Skip to content

celeborn-0.5/0.5.4-r6: cve remediation#65209

Closed
octo-sts[bot] wants to merge 1 commit into
mainfrom
cve-celeborn-0.5-0.5.4-r6-efe4e7b6711536ffd39e102d336e4e69
Closed

celeborn-0.5/0.5.4-r6: cve remediation#65209
octo-sts[bot] wants to merge 1 commit into
mainfrom
cve-celeborn-0.5-0.5.4-r6-efe4e7b6711536ffd39e102d336e4e69

celeborn-0.5/0.5.4-r6: fix GHSA-3p8m-j85q-pgmj

eb5feb1
Select commit
Loading
Failed to load commit list.
Chainguard Internal / elastic-build (eco-2-28) completed Sep 4, 2025 in 2m 53s

Failed to build APKs

Build ID: 2ec196ab-0642-441f-a776-533f7319aa22
Error: failed to build celeborn-0.5: building group: pod failed: build failed
did not test because building group: pod failed: build failed

Details

x86_64 Logs

Click to expand
parsed env
configuring puller identity "e2fa069c57acc83f3f2748a8bed50e44dff064dc/dcb8fb2f15475910"...
running command chainctl [auth login --audience apk.cgr.dev --identity e2fa069c57acc83f3f2748a8bed50e44dff064dc/dcb8fb2f15475910]
Successfully exchanged token.
Valid! Id: e2fa069c57acc83f3f2748a8bed50e44dff064dc/dcb8fb2f15475910
Updates are available for chainctl (current version: 0.2.135; latest: 0.2.136). To install, please run:
    $ chainctl update
command "chainctl" completed successfully
puller identity configured successfully
puller identity configured successfully
running build...
running command melange [build celeborn-0.5.yaml --gcplog --source-dir celeborn-0.5 --arch x86_64 --arch=x86_64 --env-file=build-x86_64.env --namespace=chainguard --pipeline-dir=./pipelines --out-dir=./packages/ --runner=bubblewrap --repository-append=https://apk.cgr.dev/chainguard --repository-append=https://apk.cgr.dev/chainguard-private --repository-append=https://apk.cgr.dev/chainguard-2.28 --repository-append=https://apk.cgr.dev/chainguard-2.28-presubmit/6b9bc6163fd5a3de482653a1acf6eb3b8e84d611 --package-append=ct-manylinux-2.28 --package-append=gcc-14-default --repository-append=https://apk.cgr.dev/chainguard-2.28-presubmit/6b9bc6163fd5a3de482653a1acf6eb3b8e84d611 --git-repo-url=https://github.com/wolfi-dev/os]
melange version  with runner bubblewrap building celeborn-0.5.yaml at commit 6b9bc6163fd5a3de482653a1acf6eb3b8e84d611 for arches [amd64]
melange v0.31.1+dirty with runner bubblewrap is building:
populating workspace /tmp/melange-workspace-1632583740 from celeborn-0.5
image configuration:
  contents:
    build repositories: [https://apk.cgr.dev/chainguard https://apk.cgr.dev/chainguard-2.28 https://apk.cgr.dev/chainguard-2.28-presubmit/6b9bc6163fd5a3de482653a1acf6eb3b8e84d611 https://apk.cgr.dev/chainguard-private]
    runtime repositories: []
    repositories: []
    keyring:      []
    packages:     [alsa-lib=1.2.14-r2 bash=5.3-r3 binutils=2.45-r1 busybox=1.37.0-r50 ca-certificates-bundle=20250619-r5 ca-certificates=20250619-r5 ct-manylinux-2.28=1.27.0-r2 curl=8.15.0-r5 cyrus-sasl=2.1.28-r44 freetype=2.13.3-r2 gcc-14-default=14.3.0-r8 gcc-14=14.3.0-r8 gdbm=1.26-r1 gfortran-14=14.3.0-r8 giflib=5.2.2-r10 git=2.51.0-r0 glibc-dev=2.42-r0 glibc-locale-posix=2.42-r0 glibc=2.42-r0 gmp=6.3.0-r8 heimdal-libs=7.8.0-r42 isl=0.27-r4 java-cacerts=20250619-r4 java-common-jre=0.2-r2 java-common=0.2-r2 jq=1.8.1-r3 keyutils-libs=1.6.3-r37 krb5-conf=1.0-r7 krb5-libs=1.22.1-r1 lcms2=2.17-r5 ld-linux=2.42-r0 libbrotlicommon1=1.1.0-r7 libbrotlidec1=1.1.0-r7 libbz2-1=1.0.8-r21 libcom_err=1.47.3-r1 libcrypt1=2.42-r0 libcrypto3=3.5.2-r1 libcurl-openssl4=8.15.0-r5 libexpat1=2.7.1-r3 libffi=3.5.2-r1 libgcc=15.2.0-r1 libgfortran-14=14.3.0-r8 libgfortran=15.2.0-r1 libidn2=2.3.8-r3 libjpeg-turbo=3.1.2-r0 libldap=2.6.10-r5 libnghttp2-14=1.67.0-r0 libpcre2-8-0=10.46-r0 libpng=1.6.50-r1 libpsl=0.21.5-r6 libquadmath=15.2.0-r1 libssl3=3.5.2-r1 libstdc++-14-dev=14.3.0-r8 libstdc++-14=14.3.0-r8 libstdc++=15.2.0-r1 libtasn1=4.20.0-r5 libunistring=1.3-r4 libverto=0.3.2-r6 libx11=1.8.12-r3 libxau=1.0.12-r3 libxcb=1.17.0-r8 libxcomposite=0.4.6-r6 libxcrypt-dev=4.4.38-r4 libxcrypt=4.4.38-r4 libxdmcp=1.1.5-r9 libxext=1.3.6-r7 libxi=1.8.2-r3 libxrender=0.9.12-r4 libxtst=1.2.5-r3 libzstd1=1.5.7-r3 linux-headers=6.16.4-r0 maven-3.9=3.9.11-r1 mpc=1.3.1-r7 mpfr=4.2.2-r2 ncurses-terminfo-base=6.5_p20250621-r1 ncurses=6.5_p20250621-r1 nss-db=2.42-r0 nss-hesiod=2.42-r0 oniguruma=6.9.10-r1 openjdk-8-default-jdk=8.452.09-r8 openjdk-8-default-jvm=8.452.09-r8 openjdk-8-jre=8.452.09-r8 openjdk-8=8.452.09-r8 openssf-compiler-options=20240627-r27 p11-kit-trust=0.25.5-r3 p11-kit=0.25.5-r3 patch=2.8-r3 pombump=0.0.14-r3 posix-cc-wrappers=1-r7 readline=8.3-r1 sqlite-libs=3.50.4-r1 wolfi-baselayout=20230201-r23 zlib=1.3.1-r51]
  accounts:
    runas:  
    users:
      - uid=1000(build) gid=1000
    groups:
      - gid=1000(build) members=[build]
auth configured for: []

aarch64 Logs

Error dumping logs: no logs found

Indexes

https://apk.cgr.dev/chainguard-2.28-presubmit/6b9bc6163fd5a3de482653a1acf6eb3b8e84d611

❌ Failed Packages

  • celeborn-0.5 (error | 13s)

Packages

More Observability

Command

cg build log \
  --build-id 2ec196ab-0642-441f-a776-533f7319aa22 \
  --project prod-eco-8de7 \
  --cluster elastic-pre \
  --namespace pre-eco-2-28 \
  --start 2025-09-04T07:32:04Z \
  --end 2025-09-04T07:44:58Z