>>> composer: Building community/composer 2.8.2-r0 (using abuild 3.14.1-r1) started Sat, 09 Nov 2024 02:57:07 +0000 >>> composer: Validating /home/buildozer/aports/community/composer/APKBUILD... >>> composer: Analyzing dependencies... >>> composer: Installing for build: build-base php83 php83-phar php83-curl php83-iconv php83-mbstring php83-openssl php83-zip p7zip git (1/16) Installing php83-common (8.3.13-r0) (2/16) Installing argon2-libs (20190702-r5) (3/16) Installing xz-libs (5.6.3-r0) (4/16) Installing libxml2 (2.13.4-r3) (5/16) Installing php83 (8.3.13-r0) (6/16) Installing php83-phar (8.3.13-r0) (7/16) Installing php83-curl (8.3.13-r0) (8/16) Installing php83-iconv (8.3.13-r0) (9/16) Installing oniguruma (6.9.9-r0) (10/16) Installing php83-mbstring (8.3.13-r0) (11/16) Installing php83-openssl (8.3.13-r0) (12/16) Installing libbz2 (1.0.8-r6) (13/16) Installing libzip (1.11.1-r0) (14/16) Installing php83-zip (8.3.13-r0) (15/16) Installing 7zip (23.01-r0) (16/16) Installing .makedepends-composer (20241109.025709) Executing busybox-1.37.0-r6.trigger OK: 280 MiB in 117 packages >>> composer: Cleaning up srcdir >>> composer: Cleaning up pkgdir >>> composer: Cleaning up tmpdir >>> composer: Fetching https://distfiles.alpinelinux.org/distfiles/v3.21/composer-2.8.2.phar Connecting to distfiles.alpinelinux.org (172.105.82.32:443) saving to '/var/cache/distfiles/v3.21/composer-2.8.2.phar.part' composer-2.8.2.phar. 72% |*********************** | 2175k 0:00:00 ETA composer-2.8.2.phar. 100% |********************************| 2983k 0:00:00 ETA '/var/cache/distfiles/v3.21/composer-2.8.2.phar.part' saved >>> composer: Fetching https://distfiles.alpinelinux.org/distfiles/v3.21/composer-2.8.2.phar >>> composer: Checking sha512sums... composer-2.8.2.phar: OK Composer version 2.8.2 2024-10-29 16:12:11 PHP version 8.3.13 (/usr/bin/php83) Run the "diagnose" command to get more detailed diagnostics output. Checking platform settings: OK Checking git settings: OK git version 2.46.2 Checking http connectivity to packagist: OK Checking https connectivity to packagist: OK Checking github.com rate limit: OK Checking disk free space: OK Checking pubkeys: FAIL Missing pubkey for tags verification Missing pubkey for dev verification Run composer self-update --update-keys to set them up Checking Composer version: OK Checking Composer and its dependencies for vulnerabilities: FAIL Audit found some issues: Found 1 security vulnerability advisory affecting 1 package: +-------------------+----------------------------------------------------------------------------------+ | Package | symfony/process | | Severity | high | | CVE | CVE-2024-51736 | | Title | CVE-2024-51736: Command execution hijack on Windows with Process class | | URL | https://symfony.com/cve-2024-51736 | | Affected versions | >=2.0.0,<3.0.0|>=3.0.0,<4.0.0|>=4.0.0,<5.0.0|>=5.0.0,<5.1.0|>=5.1.0,<5.2.0|>=5.2 | | | .0,<5.3.0|>=5.3.0,<5.4.0|>=5.4.0,<5.4.46|>=6.0.0,<6.1.0|>=6.1.0,<6.2.0|>=6.2.0,< | | | 6.3.0|>=6.3.0,<6.4.0|>=6.4.0,<6.4.14|>=7.0.0,<7.1.0|>=7.1.0,<7.1.7 | | Reported at | 2024-11-05T08:00:00+00:00 | +-------------------+----------------------------------------------------------------------------------+ Composer version: 2.8.2 PHP version: 8.3.13 PHP binary path: /usr/bin/php83 OpenSSL version: OpenSSL 3.3.2 3 Sep 2024 curl version: 8.11.0 libz 1.3.1 ssl OpenSSL/3.3.2 zip: extension present, unzip present, 7-Zip present (7z) >>> composer: Entering fakeroot... >>> composer-bash-completion*: Running split function bashcomp... 'usr/share/bash-completion/completions' -> '/home/buildozer/aports/community/composer/pkg/composer-bash-completion/usr/share/bash-completion/completions' >>> composer-bash-completion*: Preparing subpackage composer-bash-completion... >>> composer-bash-completion*: Running postcheck for composer-bash-completion >>> composer*: Running postcheck for composer >>> composer*: Preparing package composer... >>> composer-bash-completion*: Tracing dependencies... >>> composer-bash-completion*: Package size: 2.7 KB >>> composer-bash-completion*: Compressing data... >>> composer-bash-completion*: Create checksum... >>> composer-bash-completion*: Create composer-bash-completion-2.8.2-r0.apk >>> composer*: Tracing dependencies... php83 php83-phar php83-curl php83-iconv php83-mbstring php83-openssl php83-zip p7zip >>> composer*: Package size: 2.9 MB >>> composer*: Compressing data... >>> composer*: Create checksum... >>> composer*: Create composer-2.8.2-r0.apk >>> composer: Build complete at Sat, 09 Nov 2024 02:57:10 +0000 elapsed time 0h 0m 3s >>> composer: Cleaning up srcdir >>> composer: Cleaning up pkgdir >>> composer: Uninstalling dependencies... (1/16) Purging .makedepends-composer (20241109.025709) (2/16) Purging php83-phar (8.3.13-r0) (3/16) Purging php83 (8.3.13-r0) (4/16) Purging php83-curl (8.3.13-r0) (5/16) Purging php83-iconv (8.3.13-r0) (6/16) Purging php83-mbstring (8.3.13-r0) (7/16) Purging php83-openssl (8.3.13-r0) (8/16) Purging php83-zip (8.3.13-r0) (9/16) Purging php83-common (8.3.13-r0) (10/16) Purging 7zip (23.01-r0) (11/16) Purging argon2-libs (20190702-r5) (12/16) Purging libxml2 (2.13.4-r3) (13/16) Purging libzip (1.11.1-r0) (14/16) Purging oniguruma (6.9.9-r0) (15/16) Purging xz-libs (5.6.3-r0) (16/16) Purging libbz2 (1.0.8-r6) Executing busybox-1.37.0-r6.trigger OK: 271 MiB in 101 packages >>> composer: Updating the community/armv7 repository index... >>> composer: Signing the index...