From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: from shymkent.ilbers.de ([unix socket]) by shymkent (Cyrus 2.5.10-Debian-2.5.10-3+deb9u2) with LMTPA; Mon, 31 Aug 2026 10:19:20 +0200 X-Sieve: CMU Sieve 2.4 Received: from mail-ot1-f59.google.com (mail-ot1-f59.google.com [209.85.210.59]) by shymkent.ilbers.de (8.15.2/8.15.2/Debian-8+deb9u1) with ESMTPS id 67V8JINl015400 (version=TLSv1.2 cipher=ECDHE-RSA-AES256-GCM-SHA384 bits=256 verify=NOT) for ; Mon, 31 Aug 2026 10:19:19 +0200 Received: by mail-ot1-f59.google.com with SMTP id 46e09a7af769-7f4e4b52404sf3967572a34.0 for ; Mon, 31 Aug 2026 01:19:19 -0700 (PDT) ARC-Seal: i=3; a=rsa-sha256; t=1788164353; cv=pass; d=google.com; s=arc-20260327; b=FHYGebv5ZOP9rXP1gBg88SinqabCQN738HfBAjD9+U3rEjSI8e1u+z7apENnCVme1B f0f9lBoHGuSejjKjnvYYT4+KjANtgEEsjJtofd70ulDE5FodtKVbZH7dFa2g0U+i/DJT mgrfu/uRlcfKXF9XtgoqID1DPm/JqkBiVyp8sUUAi3aUC/1FB6nTjqG5FbIUNtQvF2qy DrhjWTd+vN+gyXmu18MSbdICncfEwpaIbAyfX0wHICFiXiuXSqA65pEK0LNU6PtCMvDz muefiLaIZyQdT2RqwFzJYgN6dJl7s7yJ2d6NUWm+9MXxkbt6vxG8mptKc/ylXEkrN1n3 mhiw== ARC-Message-Signature: i=3; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20260327; h=list-unsubscribe:list-subscribe:list-archive:list-help:list-post :list-id:mailing-list:precedence:reply-to:mime-version :content-transfer-encoding:content-id:user-agent:content-language :accept-language:in-reply-to:references:message-id:date:thread-index :thread-topic:subject:cc:to:from:dkim-signature; bh=NFFQcARwh9/TFTSM4bKgyPDOocb4AIsdEb5YYljATq4=; fh=ca4p9aRKNJg4i/qfdG2WPudzK/ftvPt32Nr4990w6PU=; b=L+Xqv+BaLeEuPLDararSO1Y/SeIftqeWHgfWCFMQM+u/l/uQRXD81OcHo1ad/q1KQC EornC312zLDMyqrHLPScjF1VqhXEmYn+VMmWaCL3fTaOWHSq3pAlzs5duThCcT00ewFW njs0N+XGGb3AI5DvlII68HzsbOLCqeq6ayJVRZr3Jc7/8hDxuDEPNOR1SRgsFWHeWAVI HmfRmzKIWxh/TxoFfAsyt7+/1lnh2LJYVUveYjh4Fz3Mg7wHcI5awl3Fza1G0iI+s1KW sVCgVuFe3UlDtl/zp/vWJn5Qf5NYL0S4gLKveeC/U8YMNMFicCkUpd79RUF5ABsFuRTj zb+A==; darn=ilbers.de ARC-Authentication-Results: i=3; gmr-mx.google.com; dkim=pass header.i=@siemens.com header.s=selector2 header.b=odk5nlnm; arc=pass (i=1 spf=pass spfdomain=siemens.com dkim=pass dkdomain=siemens.com dmarc=pass fromdomain=siemens.com); spf=pass (google.com: domain of felix.moessbauer@siemens.com designates 2a01:111:f403:c201::6 as permitted sender) smtp.mailfrom=felix.moessbauer@siemens.com; dmarc=pass (p=REJECT sp=REJECT dis=NONE) header.from=siemens.com DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=googlegroups.com; s=20251104; t=1788164353; x=1788769153; darn=ilbers.de; h=list-unsubscribe:list-subscribe:list-archive:list-help:list-post :list-id:mailing-list:precedence:reply-to :x-original-authentication-results:x-original-sender:mime-version :content-transfer-encoding:content-id:content-type:user-agent :content-language:accept-language:in-reply-to:references:message-id :date:thread-index:thread-topic:subject:cc:to:from:from:to:cc :subject:date:message-id:reply-to:content-type; bh=NFFQcARwh9/TFTSM4bKgyPDOocb4AIsdEb5YYljATq4=; b=I2VlrONJTggKW5C91xVkDzaMzo/sAEqba9l9/nlMYRUDACizLGgBIRWIlR6exJkxfL bGM99a8oMuYvaWfj9qvrlZSMUvFVbyT5D8fDuWN37dbU0+m5D4G5J1aN2NlCBgvurIHC /ph419uISyFmtnmBGk93tPuu7mUg1XvqnRaBKFZg+LSxdcVIjmkfAFmZZJaMkRhI65DF ukxiAobjd5KBVBI5M+KciYUz5NMCIhYVPDnpQhLP74ZRjXZWP5u2AS0O89mNGNK0OBRF i7ke6KcPa23iaboG4tErk+FdDm38K0+zJA/L4LkZAcXwqIrLMWXwUWavOa7Po4uJPuNf F1Og== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20251104; t=1788164353; x=1788769153; h=list-unsubscribe:list-subscribe:list-archive:list-help:list-post :x-spam-checked-in-group:list-id:mailing-list:precedence:reply-to :x-original-authentication-results:x-original-sender:mime-version :content-transfer-encoding:content-id:content-type:user-agent :content-language:accept-language:in-reply-to:references:message-id :date:thread-index:thread-topic:subject:cc:to:from:x-beenthere :x-gm-message-state:from:to:cc:subject:date:message-id:reply-to :content-type; bh=NFFQcARwh9/TFTSM4bKgyPDOocb4AIsdEb5YYljATq4=; b=l+8ldynz3/5A5o9YzNPjZ/8ZgU08WkwXaK7+AA+DwPFxDJGXmVwf9T6oOIfqWpHGrD SM/Vwxz2XtzTq+/6968H5/93gV679ctBRKnFAkTbt2Eec5ls/L9QB6TIC2Fa9/SQ9BmL VJOyi3C+mYSZzLRapljlW4SFJlQLYhakHGGRjRj37mCqsYh/4GXybQ4Ubonm7tmhE47j Tfy2LjA/+WDd6O25tA1rWca43NqWBhPBJ8fdjuwnVC5xPt7XPl6yMFBus8MU4DQwaQQI brWl/sBceE4rxOEBkmdAgHON/FpgeqynjcGt+EIeRtRYCEpfqvcC6JzD9qsDFuouVcus IDGA== X-Forwarded-Encrypted: i=3; AHgh+RpQyYl72y74ZYyUMnNKoX1pesHCQCgxlaDoXKkDZlDaWkSdOJ2e5/T3+6oLH/OXFjIpu86w@ilbers.de X-Gm-Message-State: AFuF++n0T3BPnkDr69mVFM7VSPdcRsQoMhIA2mrKUVw8qLMxzB0sTfst /3mtumhSZpXJS9I0xUzYe0n72bXNWcfmKjxQJQOXGZlq6C6F55+ObXRK X-Received: by 2002:a05:6820:168d:b0:6b3:5475:4930 with SMTP id 006d021491bc7-6b354759c3dmr8079781eaf.21.1788164353138; Mon, 31 Aug 2026 01:19:13 -0700 (PDT) X-BeenThere: isar-users@googlegroups.com; h="ATskLdfDdC40RMRrlW8g+EFmwCIf8A66iz8nWpLWX1iwawGorg==" Received: by 2002:a05:6820:7705:b0:6ae:a08c:c8eb with SMTP id 006d021491bc7-6b1b286b98als4502947eaf.2.-pod-prod-03-us; Mon, 31 Aug 2026 01:19:12 -0700 (PDT) X-Forwarded-Encrypted: i=3; AHgh+RpvQ9z087715pdootmDcch3bPelkXyvVpOqglN90K/dNBG1b6WYdByH35nZb+30fdJKZfgdloEOOLe0@googlegroups.com X-Received: by 2002:a05:6830:6508:b0:7d7:d524:bc88 with SMTP id 46e09a7af769-7f4f23b0edamr27895730a34.10.1788164352055; Mon, 31 Aug 2026 01:19:12 -0700 (PDT) ARC-Seal: i=2; a=rsa-sha256; t=1788164352; cv=pass; d=google.com; s=arc-20260327; b=il/Mp1Isjt0fSpVlynGJt9tbJ4v591L0/4w3yZvw0M/F1kNxNROQLBDPjaTl3yhsHU tizBPdbSvUc58gesB3G5qcSb9ySu6FeyYJuvzbYIXbEwLoCreqoL8Xdh6EQTQGmhKBXe qHkoMqfsAAoXq9fVt1bjYlY7zeDrplEvT6CVnjt7ihqOoLtat32eknIpo4FCfDP/sx1i QZMQF+TKIkXGsQQYg5hqQI23iGRVzhsSUEHOBYCnTEKgSbaYd6xRzucJ1NnxXf2d1p+O eCN3n+3DvnwMDnpy0BqjEaa1h/4H+l9pD33h9hLsSe72ZI8LAqagglw17k/Gq+2ZQQ6S 6WPQ== ARC-Message-Signature: i=2; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20260327; h=mime-version:content-transfer-encoding:content-id:user-agent :content-language:accept-language:in-reply-to:references:message-id :date:thread-index:thread-topic:subject:cc:to:from:dkim-signature; bh=CTR70viy4spmIdvJtUChT9u1km8DJ+OW6XwqCwJCmK0=; fh=Ft5pee5Wpbtkxx5x18U/1+hKjHM+iXhU1huNZrrRnco=; b=dZ79Um+WNqzjbbvaxbAsr3PUehl13CeZFGDM4T6SCwl3SXINYPM30HrZPyWpWtBRQA roopjyPWBdYeGe5uh2ozkB5FG4HJqGligz+wOrqlqQgcxsKL4uiGjAP68aTJzWWkuIQb OJ0F5uEnCh3GE1gFf9iEh4IatSEzjiwCkGGeJo/CvgGaMzufrfOocWhny4mXemg5dOlM 1jlW98LvVncxtUSGpdUjKGn2zkI+N9PwNMrm1aYM0GaBE2JaYDWg/P5wV0NsvWRG8pYs ZMJcYikM0quE7ONOk9ahY/ZbSqMCuyibNuFVzaxDE75WIDgogpor6De0qKvJrNU3I37f kZBA==; dara=google.com ARC-Authentication-Results: i=2; gmr-mx.google.com; dkim=pass header.i=@siemens.com header.s=selector2 header.b=odk5nlnm; arc=pass (i=1 spf=pass spfdomain=siemens.com dkim=pass dkdomain=siemens.com dmarc=pass fromdomain=siemens.com); spf=pass (google.com: domain of felix.moessbauer@siemens.com designates 2a01:111:f403:c201::6 as permitted sender) smtp.mailfrom=felix.moessbauer@siemens.com; dmarc=pass (p=REJECT sp=REJECT dis=NONE) header.from=siemens.com Received: from AM0PR02CU008.outbound.protection.outlook.com (mail-westeuropeazlp170130006.outbound.protection.outlook.com. [2a01:111:f403:c201::6]) by gmr-mx.google.com with ESMTPS id 46e09a7af769-7f4fa92e4a1si276973a34.3.2026.08.31.01.19.11 for (version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256); Mon, 31 Aug 2026 01:19:11 -0700 (PDT) Received-SPF: pass (google.com: domain of felix.moessbauer@siemens.com designates 2a01:111:f403:c201::6 as permitted sender) client-ip=2a01:111:f403:c201::6; ARC-Seal: i=1; a=rsa-sha256; s=arcselector10001; d=microsoft.com; cv=none; b=XIWTUf0aCzH4g1beVu3VUZqTOVte+agAoaVFw3qtbXrBwt++eqj4a8CdJNUVld6aiHV0JpsDMLeqkgRlvx1/xm+NPUh4kboptJErM1iVwQZcRsEjXB6sEgWyNurf1X+eveSbkUCq/QbVIujri2VZ+DMLgD+6csfCEklXcc0+ePHGP25FOATtB/26ssTsF9/+sM5u2hoNhrUhc2EyINk3O3XARer/CdNHWZK3NXk438G+Zd2gJ1OZiNAzOjHfPCya1Jus08/UKY/2LOfDTx+0iY2p4rmNSgzL/gjtHtyz0nljH0yZ+a16hdhRTQH6og9f9MNvgDSznG5vYfEW3tQ2IA== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector10001; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1; bh=CTR70viy4spmIdvJtUChT9u1km8DJ+OW6XwqCwJCmK0=; b=kFFjHEMIb6D3I33GsujDV1txOJRsfoVLdwcXyQfq3ODQNVYqhte4w4/3Kfu6sAO7U2Avm71xHgAk43WIuBEhuI7TkpTHr9ysiJ7n7G1+5S6Dvm6LVqyckYjmLA9fG4GI2XwUM79zEOxh6ZimtL9E/79bdwXM8bu6rG+3uJmew3x7oqquL4TvCs/X7f9eNvJ/dp2P6OE6oyPkqgffQFMn++fMMe3UNpf3NHWgi8vdTLBAYf2xMiFn7TOT3P3qPiKihKcmdgd7VRMW5mY2EnzKdrmQc0BxvLPjtsEmPAGPzHesRxNdXQ2slC/S6rs9fXb1TmlFs8Wwky4xVuFtgDefNw== ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass smtp.mailfrom=siemens.com; dmarc=pass action=none header.from=siemens.com; dkim=pass header.d=siemens.com; arc=none Received: from AM7PR10MB3956.EURPRD10.PROD.OUTLOOK.COM (2603:10a6:20b:17e::10) by PAWPR10MB7674.EURPRD10.PROD.OUTLOOK.COM (2603:10a6:102:35e::18) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.21.360.8; Mon, 31 Aug 2026 08:19:08 +0000 Received: from AM7PR10MB3956.EURPRD10.PROD.OUTLOOK.COM ([fe80::c54c:ccd8:ebbf:477c]) by AM7PR10MB3956.EURPRD10.PROD.OUTLOOK.COM ([fe80::c54c:ccd8:ebbf:477c%5]) with mapi id 15.21.0360.008; Mon, 31 Aug 2026 08:19:08 +0000 From: "'MOESSBAUER, Felix' via isar-users" To: "Bezdeka, Florian" , Ulrich Teichert , isar-users , "Hombourger, Cedric" CC: "Kiszka, Jan" Subject: Re: Recent bubblewrap security upgrade causing a build failure Thread-Topic: Recent bubblewrap security upgrade causing a build failure Thread-Index: AQHdNugS3Bk6CBj7mU+ElPcaEJBz17azbnOAgAAulQCABDfxAA== Date: Mon, 31 Aug 2026 08:19:08 +0000 Message-ID: References: <7f7d4378-0c04-4b57-8af9-428725213c53n@googlegroups.com> <64b5d7ff601632bff533f1407e3e2aa13b010208.camel@siemens.com> <535d972c2f5aedf1d2b19afac3f4466f38d3ae7d.camel@siemens.com> In-Reply-To: <535d972c2f5aedf1d2b19afac3f4466f38d3ae7d.camel@siemens.com> Accept-Language: de-DE, en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: user-agent: Evolution 3.56.2-10 x-ms-publictraffictype: Email x-ms-traffictypediagnostic: AM7PR10MB3956:EE_|PAWPR10MB7674:EE_ x-ms-office365-filtering-correlation-id: 1575d05c-9b97-4d8d-daac-08df073887d0 x-ms-exchange-atpmessageproperties: SA x-ms-exchange-senderadcheck: 1 x-ms-exchange-antispam-relay: 0 x-microsoft-antispam: BCL:0;ARA:13230040|4022899009|366016|23010399003|1800799024|376014|10067099003|3023799007|55112099003|18002099003|22082099003|6133799003|4143699003|56012099006|11063799006|38070700021; x-microsoft-antispam-message-info: p7OMLHEaiKZXT1AjDhU43lalUYmac18rZ9oLLfpZWlX5YWfiF7cJvOb0CXTUceZJKEXzrUyvGpHwX35rKtMm+XPblphZyp16byHbLixSrZBFzAshEbUiQfpOBKXuI1/lGu6Pzt3IsxaltfTwCp7sTSQeuRY2xlT6/A4j8D3JaeozZK/H21zVc/GaT7yT7XoXDeoPYmUXmdFn9oub5zEtmsG7kGScMrLyGDicrvCmAgYm/kFNQ1jllXR+JReoUjvBPSUHqaQt8WJjxl7ezkGeQia3rdf1AjZn2k40+89qeymGFoc/VpcCL9Tr0jKjuimw6MgYh9L0Q/SCutxUV4K1Qw41bPTeo5z/vkPOkTy9+dSDdrffZesRoX7ac9GsNYuzL65T6z5/3HQ0pWfTft2kfFXd+usYSXE7/8THEZ8uNxxSOOyD06acfJ3qaZl/FAX+tEvUrcB0pqyRMpDpWzIdxzm5mcxuZFsRzDciLnQuahvN0YeXf0Vlmd7zoCFvXUFzyfaxZwzImHOLPnc6i7HcE7eC4blRIaZsWQsLxiWyUSX66F4rJSggu62mNuymy/1/RwDuHWtMMZj/cz7u/wG+13zWHL6w4zIJhYMO7ZuOvFl2dbYL2CWhU6/Kb2QScWGvPlJT07dCFp5mlHQQG96mvzHH8Fcc1Xv2b1BNGXtBCH0= x-forefront-antispam-report: CIP:255.255.255.255;CTRY:;LANG:en;SCL:1;SRV:;IPV:NLI;SFV:NSPM;H:AM7PR10MB3956.EURPRD10.PROD.OUTLOOK.COM;PTR:;CAT:NONE;SFS:(13230040)(4022899009)(366016)(23010399003)(1800799024)(376014)(10067099003)(3023799007)(55112099003)(18002099003)(22082099003)(6133799003)(4143699003)(56012099006)(11063799006)(38070700021);DIR:OUT;SFP:1101; x-ms-exchange-antispam-messagedata-chunkcount: 1 x-ms-exchange-antispam-messagedata-0: =?utf-8?B?Y1gxb2FNaUVLOUl6QUR3b1VkZ3FXSTh6YUJKcm0rUlBoeDN2TVR6ZjloeVNo?= =?utf-8?B?NnB4S3NleE9Ta2lYb1RqczliZmQraEpqaXFRaWtidEJCWTlaWFFlNW1QVGZw?= =?utf-8?B?QmZ2OXQ5K09ycVlUZzRJYUlDcTZZNzBTaEVHTzhyN2hIczFub1ZKejFBQ1g1?= =?utf-8?B?ZkxUaW9yd2ZsSXk4NW9qZk9jb3YrSmJpL3hQTGduNTFzeDZLanlDVW1hZnVN?= =?utf-8?B?dGVjK3RmN1JZOWYzZkpYZ0k0NEJBVzlaUWlIbmR1a3NTelVNMTNobUsyMjRi?= =?utf-8?B?em91UktScWJjWDRQUzF3NlZsbkN0elZrVkNsWXVaYjZPVVlENGRrenhMRWpr?= =?utf-8?B?TnpKcUtNam9PNVRrZGtZQktsbHJYZDBlWFFaTlo0OWFXaXVsa3VSWlVhWjBj?= =?utf-8?B?N0xYeGRhT1RHbnMwWTgzMkxjY3VpZGgrVGNwdmJPb1JmUkJTbGsrN3ViQ1lI?= =?utf-8?B?cFR2T0U1MDEzOXAyRkNqVUNJOEk0MUpUWXRyaDViaGlBNk9jWjdzVHdOQitL?= =?utf-8?B?SjJNQUxDOW0vdHZlWXg3R3dKdGJLN0YzeUpNSmQzNmdONjgxeWNZNDVkU2hE?= =?utf-8?B?NHRtMm9sQnFCeE5SY0dNK1VoUmpta1FDdFBSalV6Y3dza0gwZFNjOElGLzd1?= =?utf-8?B?Ti9Qem45OTdPTStiR0tWWktPa1FQRG9makVCMFdLa2tKcDZHSGpKK0NGeXJl?= =?utf-8?B?WFFyYUQ4d0krVHFWTHF3Z3RkNHdBRmFmcTlWbWI5TlVucnVteUhqQmVYWjJR?= =?utf-8?B?QmxsbjFrcm1oQXBDYmE1TVg3UWRwTjBuam5EdDlpUDhIeEwvU0szRGNCM1p1?= =?utf-8?B?S2ZkaFZKSlhDTjh1bWJYNnhUMC9Ea1dhWWVhZDkwcXNBK0wyanY0UllLN2dF?= =?utf-8?B?Y3BMTUJ0dDYzWXNmcEU4cHdndVRoSUlpRUFValJjVVpCdTNSMktCTDk2TkJn?= =?utf-8?B?UG1RVjJ0eTNURVl0VUgyclE3WTR3dmprbFViTVhveTZvMTAreDlMM2VPRlFV?= =?utf-8?B?Y3V3czRVc09wQVZZSnlwQzdnZUM1cUduQ1JSVlhzY2hzcUt6K01TTTlNYmdy?= =?utf-8?B?RzZ6cG5Yb1c5eEFPaFB0Q0QwV3FVZmtKb3NQRm96c3RtVmhFYVIxNm9rLzdn?= =?utf-8?B?TkJWM2R1NS90b3JoQTBWd0w1ZEdlcHh4UWd0WGJhZTRlNEVicmhlWSswN0VM?= =?utf-8?B?Vk5CdGVCKzJicHlDYm9vekhydGJjcjZoZ0tqdUtVMGs2ckl2eVBzRmtiMkJo?= =?utf-8?B?SGNVUXhqWDF5bHJFMVU3YWQ0TkNtWW14bGwybi9pQnJLOHc5WFJoYVRneWE1?= =?utf-8?B?ekFjL0hsbWJ2RVpjcVI4cVM0ajFad0M5cFdqWC9RRUZLaGNSZ0JleFhINXcx?= =?utf-8?B?RXBQTDZpTHBkUTJKSy8wd0M2WittMXE1MThJSVNseEhjWmR3ZWZLZUNUZUh4?= =?utf-8?B?YW40Mk1Ga25lcytPQUwzQVZZUUxJR1RHRGJzYUhHdHRPTzBzZlRYdmtLUCtm?= =?utf-8?B?UndtaE5zMTlOYnFBK0VIOW05YnZ2TU5mb2dTSmdrZ3ZjMWFKcHRkZ0tHamJL?= =?utf-8?B?MWM0ZVJZSldsUEd5WHFJeTFYeGcwYUFZZHJtaXhLWm1sdkY5Nm1NZnhXa0xn?= =?utf-8?B?NzJPLzZPTjdvUTE2ZzI0TXJIUWtkdUI5a1N0MUQrdmJmNXk1d3pYZUQxcUQ2?= =?utf-8?B?WUhOa3dTR0lISGphd0pCQXBNeFJlMnRldVlWUkxZbkkvUURSeTlHZnJTbUcx?= =?utf-8?B?M0E1S1JGOXY4V1R1MmVJRUVSOStnbDZDaHNqdW81QnpyaldrME0xalNMSmJi?= =?utf-8?B?WnNySVVvblNkMjV6ZzNoRUhlWXk0dy81QlBXclVLR3R4Vk1SQlVUMDg2TEN3?= =?utf-8?B?WTRUOHJRZmM0RVlXZ0R3aTNQVWxNSGJkRzg3MzViN0FERmszOHAwNVAyQmF4?= =?utf-8?B?Rk8zSStUNU00OGFEdmV1Y01RNlFRMVlYdDJQc0JrWVRyM2FzUXM0UkpTeWlP?= =?utf-8?B?OWNEU1NRZmJncFNhT0I1Uy81SnVlR1puRHZtMHl1K2E5dUZmaHFERjRSemtu?= =?utf-8?B?cFZLeGpjSm5nQzRPZ3U1SGZONElIZVkzTUpkeTJGVmhjcWtjSmdvTjM3SlM1?= =?utf-8?B?RlppZ3FKMTdUaXNtR3VuQURxRUxaYTVkbmthNXB6SWVNNUpNZDlsUGpjTUxK?= =?utf-8?B?UUNuSTl3Yk9IRjFjS3JjbWFzZlRtQUh1QkRDb2QrVHhyY0x3UGtoRjRtbWhi?= =?utf-8?B?REI0YVpNeTIvclpWY0UvYThBT3poNjRFL1hqcTlrcmFVekJrc1pwczZ0eVdR?= =?utf-8?B?WWhUUnZ0RFVRWnpHYU9nQWdrL2c1azJVc0x5aTZWTUt1SnhNcys2UT09?= Content-Type: text/plain; charset="UTF-8" Content-ID: <7BBBEC35B7A29B42AEC9A5238767D551@EURPRD10.PROD.OUTLOOK.COM> Content-Transfer-Encoding: quoted-printable MIME-Version: 1.0 X-OriginatorOrg: siemens.com X-MS-Exchange-CrossTenant-AuthAs: Internal X-MS-Exchange-CrossTenant-AuthSource: AM7PR10MB3956.EURPRD10.PROD.OUTLOOK.COM X-MS-Exchange-CrossTenant-Network-Message-Id: 1575d05c-9b97-4d8d-daac-08df073887d0 X-MS-Exchange-CrossTenant-originalarrivaltime: 31 Aug 2026 08:19:08.7684 (UTC) X-MS-Exchange-CrossTenant-fromentityheader: Hosted X-MS-Exchange-CrossTenant-id: 38ae3bcd-9579-4fd4-adda-b42e1495d55a X-MS-Exchange-CrossTenant-mailboxtype: HOSTED X-MS-Exchange-CrossTenant-userprincipalname: N1MvcJK6eUHJm+tYYZZa7t+r3h3U4ehmHGQcVyml/R7bxoMiX1mdJz3mpl35827Yh/qMXK/cxx3QgNnndHTQyQ3Xag2GPTLq4IFKaebGdbk= X-MS-Exchange-Transport-CrossTenantHeadersStamped: PAWPR10MB7674 X-Original-Sender: felix.moessbauer@siemens.com X-Original-Authentication-Results: gmr-mx.google.com; dkim=pass header.i=@siemens.com header.s=selector2 header.b=odk5nlnm; arc=pass (i=1 spf=pass spfdomain=siemens.com dkim=pass dkdomain=siemens.com dmarc=pass fromdomain=siemens.com); spf=pass (google.com: domain of felix.moessbauer@siemens.com designates 2a01:111:f403:c201::6 as permitted sender) smtp.mailfrom=felix.moessbauer@siemens.com; dmarc=pass (p=REJECT sp=REJECT dis=NONE) header.from=siemens.com X-Original-From: "MOESSBAUER, Felix" Reply-To: "MOESSBAUER, Felix" Precedence: list Mailing-list: list isar-users@googlegroups.com; contact isar-users+owners@googlegroups.com List-ID: X-Spam-Checked-In-Group: isar-users@googlegroups.com X-Google-Group-Id: 914930254986 List-Post: , List-Help: , List-Archive: , List-Unsubscribe: , X-Spam-Status: No, score=-4.9 required=5.0 tests=DKIMWL_WL_MED,DKIM_SIGNED, DKIM_VALID,DKIM_VALID_AU,DKIM_VALID_EF,MAILING_LIST_MULTI, RCVD_IN_DNSWL_BLOCKED,RCVD_IN_MSPIKE_H3,RCVD_IN_MSPIKE_WL, RCVD_IN_RP_CERTIFIED,RCVD_IN_RP_RNBL,RCVD_IN_RP_SAFE,SPF_PASS autolearn=unavailable autolearn_force=no version=3.4.2 X-Spam-Checker-Version: SpamAssassin 3.4.2 (2018-09-13) on shymkent.ilbers.de X-TUID: Oo/mS/WaOJr4 On Fri, 2026-08-28 at 17:53 +0200, Florian Bezdeka wrote: > On Fri, 2026-08-28 at 13:07 +0000, 'MOESSBAUER, Felix' via isar-users > wrote: > > On Fri, 2026-08-28 at 05:23 -0700, 'Ulrich Teichert' via isar-users > > wrote: > > > Hi, > > >=20 > > > I just hit a build failure like: > > >=20 > > > ... > > > > DEBUG: Executing shell function rootfs_install_pkgs_download > > > > bwrap: Can't mount on symlink destination /bin > > > > WARNING: exit code 1 from a shell command. > > > > DEBUG: Executing shell function rootfs_do_umounts > > > ... > > >=20 > > > That's caused by the security upgrade from bubblewrap=C2=A00.11.0 to= =C2=A00.12.0, > > > which at least Debian has active right now. To get my build going aga= in, > > > downgrading to 0.11.0 was enough. Of course, that doesn't help in the > > > long run, but it saved my friday afternoon.... >=20 > I came along the following lines while updating my Debian machine today: >=20 > bubblewrap (0.11.2-2) unstable; urgency=3Dmedium >=20 > =C2=A0 Historically, bubblewrap was sometimes installed setuid root. > =C2=A0 This is unnecessary on Debian kernels since Debian 11, and no long= er > =C2=A0 supported by upstream. >=20 > =C2=A0 As a safety mechanism against possible root privilege escalation > =C2=A0 vulnerabilities, this version of bubblewrap will no longer run if = it > =C2=A0 is detected to be setuid root. >=20 > =C2=A0 If bubblewrap has been made setuid root via dpkg-statoverride, ple= ase > remove > =C2=A0 that setting, and instead leave it unprivileged. > =C2=A0 See file:///usr/share/doc/bubblewrap/README.Debian.gz=C2=A0for mor= e > details. >=20 > =C2=A0-- Simon McVittie =C2=A0 Tue, 12 May 2026 18:57:32= +0100 At least in kas the bubblewrap is already installed without suid. However, the latest release brings more hardenings like prohibiting to over-mount a symlink - which bites us here as we over-mount /bin. Working on a fix... Felix >=20 > >=20 > > Thanks for reporting and the root cause analysis. Luckily the just > > released kas 5.5 has bubblewrap 0.11.0-2+deb13u1, hence is not > > affected. > >=20 > > But fixing this is probably not easy :/ Maybe Cedric can have a look, > > as he wrote the corresponding logic. > >=20 > > Best regards, > > Felix > >=20 > > >=20 > > > HTH, > > > Uli > > > --=20 > > > You received this message because you are subscribed to the Google Gr= oups "isar-users" group. > > > To unsubscribe from this group and stop receiving emails from it, sen= d an email to isar-users+unsubscribe@googlegroups.com. > > > To view this discussion visit https://groups.google.com/d/msgid/isar-= users/7f7d4378-0c04-4b57-8af9-428725213c53n%40googlegroups.com. > >=20 > > -- > > You received this message because you are subscribed to the Google Grou= ps "isar-users" group. > > To unsubscribe from this group and stop receiving emails from it, send = an email to isar-users+unsubscribe@googlegroups.com. > > To view this discussion visit https://groups.google.com/d/msgid/isar-us= ers/64b5d7ff601632bff533f1407e3e2aa13b010208.camel%40siemens.com. --=20 You received this message because you are subscribed to the Google Groups "= isar-users" group. To unsubscribe from this group and stop receiving emails from it, send an e= mail to isar-users+unsubscribe@googlegroups.com. To view this discussion visit https://groups.google.com/d/msgid/isar-users/= cd912f140fafe190fd7b3a2fc4e59e5ac6cc63f4.camel%40siemens.com.