Build log
nerves_system_rpi4
tron 0.1.1-rc · fail · run tron-0.1.1-rc-1791144811671
143 of 143 lines
1Resolving Hex dependencies...2Resolution completed in 0.103s3Unchanged:4 circular_buffer 1.1.05 cowboy 2.6.3 VULNERABLE!6 EEF-CVE-2026-8466 (HIGH)7 aka: CVE-2026-8466, GHSA-jfc2-q6qh-g5x88 Unbounded buffer accumulation in multipart header parsing causes denial of service in cowboy9 https://osv.dev/vulnerability/EEF-CVE-2026-84661011 EEF-CVE-2026-65624 (MEDIUM)12 aka: CVE-2026-6562413 Cowboy HTTP/1.1 max_headers Bypass via Duplicate Header Names Enables Memory Exhaustion14 https://osv.dev/vulnerability/EEF-CVE-2026-656241516 GHSA-w4f7-4cxr-rv3c (MEDIUM)17 aka: CVE-2026-43966, EEF-CVE-2026-4396618 cowboy and gun affected by an HTTP Request/Response Splitting vulnerability19 https://osv.dev/vulnerability/GHSA-w4f7-4cxr-rv3c20 cowlib 2.7.3 VULNERABLE!21 EEF-CVE-2026-59248 (HIGH)22 aka: CVE-2026-5924823 Unbounded HPACK/QPACK prefixed-integer decoding in Cowlib causes memory-exhaustion DoS24 https://osv.dev/vulnerability/EEF-CVE-2026-592482526 EEF-CVE-2026-43970 (HIGH)27 aka: CVE-2026-43970, GHSA-84f2-rp86-235p28 Decompression Bomb in cow_spdy:inflate/2 Allows Memory Exhaustion via Crafted SPDY Frame29 https://osv.dev/vulnerability/EEF-CVE-2026-439703031 EEF-CVE-2026-43968 (MEDIUM)32 aka: CVE-2026-43968, GHSA-hv23-4qp7-8c8r33 CR Injection in SSE Encoder Enables Event Splitting via cow_sse:event/134 https://osv.dev/vulnerability/EEF-CVE-2026-439683536 EEF-CVE-2026-7790 (HIGH)37 aka: CVE-2026-7790, GHSA-32p9-57cr-4x6538 Unbounded chunk-size hex digits in cowlib cause quadratic CPU and memory DoS39 https://osv.dev/vulnerability/EEF-CVE-2026-779040 elixir_make 0.10.041 google_protos 0.1.042 grpc 0.3.1 VULNERABLE!43 EEF-CVE-2026-48854 (HIGH)44 aka: CVE-2026-48854, GHSA-q8gf-9rvj-gmgj45 Unbounded request body accumulation causes memory exhaustion in elixir-grpc/grpc46 https://osv.dev/vulnerability/EEF-CVE-2026-4885447 gun 1.3.3 VULNERABLE!48 EEF-CVE-2026-43973 (HIGH)49 aka: CVE-2026-43973, GHSA-r53j-fjj5-mv7750 gun HTTP/1.1 response buffer has no size limit allowing server-controlled memory exhaustion51 https://osv.dev/vulnerability/EEF-CVE-2026-439735253 GHSA-w4f7-4cxr-rv3c (MEDIUM)54 aka: CVE-2026-43966, EEF-CVE-2026-4396655 cowboy and gun affected by an HTTP Request/Response Splitting vulnerability56 https://osv.dev/vulnerability/GHSA-w4f7-4cxr-rv3c57 interactive_cmd 0.1.458 keccakf1600_orig 2.1.059 libsecp256k1 0.1.1060 mix_erlang_tasks 0.1.061 nerves 2.0.0-pre.262 nerves_discovery 0.1.563 nerves_logging 0.2.464 nerves_runtime 0.13.1365 nerves_system_bbb 2.30.266 nerves_system_br 1.34.467 nerves_system_mangopi_mq_pro 0.17.268 nerves_system_qemu_aarch64 0.4.269 nerves_system_rpi0 2.1.270 nerves_system_rpi4 2.1.271 nerves_system_rpi5 2.1.272 nerves_system_trellis 0.5.073 nerves_system_x86_64 1.34.274 nerves_toolchain_aarch64_nerves_linux_gnu 15.3.175 nerves_toolchain_armv6_nerves_linux_gnueabihf 15.3.176 nerves_toolchain_armv7_nerves_linux_gnueabihf 15.3.177 nerves_toolchain_riscv64_nerves_linux_gnu 15.3.178 nerves_toolchain_x86_64_nerves_linux_musl 15.3.179 nerves_uevent 0.1.780 property_table 0.3.481 protobuf 0.5.482 ranch 1.7.183 ring_logger 0.11.784 tablet 0.3.385 toolshed 0.5.086 tron 0.1.1-rc87 uboot_env 1.0.288* Getting tron (Hex package)89* Getting nerves (Hex package)90* Getting ring_logger (Hex package)91* Getting toolshed (Hex package)92* Getting nerves_runtime (Hex package)93* Getting nerves_system_bbb (Hex package)94* Getting nerves_system_mangopi_mq_pro (Hex package)95* Getting nerves_system_qemu_aarch64 (Hex package)96* Getting nerves_system_rpi0 (Hex package)97* Getting nerves_system_rpi4 (Hex package)98* Getting nerves_system_rpi5 (Hex package)99* Getting nerves_system_trellis (Hex package)100* Getting nerves_system_x86_64 (Hex package)101* Getting nerves_system_br (Hex package)102* Getting nerves_toolchain_x86_64_nerves_linux_musl (Hex package)103* Getting nerves_toolchain_armv7_nerves_linux_gnueabihf (Hex package)104* Getting nerves_toolchain_aarch64_nerves_linux_gnu (Hex package)105* Getting nerves_toolchain_armv6_nerves_linux_gnueabihf (Hex package)106* Getting nerves_toolchain_riscv64_nerves_linux_gnu (Hex package)107* Getting nerves_logging (Hex package)108* Getting nerves_uevent (Hex package)109* Getting uboot_env (Hex package)110* Getting elixir_make (Hex package)111* Getting property_table (Hex package)112* Getting circular_buffer (Hex package)113* Getting interactive_cmd (Hex package)114* Getting nerves_discovery (Hex package)115* Getting tablet (Hex package)116* Getting google_protos (Hex package)117* Getting grpc (Hex package)118* Getting keccakf1600 (Hex package)119* Getting libsecp256k1 (Hex package)120* Getting protobuf (Hex package)121* Getting mix_erlang_tasks (Hex package)122* Getting cowboy (Hex package)123* Getting gun (Hex package)124* Getting cowlib (Hex package)125* Getting ranch (Hex package)126Found packages with security advisories, see above for details127 error: undefined variable "description"128 │129 9 │ description: description,130 │ ^^^^^^^^^^^131 │132 └─ /work/proj/deps_rpi4/mix_erlang_tasks/mix.exs:9:20: MixErlangTasks.Mixfile.project/0133134 error: undefined variable "package"135 │136 10 │ package: package,137 │ ^^^^^^^138 │139 └─ /work/proj/deps_rpi4/mix_erlang_tasks/mix.exs:10:16: MixErlangTasks.Mixfile.project/0140141Error while loading project :mix_erlang_tasks at /work/proj/deps_rpi4/mix_erlang_tasks142** (CompileError) deps_rpi4/mix_erlang_tasks/mix.exs: cannot compile module MixErlangTasks.Mixfile (errors have been logged)143