Build log
nerves_system_x86_64
rube 0.1.0 · fail · run rube-0.1.0-1791092399440
267 of 267 lines
1Resolving Hex dependencies...2Resolution completed in 0.503s3Unchanged:4 bamboo 2.2.05 bamboo_smtp 4.2.26 certifi 2.15.07 circular_buffer 1.1.08 confex 3.5.19 cowboy 2.19.010 cowboy_telemetry 0.3.111 cowlib 2.20.0 VULNERABLE!12 EEF-CVE-2026-43966 (MEDIUM)13 aka: CVE-2026-43966, GHSA-w4f7-4cxr-rv3c14 HTTP Response Splitting via Non-VCHAR Bytes in cow_http_struct_hd:escape_string/215 https://osv.dev/vulnerability/EEF-CVE-2026-439661617 EEF-CVE-2026-43969 (LOW)18 aka: CVE-2026-43969, GHSA-g2wm-735q-3f5619 Cookie Request Header Injection via Unvalidated Encoder in cow_cookie:cookie/120 https://osv.dev/vulnerability/EEF-CVE-2026-4396921 db_connection 2.10.222 decimal 2.4.1 VULNERABLE!23 EEF-CVE-2026-32686 (MEDIUM)24 aka: CVE-2026-32686, GHSA-rhv4-8758-jx7v25 Unbounded exponent in decimal enables unauthenticated DoS26 https://osv.dev/vulnerability/EEF-CVE-2026-3268627 deque 1.2.028 earmark_parser 1.4.4629 ecto 3.13.630 ecto_sql 3.13.531 elixir_make 0.10.032 enumerati 0.0.833 ethereumex 0.7.134 etso 0.1.635 ex_abi 0.5.1636 ex_doc 0.40.437 ex_keccak 0.6.038 expo 1.1.139 exw3 0.6.140 gen_smtp 1.2.041 gettext 0.26.242 hackney 1.25.0 VULNERABLE!43 EEF-CVE-2026-47071 (HIGH)44 aka: CVE-2026-47071, GHSA-gp9c-pm5m-5cxr45 SOCKS5 TLS upgrade ignores caller timeout in hackney46 https://osv.dev/vulnerability/EEF-CVE-2026-470714748 EEF-CVE-2026-47076 (MEDIUM)49 aka: CVE-2026-47076, GHSA-pj7v-xfvx-wmjq50 SSRF allowlist bypass via percent-encoded host in hackney51 https://osv.dev/vulnerability/EEF-CVE-2026-470765253 EEF-CVE-2026-47069 (LOW)54 aka: CVE-2026-47069, GHSA-mp55-p8c9-rfw255 CRLF injection in cookie domain/path options in hackney56 https://osv.dev/vulnerability/EEF-CVE-2026-470695758 EEF-CVE-2026-47075 (MEDIUM)59 aka: CVE-2026-47075, GHSA-j9wq-vxxc-94wf60 CR/LF injection in query parameter in hackney61 https://osv.dev/vulnerability/EEF-CVE-2026-4707562 httpoison 1.8.263 idna 6.1.164 interactive_cmd 0.1.465 jason 1.4.566 juice 0.0.367 makeup 1.2.368 makeup_elixir 1.0.169 makeup_erlang 1.1.070 master_proxy 0.1.4 RETIRED!71 (deprecated) Development has moved to main_proxy72 metrics 1.0.173 mime 1.6.074 mimerl 1.5.075 navigator 0.0.576 nerves 2.0.0-pre.277 nerves_discovery 0.1.578 nerves_logging 0.2.479 nerves_runtime 0.13.1380 nerves_system_bbb 2.30.281 nerves_system_br 1.34.482 nerves_system_mangopi_mq_pro 0.17.283 nerves_system_qemu_aarch64 0.4.284 nerves_system_rpi0 2.1.285 nerves_system_rpi4 2.1.286 nerves_system_rpi5 2.1.287 nerves_system_trellis 0.5.088 nerves_system_x86_64 1.34.289 nerves_toolchain_aarch64_nerves_linux_gnu 15.3.190 nerves_toolchain_armv6_nerves_linux_gnueabihf 15.3.191 nerves_toolchain_armv7_nerves_linux_gnueabihf 15.3.192 nerves_toolchain_riscv64_nerves_linux_gnu 15.3.193 nerves_toolchain_x86_64_nerves_linux_musl 15.3.194 nerves_uevent 0.1.795 nimble_parsec 1.4.296 notified 0.0.697 notified_phoenix 0.0.698 paged_query 0.0.299 parse_trans 3.4.1100 phoenix 1.5.15 VULNERABLE!101 GHSA-p8f7-22gq-m7j9 (HIGH)102 aka: CVE-2022-42975103 Phoenix before 1.6.14 mishandles check_origin wildcarding104 https://osv.dev/vulnerability/GHSA-p8f7-22gq-m7j9105 phoenix_ecto 4.7.0106 phoenix_html 2.14.3 VULNERABLE!107 GHSA-5g2h-9x5v-5h3x (MEDIUM)108 aka: CVE-2021-46871, GHSA-j3gg-r6gp-95q2109 phoenix_html allows Cross-site Scripting in HEEx class attributes110 https://osv.dev/vulnerability/GHSA-5g2h-9x5v-5h3x111 phoenix_live_dashboard 0.4.0112 phoenix_live_react 0.5.0113 phoenix_live_view 0.15.7 VULNERABLE!114 EEF-CVE-2026-64941 (LOW)115 aka: CVE-2026-64941, GHSA-36m4-rm57-3prf116 Open redirect in Phoenix.LiveView.validate_local_url!/2 via ASCII tab, LF and CR117 https://osv.dev/vulnerability/EEF-CVE-2026-64941118 phoenix_pubsub 2.3.0119 plug 1.20.3120 plug_cowboy 2.9.0121 plug_crypto 1.2.5122 poolboy 1.5.2123 postgrex 0.22.4124 proper_case 1.3.1125 property_table 0.3.4126 ranch 2.3.0127 ring_logger 0.11.7128 rube 0.1.0 RETIRED!129 (invalid) invalid130 rustler 0.38.0131 slurp 0.0.12132 slurpee 0.0.13133 ssl_verify_fun 1.1.7134 stored 0.0.8135 stylish 0.0.6136 table_rex 3.2.0137 tablet 0.3.3138 telemetry 0.4.3139 telemetry_metrics 0.6.2140 telemetry_metrics_prometheus 1.1.0141 telemetry_metrics_prometheus_core 1.2.1142 telemetry_poller 0.5.1143 toolshed 0.5.0144 uboot_env 1.0.2145 unicode_util_compat 0.7.1146* Getting rube (Hex package)147* Getting nerves (Hex package)148* Getting ring_logger (Hex package)149* Getting toolshed (Hex package)150* Getting nerves_runtime (Hex package)151* Getting nerves_system_bbb (Hex package)152* Getting nerves_system_mangopi_mq_pro (Hex package)153* Getting nerves_system_qemu_aarch64 (Hex package)154* Getting nerves_system_rpi0 (Hex package)155* Getting nerves_system_rpi4 (Hex package)156* Getting nerves_system_rpi5 (Hex package)157* Getting nerves_system_trellis (Hex package)158* Getting nerves_system_x86_64 (Hex package)159* Getting nerves_system_br (Hex package)160* Getting nerves_toolchain_x86_64_nerves_linux_musl (Hex package)161* Getting nerves_toolchain_armv7_nerves_linux_gnueabihf (Hex package)162* Getting nerves_toolchain_aarch64_nerves_linux_gnu (Hex package)163* Getting nerves_toolchain_armv6_nerves_linux_gnueabihf (Hex package)164* Getting nerves_toolchain_riscv64_nerves_linux_gnu (Hex package)165* Getting nerves_logging (Hex package)166* Getting nerves_uevent (Hex package)167* Getting uboot_env (Hex package)168* Getting elixir_make (Hex package)169* Getting property_table (Hex package)170* Getting circular_buffer (Hex package)171* Getting interactive_cmd (Hex package)172* Getting nerves_discovery (Hex package)173* Getting tablet (Hex package)174* Getting deque (Hex package)175* Getting ecto_sql (Hex package)176* Getting ex_abi (Hex package)177* Getting gettext (Hex package)178* Getting jason (Hex package)179* Getting master_proxy (Hex package)180* Getting navigator (Hex package)181* Getting notified_phoenix (Hex package)182* Getting phoenix (Hex package)183* Getting phoenix_ecto (Hex package)184* Getting phoenix_html (Hex package)185* Getting phoenix_live_dashboard (Hex package)186* Getting phoenix_live_react (Hex package)187* Getting phoenix_live_view (Hex package)188* Getting plug_cowboy (Hex package)189* Getting postgrex (Hex package)190* Getting slurp (Hex package)191* Getting slurpee (Hex package)192* Getting telemetry_metrics (Hex package)193* Getting telemetry_poller (Hex package)194* Getting telemetry (Hex package)195* Getting confex (Hex package)196* Getting stylish (Hex package)197* Getting enumerati (Hex package)198* Getting ex_doc (Hex package)199* Getting exw3 (Hex package)200* Getting juice (Hex package)201* Getting proper_case (Hex package)202* Getting stored (Hex package)203* Getting table_rex (Hex package)204* Getting telemetry_metrics_prometheus (Hex package)205* Getting telemetry_metrics_prometheus_core (Hex package)206* Getting ethereumex (Hex package)207* Getting ex_keccak (Hex package)208* Getting rustler (Hex package)209* Getting httpoison (Hex package)210* Getting poolboy (Hex package)211* Getting hackney (Hex package)212* Getting certifi (Hex package)213* Getting idna (Hex package)214* Getting metrics (Hex package)215* Getting mimerl (Hex package)216* Getting parse_trans (Hex package)217* Getting ssl_verify_fun (Hex package)218* Getting unicode_util_compat (Hex package)219* Getting earmark_parser (Hex package)220* Getting makeup_elixir (Hex package)221* Getting makeup_erlang (Hex package)222* Getting makeup (Hex package)223* Getting nimble_parsec (Hex package)224* Getting decimal (Hex package)225* Getting db_connection (Hex package)226* Getting cowboy (Hex package)227* Getting cowboy_telemetry (Hex package)228* Getting plug (Hex package)229* Getting mime (Hex package)230* Getting plug_crypto (Hex package)231* Getting cowlib (Hex package)232* Getting ranch (Hex package)233* Getting ecto (Hex package)234* Getting phoenix_pubsub (Hex package)235* Getting notified (Hex package)236* Getting bamboo (Hex package)237* Getting bamboo_smtp (Hex package)238* Getting etso (Hex package)239* Getting paged_query (Hex package)240* Getting gen_smtp (Hex package)241* Getting expo (Hex package)242Found retired packages, see above for details243Found packages with security advisories, see above for details244You have added/upgraded packages you could sponsor, run `mix hex.sponsor` to learn more245===> Analyzing applications...246===> Compiling gen_smtp247 ┌─ src/gen_smtp_server_session.erl:248 │249 401 │ case catch Module:code_change(OldVsn, CallbackState, Extra) of250 │ ╰── Warning: 'catch ...' is deprecated; please use 'try ... catch ... end' instead.251Compile directive 'nowarn_deprecated_catch' can be used to suppress252warnings in selected modules.253254 ┌─ src/gen_smtp_server_session.erl:255 │256 574 │ crypto:start(),257 │ ╰── Warning: crypto:start/0 is deprecated; use application:start(crypto) instead258259260===> Compiling src/smtp_server_example.erl failed261 ┌─ src/smtp_server_example.erl:262 │263 296 │ {ok, State} | {stop, any(), State}.264 │ ╰── type variable 'State' is only used once (is unbound)265266267** (Mix) Could not compile dependency :gen_smtp, "/home/nerves/.mix/elixir/1-20-otp-29/rebar3 bare compile --paths /work/proj/_build/x86_64/lib/*/ebin" command failed. Errors may have been logged above. You can recompile this dependency with "mix deps.compile gen_smtp --force", update it with "mix deps.update gen_smtp" or clean it with "mix deps.clean gen_smtp"