Skip to content

Adding CVE patch for package logstash-8/GHSA-hxx2-7vcw-mqr3 #76

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Closed
octo-sts wants to merge 1 commit into from

Adding CVE patch for package logstash-8 to fix CVE: GHSA-hxx2-7vcw-mqr3

8ba4a44
Select commit
Loading
Failed to load commit list.
Closed

Adding CVE patch for package logstash-8/GHSA-hxx2-7vcw-mqr3 #76

Adding CVE patch for package logstash-8 to fix CVE: GHSA-hxx2-7vcw-mqr3
8ba4a44
Select commit
Loading
Failed to load commit list.
Chainguard Internal Staging / elastic-build (STAGING) completed Mar 25, 2025 in 3m 14s

Failed to build APKs

Build ID: 0adb936c-91b7-4bb7-9eed-9ab8aeaf6a22
Error: failed to build logstash-8: building group: pod failed: build failed

Details

x86_64 Logs

Click to expand 
3-r1 libverto=0.3.2-r4 libx11=1.8.12-r0 libxau=1.0.12-r1 libxcb=1.17.0-r5 libxcrypt-dev=4.4.38-r1 libxcrypt=4.4.38-r1 libxdmcp=1.1.5-r5 libxext=1.3.6-r4 libxi=1.8.2-r1 libxrender=0.9.12-r2 libxtst=1.2.5-r1 libzstd1=1.5.7-r1 linux-headers=6.14-r0 logstash-filter-xml=4.3.0-r0 logstash-integration-jdbc=5.5.3-r0 logstash-output-opensearch=2.0.3-r1 make=4.4.1-r4 mpc=1.3.1-r5 mpfr=4.2.2-r0 ncurses-terminfo-base=6.5_p20241228-r1 ncurses=6.5_p20241228-r1 nss-db=2.40-r23 nss-hesiod=2.40-r23 oniguruma=6.9.10-r1 openjdk-17-default-jvm=17.0.14-r2 openjdk-17-jre=17.0.14-r2 openjdk-17=17.0.14-r2 openssf-compiler-options=20240627-r15 p11-kit-trust=0.25.5-r1 p11-kit=0.25.5-r1 patch=2.7.6-r8 pkgconf=2.4.3-r1 posix-cc-wrappers=1-r5 readline=8.2.13-r1 scanelf=1.3.8-r2 sqlite-libs=3.49.1-r1 ttf-dejavu=2.37-r5 wolfi-baselayout=20230201-r19 zlib=1.3.1-r6]
  accounts:
    runas:  
    users:
      - uid=1000(build) gid=1000
    groups:
      - gid=1000(build) members=[build]
auth configured for: []
installing ca-certificates-bundle (20241121-r2)
installing wolfi-baselayout (20230201-r19)
installing ld-linux (2.40-r23)
installing glibc-locale-posix (2.40-r23)
installing libgcc (14.2.0-r11)
installing glibc (2.40-r23)
installing alsa-lib (1.2.13-r0)
installing ncurses-terminfo-base (6.5_p20241228-r1)
installing ncurses (6.5_p20241228-r1)
installing bash (5.2.37-r30)
installing libstdc++ (14.2.0-r11)
installing libzstd1 (1.5.7-r1)
installing binutils-gold (2.44-r2)
installing binutils (2.44-r2)
installing libquadmath (14.2.0-r11)
installing libstdc++-dev (14.2.0-r11)
installing openssf-compiler-options (20240627-r15)
installing posix-cc-wrappers (1-r5)
installing libatomic (14.2.0-r11)
installing gmp (6.3.0-r4)
installing libgo (14.2.0-r11)
installing libgomp (14.2.0-r11)
installing isl (0.27-r0)
installing mpfr (4.2.2-r0)
installing mpc (1.3.1-r5)
installing zlib (1.3.1-r6)
installing gcc (14.2.0-r11)
installing libxcrypt (4.4.38-r1)
installing libxcrypt-dev (4.4.38-r1)
installing linux-headers (6.14-r0)
installing nss-db (2.40-r23)
installing nss-hesiod (2.40-r23)
installing glibc-dev (2.40-r23)
installing make (4.4.1-r4)
installing pkgconf (2.4.3-r1)
installing build-base (1-r8)
installing libcrypt1 (2.40-r23)
installing busybox (1.37.0-r30)
installing libcrypto3 (3.4.1-r2)
installing ca-certificates (20241121-r2)
installing libbrotlicommon1 (1.1.0-r4)
installing libbrotlidec1 (1.1.0-r4)
installing krb5-conf (1.0-r5)
installing libcom_err (1.47.2-r21)
installing keyutils-libs (1.6.3-r31)
installing libssl3 (3.4.1-r2)
installing libverto (0.3.2-r4)
installing krb5-libs (1.21.3-r2)
installing libevent (2.1.12-r6)
installing readline (8.2.13-r1)
installing sqlite-libs (3.49.1-r1)
installing heimdal-libs (7.8.0-r9)
installing gdbm (1.25-r0)
installing cyrus-sasl (2.1.28-r7)
installing libldap (2.6.9-r0)
installing libnghttp2-14 (1.65.0-r0)
installing libunistring (1.3-r1)
installing libidn2 (2.3.8-r0)
installing libpsl (0.21.5-r4)
installing libcurl-openssl4 (8.12.1-r0)
installing curl (8.12.1-r0)
installing fontconfig-config (2.16.1-r0)
installing libbz2-1 (1.0.8-r11)
installing libpng (1.6.47-r1)
installing freetype (2.13.3-r0)
installing giflib (5.2.2-r4)
installing libexpat1 (2.7.0-r0)
installing libpcre2-8-0 (10.45-r1)
installing git (2.49.0-r0)
installing go-1.24 (1.24.1-r2)
installing gradle-8 (8.13.0-r0)
installing libffi (3.4.7-r3)
installing libtasn1 (4.20.0-r2)
installing p11-kit (0.25.5-r1)
installing p11-kit-trust (0.25.5-r1)
installing java-cacerts (20241121-r2)
installing java-common-jre (0.2-r0)
installing oniguruma (6.9.10-r1)
installing jq (1.7.1-r5)
installing jruby-9.4 (9.4.12.0-r0)
installing lcms2 (2.17-r2)
installing libfontconfig1 (2.16.1-r0)
installing libjpeg-turbo (3.1.0-r2)
installing libxau (1.0.12-r1)
installing libxdmcp (1.1.5-r5)
installing libxcb (1.17.0-r5)
installing libx11 (1.8.12-r0)
installing libxext (1.3.6-r4)
installing libxi (1.8.2-r1)
installing libxrender (0.9.12-r2)
installing libxtst (1.2.5-r1)
installing logstash-filter-xml (4.3.0-r0)
installing logstash-integration-jdbc (5.5.3-r0)
installing logstash-output-opensearch (2.0.3-r1)
installing ttf-dejavu (2.37-r5)
installing openjdk-17-jre (17.0.14-r2)
installing openjdk-17-default-jvm (17.0.14-r2)
installing openjdk-17 (17.0.14-r2)
installing patch (2.7.6-r8)
installing scanelf (1.3.8-r2)
built image layer tarball as /tmp/apko-temp-3181115778/apko-x86_64.tar.gz
running step "git-checkout"
[git checkout] repo='https://github.com/elastic/logstash' dest='.' depth='1' branch='' tag='v8.15.3' expcommit='8364c8e89cfb113e38ec3f966df7eb1e9abe9d33' recurse='false'
[git checkout] execute: git config --global --add safe.directory /tmp/tmp.dTgooq
[git checkout] execute: git config --global --add safe.directory /home/build
[git checkout] execute: git clone --quiet --origin=origin --config=user.name=Melange Build --config=user.email=melange-build@cgr.dev --config=advice.detachedHead=false --branch=v8.15.3 --depth=1 https://github.com/elastic/logstash /tmp/tmp.dTgooq
[git checkout] execute: cd /tmp/tmp.dTgooq
[git checkout] tar -c . | tar -C "/home/build" -x
[git checkout] execute: cd /home/build
[git checkout] execute: git config --global --add safe.directory /home/build
[git checkout] execute: git fetch --quiet origin --depth=1 --no-tags +refs/tags/v8.15.3:refs/origin/tags/v8.15.3
[git checkout] execute: git checkout --quiet origin/tags/v8.15.3
[git checkout] tag v8.15.3 is 8364c8e89cfb113e38ec3f966df7eb1e9abe9d33
running step "patch"
Hmm...  Looks like a unified diff to me...
The text leading up to this was:
--------------------------
|--- a/Gemfile.template
|+++ b/Gemfile.template
--------------------------
patching file Gemfile.template
Using Plan A...
Hunk #1 succeeded at 39.
done
running step "Patch sources"
running step "Patch out the windows and mac tarball creation"
Hmm...  Looks like a unified diff to me...
The text leading up to this was:
--------------------------
|diff --git a/rakelib/artifacts.rake b/rakelib/artifacts.rake
|index c4705b5..ad6b693 100644
|--- a/rakelib/artifacts.rake
|+++ b/rakelib/artifacts.rake
--------------------------
patching file rakelib/artifacts.rake
Using Plan A...
Hunk #1 succeeded at 200 (offset 4 lines).
done
running step "Install all the default plugins"
Downloading https://services.gradle.org/distributions/gradle-8.7-bin.zip
............10%.............20%.............30%.............40%............50%.............60%.............70%.............80%.............90%............100%

Welcome to Gradle 8.7!

Here are the highlights of this release:
 - Compiling and testing with Java 22
 - Cacheable Groovy script compilation
 - New methods in lazy collection properties

For more details see https://docs.gradle.org/8.7/release-notes.html

To honour the JVM settings for this build a single-use Daemon process will be forked. For more on this, please refer to https://docs.gradle.org/8.7/userguide/gradle_daemon.html#sec:disabling_the_daemon in the Gradle documentation.
Daemon will be stopped at the end of the build 
> Task :buildSrc:compileJava NO-SOURCE
> Task :buildSrc:compileGroovy
> Task :buildSrc:processResources NO-SOURCE
> Task :buildSrc:classes
> Task :buildSrc:jar
> Task :compileJava NO-SOURCE
> Task :processResources NO-SOURCE
> Task :classes UP-TO-DATE
> Task :jar
> Task :assemble
> Task :buildCustomJRuby SKIPPED
> Task :installCustomJRuby SKIPPED

> Task :downloadJRuby
Download https://repo1.maven.org/maven2/org/jruby/jruby-dist/9.4.8.0/jruby-dist-9.4.8.0-bin.tar.gz

> Task :verifyFile
> Task :downloadAndInstallJRuby
> Task :benchmark-cli:compileJava
> Task :benchmark-cli:processResources
> Task :benchmark-cli:classes
> Task :benchmark-cli:jar
> Task :benchmark-cli:shadowJar
> Task :benchmark-cli:assemble
> Task :dependencies-report:compileJava
> Task :dependencies-report:processResources
> Task :dependencies-report:classes
> Task :dependencies-report:jar
> Task :dependencies-report:shadowJar
> Task :dependencies-report:assemble
> Task :ingest-converter:compileJava
> Task :ingest-converter:processResources NO-SOURCE
> Task :ingest-converter:classes
> Task :ingest-converter:jar
> Task :ingest-converter:shadowJar
> Task :ingest-converter:assemble
> Task :jvm-options-parser:compileJava
> Task :jvm-options-parser:processResources NO-SOURCE
> Task :jvm-options-parser:classes
> Task :jvm-options-parser:jar
> Task :jvm-options-parser:assemble

> Task :logstash-core:compileJava
Note: Processing Log4j annotations
Note: Annotations processed
Note: Processing Log4j annotations
Note: No elements to process

> Task :markAliasDefinitions
> Task :copyPluginAlias_java
> Task :copyPluginAlias_ruby
> Task :copyPluginAlias NO-SOURCE
> Task :logstash-core:processResources
> Task :logstash-core:classes
> Task :logstash-core:jar
> Task :logstash-core:copyRuntimeLibs
> Task :logstash-core:sourcesJar
> Task :logstash-core:copyGemjar
> Task :logstash-core:javadoc
> Task :logstash-core:javadocJar
> Task :logstash-core:assemble
> Task :logstash-core-benchmarks:compileJava
> Task :logstash-core-benchmarks:processResources
> Task :logstash-core-benchmarks:classes
> Task :logstash-core-benchmarks:jar
> Task :logstash-core-benchmarks:assemble
> Task :logstash-integration-tests:compileJava NO-SOURCE
> Task :logstash-integration-tests:processResources NO-SOURCE
> Task :logstash-integration-tests:classes UP-TO-DATE
> Task :logstash-integration-tests:jar
> Task :logstash-integration-tests:assemble

> Task :bootstrap
Plugin not found, aborting

> Task :bootstrap FAILED

FAILURE: Build failed with an exception.

* Where:
Script '/home/build/rubyUtils.gradle' line: 174

* What went wrong:
Execution failed for task ':bootstrap'.
> (GemNotFound) Could not find gem 'sinatra (~> 4.1.0)' with platforms 'java', 'universal-java-11', 'universal-java-17' in rubygems repository https://rubygems.org/ or installed locally.
  
  The source contains the following gems matching 'sinatra (~> 4.1.0)':
    * sinatra-4.1.0
    * sinatra-4.1.1

* Try:
> Run with --stacktrace option to get the stack trace.
> Run with --info or --debug option to get more log output.
> Run with --scan to get full insights.
> Get more help at https://help.gradle.org.

BUILD FAILED in 57s
35 actionable tasks: 35 executed

aarch64 Logs

Click to expand 
=4.4.38-r1 libxdmcp=1.1.5-r5 libxext=1.3.6-r4 libxi=1.8.2-r1 libxrender=0.9.12-r2 libxtst=1.2.5-r1 libzstd1=1.5.7-r1 linux-headers=6.14-r0 logstash-filter-xml=4.3.0-r0 logstash-integration-jdbc=5.5.3-r0 logstash-output-opensearch=2.0.3-r1 make=4.4.1-r4 mpc=1.3.1-r5 mpfr=4.2.2-r0 ncurses-terminfo-base=6.5_p20241228-r1 ncurses=6.5_p20241228-r1 nss-db=2.40-r23 nss-hesiod=2.40-r23 oniguruma=6.9.10-r1 openjdk-17-default-jvm=17.0.14-r2 openjdk-17-jre=17.0.14-r2 openjdk-17=17.0.14-r2 openssf-compiler-options=20240627-r15 p11-kit-trust=0.25.5-r1 p11-kit=0.25.5-r1 patch=2.7.6-r8 pkgconf=2.4.3-r1 posix-cc-wrappers=1-r5 readline=8.2.13-r1 scanelf=1.3.8-r2 sqlite-libs=3.49.1-r1 ttf-dejavu=2.37-r5 wolfi-baselayout=20230201-r19 zlib=1.3.1-r6]
  accounts:
    runas:  
    users:
      - uid=1000(build) gid=1000
    groups:
      - gid=1000(build) members=[build]
auth configured for: []
installing ca-certificates-bundle (20241121-r2)
installing wolfi-baselayout (20230201-r19)
installing ld-linux (2.40-r23)
installing glibc-locale-posix (2.40-r23)
installing libgcc (14.2.0-r11)
installing glibc (2.40-r23)
installing alsa-lib (1.2.13-r0)
installing ncurses-terminfo-base (6.5_p20241228-r1)
installing ncurses (6.5_p20241228-r1)
installing bash (5.2.37-r30)
installing libstdc++ (14.2.0-r11)
installing libzstd1 (1.5.7-r1)
installing binutils-gold (2.44-r2)
installing binutils (2.44-r2)
installing libquadmath (14.2.0-r11)
installing libstdc++-dev (14.2.0-r11)
installing openssf-compiler-options (20240627-r15)
installing posix-cc-wrappers (1-r5)
installing libatomic (14.2.0-r11)
installing gmp (6.3.0-r4)
installing libgo (14.2.0-r11)
installing libgomp (14.2.0-r11)
installing isl (0.27-r0)
installing mpfr (4.2.2-r0)
installing mpc (1.3.1-r5)
installing zlib (1.3.1-r6)
installing gcc (14.2.0-r11)
installing libxcrypt (4.4.38-r1)
installing libxcrypt-dev (4.4.38-r1)
installing linux-headers (6.14-r0)
installing nss-db (2.40-r23)
installing nss-hesiod (2.40-r23)
installing glibc-dev (2.40-r23)
installing make (4.4.1-r4)
installing pkgconf (2.4.3-r1)
installing build-base (1-r8)
installing libcrypt1 (2.40-r23)
installing busybox (1.37.0-r30)
installing libcrypto3 (3.4.1-r2)
installing ca-certificates (20241121-r2)
installing libbrotlicommon1 (1.1.0-r4)
installing libbrotlidec1 (1.1.0-r4)
installing krb5-conf (1.0-r5)
installing libcom_err (1.47.2-r21)
installing keyutils-libs (1.6.3-r31)
installing libssl3 (3.4.1-r2)
installing libverto (0.3.2-r4)
installing krb5-libs (1.21.3-r2)
installing libevent (2.1.12-r6)
installing readline (8.2.13-r1)
installing sqlite-libs (3.49.1-r1)
installing heimdal-libs (7.8.0-r9)
installing gdbm (1.25-r0)
installing cyrus-sasl (2.1.28-r7)
installing libldap (2.6.9-r0)
installing libnghttp2-14 (1.65.0-r0)
installing libunistring (1.3-r1)
installing libidn2 (2.3.8-r0)
installing libpsl (0.21.5-r4)
installing libcurl-openssl4 (8.12.1-r0)
installing curl (8.12.1-r0)
installing fontconfig-config (2.16.1-r0)
installing libbz2-1 (1.0.8-r11)
installing libpng (1.6.47-r1)
installing freetype (2.13.3-r0)
installing giflib (5.2.2-r4)
installing libexpat1 (2.7.0-r0)
installing libpcre2-8-0 (10.45-r1)
installing git (2.49.0-r0)
installing go-1.24 (1.24.1-r2)
installing gradle-8 (8.13.0-r0)
installing libffi (3.4.7-r3)
installing libtasn1 (4.20.0-r2)
installing p11-kit (0.25.5-r1)
installing p11-kit-trust (0.25.5-r1)
installing java-cacerts (20241121-r2)
installing java-common-jre (0.2-r0)
installing oniguruma (6.9.10-r1)
installing jq (1.7.1-r5)
installing jruby-9.4 (9.4.12.0-r0)
installing lcms2 (2.17-r2)
installing libfontconfig1 (2.16.1-r0)
installing libjpeg-turbo (3.1.0-r2)
installing libxau (1.0.12-r1)
installing libxdmcp (1.1.5-r5)
installing libxcb (1.17.0-r5)
installing libx11 (1.8.12-r0)
installing libxext (1.3.6-r4)
installing libxi (1.8.2-r1)
installing libxrender (0.9.12-r2)
installing libxtst (1.2.5-r1)
installing logstash-filter-xml (4.3.0-r0)
installing logstash-integration-jdbc (5.5.3-r0)
installing logstash-output-opensearch (2.0.3-r1)
installing ttf-dejavu (2.37-r5)
installing openjdk-17-jre (17.0.14-r2)
installing openjdk-17-default-jvm (17.0.14-r2)
installing openjdk-17 (17.0.14-r2)
installing patch (2.7.6-r8)
installing scanelf (1.3.8-r2)
built image layer tarball as /tmp/apko-temp-1963548050/apko-aarch64.tar.gz
running step "git-checkout"
[git checkout] repo='https://github.com/elastic/logstash' dest='.' depth='1' branch='' tag='v8.15.3' expcommit='8364c8e89cfb113e38ec3f966df7eb1e9abe9d33' recurse='false'
[git checkout] execute: git config --global --add safe.directory /tmp/tmp.xFmc3a
[git checkout] execute: git config --global --add safe.directory /home/build
[git checkout] execute: git clone --quiet --origin=origin --config=user.name=Melange Build --config=user.email=melange-build@cgr.dev --config=advice.detachedHead=false --branch=v8.15.3 --depth=1 https://github.com/elastic/logstash /tmp/tmp.xFmc3a
[git checkout] execute: cd /tmp/tmp.xFmc3a
[git checkout] tar -c . | tar -C "/home/build" -x
[git checkout] execute: cd /home/build
[git checkout] execute: git config --global --add safe.directory /home/build
[git checkout] execute: git fetch --quiet origin --depth=1 --no-tags +refs/tags/v8.15.3:refs/origin/tags/v8.15.3
[git checkout] execute: git checkout --quiet origin/tags/v8.15.3
[git checkout] tag v8.15.3 is 8364c8e89cfb113e38ec3f966df7eb1e9abe9d33
running step "patch"
Hmm...  Looks like a unified diff to me...
The text leading up to this was:
--------------------------
|--- a/Gemfile.template
|+++ b/Gemfile.template
--------------------------
patching file Gemfile.template
Using Plan A...
Hunk #1 succeeded at 39.
done
running step "Patch sources"
running step "Patch out the windows and mac tarball creation"
Hmm...  Looks like a unified diff to me...
The text leading up to this was:
--------------------------
|diff --git a/rakelib/artifacts.rake b/rakelib/artifacts.rake
|index c4705b5..ad6b693 100644
|--- a/rakelib/artifacts.rake
|+++ b/rakelib/artifacts.rake
--------------------------
patching file rakelib/artifacts.rake
Using Plan A...
Hunk #1 succeeded at 200 (offset 4 lines).
done
running step "Install all the default plugins"
Downloading https://services.gradle.org/distributions/gradle-8.7-bin.zip
............10%.............20%.............30%.............40%............50%.............60%.............70%.............80%.............90%............100%

Welcome to Gradle 8.7!

Here are the highlights of this release:
 - Compiling and testing with Java 22
 - Cacheable Groovy script compilation
 - New methods in lazy collection properties

For more details see https://docs.gradle.org/8.7/release-notes.html

To honour the JVM settings for this build a single-use Daemon process will be forked. For more on this, please refer to https://docs.gradle.org/8.7/userguide/gradle_daemon.html#sec:disabling_the_daemon in the Gradle documentation.
Daemon will be stopped at the end of the build 
> Task :buildSrc:compileJava NO-SOURCE
> Task :buildSrc:compileGroovy
> Task :buildSrc:processResources NO-SOURCE
> Task :buildSrc:classes
> Task :buildSrc:jar
> Task :compileJava NO-SOURCE
> Task :processResources NO-SOURCE
> Task :classes UP-TO-DATE
> Task :jar
> Task :assemble
> Task :buildCustomJRuby SKIPPED
> Task :installCustomJRuby SKIPPED

> Task :downloadJRuby
Download https://repo1.maven.org/maven2/org/jruby/jruby-dist/9.4.8.0/jruby-dist-9.4.8.0-bin.tar.gz

> Task :verifyFile
> Task :downloadAndInstallJRuby
> Task :benchmark-cli:compileJava
> Task :benchmark-cli:processResources
> Task :benchmark-cli:classes
> Task :benchmark-cli:jar
> Task :benchmark-cli:shadowJar
> Task :benchmark-cli:assemble
> Task :dependencies-report:compileJava
> Task :dependencies-report:processResources
> Task :dependencies-report:classes
> Task :dependencies-report:jar
> Task :dependencies-report:shadowJar
> Task :dependencies-report:assemble
> Task :ingest-converter:compileJava
> Task :ingest-converter:processResources NO-SOURCE
> Task :ingest-converter:classes
> Task :ingest-converter:jar
> Task :ingest-converter:shadowJar
> Task :ingest-converter:assemble
> Task :jvm-options-parser:compileJava
> Task :jvm-options-parser:processResources NO-SOURCE
> Task :jvm-options-parser:classes
> Task :jvm-options-parser:jar
> Task :jvm-options-parser:assemble

> Task :logstash-core:compileJava
Note: Processing Log4j annotations
Note: Annotations processed
Note: Processing Log4j annotations
Note: No elements to process

> Task :markAliasDefinitions
> Task :copyPluginAlias_java
> Task :copyPluginAlias_ruby
> Task :copyPluginAlias NO-SOURCE
> Task :logstash-core:processResources
> Task :logstash-core:classes
> Task :logstash-core:jar
> Task :logstash-core:copyRuntimeLibs
> Task :logstash-core:sourcesJar
> Task :logstash-core:copyGemjar
> Task :logstash-core:javadoc
> Task :logstash-core:javadocJar
> Task :logstash-core:assemble
> Task :logstash-core-benchmarks:compileJava
> Task :logstash-core-benchmarks:processResources
> Task :logstash-core-benchmarks:classes
> Task :logstash-core-benchmarks:jar
> Task :logstash-core-benchmarks:assemble
> Task :logstash-integration-tests:compileJava NO-SOURCE
> Task :logstash-integration-tests:processResources NO-SOURCE
> Task :logstash-integration-tests:classes UP-TO-DATE
> Task :logstash-integration-tests:jar
> Task :logstash-integration-tests:assemble

> Task :bootstrap
Plugin not found, aborting

> Task :bootstrap FAILED

FAILURE: Build failed with an exception.

* Where:
Script '/home/build/rubyUtils.gradle' line: 174

* What went wrong:
Execution failed for task ':bootstrap'.
> (GemNotFound) Could not find gem 'sinatra (~> 4.1.0)' with platforms 'java', 'universal-java-11', 'universal-java-17' in rubygems repository https://rubygems.org/ or installed locally.
  
  The source contains the following gems matching 'sinatra (~> 4.1.0)':
    * sinatra-4.1.0
    * sinatra-4.1.1

* Try:
> Run with --stacktrace option to get the stack trace.
> Run with --info or --debug option to get more log output.
> Run with --scan to get full insights.
> Get more help at https://help.gradle.org.

BUILD FAILED in 46s
35 actionable tasks: 35 executed
failed to build package: unable to run package logstash-8 pipeline: unable to run pipeline: exit status 1

Indexes

https://apk.chainreg.biz/test-remediation-packages-presubmit/84c1ca245d19126f248352d9ab18c3c4c7d6db82

❌ Failed Packages

  • ❌ logstash-8 (error | 3m7s)

Packages

More Observability

Command

cg build log \
  --build-id 0adb936c-91b7-4bb7-9eed-9ab8aeaf6a22 \
  --project staging-images-183e \
  --cluster elastic-pre-a \
  --namespace pre-test-cve-patch \
  --start 2025-03-25T19:45:41Z \
  --end 2025-03-25T19:58:57Z \
  --attrs pkg,arch
View more details on Chainguard Internal Staging