Your message dated Tue, 22 Jun 2021 10:03:43 +0000
with message-id <[email protected]>
and subject line Bug#989935: fixed in flatpak 1.10.2-2
has caused the Debian Bug report #989935,
regarding flatpak-portal --env= can interfere with --forward-fd=
to be marked as done.
This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.
(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact [email protected]
immediately.)
--
989935: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=989935
Debian Bug Tracking System
Contact [email protected] with problems
--- Begin Message ---
Package: flatpak
Version: 1.8.5-1
Severity: important
Tags: upstream fixed-upstream
Forwarded: https://github.com/flatpak/flatpak/issues/4286
Control: found -1 1.2.5-0+deb10u2
In the flatpak-portal service in flatpak >= 1.8.5-1, when a Flatpak app
launches a subsandbox (a separate container for part of itself, perhaps
with more restrictions or a different runtime library stack) using
flatpak-spawn --env=... --forward-fd=... or equivalent D-Bus calls,
depending on the specific file descriptors passed to --forward-fd=...,
they might collide with the temporary fd used to transfer the environment
variables. If this happens, the subsandbox will either fail to start, or
run with unintended environment variables.
Minimal(ish) manual test: in one terminal run
/usr/libexec/flatpak-portal -vr
and in another terminal run
flatpak run --command=bash org.gnome.Weather -euxc \
'echo 15 > /tmp/15; echo 16 > /tmp/16; echo 17 > /tmp/17; while
flatpak-spawn --env=FOO=bar --forward-fd=15 --forward-fd=16 --forward-fd=17 sh
-euxc "$1" 15</tmp/15 16</tmp/16 17</tmp/17; do :; done' \
sh \
'test "$FOO" = bar; test "$(cat <&15)" = 15; test "$(cat <&16)" = 16; test
"$(cat <&17)" = 17'
(You can substitute any app that runs on a recent-ish runtime for
org.gnome.Weather, it doesn't actually matter which app is used.)
Ignore lines of output that say "F: ioctl(0, TIOCSCTTY, 0) failed:
Operation not permitted"; these are harmless.
Good result: it loops until terminated with Ctrl+C.
Bad result: "error: Environment variable must be given in the form
VARIABLE=VALUE, not 16".
This reproducer works for 1.10.2 on Debian 11, but the exact numbers
needed to trigger the bug might be different in different versions.
smcv
--- End Message ---
--- Begin Message ---
Source: flatpak
Source-Version: 1.10.2-2
Done: Simon McVittie <[email protected]>
We believe that the bug you reported is fixed in the latest version of
flatpak, which is due to be installed in the Debian FTP archive.
A summary of the changes between this version and the previous one is
attached.
Thank you for reporting the bug, which will now be closed. If you
have further comments please address them to [email protected],
and the maintainer will reopen the bug report if appropriate.
Debian distribution maintenance software
pp.
Simon McVittie <[email protected]> (supplier of updated flatpak package)
(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing [email protected])
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256
Format: 1.8
Date: Tue, 22 Jun 2021 10:10:38 +0100
Source: flatpak
Architecture: source
Version: 1.10.2-2
Distribution: unstable
Urgency: medium
Maintainer: Utopia Maintenance Team
<[email protected]>
Changed-By: Simon McVittie <[email protected]>
Closes: 989934 989935
Changes:
flatpak (1.10.2-2) unstable; urgency=medium
.
* Backport changes from upstream git to fix regressions when apps invoke
flatpak-spawn --env=... to launch a subsandbox.
- d/p/Fix-several-memory-leaks.patch:
Fix minor memory leaks so that subsequent backports apply cleanly
- d/p/portal-Don-t-leak-fd-used-for-serialized-environment.patch:
Don't leak a file descriptor each time flatpak-spawn --env=... is used
(Closes: #989934)
- d/p/portal-Use-a-GArray-to-store-fds.patch,
d/p/portal-Remap-env-fd-into-child-process-s-fd-space.patch:
When an app uses flatpak-spawn --env=... --forward-fd=..., ensure
that the file descriptors do not collide, which could result in the
subsandbox failing to launch or being launched with wrong environment
variables. (Closes: #989935)
Checksums-Sha1:
0e5451989746e54bcddd5263921a5c5174bc1348 3615 flatpak_1.10.2-2.dsc
36682c9af5a6fc3fe9ba297bb89f5b4f801369ec 34628 flatpak_1.10.2-2.debian.tar.xz
ad2175862120b759e590cfe944a216df6ae4680e 11447
flatpak_1.10.2-2_source.buildinfo
Checksums-Sha256:
76e3dbb9955eb98748964a2da210990491fbb94eb0429bfd6e7c49bd704aea57 3615
flatpak_1.10.2-2.dsc
653cac3e5263aca1dac11861881882298951579d417f3460e7f4e55a32c181e0 34628
flatpak_1.10.2-2.debian.tar.xz
668ac2be6c76d14106440a93869d71fddb82133df06f135c775fa6fba95e970d 11447
flatpak_1.10.2-2_source.buildinfo
Files:
8e5cc49f5dcf7427d5c86b919f2dc91e 3615 admin optional flatpak_1.10.2-2.dsc
93b11ced3d9ae67a2442ea0d80939372 34628 admin optional
flatpak_1.10.2-2.debian.tar.xz
3b4bb73531131069b94bbd3ccc493399 11447 admin optional
flatpak_1.10.2-2_source.buildinfo
-----BEGIN PGP SIGNATURE-----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=8nn8
-----END PGP SIGNATURE-----
--- End Message ---
_______________________________________________
Pkg-utopia-maintainers mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/pkg-utopia-maintainers
