aliyun

Build log

nerves_system_x86_64

aliyun 1.0.11 · fail · run aliyun-1.0.11-1789670777530
288 of 288 lines
1Resolving Hex dependencies...2Resolution completed in 0.67s3Unchanged:4  aliyun 1.0.115  certifi 2.15.06  circular_buffer 1.1.07  combine 0.10.08  confex 3.3.19  distillery 1.5.510  elixir_make 0.10.011  expo 1.1.112  gettext 0.26.213  hackney 1.25.0 VULNERABLE!14    EEF-CVE-2026-47075 (MEDIUM)15    aka: CVE-2026-47075, GHSA-j9wq-vxxc-94wf16    CR/LF injection in query parameter in hackney17    https://osv.dev/vulnerability/EEF-CVE-2026-470751819    EEF-CVE-2026-47071 (HIGH)20    aka: CVE-2026-47071, GHSA-gp9c-pm5m-5cxr21    SOCKS5 TLS upgrade ignores caller timeout in hackney22    https://osv.dev/vulnerability/EEF-CVE-2026-470712324    EEF-CVE-2026-47069 (LOW)25    aka: CVE-2026-47069, GHSA-mp55-p8c9-rfw226    CRLF injection in cookie domain/path options in hackney27    https://osv.dev/vulnerability/EEF-CVE-2026-470692829    EEF-CVE-2026-47076 (MEDIUM)30    aka: CVE-2026-47076, GHSA-pj7v-xfvx-wmjq31    SSRF allowlist bypass via percent-encoded host in hackney32    https://osv.dev/vulnerability/EEF-CVE-2026-4707633  httpoison 1.8.234  idna 6.1.135  interactive_cmd 0.1.436  jason 1.4.537  logger_file_backend 0.0.1438  metrics 1.0.139  mimerl 1.5.040  nerves 1.15.041  nerves_discovery 0.1.542  nerves_logging 0.2.443  nerves_runtime 0.13.1344  nerves_system_bbb 2.30.245  nerves_system_br 1.34.446  nerves_system_mangopi_mq_pro 0.17.247  nerves_system_qemu_aarch64 0.4.248  nerves_system_rpi 2.1.249  nerves_system_rpi0 2.1.250  nerves_system_rpi0_2 2.1.251  nerves_system_rpi2 2.1.252  nerves_system_rpi3 2.1.253  nerves_system_rpi4 2.1.254  nerves_system_rpi5 2.1.255  nerves_system_x86_64 1.34.256  nerves_toolchain_aarch64_nerves_linux_gnu 15.3.157  nerves_toolchain_armv6_nerves_linux_gnueabihf 15.3.158  nerves_toolchain_armv7_nerves_linux_gnueabihf 15.3.159  nerves_toolchain_riscv64_nerves_linux_gnu 15.3.160  nerves_toolchain_x86_64_nerves_linux_musl 15.3.161  nerves_uevent 0.1.762  parse_trans 3.4.163  poison 3.1.064  property_table 0.3.465  ring_logger 0.11.766  shoehorn 0.9.367  ssl_verify_fun 1.1.768  sweet_xml 0.6.6 VULNERABLE!69    GHSA-qpmc-wprv-x746 (HIGH)70    aka: CVE-2019-1516071    Inline DTD allows XML bomb attack72    https://osv.dev/vulnerability/GHSA-qpmc-wprv-x74673  tablet 0.3.374  timex 3.7.1375  toolshed 0.5.076  tzdata 1.2.177  uboot_env 1.0.278  unicode_util_compat 0.7.179  uuid 1.1.880* Getting aliyun (Hex package)81* Getting nerves (Hex package)82* Getting shoehorn (Hex package)83* Getting ring_logger (Hex package)84* Getting toolshed (Hex package)85* Getting nerves_runtime (Hex package)86* Getting nerves_system_bbb (Hex package)87* Getting nerves_system_mangopi_mq_pro (Hex package)88* Getting nerves_system_qemu_aarch64 (Hex package)89* Getting nerves_system_rpi (Hex package)90* Getting nerves_system_rpi0 (Hex package)91* Getting nerves_system_rpi0_2 (Hex package)92* Getting nerves_system_rpi2 (Hex package)93* Getting nerves_system_rpi3 (Hex package)94* Getting nerves_system_rpi4 (Hex package)95* Getting nerves_system_rpi5 (Hex package)96* Getting nerves_system_x86_64 (Hex package)97* Getting nerves_system_br (Hex package)98* Getting nerves_toolchain_x86_64_nerves_linux_musl (Hex package)99* Getting nerves_toolchain_aarch64_nerves_linux_gnu (Hex package)100* Getting nerves_toolchain_armv7_nerves_linux_gnueabihf (Hex package)101* Getting nerves_toolchain_armv6_nerves_linux_gnueabihf (Hex package)102* Getting nerves_toolchain_riscv64_nerves_linux_gnu (Hex package)103* Getting nerves_logging (Hex package)104* Getting nerves_uevent (Hex package)105* Getting uboot_env (Hex package)106* Getting elixir_make (Hex package)107* Getting property_table (Hex package)108* Getting circular_buffer (Hex package)109* Getting interactive_cmd (Hex package)110* Getting jason (Hex package)111* Getting nerves_discovery (Hex package)112* Getting tablet (Hex package)113* Getting confex (Hex package)114* Getting distillery (Hex package)115* Getting httpoison (Hex package)116* Getting logger_file_backend (Hex package)117* Getting poison (Hex package)118* Getting sweet_xml (Hex package)119* Getting timex (Hex package)120* Getting uuid (Hex package)121* Getting combine (Hex package)122* Getting gettext (Hex package)123* Getting tzdata (Hex package)124* Getting expo (Hex package)125* Getting hackney (Hex package)126* Getting certifi (Hex package)127* Getting idna (Hex package)128* Getting metrics (Hex package)129* Getting mimerl (Hex package)130* Getting parse_trans (Hex package)131* Getting ssl_verify_fun (Hex package)132* Getting unicode_util_compat (Hex package)133Found packages with security advisories, see above for details134==> jason135Compiling 10 files (.ex)136Generated jason app137==> tablet138Compiling 2 files (.ex)139Generated tablet app140==> elixir_make141Compiling 8 files (.ex)142Generated elixir_make app143==> nerves_discovery144Compiling 5 files (.ex)145Generated nerves_discovery app146==> interactive_cmd147Compiling 1 file (.ex)148Generated interactive_cmd app149==> nerves150HOST_CC port.o151HOST_LD port152Compiling 55 files (.ex)153Generated nerves app154==> nerves_compatibility_test155156Nerves environment157  MIX_TARGET:   x86_64158  MIX_ENV:      prod159160Checking for prebuilt Nerves artifacts...161    warning: String.strip/1 is deprecated. Use String.trim/1 instead162    │163  4 │   @version File.read!("VERSION") |> String.strip164    │                                            ~165    │166    └─ /work/proj/deps_x86_64/poison/mix.exs:4:44: Poison.Mixfile (module)167168  Found nerves_system_x86_64 in cache169    /home/nerves/.nerves/artifacts/nerves_system_x86_64-portable-1.34.2170  Found nerves_toolchain_x86_64_nerves_linux_musl in cache171    /home/nerves/.nerves/artifacts/nerves_toolchain_x86_64_nerves_linux_musl-linux_x86_64-15.3.1172==> nerves173    warning: String.strip/1 is deprecated. Use String.trim/1 instead174    │175  4 │   @version File.read!("VERSION") |> String.strip176    │                                            ~177    │178    └─ /work/proj/deps_x86_64/poison/mix.exs:4:44: Poison.Mixfile (module)179180==> nerves_compatibility_test181182Nerves environment183  MIX_TARGET:   x86_64184  MIX_ENV:      prod185186==> confex187Compiling 6 files (.ex)188Generated confex app189==> sweet_xml190Compiling 1 file (.ex)191     warning: using single-quoted strings to represent charlists is deprecated.192     Use ~c"" if you indeed want a charlist or use "" instead.193     You may run "mix format --migrate" to change all single-quoted194     strings to use the ~c sigil and fix this warning.195     │196 190 │   def sigil_x(path, modifiers \\ '') do197     │                                  ~198     │199     └─ lib/sweet_xml.ex:190:34200201     warning: using single-quoted strings to represent charlists is deprecated.202     Use ~c"" if you indeed want a charlist or use "" instead.203     You may run "mix format --migrate" to change all single-quoted204     strings to use the ~c sigil and fix this warning.205     │206 237 │     {parsed_doc, _} = :xmerl_scan.string('', options ++ continuation_opts(doc_enum))207     │                                          ~208     │209     └─ lib/sweet_xml.ex:237:42210211     warning: using single-quoted strings to represent charlists is deprecated.212     Use ~c"" if you indeed want a charlist or use "" instead.213     You may run "mix format --migrate" to change all single-quoted214     strings to use the ~c sigil and fix this warning.215     │216 361 │       pid = spawn_link fn -> :xmerl_scan.string('', opts ++ continuation_opts(doc, waiter)) end217     │                                                 ~218     │219     └─ lib/sweet_xml.ex:361:49220221     warning: the variable "size" is accessed inside size(...) of a bitstring but it was defined outside of the match. You must precede it with the pin operator222     │223 632 │       <<_::binary - size(size), h>> <> tail when h == ?\s or h == ?\n or h == ?\r or h == ?\t ->224     │                          ~225     │226     └─ lib/sweet_xml.ex:632:26: SweetXml.split_last_whitespace/2227228     warning: a struct for SweetXpath is expected on struct update:229230         %SweetXpath{xpath | namespaces: [{to_charlist(prefix), to_charlist(uri)} | xpath.namespaces]}231232     but got type:233234         dynamic()235236     where "xpath" was given the type:237238         # type: dynamic()239         # from: lib/sweet_xml.ex:209:21240         xpath241242     when defining the variable "xpath", you must also pattern match on "%SweetXpath{}"243244     type warning found at:245     │246 210 │     %SweetXpath{xpath | namespaces: [{to_charlist(prefix), to_charlist(uri)}247     │     ~248     │249     └─ lib/sweet_xml.ex:210:5: SweetXml.add_namespace/3250251Generated sweet_xml app252==> aliyun253Compiling 6 files (.ex)254    warning: trailing commas are not allowed inside function/macro call arguments255    │256 25 │           intranet_endpoint: ~x"./IntranetEndpoint/text()",257    │                                                           ~258    │259    └─ lib/oss/cli.ex:25:59260261    warning: String.strip/1 is deprecated. Use String.trim/1 instead262    │263 12 │       [ type | exts ] = String.split(String.strip(line))264    │                                             ~265    │266    └─ lib/oss/mime.ex:12:45: Aliyun.OSS.Mime (module)267268    warning: :crypto.hmac/3 is undefined or private, use crypto:mac/4 instead269    │270 26 │     :crypto.hmac(:sha, "#{Aliyun.Env.sms_access_key_secret}&", string_to_sign) |> Base.encode64271    │             ~272    │273    └─ lib/sms/cli.ex:26:13: Aliyun.SMS.CLI.gen_signature/2274275     warning: :crypto.hmac/3 is undefined or private, use crypto:mac/4 instead276     │277 189 │     :crypto.hmac(:sha, Aliyun.Env.oss_access_key_secret, string_to_sign) |> Base.encode64278     │             ~279     │280     └─ lib/oss/cli.ex:189:13: Aliyun.OSS.CLI.gen_signature/1281282Generated aliyun app283==> nerves_compatibility_test284Compiling 2 files (.ex)285Generated nerves_compatibility_test app286|nerves| Building OTP Release...287288==> You are missing a release config file. Run the release.init task first