Build log
nerves_system_rpi5
user_manager 0.2.0 · fail · run user_manager-0.2.0-1791149632765
211 of 211 lines
1Resolving Hex dependencies...2Resolution completed in 0.241s3Unchanged:4 certifi 1.0.05 cipher 1.4.06 circular_buffer 1.1.07 comeonin 3.2.08 connection 1.0.49 db_connection 1.1.310 decimal 1.9.0 VULNERABLE!11 EEF-CVE-2026-32686 (MEDIUM)12 aka: CVE-2026-32686, GHSA-rhv4-8758-jx7v13 Unbounded exponent in decimal enables unauthenticated DoS14 https://osv.dev/vulnerability/EEF-CVE-2026-3268615 ecto 2.2.1216 elixir_make 0.10.017 elixir_uuid 1.2.118 exprintf 0.2.119 exprof 0.2.420 facebook 0.9.021 faker 0.19.022 flow 0.15.023 gen_stage 0.14.324 guardian 0.14.6 VULNERABLE!25 EEF-CVE-2026-54894 (MEDIUM)26 aka: CVE-2026-54894, GHSA-xqch-c77q-rgh527 Atom-table exhaustion denial of service in Guardian via unbounded atom creation from binary keys28 https://osv.dev/vulnerability/EEF-CVE-2026-5489429 guardian_db 0.8.030 hackney 1.6.6 RETIRED! VULNERABLE!31 (invalid)3233 EEF-CVE-2026-47075 (MEDIUM)34 aka: CVE-2026-47075, GHSA-j9wq-vxxc-94wf35 CR/LF injection in query parameter in hackney36 https://osv.dev/vulnerability/EEF-CVE-2026-470753738 GHSA-vq52-99r9-h5pw (LOW)39 aka: CVE-2025-121140 Server-side Request Forgery (SSRF) in hackney41 https://osv.dev/vulnerability/GHSA-vq52-99r9-h5pw4243 EEF-CVE-2026-47071 (HIGH)44 aka: CVE-2026-47071, GHSA-gp9c-pm5m-5cxr45 SOCKS5 TLS upgrade ignores caller timeout in hackney46 https://osv.dev/vulnerability/EEF-CVE-2026-470714748 GHSA-9fm9-hp7p-53mf (LOW)49 aka: CVE-2025-386450 Hackney fails to properly release HTTP connections to the pool51 https://osv.dev/vulnerability/GHSA-9fm9-hp7p-53mf5253 EEF-CVE-2026-47069 (LOW)54 aka: CVE-2026-47069, GHSA-mp55-p8c9-rfw255 CRLF injection in cookie domain/path options in hackney56 https://osv.dev/vulnerability/EEF-CVE-2026-470695758 EEF-CVE-2026-47076 (MEDIUM)59 aka: CVE-2026-47076, GHSA-pj7v-xfvx-wmjq60 SSRF allowlist bypass via percent-encoded host in hackney61 https://osv.dev/vulnerability/EEF-CVE-2026-4707662 httpoison 0.10.063 idna 4.0.064 interactive_cmd 0.1.465 jose 1.11.1266 json 1.4.167 libex_config 0.2.068 makeup 1.2.169 makeup_elixir 1.0.170 metrics 1.0.171 mime 2.0.772 mimerl 1.0.273 nerves 2.0.0-pre.274 nerves_discovery 0.1.575 nerves_logging 0.2.476 nerves_runtime 0.13.1377 nerves_system_bbb 2.30.278 nerves_system_br 1.34.479 nerves_system_mangopi_mq_pro 0.17.280 nerves_system_qemu_aarch64 0.4.281 nerves_system_rpi0 2.1.282 nerves_system_rpi4 2.1.283 nerves_system_rpi5 2.1.284 nerves_system_trellis 0.5.085 nerves_system_x86_64 1.34.286 nerves_toolchain_aarch64_nerves_linux_gnu 15.3.187 nerves_toolchain_armv6_nerves_linux_gnueabihf 15.3.188 nerves_toolchain_armv7_nerves_linux_gnueabihf 15.3.189 nerves_toolchain_riscv64_nerves_linux_gnu 15.3.190 nerves_toolchain_x86_64_nerves_linux_musl 15.3.191 nerves_uevent 0.1.792 nimble_parsec 1.4.293 plug 1.20.394 plug_crypto 2.2.095 poison 3.1.096 poolboy 1.5.297 postgrex 0.13.598 property_table 0.3.499 ring_logger 0.11.7100 ssl_verify_fun 1.1.1101 tablet 0.3.3102 telemetry 1.4.2103 toolshed 0.5.0104 uboot_env 1.0.2105 user_manager 0.2.0106* Getting user_manager (Hex package)107* Getting nerves (Hex package)108* Getting ring_logger (Hex package)109* Getting toolshed (Hex package)110* Getting nerves_runtime (Hex package)111* Getting nerves_system_bbb (Hex package)112* Getting nerves_system_mangopi_mq_pro (Hex package)113* Getting nerves_system_qemu_aarch64 (Hex package)114* Getting nerves_system_rpi0 (Hex package)115* Getting nerves_system_rpi4 (Hex package)116* Getting nerves_system_rpi5 (Hex package)117* Getting nerves_system_trellis (Hex package)118* Getting nerves_system_x86_64 (Hex package)119* Getting nerves_system_br (Hex package)120* Getting nerves_toolchain_x86_64_nerves_linux_musl (Hex package)121* Getting nerves_toolchain_armv7_nerves_linux_gnueabihf (Hex package)122* Getting nerves_toolchain_aarch64_nerves_linux_gnu (Hex package)123* Getting nerves_toolchain_armv6_nerves_linux_gnueabihf (Hex package)124* Getting nerves_toolchain_riscv64_nerves_linux_gnu (Hex package)125* Getting nerves_logging (Hex package)126* Getting nerves_uevent (Hex package)127* Getting uboot_env (Hex package)128* Getting elixir_make (Hex package)129* Getting property_table (Hex package)130* Getting circular_buffer (Hex package)131* Getting interactive_cmd (Hex package)132* Getting nerves_discovery (Hex package)133* Getting tablet (Hex package)134* Getting cipher (Hex package)135* Getting comeonin (Hex package)136* Getting ecto (Hex package)137* Getting exprof (Hex package)138* Getting facebook (Hex package)139* Getting faker (Hex package)140* Getting flow (Hex package)141* Getting gen_stage (Hex package)142* Getting guardian (Hex package)143* Getting guardian_db (Hex package)144* Getting httpoison (Hex package)145* Getting postgrex (Hex package)146* Getting connection (Hex package)147* Getting db_connection (Hex package)148* Getting decimal (Hex package)149* Getting hackney (Hex package)150* Getting certifi (Hex package)151* Getting idna (Hex package)152* Getting metrics (Hex package)153* Getting mimerl (Hex package)154* Getting ssl_verify_fun (Hex package)155* Getting elixir_uuid (Hex package)156* Getting jose (Hex package)157* Getting plug (Hex package)158* Getting poison (Hex package)159* Getting mime (Hex package)160* Getting plug_crypto (Hex package)161* Getting telemetry (Hex package)162* Getting makeup (Hex package)163* Getting makeup_elixir (Hex package)164* Getting nimble_parsec (Hex package)165* Getting json (Hex package)166* Getting libex_config (Hex package)167* Getting exprintf (Hex package)168* Getting poolboy (Hex package)169Found retired packages, see above for details170Found packages with security advisories, see above for details171 warning: String.strip/1 is deprecated. Use String.trim/1 instead172 │173 4 │ @version File.read!("VERSION") |> String.strip174 │ ~175 │176 └─ /work/proj/deps_rpi5/poison/mix.exs:4:44: Poison.Mixfile (module)177178 warning: using single-quoted strings to represent charlists is deprecated.179 Use ~c"" if you indeed want a charlist or use "" instead.180 You may run "mix format --migrate" to change all single-quoted181 strings to use the ~c sigil and fix this warning.182 │183 29 │ :os.cmd('git rev-parse --short HEAD') |> to_string |> String.trim_trailing("\n")184 │ ~185 │186 └─ /work/proj/deps_rpi5/cipher/mix.exs:29:13187188 error: undefined variable "description"189 │190 11 │ description: description,191 │ ^^^^^^^^^^^192 │193 └─ /work/proj/deps_rpi5/facebook/mix.exs:11:20: Facebook.Mixfile.project/0194195 error: undefined variable "package"196 │197 12 │ package: package,198 │ ^^^^^^^199 │200 └─ /work/proj/deps_rpi5/facebook/mix.exs:12:16: Facebook.Mixfile.project/0201202 error: undefined variable "deps"203 │204 13 │ deps: deps,205 │ ^^^^206 │207 └─ /work/proj/deps_rpi5/facebook/mix.exs:13:13: Facebook.Mixfile.project/0208209Error while loading project :facebook at /work/proj/deps_rpi5/facebook210** (CompileError) deps_rpi5/facebook/mix.exs: cannot compile module Facebook.Mixfile (errors have been logged)211