Build log
nerves_system_x86_64
ash_thrift 0.2.0 · fail · run ash_thrift-0.2.0-1789860506686
275 of 275 lines
1Resolving Hex dependencies...2Resolution completed in 0.593s3Unchanged:4 ash 2.21.15 VULNERABLE!5 EEF-CVE-2026-82739 (LOW)6 aka: CVE-2026-82739, GHSA-66cg-vj5m-8w7v7 Ash.Resource.Validation.Confirm leaks a confirmed field's stored value in the atomic mismatch error8 https://osv.dev/vulnerability/EEF-CVE-2026-82739910 EEF-CVE-2025-48043 (HIGH)11 aka: CVE-2025-48043, GHSA-7r7f-9xpj-jmr712 Bypass and runtime policies that can never pass may be incorrectly applied in filter authorization13 https://osv.dev/vulnerability/EEF-CVE-2025-480431415 GHSA-jjf9-w5vj-r6vp (HIGH)16 aka: CVE-2026-3459317 Ash.Type.Module.cast_input/2 atom exhaustion via unchecked Module.concat allows BEAM VM crash18 https://osv.dev/vulnerability/GHSA-jjf9-w5vj-r6vp1920 EEF-CVE-2025-48042 (HIGH)21 aka: CVE-2025-48042, GHSA-jj4j-x5ww-cwh922 Before action hooks may execute in certain scenarios despite a request being forbidden23 https://osv.dev/vulnerability/EEF-CVE-2025-480422425 EEF-CVE-2026-67579 (HIGH)26 aka: CVE-2026-67579, GHSA-3gq3-9xm3-c8v327 Filter expression injection via forged keyset pagination cursor in Ash28 https://osv.dev/vulnerability/EEF-CVE-2026-675792930 EEF-CVE-2026-82736 (LOW)31 aka: CVE-2026-82736, GHSA-gg9w-7593-hxg932 Ash.Type.CiString validates length and match constraints before case folding, allowing constraint bypass33 https://osv.dev/vulnerability/EEF-CVE-2026-827363435 EEF-CVE-2026-86338 (MEDIUM)36 aka: CVE-2026-86338, GHSA-7qr8-wrvq-566q37 Ash field policies do not filter-nil forbidden calculations and aggregates, enabling an information-disclosure oracle38 https://osv.dev/vulnerability/EEF-CVE-2026-863383940 EEF-CVE-2026-82734 (LOW)41 aka: CVE-2026-82734, GHSA-mvvh-q33h-q62v42 Non-finite Infinity/NaN decimal values bypass bounds constraints in Ash.Type.Decimal43 https://osv.dev/vulnerability/EEF-CVE-2026-827344445 EEF-CVE-2026-69659 (MEDIUM)46 aka: CVE-2026-69659, GHSA-j35q-v8h8-7mwq47 Memory exhaustion via unbounded deserialization of keyset pagination cursors in Ash.Page.Keyset48 https://osv.dev/vulnerability/EEF-CVE-2026-696594950 EEF-CVE-2026-82752 (MEDIUM)51 aka: CVE-2026-82752, GHSA-cwjv-574p-59f652 Ash string length constraints count graphemes, so a combining-mark string of any size passes max_length53 https://osv.dev/vulnerability/EEF-CVE-2026-827525455 EEF-CVE-2026-82741 (LOW)56 aka: CVE-2026-82741, GHSA-2mmm-gc86-7jgg57 Ash.Type.Union with :map_with_tag does not force the tag on dump, enabling tag confusion58 https://osv.dev/vulnerability/EEF-CVE-2026-827415960 EEF-CVE-2026-70395 (LOW)61 aka: CVE-2026-70395, GHSA-vvp6-3wv6-833j62 Predicate injection in manage_relationship belongs_to lookup discloses secret lookup keys in Ash63 https://osv.dev/vulnerability/EEF-CVE-2026-703956465 EEF-CVE-2026-82742 (MEDIUM)66 aka: CVE-2026-82742, GHSA-mgwj-c69v-6f8367 Ash.Filter.Runtime materializes a combinatorial cross-product over to-many relationships, exhausting memory68 https://osv.dev/vulnerability/EEF-CVE-2026-827426970 EEF-CVE-2026-82745 (MEDIUM)71 aka: CVE-2026-82745, GHSA-92x7-q3h5-wf8872 ETS and Mnesia data layers overwrite an existing record on create instead of enforcing primary-key uniqueness73 https://osv.dev/vulnerability/EEF-CVE-2026-827457475 EEF-CVE-2026-82743 (LOW)76 aka: CVE-2026-82743, GHSA-33wq-x3q2-c92h77 Ash.Actions.Read.AsyncLimiter busy-spins a scheduler while awaiting slow async reads78 https://osv.dev/vulnerability/EEF-CVE-2026-827437980 EEF-CVE-2026-82735 (MEDIUM)81 aka: CVE-2026-82735, GHSA-mq7g-pffw-m8xh82 Match regex runs on over-length input in Ash.Type.String, enabling regex denial of service83 https://osv.dev/vulnerability/EEF-CVE-2026-827358485 EEF-CVE-2026-82740 (LOW)86 aka: CVE-2026-82740, GHSA-v29m-p28g-w5fc87 Ash.Type ignores outer array constraints on nested {:array, {:array, type}} inputs88 https://osv.dev/vulnerability/EEF-CVE-2026-827408990 EEF-CVE-2026-82737 (MEDIUM)91 aka: CVE-2026-82737, GHSA-68q3-w4w3-2gfv92 Ash.Vector wraps the 16-bit dimension header for vectors over 65,535 elements, corrupting data and crashing reads93 https://osv.dev/vulnerability/EEF-CVE-2026-8273794 ash_thrift 0.2.095 circular_buffer 1.1.096 comparable 1.0.097 decimal 2.4.1 VULNERABLE!98 EEF-CVE-2026-32686 (MEDIUM)99 aka: CVE-2026-32686, GHSA-rhv4-8758-jx7v100 Unbounded exponent in decimal enables unauthenticated DoS101 https://osv.dev/vulnerability/EEF-CVE-2026-32686102 earmark 1.4.49 RETIRED! VULNERABLE!103 (deprecated) Earmark is no longer maintained. Migrate to a replacement, for example MDEx (https://hex.pm/packages/mdex).104105 EEF-CVE-2026-48591 (MEDIUM)106 aka: CVE-2026-48591, GHSA-52mm-h59v-f3c7107 Stored XSS via unescaped HTML attribute values in earmark108 https://osv.dev/vulnerability/EEF-CVE-2026-48591109 ecto 3.13.6110 elixir_make 0.10.0111 ets 0.9.0112 interactive_cmd 0.1.4113 jason 1.4.5114 libgraph 0.16.0115 nerves 1.15.0116 nerves_discovery 0.1.5117 nerves_logging 0.2.4118 nerves_runtime 0.13.13119 nerves_system_bbb 2.30.2120 nerves_system_br 1.34.4121 nerves_system_mangopi_mq_pro 0.17.2122 nerves_system_qemu_aarch64 0.4.2123 nerves_system_rpi 2.1.2124 nerves_system_rpi0 2.1.2125 nerves_system_rpi0_2 2.1.2126 nerves_system_rpi2 2.1.2127 nerves_system_rpi3 2.1.2128 nerves_system_rpi4 2.1.2129 nerves_system_rpi5 2.1.2130 nerves_system_x86_64 1.34.2131 nerves_toolchain_aarch64_nerves_linux_gnu 15.3.1132 nerves_toolchain_armv6_nerves_linux_gnueabihf 15.3.1133 nerves_toolchain_armv7_nerves_linux_gnueabihf 15.3.1134 nerves_toolchain_riscv64_nerves_linux_gnu 15.3.1135 nerves_toolchain_x86_64_nerves_linux_musl 15.3.1136 nerves_uevent 0.1.7137 nimble_options 1.1.1138 picosat_elixir 0.2.3139 property_table 0.3.4140 reactor 0.7.0141 ring_logger 0.11.7142 shoehorn 0.9.3143 sourceror 1.12.3144 spark 1.1.55145 stream_data 0.6.0146 tablet 0.3.3147 telemetry 1.4.2148 toolshed 0.5.0149 typable 0.3.0150 uboot_env 1.0.2151* Getting ash_thrift (Hex package)152* Getting nerves (Hex package)153* Getting shoehorn (Hex package)154* Getting ring_logger (Hex package)155* Getting toolshed (Hex package)156* Getting nerves_runtime (Hex package)157* Getting nerves_system_bbb (Hex package)158* Getting nerves_system_mangopi_mq_pro (Hex package)159* Getting nerves_system_qemu_aarch64 (Hex package)160* Getting nerves_system_rpi (Hex package)161* Getting nerves_system_rpi0 (Hex package)162* Getting nerves_system_rpi0_2 (Hex package)163* Getting nerves_system_rpi2 (Hex package)164* Getting nerves_system_rpi3 (Hex package)165* Getting nerves_system_rpi4 (Hex package)166* Getting nerves_system_rpi5 (Hex package)167* Getting nerves_system_x86_64 (Hex package)168* Getting nerves_system_br (Hex package)169* Getting nerves_toolchain_x86_64_nerves_linux_musl (Hex package)170* Getting nerves_toolchain_aarch64_nerves_linux_gnu (Hex package)171* Getting nerves_toolchain_armv7_nerves_linux_gnueabihf (Hex package)172* Getting nerves_toolchain_armv6_nerves_linux_gnueabihf (Hex package)173* Getting nerves_toolchain_riscv64_nerves_linux_gnu (Hex package)174* Getting nerves_logging (Hex package)175* Getting nerves_uevent (Hex package)176* Getting uboot_env (Hex package)177* Getting elixir_make (Hex package)178* Getting property_table (Hex package)179* Getting circular_buffer (Hex package)180* Getting interactive_cmd (Hex package)181* Getting jason (Hex package)182* Getting nerves_discovery (Hex package)183* Getting tablet (Hex package)184* Getting ash (Hex package)185* Getting comparable (Hex package)186* Getting decimal (Hex package)187* Getting earmark (Hex package)188* Getting ecto (Hex package)189* Getting ets (Hex package)190* Getting picosat_elixir (Hex package)191* Getting reactor (Hex package)192* Getting spark (Hex package)193* Getting stream_data (Hex package)194* Getting telemetry (Hex package)195* Getting nimble_options (Hex package)196* Getting sourceror (Hex package)197* Getting libgraph (Hex package)198* Getting typable (Hex package)199Found retired packages, see above for details200Found packages with security advisories, see above for details201You have added/upgraded packages you could sponsor, run `mix hex.sponsor` to learn more202==> tablet203Compiling 2 files (.ex)204Generated tablet app205==> elixir_make206Compiling 8 files (.ex)207Generated elixir_make app208==> nerves_discovery209Compiling 5 files (.ex)210Generated nerves_discovery app211==> decimal212Compiling 4 files (.ex)213 warning: this clause of defp check_dbl_min_max/1 is never used (or it will always fail/warn when invoked)214 │215 2842 │ defp check_dbl_min_max(%Decimal{coef: :inf} = infinity), do: infinity216 │ ~217 │218 └─ lib/decimal.ex:2842:8: Decimal.check_dbl_min_max/1219220Generated decimal app221==> jason222Compiling 10 files (.ex)223Generated jason app224==> interactive_cmd225Compiling 1 file (.ex)226Generated interactive_cmd app227==> nerves228HOST_CC port.o229HOST_LD port230Compiling 55 files (.ex)231Generated nerves app232==> nerves_compatibility_test233234Nerves environment235 MIX_TARGET: x86_64236 MIX_ENV: prod237238Checking for prebuilt Nerves artifacts...239 Found nerves_toolchain_x86_64_nerves_linux_musl in cache240 /home/nerves/.nerves/artifacts/nerves_toolchain_x86_64_nerves_linux_musl-linux_x86_64-15.3.1241 Found nerves_system_x86_64 in cache242 /home/nerves/.nerves/artifacts/nerves_system_x86_64-portable-1.34.2243==> decimal244 warning: this clause of defp check_dbl_min_max/1 is never used (or it will always fail/warn when invoked)245 │246 2842 │ defp check_dbl_min_max(%Decimal{coef: :inf} = infinity), do: infinity247 │ ~248 │249 └─ (decimal 2.4.1) lib/decimal.ex:2842:8: Decimal.check_dbl_min_max/1250251==> nerves252==> nerves_compatibility_test253254Nerves environment255 MIX_TARGET: x86_64256 MIX_ENV: prod257258==> picosat_elixir259/home/nerves/.nerves/artifacts/nerves_toolchain_x86_64_nerves_linux_musl-linux_x86_64-15.3.1/bin/x86_64-nerves-linux-musl-gcc -std=c99 -finline-functions -Wall -O3 -DNDEBUG -fPIC -I /home/nerves/.nerves/artifacts/nerves_system_x86_64-portable-1.34.2/staging/usr/lib/erlang/erts-17.0.6/include -o /work/proj/deps_x86_64/picosat_elixir/priv/picosat.o -c /work/proj/deps_x86_64/picosat_elixir/c_src/picosat.c260/home/nerves/.nerves/artifacts/nerves_toolchain_x86_64_nerves_linux_musl-linux_x86_64-15.3.1/bin/x86_64-nerves-linux-musl-gcc -std=c99 -finline-functions -Wall -O3 -DNDEBUG -fPIC -I /home/nerves/.nerves/artifacts/nerves_system_x86_64-portable-1.34.2/staging/usr/lib/erlang/erts-17.0.6/include -o /work/proj/deps_x86_64/picosat_elixir/priv/picosat_nif.o -c /work/proj/deps_x86_64/picosat_elixir/c_src/picosat_nif.c261/work/proj/deps_x86_64/picosat_elixir/c_src/picosat.c:8150:10: fatal error: sys/unistd.h: No such file or directory262 8150 | #include <sys/unistd.h>263 | ^~~~~~~~~~~~~~264compilation terminated.265make: *** [Makefile:49: /work/proj/deps_x86_64/picosat_elixir/priv/picosat.o] Error 1266make: *** Waiting for unfinished jobs....267could not compile dependency :picosat_elixir, "mix compile" failed. Errors may have been logged above. You can recompile this dependency with "mix deps.compile picosat_elixir --force", update it with "mix deps.update picosat_elixir" or clean it with "mix deps.clean picosat_elixir"268==> nerves_compatibility_test269** (Mix) Could not compile with "make" (exit status: 2).270You need to have gcc and make installed. If you are using271Ubuntu or any other Debian-based system, install the packages272"build-essential". Also install "erlang-dev" package if not273included in your Erlang/OTP version. If you're on Fedora, run274"dnf group install 'Development Tools'".275