Build log
nerves_system_x86_64
ash_policy_authorizer 0.16.5 · fail · run ash_policy_authorizer-0.16.5-1789832773904
244 of 244 lines
1Resolving Hex dependencies...2Resolution completed in 1.67s3Unchanged:4 ash 1.53.3 VULNERABLE!5 EEF-CVE-2026-82735 (MEDIUM)6 aka: CVE-2026-82735, GHSA-mq7g-pffw-m8xh7 Match regex runs on over-length input in Ash.Type.String, enabling regex denial of service8 https://osv.dev/vulnerability/EEF-CVE-2026-82735910 EEF-CVE-2026-67579 (HIGH)11 aka: CVE-2026-67579, GHSA-3gq3-9xm3-c8v312 Filter expression injection via forged keyset pagination cursor in Ash13 https://osv.dev/vulnerability/EEF-CVE-2026-675791415 EEF-CVE-2025-48042 (HIGH)16 aka: CVE-2025-48042, GHSA-jj4j-x5ww-cwh917 Before action hooks may execute in certain scenarios despite a request being forbidden18 https://osv.dev/vulnerability/EEF-CVE-2025-480421920 GHSA-jjf9-w5vj-r6vp (HIGH)21 aka: CVE-2026-3459322 Ash.Type.Module.cast_input/2 atom exhaustion via unchecked Module.concat allows BEAM VM crash23 https://osv.dev/vulnerability/GHSA-jjf9-w5vj-r6vp2425 EEF-CVE-2025-48043 (HIGH)26 aka: CVE-2025-48043, GHSA-7r7f-9xpj-jmr727 Bypass and runtime policies that can never pass may be incorrectly applied in filter authorization28 https://osv.dev/vulnerability/EEF-CVE-2025-480432930 EEF-CVE-2026-69659 (MEDIUM)31 aka: CVE-2026-69659, GHSA-j35q-v8h8-7mwq32 Memory exhaustion via unbounded deserialization of keyset pagination cursors in Ash.Page.Keyset33 https://osv.dev/vulnerability/EEF-CVE-2026-696593435 EEF-CVE-2026-82734 (LOW)36 aka: CVE-2026-82734, GHSA-mvvh-q33h-q62v37 Non-finite Infinity/NaN decimal values bypass bounds constraints in Ash.Type.Decimal38 https://osv.dev/vulnerability/EEF-CVE-2026-827343940 EEF-CVE-2026-82736 (LOW)41 aka: CVE-2026-82736, GHSA-gg9w-7593-hxg942 Ash.Type.CiString validates length and match constraints before case folding, allowing constraint bypass43 https://osv.dev/vulnerability/EEF-CVE-2026-827364445 EEF-CVE-2026-70395 (LOW)46 aka: CVE-2026-70395, GHSA-vvp6-3wv6-833j47 Predicate injection in manage_relationship belongs_to lookup discloses secret lookup keys in Ash48 https://osv.dev/vulnerability/EEF-CVE-2026-703954950 EEF-CVE-2026-82752 (MEDIUM)51 aka: CVE-2026-82752, GHSA-cwjv-574p-59f652 Ash string length constraints count graphemes, so a combining-mark string of any size passes max_length53 https://osv.dev/vulnerability/EEF-CVE-2026-827525455 EEF-CVE-2026-82742 (MEDIUM)56 aka: CVE-2026-82742, GHSA-mgwj-c69v-6f8357 Ash.Filter.Runtime materializes a combinatorial cross-product over to-many relationships, exhausting memory58 https://osv.dev/vulnerability/EEF-CVE-2026-827425960 EEF-CVE-2026-82745 (MEDIUM)61 aka: CVE-2026-82745, GHSA-92x7-q3h5-wf8862 ETS and Mnesia data layers overwrite an existing record on create instead of enforcing primary-key uniqueness63 https://osv.dev/vulnerability/EEF-CVE-2026-8274564 ash_policy_authorizer 0.16.5 RETIRED!65 (deprecated) Policy Authorization has been moved to the core ash library66 circular_buffer 1.1.067 comparable 1.0.068 decimal 2.4.1 VULNERABLE!69 EEF-CVE-2026-32686 (MEDIUM)70 aka: CVE-2026-32686, GHSA-rhv4-8758-jx7v71 Unbounded exponent in decimal enables unauthenticated DoS72 https://osv.dev/vulnerability/EEF-CVE-2026-3268673 ecto 3.13.674 elixir_make 0.10.075 ets 0.8.176 interactive_cmd 0.1.477 jason 1.4.578 nerves 1.15.079 nerves_discovery 0.1.580 nerves_logging 0.2.481 nerves_runtime 0.13.1382 nerves_system_bbb 2.30.283 nerves_system_br 1.34.484 nerves_system_mangopi_mq_pro 0.17.285 nerves_system_qemu_aarch64 0.4.286 nerves_system_rpi 2.1.287 nerves_system_rpi0 2.1.288 nerves_system_rpi0_2 2.1.289 nerves_system_rpi2 2.1.290 nerves_system_rpi3 2.1.291 nerves_system_rpi4 2.1.292 nerves_system_rpi5 2.1.293 nerves_system_x86_64 1.34.294 nerves_toolchain_aarch64_nerves_linux_gnu 15.3.195 nerves_toolchain_armv6_nerves_linux_gnueabihf 15.3.196 nerves_toolchain_armv7_nerves_linux_gnueabihf 15.3.197 nerves_toolchain_riscv64_nerves_linux_gnu 15.3.198 nerves_toolchain_x86_64_nerves_linux_musl 15.3.199 nerves_uevent 0.1.7100 nimble_options 0.3.7101 picosat_elixir 0.2.3102 property_table 0.3.4103 ring_logger 0.11.7104 shoehorn 0.9.3105 sourceror 0.14.1106 stream_data 0.5.0107 tablet 0.3.3108 telemetry 1.4.2109 toolshed 0.5.0110 typable 0.3.0111 uboot_env 1.0.2112* Getting ash_policy_authorizer (Hex package)113* Getting nerves (Hex package)114* Getting shoehorn (Hex package)115* Getting ring_logger (Hex package)116* Getting toolshed (Hex package)117* Getting nerves_runtime (Hex package)118* Getting nerves_system_bbb (Hex package)119* Getting nerves_system_mangopi_mq_pro (Hex package)120* Getting nerves_system_qemu_aarch64 (Hex package)121* Getting nerves_system_rpi (Hex package)122* Getting nerves_system_rpi0 (Hex package)123* Getting nerves_system_rpi0_2 (Hex package)124* Getting nerves_system_rpi2 (Hex package)125* Getting nerves_system_rpi3 (Hex package)126* Getting nerves_system_rpi4 (Hex package)127* Getting nerves_system_rpi5 (Hex package)128* Getting nerves_system_x86_64 (Hex package)129* Getting nerves_system_br (Hex package)130* Getting nerves_toolchain_x86_64_nerves_linux_musl (Hex package)131* Getting nerves_toolchain_aarch64_nerves_linux_gnu (Hex package)132* Getting nerves_toolchain_armv7_nerves_linux_gnueabihf (Hex package)133* Getting nerves_toolchain_armv6_nerves_linux_gnueabihf (Hex package)134* Getting nerves_toolchain_riscv64_nerves_linux_gnu (Hex package)135* Getting nerves_logging (Hex package)136* Getting nerves_uevent (Hex package)137* Getting uboot_env (Hex package)138* Getting elixir_make (Hex package)139* Getting property_table (Hex package)140* Getting circular_buffer (Hex package)141* Getting interactive_cmd (Hex package)142* Getting jason (Hex package)143* Getting nerves_discovery (Hex package)144* Getting tablet (Hex package)145* Getting ash (Hex package)146* Getting comparable (Hex package)147* Getting decimal (Hex package)148* Getting ecto (Hex package)149* Getting ets (Hex package)150* Getting nimble_options (Hex package)151* Getting picosat_elixir (Hex package)152* Getting sourceror (Hex package)153* Getting stream_data (Hex package)154* Getting telemetry (Hex package)155* Getting typable (Hex package)156Found retired packages, see above for details157Found packages with security advisories, see above for details158==> tablet159Compiling 2 files (.ex)160Generated tablet app161==> elixir_make162Compiling 8 files (.ex)163Generated elixir_make app164==> nerves_discovery165Compiling 5 files (.ex)166Generated nerves_discovery app167==> decimal168Compiling 4 files (.ex)169 warning: this clause of defp check_dbl_min_max/1 is never used (or it will always fail/warn when invoked)170 │171 2842 │ defp check_dbl_min_max(%Decimal{coef: :inf} = infinity), do: infinity172 │ ~173 │174 └─ lib/decimal.ex:2842:8: Decimal.check_dbl_min_max/1175176Generated decimal app177==> jason178Compiling 10 files (.ex)179Compiling lib/decoder.ex (it's taking more than 10s)180Compiling lib/encode.ex (it's taking more than 10s)181Generated jason app182==> interactive_cmd183Compiling 1 file (.ex)184Generated interactive_cmd app185==> nerves186HOST_CC port.o187HOST_LD port188Compiling 55 files (.ex)189Generated nerves app190==> nerves_compatibility_test191192Nerves environment193 MIX_TARGET: x86_64194 MIX_ENV: prod195196Checking for prebuilt Nerves artifacts...197 Found nerves_system_x86_64 in cache198 /home/nerves/.nerves/artifacts/nerves_system_x86_64-portable-1.34.2199 Found nerves_toolchain_x86_64_nerves_linux_musl in cache200 /home/nerves/.nerves/artifacts/nerves_toolchain_x86_64_nerves_linux_musl-linux_x86_64-15.3.1201==> decimal202 warning: this clause of defp check_dbl_min_max/1 is never used (or it will always fail/warn when invoked)203 │204 2842 │ defp check_dbl_min_max(%Decimal{coef: :inf} = infinity), do: infinity205 │ ~206 │207 └─ (decimal 2.4.1) lib/decimal.ex:2842:8: Decimal.check_dbl_min_max/1208209==> nerves210==> nerves_compatibility_test211212Nerves environment213 MIX_TARGET: x86_64214 MIX_ENV: prod215216==> stream_data217Compiling 3 files (.ex)218warning: left..right inside match is deprecated, you must always match on the step: left..right//var or left..right//_ if you want to ignore it219 lib/stream_data.ex:508: StreamData.integer/1220221warning: min..max inside match is deprecated, you must always match on the step: min..max//var or min..max//_ if you want to ignore it222 lib/stream_data.ex:894: StreamData.list_length_range_fun/1223224Generated stream_data app225==> ets226Compiling 7 files (.ex)227Generated ets app228==> picosat_elixir229/home/nerves/.nerves/artifacts/nerves_toolchain_x86_64_nerves_linux_musl-linux_x86_64-15.3.1/bin/x86_64-nerves-linux-musl-gcc -std=c99 -finline-functions -Wall -O3 -DNDEBUG -fPIC -I /home/nerves/.nerves/artifacts/nerves_system_x86_64-portable-1.34.2/staging/usr/lib/erlang/erts-17.0.6/include -o /work/proj/deps_x86_64/picosat_elixir/priv/picosat.o -c /work/proj/deps_x86_64/picosat_elixir/c_src/picosat.c230/home/nerves/.nerves/artifacts/nerves_toolchain_x86_64_nerves_linux_musl-linux_x86_64-15.3.1/bin/x86_64-nerves-linux-musl-gcc -std=c99 -finline-functions -Wall -O3 -DNDEBUG -fPIC -I /home/nerves/.nerves/artifacts/nerves_system_x86_64-portable-1.34.2/staging/usr/lib/erlang/erts-17.0.6/include -o /work/proj/deps_x86_64/picosat_elixir/priv/picosat_nif.o -c /work/proj/deps_x86_64/picosat_elixir/c_src/picosat_nif.c231/work/proj/deps_x86_64/picosat_elixir/c_src/picosat.c:8150:10: fatal error: sys/unistd.h: No such file or directory232 8150 | #include <sys/unistd.h>233 | ^~~~~~~~~~~~~~234compilation terminated.235make: *** [Makefile:49: /work/proj/deps_x86_64/picosat_elixir/priv/picosat.o] Error 1236could not compile dependency :picosat_elixir, "mix compile" failed. Errors may have been logged above. You can recompile this dependency with "mix deps.compile picosat_elixir --force", update it with "mix deps.update picosat_elixir" or clean it with "mix deps.clean picosat_elixir"237==> nerves_compatibility_test238** (Mix) Could not compile with "make" (exit status: 2).239You need to have gcc and make installed. If you are using240Ubuntu or any other Debian-based system, install the packages241"build-essential". Also install "erlang-dev" package if not242included in your Erlang/OTP version. If you're on Fedora, run243"dnf group install 'Development Tools'".244