20250621-r1 ncurses=6.5_p20250621-r1 nss-db=2.41-r56 nss-hesiod=2.41-r56 oniguruma=6.9.10-r1 openjdk-17=17.0.16-r1 openssf-compiler-options=20240627-r26 p11-kit-trust=0.25.5-r3 p11-kit=0.25.5-r3 pkgconf=2.5.1-r1 pombump=0.0.14-r2 posix-cc-wrappers=1-r7 readline=8.3-r1 sqlite-libs=3.50.4-r0 ttf-dejavu=2.37-r7 wolfi-baselayout=20230201-r23 zlib=1.3.1-r51]
  accounts:
    runas:  
    users:
      - uid=1000(build) gid=1000
    groups:
      - gid=1000(build) members=[build]
auth configured for: []
installing libgcc (15.1.0-r4)
installing wolfi-baselayout (20230201-r23)
installing ca-certificates-bundle (20250619-r5)
installing glibc-locale-posix (2.41-r56)
installing glibc (2.41-r56)
installing ld-linux (2.41-r56)
installing alsa-lib (1.2.14-r2)
installing libstdc++ (15.1.0-r4)
installing libzstd1 (1.5.7-r3)
installing binutils (2.45-r0)
installing libquadmath (15.1.0-r4)
installing libstdc++-14 (14.3.0-r5)
installing libstdc++-14-dev (14.3.0-r5)
installing posix-cc-wrappers (1-r7)
installing gmp (6.3.0-r8)
installing isl (0.27-r4)
installing mpfr (4.2.2-r2)
installing mpc (1.3.1-r7)
installing zlib (1.3.1-r51)
installing libxcrypt (4.4.38-r3)
installing libxcrypt-dev (4.4.38-r3)
installing nss-db (2.41-r56)
installing nss-hesiod (2.41-r56)
installing linux-headers (6.16-r0)
installing glibc-dev (2.41-r56)
installing openssf-compiler-options (20240627-r26)
installing gcc-14 (14.3.0-r5)
installing libgfortran-14 (14.3.0-r5)
installing gfortran-14 (14.3.0-r5)
installing libgfortran (15.1.0-r4)
installing gcc-14-default (14.3.0-r5)
installing make (4.4.1-r8)
installing pkgconf (2.5.1-r1)
installing build-base (1-r8)
installing libcrypt1 (2.41-r56)
installing busybox (1.37.0-r48)
installing libcrypto3 (3.5.2-r0)
installing ca-certificates (20250619-r5)
installing ct-manylinux-2.28 (1.27.0-r1)
installing libbrotlicommon1 (1.1.0-r7)
installing libbrotlidec1 (1.1.0-r7)
installing libcom_err (1.47.3-r1)
installing keyutils-libs (1.6.3-r37)
installing libssl3 (3.5.2-r0)
installing libverto (0.3.2-r6)
installing krb5-conf (1.0-r7)
installing krb5-libs (1.22-r2)
installing gdbm (1.26-r1)
installing ncurses-terminfo-base (6.5_p20250621-r1)
installing ncurses (6.5_p20250621-r1)
installing readline (8.3-r1)
installing sqlite-libs (3.50.4-r0)
installing heimdal-libs (7.8.0-r42)
installing cyrus-sasl (2.1.28-r44)
installing libldap (2.6.10-r5)
installing libnghttp2-14 (1.66.0-r1)
installing libunistring (1.3-r4)
installing libidn2 (2.3.8-r3)
installing libpsl (0.21.5-r6)
installing libcurl-openssl4 (8.15.0-r4)
installing curl (8.15.0-r4)
installing fontconfig-config (2.17.1-r1)
installing libbz2-1 (1.0.8-r21)
installing libpng (1.6.50-r1)
installing freetype (2.13.3-r2)
installing giflib (5.2.2-r10)
installing libexpat1 (2.7.1-r3)
installing libpcre2-8-0 (10.45-r3)
installing git (2.50.1-r1)
installing libffi (3.5.2-r0)
installing libtasn1 (4.20.0-r5)
installing p11-kit (0.25.5-r3)
installing p11-kit-trust (0.25.5-r3)
installing java-cacerts (20250619-r4)
installing oniguruma (6.9.10-r1)
installing jq (1.8.1-r2)
installing lcms2 (2.17-r5)
installing libfontconfig1 (2.17.1-r1)
installing libjpeg-turbo (3.1.1-r1)
installing libxau (1.0.12-r3)
installing libxdmcp (1.1.5-r8)
installing libxcb (1.17.0-r7)
installing libx11 (1.8.12-r3)
installing libxext (1.3.6-r6)
installing libxi (1.8.2-r3)
installing libxrender (0.9.12-r4)
installing libxtst (1.2.5-r3)
installing maven-3.9 (3.9.11-r1)
installing ttf-dejavu (2.37-r7)
installing openjdk-17 (17.0.16-r1)
installing pombump (0.0.14-r2)
running step "git-checkout"
[git checkout] repo='https://github.com/kserve/modelmesh.git' dest='.' depth='unset' branch='' tag='v0.12.0' expcommit='f8212c75fffba9af22c3f3831ea0a8caade518d2' recurse='false'
[git checkout] execute: git config --global --add safe.directory /tmp/tmp.bhTriv
[git checkout] execute: git config --global --add safe.directory /home/build
[git checkout] execute: git clone --quiet --origin=origin --config=user.name=Melange Build --config=user.email=melange-build@cgr.dev --config=advice.detachedHead=false --branch=v0.12.0 --depth=1 https://github.com/kserve/modelmesh.git /tmp/tmp.bhTriv
[git checkout] execute: cd /tmp/tmp.bhTriv
[git checkout] tar -c . | tar -C "/home/build" -x
[git checkout] execute: cd /home/build
[git checkout] execute: git config --global --add safe.directory /home/build
[git checkout] execute: git fetch --quiet origin --depth=1 --no-tags +refs/tags/v0.12.0:refs/origin/tags/v0.12.0
[git checkout] execute: git checkout --quiet origin/tags/v0.12.0
[git checkout] tag v0.12.0 is f8212c75fffba9af22c3f3831ea0a8caade518d2
running step "auth/maven"
running step "Setup Maven credentials"
curl: (22) The requested URL returned error: 403
failed to build package: unable to run package kserve-modelmesh pipeline: unable to run pipeline: unable to run pipeline: exit status 22
failed to build: command melange failed: exit status 1
build failed: command melange failed: exit status 1

Indexes

https://apk.cgr.dev/chainguard-2.28-presubmit/8bb6afb8dbabec97ab6b7729f48d9227537b3c5a

❌ Failed Packages

  • kserve-modelmesh (error | 1m4s)

Packages

More Observability

Command

cg build log \
  --build-id 1f31b69b-5b3c-4a3b-b54b-16fe193eab1c \
  --project prod-eco-8de7 \
  --cluster elastic-pre \
  --namespace pre-eco-2-28 \
  --start 2025-08-07T00:10:40Z \
  --end 2025-08-07T00:24:36Z