Build log
nerves_system_x86_64
onfleet_api 0.1.0 · fail · run onfleet_api-0.1.0-1791025322297
260 of 260 lines
1Resolving Hex dependencies...2Resolution completed in 0.107s3Unchanged:4 certifi 2.5.15 circular_buffer 1.1.06 elixir_make 0.10.07 hackney 1.15.2 VULNERABLE!8 GHSA-vq52-99r9-h5pw (LOW)9 aka: CVE-2025-121110 Server-side Request Forgery (SSRF) in hackney11 https://osv.dev/vulnerability/GHSA-vq52-99r9-h5pw1213 EEF-CVE-2026-47075 (MEDIUM)14 aka: CVE-2026-47075, GHSA-j9wq-vxxc-94wf15 CR/LF injection in query parameter in hackney16 https://osv.dev/vulnerability/EEF-CVE-2026-470751718 EEF-CVE-2026-47071 (HIGH)19 aka: CVE-2026-47071, GHSA-gp9c-pm5m-5cxr20 SOCKS5 TLS upgrade ignores caller timeout in hackney21 https://osv.dev/vulnerability/EEF-CVE-2026-470712223 EEF-CVE-2026-47076 (MEDIUM)24 aka: CVE-2026-47076, GHSA-pj7v-xfvx-wmjq25 SSRF allowlist bypass via percent-encoded host in hackney26 https://osv.dev/vulnerability/EEF-CVE-2026-470762728 EEF-CVE-2026-47069 (LOW)29 aka: CVE-2026-47069, GHSA-mp55-p8c9-rfw230 CRLF injection in cookie domain/path options in hackney31 https://osv.dev/vulnerability/EEF-CVE-2026-470693233 GHSA-9fm9-hp7p-53mf (LOW)34 aka: CVE-2025-386435 Hackney fails to properly release HTTP connections to the pool36 https://osv.dev/vulnerability/GHSA-9fm9-hp7p-53mf37 httpoison 1.6.238 idna 6.0.039 interactive_cmd 0.1.440 jason 1.4.541 metrics 1.0.142 mimerl 1.5.043 nerves 2.0.0-pre.244 nerves_discovery 0.1.545 nerves_logging 0.2.446 nerves_runtime 0.13.1347 nerves_system_bbb 2.30.248 nerves_system_br 1.34.449 nerves_system_mangopi_mq_pro 0.17.250 nerves_system_qemu_aarch64 0.4.251 nerves_system_rpi0 2.1.252 nerves_system_rpi4 2.1.253 nerves_system_rpi5 2.1.254 nerves_system_trellis 0.5.055 nerves_system_x86_64 1.34.256 nerves_toolchain_aarch64_nerves_linux_gnu 15.3.157 nerves_toolchain_armv6_nerves_linux_gnueabihf 15.3.158 nerves_toolchain_armv7_nerves_linux_gnueabihf 15.3.159 nerves_toolchain_riscv64_nerves_linux_gnu 15.3.160 nerves_toolchain_x86_64_nerves_linux_musl 15.3.161 nerves_uevent 0.1.762 onfleet_api 0.1.063 parse_trans 3.4.264 property_table 0.3.465 ring_logger 0.11.766 ssl_verify_fun 1.1.567 tablet 0.3.368 toolshed 0.5.069 uboot_env 1.0.270 unicode_util_compat 0.4.171* Getting onfleet_api (Hex package)72* Getting nerves (Hex package)73* Getting ring_logger (Hex package)74* Getting toolshed (Hex package)75* Getting nerves_runtime (Hex package)76* Getting nerves_system_bbb (Hex package)77* Getting nerves_system_mangopi_mq_pro (Hex package)78* Getting nerves_system_qemu_aarch64 (Hex package)79* Getting nerves_system_rpi0 (Hex package)80* Getting nerves_system_rpi4 (Hex package)81* Getting nerves_system_rpi5 (Hex package)82* Getting nerves_system_trellis (Hex package)83* Getting nerves_system_x86_64 (Hex package)84* Getting nerves_system_br (Hex package)85* Getting nerves_toolchain_x86_64_nerves_linux_musl (Hex package)86* Getting nerves_toolchain_armv7_nerves_linux_gnueabihf (Hex package)87* Getting nerves_toolchain_aarch64_nerves_linux_gnu (Hex package)88* Getting nerves_toolchain_armv6_nerves_linux_gnueabihf (Hex package)89* Getting nerves_toolchain_riscv64_nerves_linux_gnu (Hex package)90* Getting nerves_logging (Hex package)91* Getting nerves_uevent (Hex package)92* Getting uboot_env (Hex package)93* Getting elixir_make (Hex package)94* Getting property_table (Hex package)95* Getting circular_buffer (Hex package)96* Getting interactive_cmd (Hex package)97* Getting nerves_discovery (Hex package)98* Getting tablet (Hex package)99* Getting hackney (Hex package)100* Getting httpoison (Hex package)101* Getting jason (Hex package)102* Getting certifi (Hex package)103* Getting idna (Hex package)104* Getting metrics (Hex package)105* Getting mimerl (Hex package)106* Getting ssl_verify_fun (Hex package)107* Getting unicode_util_compat (Hex package)108* Getting parse_trans (Hex package)109Found packages with security advisories, see above for details110==> ssl_verify_fun111Compiling 7 files (.erl)112src/ssl_verify_fingerprint.erl:15:14: can't find include lib "public_key/include/public_key.hrl"113% 15| -include_lib("public_key/include/public_key.hrl").114% | ^115116src/ssl_verify_fingerprint.erl:27:26: record 'OTPCertificate' undefined117% 27| -spec verify_fun(Cert :: #'OTPCertificate'{},118% | ^119120src/ssl_verify_fingerprint.erl:29:39: record 'Extension' undefined121% 29| {extension, #'Extension'{}}, InitialUserState :: term()) ->122% | ^123124src/ssl_verify_fingerprint.erl:52:39: record 'OTPCertificate' undefined125% 52| -spec verify_cert_fingerprint(Cert :: #'OTPCertificate'{}, Fingerprint :: fingerprint()) ->126% | ^127128src/ssl_verify_hostname.erl:16:14: can't find include lib "public_key/include/public_key.hrl"129% 16| -include_lib("public_key/include/public_key.hrl").130% | ^131132src/ssl_verify_hostname.erl:28:26: record 'OTPCertificate' undefined133% 28| -spec verify_fun(Cert :: #'OTPCertificate'{},134% | ^135136src/ssl_verify_hostname.erl:30:39: record 'Extension' undefined137% 30| {extension, #'Extension'{}}, InitialUserState :: term()) ->138% | ^139140src/ssl_verify_hostname.erl:46:36: record 'OTPCertificate' undefined141% 46| -spec verify_cert_hostname(Cert :: #'OTPCertificate'{}, Hostname :: hostname()) ->142% | ^143144src/ssl_verify_hostname.erl:76:38: record 'OTPCertificate' undefined145% 76| Cert :: #'OTPCertificate'{},146% | ^147148src/ssl_verify_pk.erl:14:14: can't find include lib "public_key/include/public_key.hrl"149% 14| -include_lib("public_key/include/public_key.hrl").150% | ^151152src/ssl_verify_pk.erl:26:26: record 'OTPCertificate' undefined153% 26| -spec verify_fun(Cert :: #'OTPCertificate'{},154% | ^155156src/ssl_verify_fun_cert_helpers.erl:13:14: can't find include lib "public_key/include/public_key.hrl"157% 13| -include_lib("public_key/include/public_key.hrl").158% | ^159160src/ssl_verify_pk.erl:28:39: record 'Extension' undefined161% 28| {extension, #'Extension'{}}, InitialUserState :: term()) ->162% | ^163164src/ssl_verify_fun_cert_helpers.erl:23:34: undefined macro 'id-ce-subjectAltName'165% 23| AltSubject = select_extension(?'id-ce-subjectAltName', Extensions),166% | ^167168src/ssl_verify_pk.erl:51:30: record 'OTPCertificate' undefined169% 51| -spec verify_cert_pk(Cert :: #'OTPCertificate'{}, Pk :: pk()) ->170% | ^171172src/ssl_verify_fun_cert_helpers.erl:9:2: function extract_dns_names/1 undefined, did you mean extract_cn/1?173% 9| -export([extract_dns_names/1,174% | ^175176src/ssl_verify_fun_cert_helpers.erl:19:2: spec for undefined function extract_dns_names/1177% 19| -spec extract_dns_names(Cert :: #'OTPCertificate'{}) -> [] | [string()].178% | ^179180src/ssl_verify_fun_cert_helpers.erl:19:33: record 'OTPCertificate' undefined181% 19| -spec extract_dns_names(Cert :: #'OTPCertificate'{}) -> [] | [string()].182% | ^183184src/ssl_verify_fun_cert_helpers.erl:32:26: record 'OTPCertificate' undefined185% 32| -spec extract_cn(Cert :: #'OTPCertificate'{}) -> {error, no_common_name} | {ok, string()} | {error, invalid}.186% | ^187188src/ssl_verify_fun_cert_helpers.erl:34:17: record 'OTPCertificate' undefined189% 34| TBSCert = Cert#'OTPCertificate'.tbsCertificate,190% | ^191192src/ssl_verify_fun_cert_helpers.erl:35:32: record 'OTPTBSCertificate' undefined193% 35| {rdnSequence, List} = TBSCert#'OTPTBSCertificate'.subject,194% | ^195196src/ssl_verify_fun_cert_helpers.erl:38:26: record 'OTPCertificate' undefined197% 38| -spec extract_pk(Cert :: #'OTPCertificate'{}) -> {error, no_common_name} | #'SubjectPublicKeyInfo'{}.198% | ^199200src/ssl_verify_fun_cert_helpers.erl:38:76: record 'SubjectPublicKeyInfo' undefined201% 38| -spec extract_pk(Cert :: #'OTPCertificate'{}) -> {error, no_common_name} | #'SubjectPublicKeyInfo'{}.202% | ^203204src/ssl_verify_fun_cert_helpers.erl:40:17: record 'OTPCertificate' undefined205% 40| TBSCert = Cert#'OTPCertificate'.tbsCertificate,206% | ^207208src/ssl_verify_fun_cert_helpers.erl:41:26: record 'OTPTBSCertificate' undefined209% 41| PublicKeyInfo = TBSCert#'OTPTBSCertificate'.subjectPublicKeyInfo,210% | ^211212src/ssl_verify_fun_cert_helpers.erl:42:16: record 'OTPSubjectPublicKeyInfo' undefined213% 42| PublicKeyInfo#'OTPSubjectPublicKeyInfo'.subjectPublicKey.214% | ^215216src/ssl_verify_fun_cert_helpers.erl:48:24: record 'Extension' undefined217% 48| -spec extensions_list([#'Extension'{}] | asn1_NOVALUE) -> [] | [#'Extension'{}].218% | ^219220src/ssl_verify_fun_cert_helpers.erl:48:65: record 'Extension' undefined221% 48| -spec extensions_list([#'Extension'{}] | asn1_NOVALUE) -> [] | [#'Extension'{}].222% | ^223224src/ssl_verify_fun_cert_helpers.erl:55:39: record 'Extension' undefined225% 55| -spec select_extension(Id :: term(), [#'Extension'{}]) -> undefined | #'Extension'{}.226% | ^227228src/ssl_verify_fun_cert_helpers.erl:55:71: record 'Extension' undefined229% 55| -spec select_extension(Id :: term(), [#'Extension'{}]) -> undefined | #'Extension'{}.230% | ^231232src/ssl_verify_fun_cert_helpers.erl:57:28: record 'Extension' undefined233% 57| Matching = [Extension || #'Extension'{extnID = ExtId} = Extension <- Extensions, ExtId =:= Id],234% | ^235236src/ssl_verify_fun_cert_helpers.erl:57:84: variable 'ExtId' is unbound237% 57| Matching = [Extension || #'Extension'{extnID = ExtId} = Extension <- Extensions, ExtId =:= Id],238% | ^239240src/ssl_verify_fun_cert_helpers.erl:75:15: record 'AttributeTypeAndValue' undefined241% 75| extract_cn2([[#'AttributeTypeAndValue'{type={2, 5, 4, 3},242% | ^243244src/ssl_verify_fun_cert_helpers.erl:77:39: variable 'CN' is unbound245% 77| ssl_verify_fun_encodings:get_string(CN);246% | ^247248src/ssl_verify_fun_cert_helpers.erl:49:1: Warning: function extensions_list/1 is unused249% 49| extensions_list(E) ->250% | ^251252src/ssl_verify_fun_cert_helpers.erl:56:1: Warning: function select_extension/2 is unused253% 56| select_extension(Id, Extensions) ->254% | ^255256src/ssl_verify_fun_cert_helpers.erl:64:1: Warning: function extract_dns_names_from_alt_names/2 is unused257% 64| extract_dns_names_from_alt_names([ExtValue | Rest], Acc) ->258% | ^259260could not compile dependency :ssl_verify_fun, "mix compile" failed. Errors may have been logged above. You can recompile this dependency with "mix deps.compile ssl_verify_fun --force", update it with "mix deps.update ssl_verify_fun" or clean it with "mix deps.clean ssl_verify_fun"