rube

Build log

nerves_system_rpi5

rube 0.1.0 · fail · run rube-0.1.0-1791092399440
289 of 289 lines
1Resolving Hex dependencies...2Resolution completed in 0.452s3Unchanged:4  bamboo 2.2.05  bamboo_smtp 4.2.26  certifi 2.15.07  circular_buffer 1.1.08  confex 3.5.19  cowboy 2.19.010  cowboy_telemetry 0.3.111  cowlib 2.20.0 VULNERABLE!12    EEF-CVE-2026-43966 (MEDIUM)13    aka: CVE-2026-43966, GHSA-w4f7-4cxr-rv3c14    HTTP Response Splitting via Non-VCHAR Bytes in cow_http_struct_hd:escape_string/215    https://osv.dev/vulnerability/EEF-CVE-2026-439661617    EEF-CVE-2026-43969 (LOW)18    aka: CVE-2026-43969, GHSA-g2wm-735q-3f5619    Cookie Request Header Injection via Unvalidated Encoder in cow_cookie:cookie/120    https://osv.dev/vulnerability/EEF-CVE-2026-4396921  db_connection 2.10.222  decimal 2.4.1 VULNERABLE!23    EEF-CVE-2026-32686 (MEDIUM)24    aka: CVE-2026-32686, GHSA-rhv4-8758-jx7v25    Unbounded exponent in decimal enables unauthenticated DoS26    https://osv.dev/vulnerability/EEF-CVE-2026-3268627  deque 1.2.028  earmark_parser 1.4.4629  ecto 3.13.630  ecto_sql 3.13.531  elixir_make 0.10.032  enumerati 0.0.833  ethereumex 0.7.134  etso 0.1.635  ex_abi 0.5.1636  ex_doc 0.40.437  ex_keccak 0.6.038  expo 1.1.139  exw3 0.6.140  gen_smtp 1.2.041  gettext 0.26.242  hackney 1.25.0 VULNERABLE!43    EEF-CVE-2026-47071 (HIGH)44    aka: CVE-2026-47071, GHSA-gp9c-pm5m-5cxr45    SOCKS5 TLS upgrade ignores caller timeout in hackney46    https://osv.dev/vulnerability/EEF-CVE-2026-470714748    EEF-CVE-2026-47076 (MEDIUM)49    aka: CVE-2026-47076, GHSA-pj7v-xfvx-wmjq50    SSRF allowlist bypass via percent-encoded host in hackney51    https://osv.dev/vulnerability/EEF-CVE-2026-470765253    EEF-CVE-2026-47069 (LOW)54    aka: CVE-2026-47069, GHSA-mp55-p8c9-rfw255    CRLF injection in cookie domain/path options in hackney56    https://osv.dev/vulnerability/EEF-CVE-2026-470695758    EEF-CVE-2026-47075 (MEDIUM)59    aka: CVE-2026-47075, GHSA-j9wq-vxxc-94wf60    CR/LF injection in query parameter in hackney61    https://osv.dev/vulnerability/EEF-CVE-2026-4707562  httpoison 1.8.263  idna 6.1.164  interactive_cmd 0.1.465  jason 1.4.566  juice 0.0.367  makeup 1.2.368  makeup_elixir 1.0.169  makeup_erlang 1.1.070  master_proxy 0.1.4 RETIRED!71    (deprecated) Development has moved to main_proxy72  metrics 1.0.173  mime 1.6.074  mimerl 1.5.075  navigator 0.0.576  nerves 2.0.0-pre.277  nerves_discovery 0.1.578  nerves_logging 0.2.479  nerves_runtime 0.13.1380  nerves_system_bbb 2.30.281  nerves_system_br 1.34.482  nerves_system_mangopi_mq_pro 0.17.283  nerves_system_qemu_aarch64 0.4.284  nerves_system_rpi0 2.1.285  nerves_system_rpi4 2.1.286  nerves_system_rpi5 2.1.287  nerves_system_trellis 0.5.088  nerves_system_x86_64 1.34.289  nerves_toolchain_aarch64_nerves_linux_gnu 15.3.190  nerves_toolchain_armv6_nerves_linux_gnueabihf 15.3.191  nerves_toolchain_armv7_nerves_linux_gnueabihf 15.3.192  nerves_toolchain_riscv64_nerves_linux_gnu 15.3.193  nerves_toolchain_x86_64_nerves_linux_musl 15.3.194  nerves_uevent 0.1.795  nimble_parsec 1.4.296  notified 0.0.697  notified_phoenix 0.0.698  paged_query 0.0.299  parse_trans 3.4.1100  phoenix 1.5.15 VULNERABLE!101    GHSA-p8f7-22gq-m7j9 (HIGH)102    aka: CVE-2022-42975103    Phoenix before 1.6.14 mishandles check_origin wildcarding104    https://osv.dev/vulnerability/GHSA-p8f7-22gq-m7j9105  phoenix_ecto 4.7.0106  phoenix_html 2.14.3 VULNERABLE!107    GHSA-5g2h-9x5v-5h3x (MEDIUM)108    aka: CVE-2021-46871, GHSA-j3gg-r6gp-95q2109    phoenix_html allows Cross-site Scripting in HEEx class attributes110    https://osv.dev/vulnerability/GHSA-5g2h-9x5v-5h3x111  phoenix_live_dashboard 0.4.0112  phoenix_live_react 0.5.0113  phoenix_live_view 0.15.7 VULNERABLE!114    EEF-CVE-2026-64941 (LOW)115    aka: CVE-2026-64941, GHSA-36m4-rm57-3prf116    Open redirect in Phoenix.LiveView.validate_local_url!/2 via ASCII tab, LF and CR117    https://osv.dev/vulnerability/EEF-CVE-2026-64941118  phoenix_pubsub 2.3.0119  plug 1.20.3120  plug_cowboy 2.9.0121  plug_crypto 1.2.5122  poolboy 1.5.2123  postgrex 0.22.4124  proper_case 1.3.1125  property_table 0.3.4126  ranch 2.3.0127  ring_logger 0.11.7128  rube 0.1.0 RETIRED!129    (invalid) invalid130  rustler 0.38.0131  slurp 0.0.12132  slurpee 0.0.13133  ssl_verify_fun 1.1.7134  stored 0.0.8135  stylish 0.0.6136  table_rex 3.2.0137  tablet 0.3.3138  telemetry 0.4.3139  telemetry_metrics 0.6.2140  telemetry_metrics_prometheus 1.1.0141  telemetry_metrics_prometheus_core 1.2.1142  telemetry_poller 0.5.1143  toolshed 0.5.0144  uboot_env 1.0.2145  unicode_util_compat 0.7.1146* Getting rube (Hex package)147* Getting nerves (Hex package)148* Getting ring_logger (Hex package)149* Getting toolshed (Hex package)150* Getting nerves_runtime (Hex package)151* Getting nerves_system_bbb (Hex package)152* Getting nerves_system_mangopi_mq_pro (Hex package)153* Getting nerves_system_qemu_aarch64 (Hex package)154* Getting nerves_system_rpi0 (Hex package)155* Getting nerves_system_rpi4 (Hex package)156* Getting nerves_system_rpi5 (Hex package)157* Getting nerves_system_trellis (Hex package)158* Getting nerves_system_x86_64 (Hex package)159* Getting nerves_system_br (Hex package)160* Getting nerves_toolchain_x86_64_nerves_linux_musl (Hex package)161* Getting nerves_toolchain_armv7_nerves_linux_gnueabihf (Hex package)162* Getting nerves_toolchain_aarch64_nerves_linux_gnu (Hex package)163* Getting nerves_toolchain_armv6_nerves_linux_gnueabihf (Hex package)164* Getting nerves_toolchain_riscv64_nerves_linux_gnu (Hex package)165* Getting nerves_logging (Hex package)166* Getting nerves_uevent (Hex package)167* Getting uboot_env (Hex package)168* Getting elixir_make (Hex package)169* Getting property_table (Hex package)170* Getting circular_buffer (Hex package)171* Getting interactive_cmd (Hex package)172* Getting nerves_discovery (Hex package)173* Getting tablet (Hex package)174* Getting deque (Hex package)175* Getting ecto_sql (Hex package)176* Getting ex_abi (Hex package)177* Getting gettext (Hex package)178* Getting jason (Hex package)179* Getting master_proxy (Hex package)180* Getting navigator (Hex package)181* Getting notified_phoenix (Hex package)182* Getting phoenix (Hex package)183* Getting phoenix_ecto (Hex package)184* Getting phoenix_html (Hex package)185* Getting phoenix_live_dashboard (Hex package)186* Getting phoenix_live_react (Hex package)187* Getting phoenix_live_view (Hex package)188* Getting plug_cowboy (Hex package)189* Getting postgrex (Hex package)190* Getting slurp (Hex package)191* Getting slurpee (Hex package)192* Getting telemetry_metrics (Hex package)193* Getting telemetry_poller (Hex package)194* Getting telemetry (Hex package)195* Getting confex (Hex package)196* Getting stylish (Hex package)197* Getting enumerati (Hex package)198* Getting ex_doc (Hex package)199* Getting exw3 (Hex package)200* Getting juice (Hex package)201* Getting proper_case (Hex package)202* Getting stored (Hex package)203* Getting table_rex (Hex package)204* Getting telemetry_metrics_prometheus (Hex package)205* Getting telemetry_metrics_prometheus_core (Hex package)206* Getting ethereumex (Hex package)207* Getting ex_keccak (Hex package)208* Getting rustler (Hex package)209* Getting httpoison (Hex package)210* Getting poolboy (Hex package)211* Getting hackney (Hex package)212* Getting certifi (Hex package)213* Getting idna (Hex package)214* Getting metrics (Hex package)215* Getting mimerl (Hex package)216* Getting parse_trans (Hex package)217* Getting ssl_verify_fun (Hex package)218* Getting unicode_util_compat (Hex package)219* Getting earmark_parser (Hex package)220* Getting makeup_elixir (Hex package)221* Getting makeup_erlang (Hex package)222* Getting makeup (Hex package)223* Getting nimble_parsec (Hex package)224* Getting decimal (Hex package)225* Getting db_connection (Hex package)226* Getting cowboy (Hex package)227* Getting cowboy_telemetry (Hex package)228* Getting plug (Hex package)229* Getting mime (Hex package)230* Getting plug_crypto (Hex package)231* Getting cowlib (Hex package)232* Getting ranch (Hex package)233* Getting ecto (Hex package)234* Getting phoenix_pubsub (Hex package)235* Getting notified (Hex package)236* Getting bamboo (Hex package)237* Getting bamboo_smtp (Hex package)238* Getting etso (Hex package)239* Getting paged_query (Hex package)240* Getting gen_smtp (Hex package)241* Getting expo (Hex package)242Found retired packages, see above for details243Found packages with security advisories, see above for details244You have added/upgraded packages you could sponsor, run `mix hex.sponsor` to learn more245==> nerves_system_br246Generated nerves_system_br app247==> earmark_parser248Compiling 2 files (.xrl)249Compiling 1 file (.yrl)250Compiling 3 files (.erl)251Compiling 32 files (.ex)252Generated earmark_parser app253==> mime254Compiling 2 files (.ex)255Generated mime app256==> circular_buffer257Compiling 1 file (.ex)258Generated circular_buffer app259==> plug_crypto260Compiling 5 files (.ex)261Generated plug_crypto app262==> nerves_compatibility_test263===> Analyzing applications...264===> Compiling mimerl265===> Analyzing applications...266===> Compiling ranch267===> Analyzing applications...268===> Compiling gen_smtp269     ┌─ src/gen_smtp_server_session.erl:270     │271 401 │          case catch Module:code_change(OldVsn, CallbackState, Extra) of272     │               ╰── Warning: 'catch ...' is deprecated; please use 'try ... catch ... end' instead.273Compile directive 'nowarn_deprecated_catch' can be used to suppress274warnings in selected modules.275276     ┌─ src/gen_smtp_server_session.erl:277     │278 574 │                              crypto:start(),279     │                              ╰── Warning: crypto:start/0 is deprecated; use application:start(crypto) instead280281282===> Compiling src/smtp_server_example.erl failed283     ┌─ src/smtp_server_example.erl:284     │285 296 │      {ok, State} | {stop, any(), State}.286     │           ╰── type variable 'State' is only used once (is unbound)287288289** (Mix) Could not compile dependency :gen_smtp, "/home/nerves/.mix/elixir/1-20-otp-29/rebar3 bare compile --paths /work/proj/_build/rpi5/lib/*/ebin" command failed. Errors may have been logged above. You can recompile this dependency with "mix deps.compile gen_smtp --force", update it with "mix deps.update gen_smtp" or clean it with "mix deps.clean gen_smtp"