# Compiling after CVE changes **URL:** \ **Category:** Beta Testing\ **Created:** [May 25, 2024, 6:00am UTC](https://forums.ankiweb.net/t/compiling-after-cve-changes/45248 "2024-05-25T06:00:06Z")\ **Posts on this page:** 10\ **Page:** 1
**Author:** ![chrislg](https://sea2.discourse-cdn.com/flex002/user_avatar/forums.ankiweb.net/chrislg/32/32411_2.png) [@chrislg](https://forums.ankiweb.net/u/chrislg)\ **Post date:** [May 25, 2024, 6:00am UTC](https://forums.ankiweb.net/t/compiling-after-cve-changes/45248/1 "2024-05-25T06:00:07Z")
Build fails after [Latest requests CVE · ankitects/anki@4853798 · GitHub](https://github.com/ankitects/anki/commit/485379810550b59119db8de9ea740cfb17636cf5) > WARNING: The candidate selected for download or install is a yanked version: ‘requests’ candidate (version > 2.32.1 at [https://files.pythonhosted.org/packages/9c/a6/b9bf71eeb6dc835311b5c47a7c90df57b080610911616396112](https://files.pythonhosted.org/packages/9c/a6/b9bf71eeb6dc835311b5c47a7c90df57b080610911616396112) > 52257768d/requests-2.32.1-py3-none-any.whl (from [Links for requests](https://pypi.org/simple/requests/)) (requires-python:\>=3.8) > ) > Reason for being yanked: Yanked due to conflicts CVE-2024-35195 mitigation ![image](https://us1.discourse-cdn.com/flex002/uploads/anki2/original/3X/6/8/68a03eebe20455123cba4dc0ead8e8c1b445cba9.png) ![image](https://us1.discourse-cdn.com/flex002/uploads/anki2/original/3X/1/e/1e5e1d8a9b48171b97a65d828ba4bd3848098506.png) ---
**Author:** ![chrislg](https://sea2.discourse-cdn.com/flex002/user_avatar/forums.ankiweb.net/chrislg/32/32411_2.png) [@chrislg](https://forums.ankiweb.net/u/chrislg)\ **Post date:** [May 25, 2024, 10:10am UTC](https://forums.ankiweb.net/t/compiling-after-cve-changes/45248/2 "2024-05-25T10:10:19Z")
@dae thanks for the commit. Unfortunately the build continues to fail 🙂 ---
**Author:** ![dae](https://sea2.discourse-cdn.com/flex002/user_avatar/forums.ankiweb.net/dae/32/65_2.png) [@dae](https://forums.ankiweb.net/u/dae)\ **Post date:** [May 26, 2024, 10:12pm UTC](https://forums.ankiweb.net/t/compiling-after-cve-changes/45248/3 "2024-05-26T22:12:17Z")
I can’t seem to reproduce this, even after removing out/pyenv and the pip cache. What’s the updated error message? ---
**Author:** ![chrislg](https://sea2.discourse-cdn.com/flex002/user_avatar/forums.ankiweb.net/chrislg/32/32411_2.png) [@chrislg](https://forums.ankiweb.net/u/chrislg)\ **Post date:** [May 27, 2024, 4:08am UTC](https://forums.ankiweb.net/t/compiling-after-cve-changes/45248/4 "2024-05-27T04:08:06Z")
I also removed out and pip,yarn cache > > QT\_SCALE\_FACTOR\_ROUNDING\_POLICY=RoundPreferFloor ./tools/runopt > > Finished release [optimized] target(s) in 0.12s > > [1/1; 1 active; 0.061s] build:configure > > [3/45; 2 active; 32.539s] node\_modules > > yarn install v1.22.22 > > [1/4] Resolving packages… > > [2/4] Fetching packages… > > **warning Pattern [“string-width@^4.1.0”] is trying to unpack in the same destination “/home/chris/.cache/yarn/v6/npm-string-width-cjs-4.2.3-269c7117d27b05ad2e536830a8ec895ef9c6d010-integrity/node\_modules/string-width-cjs” as pattern [“string-width-cjs@npm:string-width@^4.2.0”]. This could result in non-deterministic behavior, skipping.** > > **warning svelte-preprocess@5.1.3: The engine “pnpm” appears to be invalid.** > > [3/4] Linking dependencies… > > **warning " \> esbuild-sass-plugin@2.16.1" has incorrect peer dependency “esbuild@^0.19.4”.** > > [4/4] Building fresh packages… > > Done in 32.26s. > > [34/45; 2 active; 36.146s] sveltekit > > FAILED: /home/chris/anki/ankidev/out/sveltekit /home/chris/anki/ankidev/out/sveltekit.marker > > /home/chris/anki/ankidev/out/rust/release/runner run --stamp=/home/chris/anki/ankidev/out/sveltekit.marker ./yarn build > > yarn run v1.22.22 > > $ cd ts && vite build > > /usr/bin/env: ‘node’: Text file busy > > error Command failed with exit code 126. > > info Visit [yarn run | Yarn](https://yarnpkg.com/en/docs/cli/run) for documentation about this command. > > Failed with code Some(126): ./yarn build > > [35/45; 1 active; 69.549s] pylib:rsbridge > > Compiling anki v0.0.0 (/home/chris/anki/ankidev/rslib) > > Compiling rsbridge v0.0.0 (/home/chris/anki/ankidev/pylib/rsbridge) > > Finished release [optimized] target(s) in 1m 09s > > ninja: build stopped: subcommand failed. > > Build failed. > > ~/anki/ankidev main \> 1m 10s 06:05:47 ---
**Author:** ![chrislg](https://sea2.discourse-cdn.com/flex002/user_avatar/forums.ankiweb.net/chrislg/32/32411_2.png) [@chrislg](https://forums.ankiweb.net/u/chrislg)\ **Post date:** [May 27, 2024, 7:51pm UTC](https://forums.ankiweb.net/t/compiling-after-cve-changes/45248/5 "2024-05-27T19:51:17Z")
Many users report the same problem: [https://aur.archlinux.org/packages/anki](https://aur.archlinux.org/packages/anki) [https://aur.archlinux.org/packages/anki-git](https://aur.archlinux.org/packages/anki-git) Some reported solution but haven’t tried it yet [https://github.com/nodejs/docker-node/issues/1912](https://github.com/nodejs/docker-node/issues/1912) ---
**Author:** ![dae](https://sea2.discourse-cdn.com/flex002/user_avatar/forums.ankiweb.net/dae/32/65_2.png) [@dae](https://forums.ankiweb.net/u/dae)\ **Post date:** [May 28, 2024, 8:07am UTC](https://forums.ankiweb.net/t/compiling-after-cve-changes/45248/6 "2024-05-28T08:07:10Z")
You could try tools/clean ---
**Author:** ![chrislg](https://sea2.discourse-cdn.com/flex002/user_avatar/forums.ankiweb.net/chrislg/32/32411_2.png) [@chrislg](https://forums.ankiweb.net/u/chrislg)\ **Post date:** [June 1, 2024, 3:54pm UTC](https://forums.ankiweb.net/t/compiling-after-cve-changes/45248/7 "2024-06-01T15:54:13Z")
It didn’t help unfortunately ☹ ---
**Author:** ![dae](https://sea2.discourse-cdn.com/flex002/user_avatar/forums.ankiweb.net/dae/32/65_2.png) [@dae](https://forums.ankiweb.net/u/dae)\ **Post date:** [June 7, 2024, 3:42am UTC](https://forums.ankiweb.net/t/compiling-after-cve-changes/45248/8 "2024-06-07T03:42:45Z")
The thread you linked seems to indicate it’s an issue with your kernel version. > > > \### Version > > v22.0.0 > > \### Platform > > Linux laharl 6.9.1-arch1-1 #1 SMP PREE…MPT\_DYNAMIC Fri, 17 May 2024 16:56:38 +0000 x86\_64 GNU/Linux > > \### Subsystem > > node-gyp > > \### What steps will reproduce the bug? > > 1) Attempted to build thelounge from AUR package > 2) sqlite3 submodule fails with two "/usr/bin/env: 'node': Text file busy" errors > > \### How often does it reproduce? Is there a required condition? > > It happens every time. It appears to be a race condition with io\_uring with kernel 6.9.x on x86\_64. > > \### What is the expected behavior? Why is that the expected behavior? > > The packages should build properly. > > \### What do you see instead? > > Two of the node-gyp build steps fail: > > \`\`\` > /usr/bin/env: 'node': Text file busy > /usr/bin/env: 'node': Text file busy > \`\`\` > > \### Additional information > > I am re-reporting this issue because it does not involve use of Docker. Currently, thelounge package has added a workaround to disable io\_uring in libuv to allow the build to pass. > > Edit 1: > Related bug reports have suggested this is only a problem because Arch builds nodejs against the system libuv, which it configures with the defaults, which enable io\_uring support. > > A kernel fix is slated for 6.9.2 that will likely work around the errors, but will not work around Arch or other distributions which have not disabled io\_uring support in libuv like node has for security reasons. However, I am not sure how much of a threat model the io\_uring support is, considering it's probably not that wise to be running node suid/sgid in the first place. ---
**Author:** ![chrislg](https://sea2.discourse-cdn.com/flex002/user_avatar/forums.ankiweb.net/chrislg/32/32411_2.png) [@chrislg](https://forums.ankiweb.net/u/chrislg)\ **Post date:** [June 8, 2024, 2:21pm UTC](https://forums.ankiweb.net/t/compiling-after-cve-changes/45248/9 "2024-06-08T14:21:52Z")
Problem fixed. Currently with _ **Kernel: 6.9.3-arch1-1** _ ---
**Author:** ![system](https://us1.discourse-cdn.com/flex002/uploads/anki2/original/1X/8f1279ababc5879d54e4838989f606cfe55af8c7.jpeg) [@system](https://forums.ankiweb.net/u/system)\ **Post date:** [July 8, 2024, 2:22pm UTC](https://forums.ankiweb.net/t/compiling-after-cve-changes/45248/10 "2024-07-08T14:22:19Z")
This topic was automatically closed 30 days after the last reply. New replies are no longer allowed.