Your message dated Thu, 17 Jun 2021 18:03:30 +0000
with message-id <[email protected]>
and subject line Bug#989934: fixed in flatpak 1.11.2-1
has caused the Debian Bug report #989934,
regarding flatpak-portal fd leak when apps run flatpak-spawn --env=...
to be marked as done.

This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.

(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact [email protected]
immediately.)


-- 
989934: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=989934
Debian Bug Tracking System
Contact [email protected] with problems
--- Begin Message ---
Package: flatpak
Version: 1.8.5-1
Severity: important
Tags: upstream fixed-upstream
Control: found -1 1.2.5-0+deb10u2

The flatpak-portal service in flatpak >= 1.8.5-1 leaks a file descriptor
every time a Flatpak app launches a subsandbox (a separate container for
part of itself, perhaps with more restrictions or a different runtime
library stack) using flatpak-spawn --env=... or equivalent D-Bus calls.

Minimal reproducer: in one terminal run

    /usr/libexec/flatpak-portal -vr

and in another, run

    flatpak run --command=bash org.gnome.Weather -euxc \
    'while flatpak-spawn --env=FOO=bar sh -euxc "$1"; do :; done' \
    sh \
    'test "$FOO" = bar'

(org.gnome.Weather is just an example, it can be any app). Terminate
the flatpak run loop with Ctrl+C after a few seconds.

Ignore lines of output that say "F: ioctl(0, TIOCSCTTY, 0) failed:
Operation not permitted"; these are harmless.

Good result: in the flatpak-portal -vr output, you see the same --env-fd=
every time.

Bad result: the number after --env-fd= keeps going up.

The real-world impact is that if Flatpak apps launch enough subsandboxes,
the subsandbox interface will stop working for the rest of the login
session, causing other Flatpak apps to fail to work. Chromium is a notable
example of a Flatpak app that uses subsandboxes.

    smcv

--- End Message ---
--- Begin Message ---
Source: flatpak
Source-Version: 1.11.2-1
Done: Simon McVittie <[email protected]>

We believe that the bug you reported is fixed in the latest version of
flatpak, which is due to be installed in the Debian FTP archive.

A summary of the changes between this version and the previous one is
attached.

Thank you for reporting the bug, which will now be closed.  If you
have further comments please address them to [email protected],
and the maintainer will reopen the bug report if appropriate.

Debian distribution maintenance software
pp.
Simon McVittie <[email protected]> (supplier of updated flatpak package)

(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing [email protected])


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

Format: 1.8
Date: Thu, 17 Jun 2021 18:07:22 +0100
Source: flatpak
Architecture: source
Version: 1.11.2-1
Distribution: experimental
Urgency: medium
Maintainer: Utopia Maintenance Team 
<[email protected]>
Changed-By: Simon McVittie <[email protected]>
Closes: 989934 989935
Changes:
 flatpak (1.11.2-1) experimental; urgency=medium
 .
   * New upstream development release
     - Don't leak a file descriptor each time flatpak-spawn --env=... is used
       (Closes: #989934)
     - When an app uses flatpak-spawn --env=... --forward-fd=..., ensure
       that the file descriptors do not collide, which could result in the
       subsandbox failing to launch or being launched with wrong environment
       variables. (Closes: #989935)
     - Various other bug fixes
Checksums-Sha1:
 c67af0a856aec8ef046c1cf08441c7b3ac04cc4c 3615 flatpak_1.11.2-1.dsc
 ad6b93ee00b3b72de91fd007bf300b22e1c6f576 1535684 flatpak_1.11.2.orig.tar.xz
 30ae45aedf0fc436a64abcf25ac701c3b8b13af4 30676 flatpak_1.11.2-1.debian.tar.xz
 b278b228c42be12d327233fcb517708ae5c1d6ce 11447 
flatpak_1.11.2-1_source.buildinfo
Checksums-Sha256:
 7af7363e260ef3a32e184f71d541b4219ed1eef1de0f3046b8cef35710fa94f1 3615 
flatpak_1.11.2-1.dsc
 8799cf835d8b11deef5495a91a4cef258d882417c4483fbd594a2c7cc79b6684 1535684 
flatpak_1.11.2.orig.tar.xz
 c8f2a8fae67826d5b79ae3cf796962dd072289504e12253dcf0a0ebd952b04fe 30676 
flatpak_1.11.2-1.debian.tar.xz
 1a59632a08b52f2a939655e7c004f6704e11505b158120929dca4a6d82d900e2 11447 
flatpak_1.11.2-1_source.buildinfo
Files:
 0296ee119a38d4b835adc5bda65bdba9 3615 admin optional flatpak_1.11.2-1.dsc
 a9394dd4a3e308bd437fc13fbf5d3eb0 1535684 admin optional 
flatpak_1.11.2.orig.tar.xz
 200ce4170a436fcd9a2cb7577258e58d 30676 admin optional 
flatpak_1.11.2-1.debian.tar.xz
 8f44d94c61f8160abdd8b7cc0f65dd70 11447 admin optional 
flatpak_1.11.2-1_source.buildinfo

-----BEGIN PGP SIGNATURE-----

iQIzBAEBCAAdFiEENuxaZEik9e95vv6Y4FrhR4+BTE8FAmDLjAsACgkQ4FrhR4+B
TE9bNBAAqwVraQwaJwHjZzH5GtGl8KcDzTWQCo2LU8Xx8Nx+yMTesjlUOEM3oIc3
OXSHz3Pa7U7LElGRVdxLIlLcra2HLZazkHEUUVjBmHhPnuOWJFG8EGWq+PSM4Sk9
a4gniuykI0MmUJ3dz6aJOOr0dwhxUacMsiTDt1HE1fZsaEbexaNgMzkyazZYSzHW
Xj0jauN8cRayzy6EoKgu6XA73VVZeOubaS+hZbvwB03azVwUP3XKgIofaMcnbleS
VLFTxtU4He1fcIuZnuhq1jlfoTOqaOIhft4a2xq3dsyHfSVEQNMg6LhV3nqHu60S
8/9ukwol4TPHJeThWvYt/122Xy3sXZPb1TxGvTtP379mgO/zM3WnbkGQ/RlrgTOe
nVvjNa9wRfHgCsQBoKzNcLuWfVeUOgUwSTjdyJ86FDGB19A7Eb4elPija7PnDkZe
iuGe+95qH6HvvX09l2FGYgFDrKb1uMOZv5GSi/6x8ZP5gL8hFuhmkCHiKS/i6Rvq
eSG30Qrpb+FHZYYjiM76WqBFWWnYiN2Tn2Ga9qJvCAa+YM1nnL/KfIzy5YuhMHr9
rlzxJibC3zQu6b1vI9G/A0iF4XzlX7awrcTmT3DrE9oCTZWFNI4aHoJ1/PnfznHU
61HgNyGdD7W4etxdzLrX12mzwSMJcLE3HhzsnEM3zcuRubiHoqc=
=h7jQ
-----END PGP SIGNATURE-----

--- End Message ---
_______________________________________________
Pkg-utopia-maintainers mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/pkg-utopia-maintainers

Reply via email to