nerves_system_qemu_aarch64

1Resolving Hex dependencies...2Resolution completed in 0.211s3Unchanged:4  circular_buffer 1.1.05  connection 1.1.06  cowboy 2.6.3 VULNERABLE!7    EEF-CVE-2026-8466 (HIGH)8    aka: CVE-2026-8466, GHSA-jfc2-q6qh-g5x89    Unbounded buffer accumulation in multipart header parsing causes denial of service in cowboy10    https://osv.dev/vulnerability/EEF-CVE-2026-84661112    EEF-CVE-2026-65624 (MEDIUM)13    aka: CVE-2026-6562414    Cowboy HTTP/1.1 max_headers Bypass via Duplicate Header Names Enables Memory Exhaustion15    https://osv.dev/vulnerability/EEF-CVE-2026-656241617    GHSA-w4f7-4cxr-rv3c (MEDIUM)18    aka: CVE-2026-43966, EEF-CVE-2026-4396619    cowboy and gun affected by an HTTP Request/Response Splitting vulnerability20    https://osv.dev/vulnerability/GHSA-w4f7-4cxr-rv3c21  cowlib 2.7.3 VULNERABLE!22    EEF-CVE-2026-59248 (HIGH)23    aka: CVE-2026-5924824    Unbounded HPACK/QPACK prefixed-integer decoding in Cowlib causes memory-exhaustion DoS25    https://osv.dev/vulnerability/EEF-CVE-2026-592482627    EEF-CVE-2026-43970 (HIGH)28    aka: CVE-2026-43970, GHSA-84f2-rp86-235p29    Decompression Bomb in cow_spdy:inflate/2 Allows Memory Exhaustion via Crafted SPDY Frame30    https://osv.dev/vulnerability/EEF-CVE-2026-439703132    EEF-CVE-2026-43968 (MEDIUM)33    aka: CVE-2026-43968, GHSA-hv23-4qp7-8c8r34    CR Injection in SSE Encoder Enables Event Splitting via cow_sse:event/135    https://osv.dev/vulnerability/EEF-CVE-2026-439683637    EEF-CVE-2026-7790 (HIGH)38    aka: CVE-2026-7790, GHSA-32p9-57cr-4x6539    Unbounded chunk-size hex digits in cowlib cause quadratic CPU and memory DoS40    https://osv.dev/vulnerability/EEF-CVE-2026-779041  elixir_make 0.10.042  grpc 0.4.0-alpha.2 VULNERABLE!43    EEF-CVE-2026-48854 (HIGH)44    aka: CVE-2026-48854, GHSA-q8gf-9rvj-gmgj45    Unbounded request body accumulation causes memory exhaustion in elixir-grpc/grpc46    https://osv.dev/vulnerability/EEF-CVE-2026-4885447  grpc_builder 0.3.2-alpha48  gun 1.3.3 VULNERABLE!49    EEF-CVE-2026-43973 (HIGH)50    aka: CVE-2026-43973, GHSA-r53j-fjj5-mv7751    gun HTTP/1.1 response buffer has no size limit allowing server-controlled memory exhaustion52    https://osv.dev/vulnerability/EEF-CVE-2026-439735354    GHSA-w4f7-4cxr-rv3c (MEDIUM)55    aka: CVE-2026-43966, EEF-CVE-2026-4396656    cowboy and gun affected by an HTTP Request/Response Splitting vulnerability57    https://osv.dev/vulnerability/GHSA-w4f7-4cxr-rv3c58  interactive_cmd 0.1.459  nerves 2.0.0-pre.260  nerves_discovery 0.1.561  nerves_logging 0.2.462  nerves_runtime 0.13.1363  nerves_system_bbb 2.30.264  nerves_system_br 1.34.465  nerves_system_mangopi_mq_pro 0.17.266  nerves_system_qemu_aarch64 0.4.267  nerves_system_rpi0 2.1.268  nerves_system_rpi4 2.1.269  nerves_system_rpi5 2.1.270  nerves_system_trellis 0.5.071  nerves_system_x86_64 1.34.272  nerves_toolchain_aarch64_nerves_linux_gnu 15.3.173  nerves_toolchain_armv6_nerves_linux_gnueabihf 15.3.174  nerves_toolchain_armv7_nerves_linux_gnueabihf 15.3.175  nerves_toolchain_riscv64_nerves_linux_gnu 15.3.176  nerves_toolchain_x86_64_nerves_linux_musl 15.3.177  nerves_uevent 0.1.778  property_table 0.3.479  protobuf 0.17.080  ranch 1.7.181  recase 0.9.182  ring_logger 0.11.783  tablet 0.3.384  toolshed 0.5.085  typed_struct 0.1.486  uboot_env 1.0.287* Getting grpc_builder (Hex package)88* Getting nerves (Hex package)89* Getting ring_logger (Hex package)90* Getting toolshed (Hex package)91* Getting nerves_runtime (Hex package)92* Getting nerves_system_bbb (Hex package)93* Getting nerves_system_mangopi_mq_pro (Hex package)94* Getting nerves_system_qemu_aarch64 (Hex package)95* Getting nerves_system_rpi0 (Hex package)96* Getting nerves_system_rpi4 (Hex package)97* Getting nerves_system_rpi5 (Hex package)98* Getting nerves_system_trellis (Hex package)99* Getting nerves_system_x86_64 (Hex package)100* Getting nerves_system_br (Hex package)101* Getting nerves_toolchain_x86_64_nerves_linux_musl (Hex package)102* Getting nerves_toolchain_armv7_nerves_linux_gnueabihf (Hex package)103* Getting nerves_toolchain_aarch64_nerves_linux_gnu (Hex package)104* Getting nerves_toolchain_armv6_nerves_linux_gnueabihf (Hex package)105* Getting nerves_toolchain_riscv64_nerves_linux_gnu (Hex package)106* Getting nerves_logging (Hex package)107* Getting nerves_uevent (Hex package)108* Getting uboot_env (Hex package)109* Getting elixir_make (Hex package)110* Getting property_table (Hex package)111* Getting circular_buffer (Hex package)112* Getting interactive_cmd (Hex package)113* Getting nerves_discovery (Hex package)114* Getting tablet (Hex package)115* Getting connection (Hex package)116* Getting grpc (Hex package)117* Getting recase (Hex package)118* Getting typed_struct (Hex package)119* Getting cowboy (Hex package)120* Getting gun (Hex package)121* Getting protobuf (Hex package)122* Getting cowlib (Hex package)123* Getting ranch (Hex package)124Found packages with security advisories, see above for details125==> nerves_system_br126Generated nerves_system_br app127==> typed_struct128Compiling 1 file (.ex)129Generated typed_struct app130==> connection131Compiling 1 file (.ex)132     warning: using single-quoted strings to represent charlists is deprecated.133     Use ~c"" if you indeed want a charlist or use "" instead.134     You may run "mix format --migrate" to change all single-quoted135     strings to use the ~c sigil and fix this warning.136     │137 553 │         [{:data, [{'State', mod_state}]}]138     │                    ~139     │140     └─ lib/connection.ex:553:20141142     warning: using single-quoted strings to represent charlists is deprecated.143     Use ~c"" if you indeed want a charlist or use "" instead.144     You may run "mix format --migrate" to change all single-quoted145     strings to use the ~c sigil and fix this warning.146     │147 680 │     format = '** Generic server ~p terminating \n' ++148     │              ~149     │150     └─ lib/connection.ex:680:14151152     warning: using single-quoted strings to represent charlists is deprecated.153     Use ~c"" if you indeed want a charlist or use "" instead.154     You may run "mix format --migrate" to change all single-quoted155     strings to use the ~c sigil and fix this warning.156     │157 681 │       '** Last message in was ~p~n' ++ ## No last message158     │       ~159     │160     └─ lib/connection.ex:681:7161162     warning: using single-quoted strings to represent charlists is deprecated.163     Use ~c"" if you indeed want a charlist or use "" instead.164     You may run "mix format --migrate" to change all single-quoted165     strings to use the ~c sigil and fix this warning.166     │167 682 │       '** When Server state == ~p~n' ++168     │       ~169     │170     └─ lib/connection.ex:682:7171172     warning: using single-quoted strings to represent charlists is deprecated.173     Use ~c"" if you indeed want a charlist or use "" instead.174     You may run "mix format --migrate" to change all single-quoted175     strings to use the ~c sigil and fix this warning.176     │177 683 │       '** Reason for termination == ~n** ~p~n'178     │       ~179     │180     └─ lib/connection.ex:683:7181182Generated connection app183==> circular_buffer184Compiling 1 file (.ex)185Generated circular_buffer app186==> recase187Compiling 15 files (.ex)188Generated recase app189==> nerves_compatibility_test190===> Analyzing applications...191===> Compiling ranch192    ┌─ src/ranch_conns_sup.erl:193    │194 80 │  	catch erlang:send(SupPid, {?MODULE, active_connections, self(), Tag},195    │  	╰── Warning: 'catch ...' is deprecated; please use 'try ... catch ... end' instead.196Compile directive 'nowarn_deprecated_catch' can be used to suppress197warnings in selected modules.198199200     ┌─ src/ranch_ssl.erl:201     │202 142 │  	case ssl:ssl_accept(CSocket, Opts, Timeout) of203     │  	     ╰── Warning: ssl:ssl_accept/3 is removed; use ssl:handshake/1,2,3 instead204205206==> tablet207Compiling 2 files (.ex)208Generated tablet app209==> protobuf210Compiling 50 files (.ex)211Compiling lib/google/protobuf.ex (it's taking more than 10s)212Generated protobuf app213==> elixir_make214Compiling 8 files (.ex)215Generated elixir_make app216==> nerves_logging217 CC kmsg_tailer.o218 LD kmsg_tailer219Compiling 5 files (.ex)220Generated nerves_logging app221==> nerves_compatibility_test222===> Analyzing applications...223===> Compiling cowlib224===> Compiling src/cow_sse.erl failed225    ┌─ src/cow_sse.erl:226    │227 56 │  	-> {event, parsed_event(), State} | {more, State}.228    │  	                           ╰── type variable 'State' is only used once (is unbound)229230231** (Mix) Could not compile dependency :cowlib, "/home/nerves/.mix/elixir/1-20-otp-29/rebar3 bare compile --paths /work/proj/_build/qemu_aarch64/lib/*/ebin" command failed. Errors may have been logged above. You can recompile this dependency with "mix deps.compile cowlib --force", update it with "mix deps.update cowlib" or clean it with "mix deps.clean cowlib"