Build log
nerves_system_trellis
onfleet_api 0.1.0 · fail · run onfleet_api-0.1.0-1791025322297
271 of 271 lines
1Resolving Hex dependencies...2Resolution completed in 0.286s3Unchanged:4 certifi 2.5.15 circular_buffer 1.1.06 elixir_make 0.10.07 hackney 1.15.2 VULNERABLE!8 GHSA-vq52-99r9-h5pw (LOW)9 aka: CVE-2025-121110 Server-side Request Forgery (SSRF) in hackney11 https://osv.dev/vulnerability/GHSA-vq52-99r9-h5pw1213 EEF-CVE-2026-47075 (MEDIUM)14 aka: CVE-2026-47075, GHSA-j9wq-vxxc-94wf15 CR/LF injection in query parameter in hackney16 https://osv.dev/vulnerability/EEF-CVE-2026-470751718 EEF-CVE-2026-47071 (HIGH)19 aka: CVE-2026-47071, GHSA-gp9c-pm5m-5cxr20 SOCKS5 TLS upgrade ignores caller timeout in hackney21 https://osv.dev/vulnerability/EEF-CVE-2026-470712223 EEF-CVE-2026-47076 (MEDIUM)24 aka: CVE-2026-47076, GHSA-pj7v-xfvx-wmjq25 SSRF allowlist bypass via percent-encoded host in hackney26 https://osv.dev/vulnerability/EEF-CVE-2026-470762728 EEF-CVE-2026-47069 (LOW)29 aka: CVE-2026-47069, GHSA-mp55-p8c9-rfw230 CRLF injection in cookie domain/path options in hackney31 https://osv.dev/vulnerability/EEF-CVE-2026-470693233 GHSA-9fm9-hp7p-53mf (LOW)34 aka: CVE-2025-386435 Hackney fails to properly release HTTP connections to the pool36 https://osv.dev/vulnerability/GHSA-9fm9-hp7p-53mf37 httpoison 1.6.238 idna 6.0.039 interactive_cmd 0.1.440 jason 1.4.541 metrics 1.0.142 mimerl 1.5.043 nerves 2.0.0-pre.244 nerves_discovery 0.1.545 nerves_logging 0.2.446 nerves_runtime 0.13.1347 nerves_system_bbb 2.30.248 nerves_system_br 1.34.449 nerves_system_mangopi_mq_pro 0.17.250 nerves_system_qemu_aarch64 0.4.251 nerves_system_rpi0 2.1.252 nerves_system_rpi4 2.1.253 nerves_system_rpi5 2.1.254 nerves_system_trellis 0.5.055 nerves_system_x86_64 1.34.256 nerves_toolchain_aarch64_nerves_linux_gnu 15.3.157 nerves_toolchain_armv6_nerves_linux_gnueabihf 15.3.158 nerves_toolchain_armv7_nerves_linux_gnueabihf 15.3.159 nerves_toolchain_riscv64_nerves_linux_gnu 15.3.160 nerves_toolchain_x86_64_nerves_linux_musl 15.3.161 nerves_uevent 0.1.762 onfleet_api 0.1.063 parse_trans 3.4.264 property_table 0.3.465 ring_logger 0.11.766 ssl_verify_fun 1.1.567 tablet 0.3.368 toolshed 0.5.069 uboot_env 1.0.270 unicode_util_compat 0.4.171* Getting onfleet_api (Hex package)72* Getting nerves (Hex package)73* Getting ring_logger (Hex package)74* Getting toolshed (Hex package)75* Getting nerves_runtime (Hex package)76* Getting nerves_system_bbb (Hex package)77* Getting nerves_system_mangopi_mq_pro (Hex package)78* Getting nerves_system_qemu_aarch64 (Hex package)79* Getting nerves_system_rpi0 (Hex package)80* Getting nerves_system_rpi4 (Hex package)81* Getting nerves_system_rpi5 (Hex package)82* Getting nerves_system_trellis (Hex package)83* Getting nerves_system_x86_64 (Hex package)84* Getting nerves_system_br (Hex package)85* Getting nerves_toolchain_x86_64_nerves_linux_musl (Hex package)86* Getting nerves_toolchain_armv7_nerves_linux_gnueabihf (Hex package)87* Getting nerves_toolchain_aarch64_nerves_linux_gnu (Hex package)88* Getting nerves_toolchain_armv6_nerves_linux_gnueabihf (Hex package)89* Getting nerves_toolchain_riscv64_nerves_linux_gnu (Hex package)90* Getting nerves_logging (Hex package)91* Getting nerves_uevent (Hex package)92* Getting uboot_env (Hex package)93* Getting elixir_make (Hex package)94* Getting property_table (Hex package)95* Getting circular_buffer (Hex package)96* Getting interactive_cmd (Hex package)97* Getting nerves_discovery (Hex package)98* Getting tablet (Hex package)99* Getting hackney (Hex package)100* Getting httpoison (Hex package)101* Getting jason (Hex package)102* Getting certifi (Hex package)103* Getting idna (Hex package)104* Getting metrics (Hex package)105* Getting mimerl (Hex package)106* Getting ssl_verify_fun (Hex package)107* Getting unicode_util_compat (Hex package)108* Getting parse_trans (Hex package)109Found packages with security advisories, see above for details110==> nerves_system_br111Generated nerves_system_br app112==> circular_buffer113Compiling 1 file (.ex)114Generated circular_buffer app115==> jason116Compiling 10 files (.ex)117Generated jason app118==> nerves_compatibility_test119===> Analyzing applications...120===> Compiling mimerl121==> ssl_verify_fun122Compiling 7 files (.erl)123src/ssl_verify_fingerprint.erl:15:14: can't find include lib "public_key/include/public_key.hrl"124% 15| -include_lib("public_key/include/public_key.hrl").125% | ^126127src/ssl_verify_fingerprint.erl:27:26: record 'OTPCertificate' undefined128% 27| -spec verify_fun(Cert :: #'OTPCertificate'{},129% | ^130131src/ssl_verify_fingerprint.erl:29:39: record 'Extension' undefined132% 29| {extension, #'Extension'{}}, InitialUserState :: term()) ->133% | ^134135src/ssl_verify_fingerprint.erl:52:39: record 'OTPCertificate' undefined136% 52| -spec verify_cert_fingerprint(Cert :: #'OTPCertificate'{}, Fingerprint :: fingerprint()) ->137% | ^138139src/ssl_verify_hostname.erl:16:14: can't find include lib "public_key/include/public_key.hrl"140% 16| -include_lib("public_key/include/public_key.hrl").141% | ^142143src/ssl_verify_hostname.erl:28:26: record 'OTPCertificate' undefined144% 28| -spec verify_fun(Cert :: #'OTPCertificate'{},145% | ^146147src/ssl_verify_hostname.erl:30:39: record 'Extension' undefined148% 30| {extension, #'Extension'{}}, InitialUserState :: term()) ->149% | ^150151src/ssl_verify_hostname.erl:46:36: record 'OTPCertificate' undefined152% 46| -spec verify_cert_hostname(Cert :: #'OTPCertificate'{}, Hostname :: hostname()) ->153% | ^154155src/ssl_verify_hostname.erl:76:38: record 'OTPCertificate' undefined156% 76| Cert :: #'OTPCertificate'{},157% | ^158159src/ssl_verify_pk.erl:14:14: can't find include lib "public_key/include/public_key.hrl"160% 14| -include_lib("public_key/include/public_key.hrl").161% | ^162163src/ssl_verify_pk.erl:26:26: record 'OTPCertificate' undefined164% 26| -spec verify_fun(Cert :: #'OTPCertificate'{},165% | ^166167src/ssl_verify_pk.erl:28:39: record 'Extension' undefined168% 28| {extension, #'Extension'{}}, InitialUserState :: term()) ->169% | ^170171src/ssl_verify_pk.erl:51:30: record 'OTPCertificate' undefined172% 51| -spec verify_cert_pk(Cert :: #'OTPCertificate'{}, Pk :: pk()) ->173% | ^174175src/ssl_verify_fun_cert_helpers.erl:13:14: can't find include lib "public_key/include/public_key.hrl"176% 13| -include_lib("public_key/include/public_key.hrl").177% | ^178179src/ssl_verify_fun_cert_helpers.erl:23:34: undefined macro 'id-ce-subjectAltName'180% 23| AltSubject = select_extension(?'id-ce-subjectAltName', Extensions),181% | ^182183src/ssl_verify_fun_cert_helpers.erl:9:2: function extract_dns_names/1 undefined, did you mean extract_cn/1?184% 9| -export([extract_dns_names/1,185% | ^186187src/ssl_verify_fun_cert_helpers.erl:19:2: spec for undefined function extract_dns_names/1188% 19| -spec extract_dns_names(Cert :: #'OTPCertificate'{}) -> [] | [string()].189% | ^190191src/ssl_verify_fun_cert_helpers.erl:19:33: record 'OTPCertificate' undefined192% 19| -spec extract_dns_names(Cert :: #'OTPCertificate'{}) -> [] | [string()].193% | ^194195src/ssl_verify_fun_cert_helpers.erl:32:26: record 'OTPCertificate' undefined196% 32| -spec extract_cn(Cert :: #'OTPCertificate'{}) -> {error, no_common_name} | {ok, string()} | {error, invalid}.197% | ^198199src/ssl_verify_fun_cert_helpers.erl:34:17: record 'OTPCertificate' undefined200% 34| TBSCert = Cert#'OTPCertificate'.tbsCertificate,201% | ^202203src/ssl_verify_fun_cert_helpers.erl:35:32: record 'OTPTBSCertificate' undefined204% 35| {rdnSequence, List} = TBSCert#'OTPTBSCertificate'.subject,205% | ^206207src/ssl_verify_fun_cert_helpers.erl:38:26: record 'OTPCertificate' undefined208% 38| -spec extract_pk(Cert :: #'OTPCertificate'{}) -> {error, no_common_name} | #'SubjectPublicKeyInfo'{}.209% | ^210211src/ssl_verify_fun_cert_helpers.erl:38:76: record 'SubjectPublicKeyInfo' undefined212% 38| -spec extract_pk(Cert :: #'OTPCertificate'{}) -> {error, no_common_name} | #'SubjectPublicKeyInfo'{}.213% | ^214215src/ssl_verify_fun_cert_helpers.erl:40:17: record 'OTPCertificate' undefined216% 40| TBSCert = Cert#'OTPCertificate'.tbsCertificate,217% | ^218219src/ssl_verify_fun_cert_helpers.erl:41:26: record 'OTPTBSCertificate' undefined220% 41| PublicKeyInfo = TBSCert#'OTPTBSCertificate'.subjectPublicKeyInfo,221% | ^222223src/ssl_verify_fun_cert_helpers.erl:42:16: record 'OTPSubjectPublicKeyInfo' undefined224% 42| PublicKeyInfo#'OTPSubjectPublicKeyInfo'.subjectPublicKey.225% | ^226227src/ssl_verify_fun_cert_helpers.erl:48:24: record 'Extension' undefined228% 48| -spec extensions_list([#'Extension'{}] | asn1_NOVALUE) -> [] | [#'Extension'{}].229% | ^230231src/ssl_verify_fun_cert_helpers.erl:48:65: record 'Extension' undefined232% 48| -spec extensions_list([#'Extension'{}] | asn1_NOVALUE) -> [] | [#'Extension'{}].233% | ^234235src/ssl_verify_fun_cert_helpers.erl:55:39: record 'Extension' undefined236% 55| -spec select_extension(Id :: term(), [#'Extension'{}]) -> undefined | #'Extension'{}.237% | ^238239src/ssl_verify_fun_cert_helpers.erl:55:71: record 'Extension' undefined240% 55| -spec select_extension(Id :: term(), [#'Extension'{}]) -> undefined | #'Extension'{}.241% | ^242243src/ssl_verify_fun_cert_helpers.erl:57:28: record 'Extension' undefined244% 57| Matching = [Extension || #'Extension'{extnID = ExtId} = Extension <- Extensions, ExtId =:= Id],245% | ^246247src/ssl_verify_fun_cert_helpers.erl:57:84: variable 'ExtId' is unbound248% 57| Matching = [Extension || #'Extension'{extnID = ExtId} = Extension <- Extensions, ExtId =:= Id],249% | ^250251src/ssl_verify_fun_cert_helpers.erl:75:15: record 'AttributeTypeAndValue' undefined252% 75| extract_cn2([[#'AttributeTypeAndValue'{type={2, 5, 4, 3},253% | ^254255src/ssl_verify_fun_cert_helpers.erl:77:39: variable 'CN' is unbound256% 77| ssl_verify_fun_encodings:get_string(CN);257% | ^258259src/ssl_verify_fun_cert_helpers.erl:49:1: Warning: function extensions_list/1 is unused260% 49| extensions_list(E) ->261% | ^262263src/ssl_verify_fun_cert_helpers.erl:56:1: Warning: function select_extension/2 is unused264% 56| select_extension(Id, Extensions) ->265% | ^266267src/ssl_verify_fun_cert_helpers.erl:64:1: Warning: function extract_dns_names_from_alt_names/2 is unused268% 64| extract_dns_names_from_alt_names([ExtValue | Rest], Acc) ->269% | ^270271could not compile dependency :ssl_verify_fun, "mix compile" failed. Errors may have been logged above. You can recompile this dependency with "mix deps.compile ssl_verify_fun --force", update it with "mix deps.update ssl_verify_fun" or clean it with "mix deps.clean ssl_verify_fun"