Build log
nerves_system_trellis
membrane_element_gcloud_speech_to_text 0.10.0 · fail · run membrane_element_gcloud_speech_to_text-0.10.0-1790990354478
455 of 455 lines
1Resolving Hex dependencies...2Resolution completed in 0.235s3Unchanged:4 bunch 1.6.45 certifi 2.17.06 circular_buffer 1.1.07 coerce 1.0.28 cowboy 2.6.3 VULNERABLE!9 EEF-CVE-2026-8466 (HIGH)10 aka: CVE-2026-8466, GHSA-jfc2-q6qh-g5x811 Unbounded buffer accumulation in multipart header parsing causes denial of service in cowboy12 https://osv.dev/vulnerability/EEF-CVE-2026-84661314 EEF-CVE-2026-65624 (MEDIUM)15 aka: CVE-2026-6562416 Cowboy HTTP/1.1 max_headers Bypass via Duplicate Header Names Enables Memory Exhaustion17 https://osv.dev/vulnerability/EEF-CVE-2026-656241819 GHSA-w4f7-4cxr-rv3c (MEDIUM)20 aka: CVE-2026-43966, EEF-CVE-2026-4396621 cowboy and gun affected by an HTTP Request/Response Splitting vulnerability22 https://osv.dev/vulnerability/GHSA-w4f7-4cxr-rv3c23 cowlib 2.7.3 VULNERABLE!24 EEF-CVE-2026-59248 (HIGH)25 aka: CVE-2026-5924826 Unbounded HPACK/QPACK prefixed-integer decoding in Cowlib causes memory-exhaustion DoS27 https://osv.dev/vulnerability/EEF-CVE-2026-592482829 EEF-CVE-2026-43970 (HIGH)30 aka: CVE-2026-43970, GHSA-84f2-rp86-235p31 Decompression Bomb in cow_spdy:inflate/2 Allows Memory Exhaustion via Crafted SPDY Frame32 https://osv.dev/vulnerability/EEF-CVE-2026-439703334 EEF-CVE-2026-43968 (MEDIUM)35 aka: CVE-2026-43968, GHSA-hv23-4qp7-8c8r36 CR Injection in SSE Encoder Enables Event Splitting via cow_sse:event/137 https://osv.dev/vulnerability/EEF-CVE-2026-439683839 EEF-CVE-2026-7790 (HIGH)40 aka: CVE-2026-7790, GHSA-32p9-57cr-4x6541 Unbounded chunk-size hex digits in cowlib cause quadratic CPU and memory DoS42 https://osv.dev/vulnerability/EEF-CVE-2026-779043 elixir_make 0.10.044 finch 0.24.045 gcloud_speech_grpc 0.4.046 goth 1.4.547 grpc 0.3.1 VULNERABLE!48 EEF-CVE-2026-48854 (HIGH)49 aka: CVE-2026-48854, GHSA-q8gf-9rvj-gmgj50 Unbounded request body accumulation causes memory exhaustion in elixir-grpc/grpc51 https://osv.dev/vulnerability/EEF-CVE-2026-4885452 gun 1.3.3 VULNERABLE!53 EEF-CVE-2026-43973 (HIGH)54 aka: CVE-2026-43973, GHSA-r53j-fjj5-mv7755 gun HTTP/1.1 response buffer has no size limit allowing server-controlled memory exhaustion56 https://osv.dev/vulnerability/EEF-CVE-2026-439735758 GHSA-w4f7-4cxr-rv3c (MEDIUM)59 aka: CVE-2026-43966, EEF-CVE-2026-4396660 cowboy and gun affected by an HTTP Request/Response Splitting vulnerability61 https://osv.dev/vulnerability/GHSA-w4f7-4cxr-rv3c62 hpax 1.1.063 interactive_cmd 0.1.464 jason 1.4.565 jose 1.11.1266 membrane_core 1.3.467 membrane_element_gcloud_speech_to_text 0.10.068 membrane_flac_format 0.2.269 mime 2.0.770 mint 1.11.071 nerves 2.0.0-pre.272 nerves_discovery 0.1.573 nerves_logging 0.2.474 nerves_runtime 0.13.1375 nerves_system_bbb 2.30.276 nerves_system_br 1.34.477 nerves_system_mangopi_mq_pro 0.17.278 nerves_system_qemu_aarch64 0.4.279 nerves_system_rpi0 2.1.280 nerves_system_rpi4 2.1.281 nerves_system_rpi5 2.1.282 nerves_system_trellis 0.5.083 nerves_system_x86_64 1.34.284 nerves_toolchain_aarch64_nerves_linux_gnu 15.3.185 nerves_toolchain_armv6_nerves_linux_gnueabihf 15.3.186 nerves_toolchain_armv7_nerves_linux_gnueabihf 15.3.187 nerves_toolchain_riscv64_nerves_linux_gnu 15.3.188 nerves_toolchain_x86_64_nerves_linux_musl 15.3.189 nerves_uevent 0.1.790 nimble_options 1.1.191 nimble_pool 1.1.092 numbers 5.2.593 property_table 0.3.494 protobuf 0.6.395 qex 0.5.296 ranch 1.7.197 ratio 4.0.198 ring_logger 0.11.799 tablet 0.3.3100 telemetry 1.4.2101 toolshed 0.5.0102 uboot_env 1.0.2103* Getting membrane_element_gcloud_speech_to_text (Hex package)104* Getting nerves (Hex package)105* Getting ring_logger (Hex package)106* Getting toolshed (Hex package)107* Getting nerves_runtime (Hex package)108* Getting nerves_system_bbb (Hex package)109* Getting nerves_system_mangopi_mq_pro (Hex package)110* Getting nerves_system_qemu_aarch64 (Hex package)111* Getting nerves_system_rpi0 (Hex package)112* Getting nerves_system_rpi4 (Hex package)113* Getting nerves_system_rpi5 (Hex package)114* Getting nerves_system_trellis (Hex package)115* Getting nerves_system_x86_64 (Hex package)116* Getting nerves_system_br (Hex package)117* Getting nerves_toolchain_x86_64_nerves_linux_musl (Hex package)118* Getting nerves_toolchain_armv7_nerves_linux_gnueabihf (Hex package)119* Getting nerves_toolchain_aarch64_nerves_linux_gnu (Hex package)120* Getting nerves_toolchain_armv6_nerves_linux_gnueabihf (Hex package)121* Getting nerves_toolchain_riscv64_nerves_linux_gnu (Hex package)122* Getting nerves_logging (Hex package)123* Getting nerves_uevent (Hex package)124* Getting uboot_env (Hex package)125* Getting elixir_make (Hex package)126* Getting property_table (Hex package)127* Getting circular_buffer (Hex package)128* Getting interactive_cmd (Hex package)129* Getting nerves_discovery (Hex package)130* Getting tablet (Hex package)131* Getting gcloud_speech_grpc (Hex package)132* Getting membrane_core (Hex package)133* Getting membrane_flac_format (Hex package)134* Getting qex (Hex package)135* Getting bunch (Hex package)136* Getting ratio (Hex package)137* Getting telemetry (Hex package)138* Getting numbers (Hex package)139* Getting coerce (Hex package)140* Getting certifi (Hex package)141* Getting goth (Hex package)142* Getting grpc (Hex package)143* Getting protobuf (Hex package)144* Getting cowboy (Hex package)145* Getting gun (Hex package)146* Getting cowlib (Hex package)147* Getting ranch (Hex package)148* Getting finch (Hex package)149* Getting jason (Hex package)150* Getting jose (Hex package)151* Getting mime (Hex package)152* Getting mint (Hex package)153* Getting nimble_options (Hex package)154* Getting nimble_pool (Hex package)155* Getting hpax (Hex package)156Found packages with security advisories, see above for details157==> nerves_system_br158Generated nerves_system_br app159==> mime160Compiling 1 file (.ex)161Generated mime app162==> circular_buffer163Compiling 1 file (.ex)164Generated circular_buffer app165==> nimble_options166Compiling 3 files (.ex)167Generated nimble_options app168==> jason169Compiling 10 files (.ex)170Generated jason app171==> membrane_flac_format172Compiling 3 files (.ex)173Generated membrane_flac_format app174==> hpax175Compiling 4 files (.ex)176Generated hpax app177==> mint178Compiling 1 file (.erl)179Compiling 21 files (.ex)180Generated mint app181==> coerce182Compiling 3 files (.ex)183Generated coerce app184==> jose185Compiling 113 files (.erl)186src/jose_server.erl:137:7: Warning: 'catch ...' is deprecated; please use 'try ... catch ... end' instead.187Compile directive 'nowarn_deprecated_catch' can be used to suppress188warnings in selected modules.189% 137| _ = catch jose_jwa:unsecured_signing(UnsecuredSigning),190% | ^191192src/jose_server.erl:797:7: Warning: 'catch ...' is deprecated; please use 'try ... catch ... end' instead.193Compile directive 'nowarn_deprecated_catch' can be used to suppress194warnings in selected modules.195% 797| case catch jose_crypto_compat:crypto_one_time(Cipher, Key, PlainText, true) of196% | ^197198src/jose_server.erl:799:9: Warning: 'catch ...' is deprecated; please use 'try ... catch ... end' instead.199Compile directive 'nowarn_deprecated_catch' can be used to suppress200warnings in selected modules.201% 799| case catch jose_crypto_compat:crypto_one_time(Cipher, Key, CipherText, false) of202% | ^203204src/jose_server.erl:809:7: Warning: 'catch ...' is deprecated; please use 'try ... catch ... end' instead.205Compile directive 'nowarn_deprecated_catch' can be used to suppress206warnings in selected modules.207% 809| case catch jose_crypto_compat:crypto_one_time(Cipher, Key, IV, PlainText, true) of208% | ^209210src/jose_server.erl:811:9: Warning: 'catch ...' is deprecated; please use 'try ... catch ... end' instead.211Compile directive 'nowarn_deprecated_catch' can be used to suppress212warnings in selected modules.213% 811| case catch jose_crypto_compat:crypto_one_time(Cipher, Key, IV, CipherText, false) of214% | ^215216src/jose_server.erl:821:7: Warning: 'catch ...' is deprecated; please use 'try ... catch ... end' instead.217Compile directive 'nowarn_deprecated_catch' can be used to suppress218warnings in selected modules.219% 821| case catch jose_crypto_compat:crypto_one_time(Cipher, Key, IV, {AAD, PlainText}, true) of220% | ^221222src/jose_server.erl:823:9: Warning: 'catch ...' is deprecated; please use 'try ... catch ... end' instead.223Compile directive 'nowarn_deprecated_catch' can be used to suppress224warnings in selected modules.225% 823| case catch jose_crypto_compat:crypto_one_time(Cipher, Key, IV, {AAD, CipherText, CipherTag}, false) of226% | ^227228src/jose_server.erl:837:7: Warning: 'catch ...' is deprecated; please use 'try ... catch ... end' instead.229Compile directive 'nowarn_deprecated_catch' can be used to suppress230warnings in selected modules.231% 837| case catch public_key:encrypt_public(PlainText, PublicKey, FutureOptions) of232% | ^233234src/jose_server.erl:840:9: Warning: 'catch ...' is deprecated; please use 'try ... catch ... end' instead.235Compile directive 'nowarn_deprecated_catch' can be used to suppress236warnings in selected modules.237% 840| case catch public_key:decrypt_private(CipherText, PrivateKey, FutureOptions) of238% | ^239240src/jose_server.erl:842:11: Warning: 'catch ...' is deprecated; please use 'try ... catch ... end' instead.241Compile directive 'nowarn_deprecated_catch' can be used to suppress242warnings in selected modules.243% 842| case catch public_key:decrypt_private(rsa_ciphertext(Algorithm), PrivateKey, FutureOptions) of244% | ^245246src/jose_server.erl:859:7: Warning: 'catch ...' is deprecated; please use 'try ... catch ... end' instead.247Compile directive 'nowarn_deprecated_catch' can be used to suppress248warnings in selected modules.249% 859| case catch public_key:encrypt_public(PlainText, PublicKey, LegacyOptions) of250% | ^251252src/jose_server.erl:862:9: Warning: 'catch ...' is deprecated; please use 'try ... catch ... end' instead.253Compile directive 'nowarn_deprecated_catch' can be used to suppress254warnings in selected modules.255% 862| case catch public_key:decrypt_private(CipherText, PrivateKey, LegacyOptions) of256% | ^257258src/jose_server.erl:864:11: Warning: 'catch ...' is deprecated; please use 'try ... catch ... end' instead.259Compile directive 'nowarn_deprecated_catch' can be used to suppress260warnings in selected modules.261% 864| case catch public_key:decrypt_private(rsa_ciphertext(Algorithm), PrivateKey, LegacyOptions) of262% | ^263264src/jose_server.erl:882:7: Warning: 'catch ...' is deprecated; please use 'try ... catch ... end' instead.265Compile directive 'nowarn_deprecated_catch' can be used to suppress266warnings in selected modules.267% 882| case catch public_key:sign(Message, DigestType, PrivateKey, Options) of268% | ^269270src/jose_server.erl:885:9: Warning: 'catch ...' is deprecated; please use 'try ... catch ... end' instead.271Compile directive 'nowarn_deprecated_catch' can be used to suppress272warnings in selected modules.273% 885| case catch public_key:verify(Message, DigestType, Signature, PublicKey, Options) of274% | ^275276src/jose_server.erl:897:7: Warning: 'catch ...' is deprecated; please use 'try ... catch ... end' instead.277Compile directive 'nowarn_deprecated_catch' can be used to suppress278warnings in selected modules.279% 897| case catch public_key:sign(Message, DigestType, PrivateKey) of280% | ^281282src/jose_server.erl:900:9: Warning: 'catch ...' is deprecated; please use 'try ... catch ... end' instead.283Compile directive 'nowarn_deprecated_catch' can be used to suppress284warnings in selected modules.285% 900| case catch public_key:verify(Message, DigestType, Signature, PublicKey) of286% | ^287288src/jwa/jose_jwa.erl:230:7: Warning: 'catch ...' is deprecated; please use 'try ... catch ... end' instead.289Compile directive 'nowarn_deprecated_catch' can be used to suppress290warnings in selected modules.291% 230| case catch block_cipher(Cipher) of292% | ^293294src/jwa/jose_jwa.erl:238:7: Warning: 'catch ...' is deprecated; please use 'try ... catch ... end' instead.295Compile directive 'nowarn_deprecated_catch' can be used to suppress296warnings in selected modules.297% 238| case catch ?MAYBE_START_JOSE(ets:lookup_element(?TAB, chacha20_poly1305_module, 2)) of298% | ^299300src/jwa/jose_jwa.erl:246:7: Warning: 'catch ...' is deprecated; please use 'try ... catch ... end' instead.301Compile directive 'nowarn_deprecated_catch' can be used to suppress302warnings in selected modules.303% 246| case catch rsa_crypt(Padding) of304% | ^305306src/jwa/jose_jwa.erl:254:7: Warning: 'catch ...' is deprecated; please use 'try ... catch ... end' instead.307Compile directive 'nowarn_deprecated_catch' can be used to suppress308warnings in selected modules.309% 254| case catch rsa_sign(Padding) of310% | ^311312src/jwa/jose_jwa.erl:262:7: Warning: 'catch ...' is deprecated; please use 'try ... catch ... end' instead.313Compile directive 'nowarn_deprecated_catch' can be used to suppress314warnings in selected modules.315% 262| case catch ?MAYBE_START_JOSE(ets:lookup_element(?TAB, xchacha20_poly1305_module, 2)) of316% | ^317318Compiling 8 files (.ex)319Generated jose app320==> bunch321Compiling 19 files (.ex)322Generated bunch app323==> nerves_compatibility_test324===> Analyzing applications...325===> Compiling ranch326 ┌─ src/ranch_conns_sup.erl:327 │328 80 │ catch erlang:send(SupPid, {?MODULE, active_connections, self(), Tag},329 │ ╰── Warning: 'catch ...' is deprecated; please use 'try ... catch ... end' instead.330Compile directive 'nowarn_deprecated_catch' can be used to suppress331warnings in selected modules.332333334 ┌─ src/ranch_ssl.erl:335 │336 142 │ case ssl:ssl_accept(CSocket, Opts, Timeout) of337 │ ╰── Warning: ssl:ssl_accept/3 is removed; use ssl:handshake/1,2,3 instead338339340==> tablet341Compiling 2 files (.ex)342Generated tablet app343==> protobuf344Compiling 20 files (.ex)345 warning: this clause cannot match because a previous clause at line 253 matches the same pattern as this clause346 │347 254 │ defp cal_repeated(_props, %{repeated: true, oneof: true}), do:348 │ ~349 │350 └─ lib/protobuf/dsl.ex:254:8351352 warning: Logger.warn/1 is deprecated. Use Logger.warning/2 instead353 │354 119 │ val = decode_type_m(type, key, val)355 │ ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~356 │357 └─ lib/protobuf/decoder.ex:119: Protobuf.Decoder.build_struct/3358359 warning: the variable "len" is accessed inside size(...) of a bitstring but it was defined outside of the match. You must precede it with the pin operator360 │361 270 │ <<bytes::bytes-size(len), rest::bits>> = bin362 │ ~363 │364 └─ lib/protobuf/decoder.ex:270:25: Protobuf.Decoder.raw_handle_varint/4365366 warning: Logger.warn/1 is deprecated. Use Logger.warning/2 instead367 │368 303 │ decode_type_m(type, key, v)369 │ ~~~~~~~~~~~~~~~~~~~~~~~~~~~370 │371 └─ lib/protobuf/decoder.ex:303: Protobuf.Decoder.put_packed_field/3372373warning: pattern matching on 0.0 is equivalent to matching only on +0.0. Instead you must match on +0.0 or -0.0374└─ lib/protobuf/encoder.ex: Protobuf.Encoder.skip_field?/3375376 warning: System.stacktrace/0 is deprecated. Use __STACKTRACE__ instead377 │378 65 │ stacktrace = System.stacktrace()379 │ ~380 │381 └─ lib/protobuf/encoder.ex:65:27: Protobuf.Encoder.encode_fields/5382383 warning: the following clause is redundant:384385 defp cal_repeated(_props, %{repeated: true, oneof: true})386387 it has type:388389 dynamic(), %{..., oneof: true, repeated: true}390391 previous clauses have already matched on the following types:392393 %{..., map?: true}, term()394 term(), %{..., repeated: true}395396 │397 254 │ defp cal_repeated(_props, %{repeated: true, oneof: true}), do:398 │ ~399 │400 └─ lib/protobuf/dsl.ex:254:8: Protobuf.DSL.cal_repeated/2401402 warning: incompatible types given to Protobuf.Decoder.decode/2:403404 Protobuf.Decoder.decode(data, mod)405406 given types:407408 -dynamic(%{..., __struct__: atom()})-, dynamic(atom())409410 but expected one of:411412 bitstring(), atom()413414 where "data" was given the type:415416 # type: dynamic(%{..., __struct__: atom()})417 # from: lib/protobuf.ex:29:21418 %mod{} = data419420 where "mod" was given the type:421422 # type: dynamic(atom())423 # from: lib/protobuf.ex:29:21424 %mod{} = data425426 type warning found at:427 │428 30 │ Protobuf.Decoder.decode(data, mod)429 │ ~430 │431 └─ lib/protobuf.ex:30:22: Protobuf.decode/1432433Generated protobuf app434==> numbers435Compiling 7 files (.ex)436Generated numbers app437==> elixir_make438Compiling 8 files (.ex)439Generated elixir_make app440==> nerves_logging441 CC kmsg_tailer.o442 LD kmsg_tailer443Compiling 5 files (.ex)444Generated nerves_logging app445==> nerves_compatibility_test446===> Analyzing applications...447===> Compiling cowlib448===> Compiling src/cow_sse.erl failed449 ┌─ src/cow_sse.erl:450 │451 56 │ -> {event, parsed_event(), State} | {more, State}.452 │ ╰── type variable 'State' is only used once (is unbound)453454455** (Mix) Could not compile dependency :cowlib, "/home/nerves/.mix/elixir/1-20-otp-29/rebar3 bare compile --paths /work/proj/_build/trellis/lib/*/ebin" command failed. Errors may have been logged above. You can recompile this dependency with "mix deps.compile cowlib --force", update it with "mix deps.update cowlib" or clean it with "mix deps.clean cowlib"