Build log
nerves_system_x86_64
aliyun 1.0.11 · fail · run aliyun-1.0.11-1789670777530
288 of 288 lines
1Resolving Hex dependencies...2Resolution completed in 0.67s3Unchanged:4 aliyun 1.0.115 certifi 2.15.06 circular_buffer 1.1.07 combine 0.10.08 confex 3.3.19 distillery 1.5.510 elixir_make 0.10.011 expo 1.1.112 gettext 0.26.213 hackney 1.25.0 VULNERABLE!14 EEF-CVE-2026-47075 (MEDIUM)15 aka: CVE-2026-47075, GHSA-j9wq-vxxc-94wf16 CR/LF injection in query parameter in hackney17 https://osv.dev/vulnerability/EEF-CVE-2026-470751819 EEF-CVE-2026-47071 (HIGH)20 aka: CVE-2026-47071, GHSA-gp9c-pm5m-5cxr21 SOCKS5 TLS upgrade ignores caller timeout in hackney22 https://osv.dev/vulnerability/EEF-CVE-2026-470712324 EEF-CVE-2026-47069 (LOW)25 aka: CVE-2026-47069, GHSA-mp55-p8c9-rfw226 CRLF injection in cookie domain/path options in hackney27 https://osv.dev/vulnerability/EEF-CVE-2026-470692829 EEF-CVE-2026-47076 (MEDIUM)30 aka: CVE-2026-47076, GHSA-pj7v-xfvx-wmjq31 SSRF allowlist bypass via percent-encoded host in hackney32 https://osv.dev/vulnerability/EEF-CVE-2026-4707633 httpoison 1.8.234 idna 6.1.135 interactive_cmd 0.1.436 jason 1.4.537 logger_file_backend 0.0.1438 metrics 1.0.139 mimerl 1.5.040 nerves 1.15.041 nerves_discovery 0.1.542 nerves_logging 0.2.443 nerves_runtime 0.13.1344 nerves_system_bbb 2.30.245 nerves_system_br 1.34.446 nerves_system_mangopi_mq_pro 0.17.247 nerves_system_qemu_aarch64 0.4.248 nerves_system_rpi 2.1.249 nerves_system_rpi0 2.1.250 nerves_system_rpi0_2 2.1.251 nerves_system_rpi2 2.1.252 nerves_system_rpi3 2.1.253 nerves_system_rpi4 2.1.254 nerves_system_rpi5 2.1.255 nerves_system_x86_64 1.34.256 nerves_toolchain_aarch64_nerves_linux_gnu 15.3.157 nerves_toolchain_armv6_nerves_linux_gnueabihf 15.3.158 nerves_toolchain_armv7_nerves_linux_gnueabihf 15.3.159 nerves_toolchain_riscv64_nerves_linux_gnu 15.3.160 nerves_toolchain_x86_64_nerves_linux_musl 15.3.161 nerves_uevent 0.1.762 parse_trans 3.4.163 poison 3.1.064 property_table 0.3.465 ring_logger 0.11.766 shoehorn 0.9.367 ssl_verify_fun 1.1.768 sweet_xml 0.6.6 VULNERABLE!69 GHSA-qpmc-wprv-x746 (HIGH)70 aka: CVE-2019-1516071 Inline DTD allows XML bomb attack72 https://osv.dev/vulnerability/GHSA-qpmc-wprv-x74673 tablet 0.3.374 timex 3.7.1375 toolshed 0.5.076 tzdata 1.2.177 uboot_env 1.0.278 unicode_util_compat 0.7.179 uuid 1.1.880* Getting aliyun (Hex package)81* Getting nerves (Hex package)82* Getting shoehorn (Hex package)83* Getting ring_logger (Hex package)84* Getting toolshed (Hex package)85* Getting nerves_runtime (Hex package)86* Getting nerves_system_bbb (Hex package)87* Getting nerves_system_mangopi_mq_pro (Hex package)88* Getting nerves_system_qemu_aarch64 (Hex package)89* Getting nerves_system_rpi (Hex package)90* Getting nerves_system_rpi0 (Hex package)91* Getting nerves_system_rpi0_2 (Hex package)92* Getting nerves_system_rpi2 (Hex package)93* Getting nerves_system_rpi3 (Hex package)94* Getting nerves_system_rpi4 (Hex package)95* Getting nerves_system_rpi5 (Hex package)96* Getting nerves_system_x86_64 (Hex package)97* Getting nerves_system_br (Hex package)98* Getting nerves_toolchain_x86_64_nerves_linux_musl (Hex package)99* Getting nerves_toolchain_aarch64_nerves_linux_gnu (Hex package)100* Getting nerves_toolchain_armv7_nerves_linux_gnueabihf (Hex package)101* Getting nerves_toolchain_armv6_nerves_linux_gnueabihf (Hex package)102* Getting nerves_toolchain_riscv64_nerves_linux_gnu (Hex package)103* Getting nerves_logging (Hex package)104* Getting nerves_uevent (Hex package)105* Getting uboot_env (Hex package)106* Getting elixir_make (Hex package)107* Getting property_table (Hex package)108* Getting circular_buffer (Hex package)109* Getting interactive_cmd (Hex package)110* Getting jason (Hex package)111* Getting nerves_discovery (Hex package)112* Getting tablet (Hex package)113* Getting confex (Hex package)114* Getting distillery (Hex package)115* Getting httpoison (Hex package)116* Getting logger_file_backend (Hex package)117* Getting poison (Hex package)118* Getting sweet_xml (Hex package)119* Getting timex (Hex package)120* Getting uuid (Hex package)121* Getting combine (Hex package)122* Getting gettext (Hex package)123* Getting tzdata (Hex package)124* Getting expo (Hex package)125* Getting hackney (Hex package)126* Getting certifi (Hex package)127* Getting idna (Hex package)128* Getting metrics (Hex package)129* Getting mimerl (Hex package)130* Getting parse_trans (Hex package)131* Getting ssl_verify_fun (Hex package)132* Getting unicode_util_compat (Hex package)133Found packages with security advisories, see above for details134==> jason135Compiling 10 files (.ex)136Generated jason app137==> tablet138Compiling 2 files (.ex)139Generated tablet app140==> elixir_make141Compiling 8 files (.ex)142Generated elixir_make app143==> nerves_discovery144Compiling 5 files (.ex)145Generated nerves_discovery app146==> interactive_cmd147Compiling 1 file (.ex)148Generated interactive_cmd app149==> nerves150HOST_CC port.o151HOST_LD port152Compiling 55 files (.ex)153Generated nerves app154==> nerves_compatibility_test155156Nerves environment157 MIX_TARGET: x86_64158 MIX_ENV: prod159160Checking for prebuilt Nerves artifacts...161 warning: String.strip/1 is deprecated. Use String.trim/1 instead162 │163 4 │ @version File.read!("VERSION") |> String.strip164 │ ~165 │166 └─ /work/proj/deps_x86_64/poison/mix.exs:4:44: Poison.Mixfile (module)167168 Found nerves_system_x86_64 in cache169 /home/nerves/.nerves/artifacts/nerves_system_x86_64-portable-1.34.2170 Found nerves_toolchain_x86_64_nerves_linux_musl in cache171 /home/nerves/.nerves/artifacts/nerves_toolchain_x86_64_nerves_linux_musl-linux_x86_64-15.3.1172==> nerves173 warning: String.strip/1 is deprecated. Use String.trim/1 instead174 │175 4 │ @version File.read!("VERSION") |> String.strip176 │ ~177 │178 └─ /work/proj/deps_x86_64/poison/mix.exs:4:44: Poison.Mixfile (module)179180==> nerves_compatibility_test181182Nerves environment183 MIX_TARGET: x86_64184 MIX_ENV: prod185186==> confex187Compiling 6 files (.ex)188Generated confex app189==> sweet_xml190Compiling 1 file (.ex)191 warning: using single-quoted strings to represent charlists is deprecated.192 Use ~c"" if you indeed want a charlist or use "" instead.193 You may run "mix format --migrate" to change all single-quoted194 strings to use the ~c sigil and fix this warning.195 │196 190 │ def sigil_x(path, modifiers \\ '') do197 │ ~198 │199 └─ lib/sweet_xml.ex:190:34200201 warning: using single-quoted strings to represent charlists is deprecated.202 Use ~c"" if you indeed want a charlist or use "" instead.203 You may run "mix format --migrate" to change all single-quoted204 strings to use the ~c sigil and fix this warning.205 │206 237 │ {parsed_doc, _} = :xmerl_scan.string('', options ++ continuation_opts(doc_enum))207 │ ~208 │209 └─ lib/sweet_xml.ex:237:42210211 warning: using single-quoted strings to represent charlists is deprecated.212 Use ~c"" if you indeed want a charlist or use "" instead.213 You may run "mix format --migrate" to change all single-quoted214 strings to use the ~c sigil and fix this warning.215 │216 361 │ pid = spawn_link fn -> :xmerl_scan.string('', opts ++ continuation_opts(doc, waiter)) end217 │ ~218 │219 └─ lib/sweet_xml.ex:361:49220221 warning: the variable "size" is accessed inside size(...) of a bitstring but it was defined outside of the match. You must precede it with the pin operator222 │223 632 │ <<_::binary - size(size), h>> <> tail when h == ?\s or h == ?\n or h == ?\r or h == ?\t ->224 │ ~225 │226 └─ lib/sweet_xml.ex:632:26: SweetXml.split_last_whitespace/2227228 warning: a struct for SweetXpath is expected on struct update:229230 %SweetXpath{xpath | namespaces: [{to_charlist(prefix), to_charlist(uri)} | xpath.namespaces]}231232 but got type:233234 dynamic()235236 where "xpath" was given the type:237238 # type: dynamic()239 # from: lib/sweet_xml.ex:209:21240 xpath241242 when defining the variable "xpath", you must also pattern match on "%SweetXpath{}"243244 type warning found at:245 │246 210 │ %SweetXpath{xpath | namespaces: [{to_charlist(prefix), to_charlist(uri)}247 │ ~248 │249 └─ lib/sweet_xml.ex:210:5: SweetXml.add_namespace/3250251Generated sweet_xml app252==> aliyun253Compiling 6 files (.ex)254 warning: trailing commas are not allowed inside function/macro call arguments255 │256 25 │ intranet_endpoint: ~x"./IntranetEndpoint/text()",257 │ ~258 │259 └─ lib/oss/cli.ex:25:59260261 warning: String.strip/1 is deprecated. Use String.trim/1 instead262 │263 12 │ [ type | exts ] = String.split(String.strip(line))264 │ ~265 │266 └─ lib/oss/mime.ex:12:45: Aliyun.OSS.Mime (module)267268 warning: :crypto.hmac/3 is undefined or private, use crypto:mac/4 instead269 │270 26 │ :crypto.hmac(:sha, "#{Aliyun.Env.sms_access_key_secret}&", string_to_sign) |> Base.encode64271 │ ~272 │273 └─ lib/sms/cli.ex:26:13: Aliyun.SMS.CLI.gen_signature/2274275 warning: :crypto.hmac/3 is undefined or private, use crypto:mac/4 instead276 │277 189 │ :crypto.hmac(:sha, Aliyun.Env.oss_access_key_secret, string_to_sign) |> Base.encode64278 │ ~279 │280 └─ lib/oss/cli.ex:189:13: Aliyun.OSS.CLI.gen_signature/1281282Generated aliyun app283==> nerves_compatibility_test284Compiling 2 files (.ex)285Generated nerves_compatibility_test app286|nerves| Building OTP Release...287288==> You are missing a release config file. Run the release.init task first