Build log
nerves_system_x86_64
temporal_sdk 0.2.20 · fail · run temporal_sdk-0.2.20-1789400034255
159 of 159 lines
1Resolving Hex dependencies...2Resolution completed in 0.743s3Unchanged:4 circular_buffer 1.1.05 cowlib 2.20.0 VULNERABLE!6 EEF-CVE-2026-43971 (MEDIUM)7 aka: CVE-2026-439718 Link Header Directive Smuggling via Unescaped target/rel/Attribute Keys in cow_link:link/19 https://osv.dev/vulnerability/EEF-CVE-2026-439711011 EEF-CVE-2026-43966 (MEDIUM)12 aka: CVE-2026-43966, GHSA-w4f7-4cxr-rv3c13 HTTP Response Splitting via Non-VCHAR Bytes in cow_http_struct_hd:escape_string/214 https://osv.dev/vulnerability/EEF-CVE-2026-439661516 EEF-CVE-2026-43969 (LOW)17 aka: CVE-2026-43969, GHSA-g2wm-735q-3f5618 Cookie Request Header Injection via Unvalidated Encoder in cow_cookie:cookie/119 https://osv.dev/vulnerability/EEF-CVE-2026-4396920 elixir_make 0.10.021 gun 2.2.0 VULNERABLE!22 EEF-CVE-2026-43973 (HIGH)23 aka: CVE-2026-43973, GHSA-r53j-fjj5-mv7724 gun HTTP/1.1 response buffer has no size limit allowing server-controlled memory exhaustion25 https://osv.dev/vulnerability/EEF-CVE-2026-439732627 EEF-CVE-2026-43972 (MEDIUM)28 aka: CVE-2026-43972, GHSA-36w4-95hv-5vwg29 gun HTTP/2 PUSH_PROMISE authority not validated against connection origin allows cross-origin cookie injection30 https://osv.dev/vulnerability/EEF-CVE-2026-439723132 EEF-CVE-2026-43974 (HIGH)33 aka: CVE-2026-43974, GHSA-2j82-37xg-f9wp34 gun HTTP/1.1 client accepts unsolicited 101 Switching Protocols response allowing server-driven protocol hijack and OOM35 https://osv.dev/vulnerability/EEF-CVE-2026-439743637 GHSA-w4f7-4cxr-rv3c (MEDIUM)38 aka: CVE-2026-43966, EEF-CVE-2026-4396639 cowboy and gun affected by an HTTP Request/Response Splitting vulnerability40 https://osv.dev/vulnerability/GHSA-w4f7-4cxr-rv3c41 interactive_cmd 0.1.442 jason 1.4.543 nerves 1.15.044 nerves_discovery 0.1.545 nerves_logging 0.2.446 nerves_runtime 0.13.1347 nerves_system_bbb 2.30.248 nerves_system_br 1.34.449 nerves_system_mangopi_mq_pro 0.17.250 nerves_system_qemu_aarch64 0.4.251 nerves_system_rpi 2.1.252 nerves_system_rpi0 2.1.253 nerves_system_rpi0_2 2.1.254 nerves_system_rpi2 2.1.255 nerves_system_rpi3 2.1.256 nerves_system_rpi4 2.1.257 nerves_system_rpi5 2.1.258 nerves_system_x86_64 1.34.259 nerves_toolchain_aarch64_nerves_linux_gnu 15.3.160 nerves_toolchain_armv6_nerves_linux_gnueabihf 15.3.161 nerves_toolchain_armv7_nerves_linux_gnueabihf 15.3.162 nerves_toolchain_riscv64_nerves_linux_gnu 15.3.163 nerves_toolchain_x86_64_nerves_linux_musl 15.3.164 nerves_uevent 0.1.765 opentelemetry_api 1.5.066 property_table 0.3.467 quickrand 2.0.768 ring_logger 0.11.769 shoehorn 0.9.370 tablet 0.3.371 telemetry 1.4.272 temporal_sdk 0.2.2073 toolshed 0.5.074 uboot_env 1.0.275 uuid_erl 2.0.776* Getting temporal_sdk (Hex package)77* Getting nerves (Hex package)78* Getting shoehorn (Hex package)79* Getting ring_logger (Hex package)80* Getting toolshed (Hex package)81* Getting nerves_runtime (Hex package)82* Getting nerves_system_bbb (Hex package)83* Getting nerves_system_mangopi_mq_pro (Hex package)84* Getting nerves_system_qemu_aarch64 (Hex package)85* Getting nerves_system_rpi (Hex package)86* Getting nerves_system_rpi0 (Hex package)87* Getting nerves_system_rpi0_2 (Hex package)88* Getting nerves_system_rpi2 (Hex package)89* Getting nerves_system_rpi3 (Hex package)90* Getting nerves_system_rpi4 (Hex package)91* Getting nerves_system_rpi5 (Hex package)92* Getting nerves_system_x86_64 (Hex package)93* Getting nerves_system_br (Hex package)94* Getting nerves_toolchain_x86_64_nerves_linux_musl (Hex package)95* Getting nerves_toolchain_aarch64_nerves_linux_gnu (Hex package)96* Getting nerves_toolchain_armv7_nerves_linux_gnueabihf (Hex package)97* Getting nerves_toolchain_armv6_nerves_linux_gnueabihf (Hex package)98* Getting nerves_toolchain_riscv64_nerves_linux_gnu (Hex package)99* Getting nerves_logging (Hex package)100* Getting nerves_uevent (Hex package)101* Getting uboot_env (Hex package)102* Getting elixir_make (Hex package)103* Getting property_table (Hex package)104* Getting circular_buffer (Hex package)105* Getting interactive_cmd (Hex package)106* Getting jason (Hex package)107* Getting nerves_discovery (Hex package)108* Getting tablet (Hex package)109* Getting gun (Hex package)110* Getting opentelemetry_api (Hex package)111* Getting telemetry (Hex package)112* Getting uuid (Hex package)113* Getting quickrand (Hex package)114* Getting cowlib (Hex package)115Found packages with security advisories, see above for details116You have added/upgraded packages you could sponsor, run `mix hex.sponsor` to learn more117==> jason118Compiling 10 files (.ex)119Generated jason app120==> tablet121Compiling 2 files (.ex)122Generated tablet app123==> elixir_make124Compiling 8 files (.ex)125Generated elixir_make app126==> nerves_discovery127Compiling 5 files (.ex)128Generated nerves_discovery app129==> interactive_cmd130Compiling 1 file (.ex)131Generated interactive_cmd app132==> nerves133HOST_CC port.o134HOST_LD port135Compiling 55 files (.ex)136Generated nerves app137==> nerves_compatibility_test138139Nerves environment140 MIX_TARGET: x86_64141 MIX_ENV: prod142143Checking for prebuilt Nerves artifacts...144 Found nerves_system_x86_64 in cache145 /home/nerves/.nerves/artifacts/nerves_system_x86_64-portable-1.34.2146 Found nerves_toolchain_x86_64_nerves_linux_musl in cache147 /home/nerves/.nerves/artifacts/nerves_toolchain_x86_64_nerves_linux_musl-linux_x86_64-15.3.1148==> nerves149==> nerves_compatibility_test150151Nerves environment152 MIX_TARGET: x86_64153 MIX_ENV: prod154155===> Analyzing applications...156===> Compiling gun157==> temporal_sdk158Compiling 113 files (.erl)159Killed