nerves_system_rpi4

1Resolving Hex dependencies...2Resolution completed in 0.271s3Unchanged:4  bpe 8.12.35  circular_buffer 1.1.06  cowboy 2.9.0 VULNERABLE!7    EEF-CVE-2026-8466 (HIGH)8    aka: CVE-2026-8466, GHSA-jfc2-q6qh-g5x89    Unbounded buffer accumulation in multipart header parsing causes denial of service in cowboy10    https://osv.dev/vulnerability/EEF-CVE-2026-84661112    GHSA-w4f7-4cxr-rv3c (MEDIUM)13    aka: CVE-2026-43966, EEF-CVE-2026-4396614    cowboy and gun affected by an HTTP Request/Response Splitting vulnerability15    https://osv.dev/vulnerability/GHSA-w4f7-4cxr-rv3c1617    EEF-CVE-2026-65624 (MEDIUM)18    aka: CVE-2026-6562419    Cowboy HTTP/1.1 max_headers Bypass via Duplicate Header Names Enables Memory Exhaustion20    https://osv.dev/vulnerability/EEF-CVE-2026-6562421  cowlib 2.11.0 VULNERABLE!22    EEF-CVE-2026-7790 (HIGH)23    aka: CVE-2026-7790, GHSA-32p9-57cr-4x6524    Unbounded chunk-size hex digits in cowlib cause quadratic CPU and memory DoS25    https://osv.dev/vulnerability/EEF-CVE-2026-77902627    EEF-CVE-2026-43968 (MEDIUM)28    aka: CVE-2026-43968, GHSA-hv23-4qp7-8c8r29    CR Injection in SSE Encoder Enables Event Splitting via cow_sse:event/130    https://osv.dev/vulnerability/EEF-CVE-2026-439683132    EEF-CVE-2026-43970 (HIGH)33    aka: CVE-2026-43970, GHSA-84f2-rp86-235p34    Decompression Bomb in cow_spdy:inflate/2 Allows Memory Exhaustion via Crafted SPDY Frame35    https://osv.dev/vulnerability/EEF-CVE-2026-439703637    EEF-CVE-2026-59248 (HIGH)38    aka: CVE-2026-5924839    Unbounded HPACK/QPACK prefixed-integer decoding in Cowlib causes memory-exhaustion DoS40    https://osv.dev/vulnerability/EEF-CVE-2026-592484142    EEF-CVE-2026-43969 (LOW)43    aka: CVE-2026-43969, GHSA-g2wm-735q-3f5644    Cookie Request Header Injection via Unvalidated Encoder in cow_cookie:cookie/145    https://osv.dev/vulnerability/EEF-CVE-2026-439694647    EEF-CVE-2026-43966 (MEDIUM)48    aka: CVE-2026-43966, GHSA-w4f7-4cxr-rv3c49    HTTP Response Splitting via Non-VCHAR Bytes in cow_http_struct_hd:escape_string/250    https://osv.dev/vulnerability/EEF-CVE-2026-439665152    EEF-CVE-2026-43971 (MEDIUM)53    aka: CVE-2026-4397154    Link Header Directive Smuggling via Unescaped target/rel/Attribute Keys in cow_link:link/155    https://osv.dev/vulnerability/EEF-CVE-2026-4397156  elixir_make 0.10.057  form 7.10.058  interactive_cmd 0.1.459  kvs 10.8.360  med 0.12.361  n2o 10.12.462  nerves 2.0.0-pre.263  nerves_discovery 0.1.564  nerves_logging 0.2.465  nerves_runtime 0.13.1366  nerves_system_bbb 2.30.267  nerves_system_br 1.34.468  nerves_system_mangopi_mq_pro 0.17.269  nerves_system_qemu_aarch64 0.4.270  nerves_system_rpi0 2.1.271  nerves_system_rpi4 2.1.272  nerves_system_rpi5 2.1.273  nerves_system_trellis 0.5.074  nerves_system_x86_64 1.34.275  nerves_toolchain_aarch64_nerves_linux_gnu 15.3.176  nerves_toolchain_armv6_nerves_linux_gnueabihf 15.3.177  nerves_toolchain_armv7_nerves_linux_gnueabihf 15.3.178  nerves_toolchain_riscv64_nerves_linux_gnu 15.3.179  nerves_toolchain_x86_64_nerves_linux_musl 15.3.180  nerves_uevent 0.1.781  nitro 7.10.082  property_table 0.3.483  ranch 1.8.084  ring_logger 0.11.785  rocksdb 1.6.086  syn 2.1.087  tablet 0.3.388  toolshed 0.5.089  uboot_env 1.0.290* Getting med (Hex package)91* Getting nerves (Hex package)92* Getting ring_logger (Hex package)93* Getting toolshed (Hex package)94* Getting nerves_runtime (Hex package)95* Getting nerves_system_bbb (Hex package)96* Getting nerves_system_mangopi_mq_pro (Hex package)97* Getting nerves_system_qemu_aarch64 (Hex package)98* Getting nerves_system_rpi0 (Hex package)99* Getting nerves_system_rpi4 (Hex package)100* Getting nerves_system_rpi5 (Hex package)101* Getting nerves_system_trellis (Hex package)102* Getting nerves_system_x86_64 (Hex package)103* Getting nerves_system_br (Hex package)104* Getting nerves_toolchain_x86_64_nerves_linux_musl (Hex package)105* Getting nerves_toolchain_armv7_nerves_linux_gnueabihf (Hex package)106* Getting nerves_toolchain_aarch64_nerves_linux_gnu (Hex package)107* Getting nerves_toolchain_armv6_nerves_linux_gnueabihf (Hex package)108* Getting nerves_toolchain_riscv64_nerves_linux_gnu (Hex package)109* Getting nerves_logging (Hex package)110* Getting nerves_uevent (Hex package)111* Getting uboot_env (Hex package)112* Getting elixir_make (Hex package)113* Getting property_table (Hex package)114* Getting circular_buffer (Hex package)115* Getting interactive_cmd (Hex package)116* Getting nerves_discovery (Hex package)117* Getting tablet (Hex package)118* Getting bpe (Hex package)119* Getting cowboy (Hex package)120* Getting form (Hex package)121* Getting kvs (Hex package)122* Getting n2o (Hex package)123* Getting nitro (Hex package)124* Getting rocksdb (Hex package)125* Getting syn (Hex package)126* Getting cowlib (Hex package)127* Getting ranch (Hex package)128Found packages with security advisories, see above for details129You have added/upgraded packages you could sponsor, run `mix hex.sponsor` to learn more130==> nerves_system_br131Generated nerves_system_br app132==> circular_buffer133Compiling 1 file (.ex)134Generated circular_buffer app135==> nerves_compatibility_test136===> Analyzing applications...137===> Compiling ranch138    ┌─ src/ranch_conns_sup.erl:139    │140 80 │  	catch erlang:send(SupPid, {?MODULE, active_connections, self(), Tag},141    │  	╰── Warning: 'catch ...' is deprecated; please use 'try ... catch ... end' instead.142Compile directive 'nowarn_deprecated_catch' can be used to suppress143warnings in selected modules.144145146==> tablet147Compiling 2 files (.ex)148Generated tablet app149==> kvs150Compiling 6 files (.erl)151src/stores/kvs_fs.erl:70:10: Warning: function kvs_fs:get/2 is not exported152%   70|     case kvs_fs:get(TableName, Key) of153%     |          ^154155src/stores/kvs_rocks.erl:113:3: Warning: 'catch ...' is deprecated; please use 'try ... catch ... end' instead.156Compile directive 'nowarn_deprecated_catch' can be used to suppress157warnings in selected modules.158%  113|   catch case lists:foldl(State_Machine, Initial_Object, Compiled_Operations) of159%     |   ^160161Compiling 1 file (.ex)162warning: cannot infer signatures from :ex_doc because it is not loaded163164Generated kvs app165==> elixir_make166Compiling 8 files (.ex)167Generated elixir_make app168==> nerves_logging169 CC kmsg_tailer.o170 LD kmsg_tailer171Compiling 5 files (.ex)172Generated nerves_logging app173==> nerves_compatibility_test174===> Analyzing applications...175===> Compiling cowlib176===> Compiling src/cow_sse.erl failed177    ┌─ src/cow_sse.erl:178    │179 56 │  	-> {event, parsed_event(), State} | {more, State}.180    │  	                           ╰── type variable 'State' is only used once (is unbound)181182183** (Mix) Could not compile dependency :cowlib, "/home/nerves/.mix/elixir/1-20-otp-29/rebar3 bare compile --paths /work/proj/_build/rpi4/lib/*/ebin" command failed. Errors may have been logged above. You can recompile this dependency with "mix deps.compile cowlib --force", update it with "mix deps.update cowlib" or clean it with "mix deps.clean cowlib"