Mock Version: 6.0 Mock Version: 6.0 Mock Version: 6.0 ENTER ['do_with_status'](['bash', '--login', '-c', '/usr/bin/rpmbuild -bs --noclean --target noarch --nodeps /builddir/build/SPECS/perl-Archive-Tar.spec'], chrootPath='/var/lib/mock/dist-an23-build-560590-90493/root'env={'TERM': 'vt100', 'SHELL': '/bin/bash', 'HOME': '/builddir', 'HOSTNAME': 'mock', 'PATH': '/usr/bin:/bin:/usr/sbin:/sbin', 'PROMPT_COMMAND': 'printf "\\033]0;\\007"', 'PS1': ' \\s-\\v\\$ ', 'LANG': 'C.UTF-8'}shell=Falselogger=timeout=86400uid=982gid=135user='mockbuild'unshare_net=TrueprintOutput=Falsenspawn_args=['--capability=cap_ipc_lock']) Executing command: ['bash', '--login', '-c', '/usr/bin/rpmbuild -bs --noclean --target noarch --nodeps /builddir/build/SPECS/perl-Archive-Tar.spec'] with env {'TERM': 'vt100', 'SHELL': '/bin/bash', 'HOME': '/builddir', 'HOSTNAME': 'mock', 'PATH': '/usr/bin:/bin:/usr/sbin:/sbin', 'PROMPT_COMMAND': 'printf "\\033]0;\\007"', 'PS1': ' \\s-\\v\\$ ', 'LANG': 'C.UTF-8'} and shell False Building target platforms: noarch Building for target noarch setting SOURCE_DATE_EPOCH=1785542400 Wrote: /builddir/build/SRPMS/perl-Archive-Tar-3.08-2.an23.src.rpm Child return code was: 0 ENTER ['do_with_status'](['bash', '--login', '-c', '/usr/bin/rpmbuild -bb --noclean --target noarch --nodeps /builddir/build/SPECS/perl-Archive-Tar.spec'], chrootPath='/var/lib/mock/dist-an23-build-560590-90493/root'env={'TERM': 'vt100', 'SHELL': '/bin/bash', 'HOME': '/builddir', 'HOSTNAME': 'mock', 'PATH': '/usr/bin:/bin:/usr/sbin:/sbin', 'PROMPT_COMMAND': 'printf "\\033]0;\\007"', 'PS1': ' \\s-\\v\\$ ', 'LANG': 'C.UTF-8'}shell=Falselogger=timeout=86400uid=982gid=135user='mockbuild'unshare_net=TrueprintOutput=Falsenspawn_args=['--capability=cap_ipc_lock']) Executing command: ['bash', '--login', '-c', '/usr/bin/rpmbuild -bb --noclean --target noarch --nodeps /builddir/build/SPECS/perl-Archive-Tar.spec'] with env {'TERM': 'vt100', 'SHELL': '/bin/bash', 'HOME': '/builddir', 'HOSTNAME': 'mock', 'PATH': '/usr/bin:/bin:/usr/sbin:/sbin', 'PROMPT_COMMAND': 'printf "\\033]0;\\007"', 'PS1': ' \\s-\\v\\$ ', 'LANG': 'C.UTF-8'} and shell False Building target platforms: noarch Building for target noarch setting SOURCE_DATE_EPOCH=1785542400 Executing(%prep): /bin/sh -e /var/tmp/rpm-tmp.vgzmQ2 + umask 022 + cd /builddir/build/BUILD + cd /builddir/build/BUILD + rm -rf Archive-Tar-3.08 + /usr/lib/rpm/rpmuncompress -x /builddir/build/SOURCES/Archive-Tar-3.08.tar.gz + STATUS=0 + '[' 0 -ne 0 ']' + cd Archive-Tar-3.08 + /usr/bin/chmod -Rf a+rX,u+w,g-w,o-w . + /usr/lib/rpm/rpmuncompress /builddir/build/SOURCES/fix-CVE-2026-9538.patch + /usr/bin/patch -s --fuzz=0 --no-backup-if-mismatch -f The text leading up to this was: -------------------------- |From f9af01426038e29d9578825a0cd3626946ab08c7 Mon Sep 17 00:00:00 2001 |From: Stig Palmquist |Date: Mon, 25 May 2026 19:11:34 +0100 |Subject: [PATCH] Cpan entry size during read | |Cap entry size during read to defend against attacker-controlled |size-field memory DoS | |The tar header's 12-byte size field is attacker-controlled. Archive::Tar's |non-skip extract path at Tar.pm:501 allocates a Perl scalar of the declared |size before returning the read-short error, allowing a few-KB compressed |archive declaring a 100 GB inner entry to trigger immediate multi-GB |allocation. The existing $EXTRACT_BLOCK_SIZE is an output-side syswrite |chunk size, not an input cap. | |Add $MAX_FILE_SIZE (default 1 GiB) checked once per entry, gating both the |chunked-skip and full-slurp branches. Set to 0 to disable the cap. | |Signed-off-by: Chris 'BinGOs' Williams |--- | lib/Archive/Tar.pm | 18 +++++++++++++++++- | 1 file changed, 17 insertions(+), 1 deletion(-) | |diff --git a/lib/Archive/Tar.pm b/lib/Archive/Tar.pm |index dc7f541..2ef1778 100644 |--- a/lib/Archive/Tar.pm |+++ b/lib/Archive/Tar.pm -------------------------- No file to patch. Skipping patch. 4 out of 4 hunks ignored RPM build errors: error: Bad exit status from /var/tmp/rpm-tmp.vgzmQ2 (%prep) Bad exit status from /var/tmp/rpm-tmp.vgzmQ2 (%prep) Child return code was: 1 EXCEPTION: [Error("Command failed: \n # bash --login -c '/usr/bin/rpmbuild -bb --noclean --target noarch --nodeps /builddir/build/SPECS/perl-Archive-Tar.spec'\n", 1)] Traceback (most recent call last): File "/usr/lib/python3.6/site-packages/mockbuild/trace_decorator.py", line 93, in trace result = func(*args, **kw) File "/usr/lib/python3.6/site-packages/mockbuild/util.py", line 610, in do_with_status raise exception.Error("Command failed: \n # %s\n%s" % (cmd_pretty(command, env), output), child.returncode) mockbuild.exception.Error: Command failed: # bash --login -c '/usr/bin/rpmbuild -bb --noclean --target noarch --nodeps /builddir/build/SPECS/perl-Archive-Tar.spec'