Bug#909750: applications tries to write to /usr/* directories via libfontconfig1

[Paul Gevers]

Hi all,

On Wed, 17 Apr 2019 17:46:19 +0200 Chris Hofstaedtler <zeha at debian.org>
wrote:
> * Niels Thykier <niels at thykier.net> [190413 18:28]:
> > Vincas Dargis:
> > > On 2019-04-13 12:50, Niels Thykier wrote:
> > >> What is the status of this bug? AFAICT, we have *some* fixes from
> > >> upstream but Chris's mail implies that the bug is not completely fixed.
> > > 
> > > This bug disappeared from my logs long time ago, at least haven't seen
> > > any application reproducing it so far.
> > 
> > Interestingly, Chris (just Cc'ed) claims to have reproduced it about a
> > week ago with libfontconfig1:amd64 using strace and to my knowledge
> > libfontconfig1 hasn't changed for months in sid/buster.
> > 
> > @Chris: Just to confirm: Do you still see the issue?
> 
> I've given this another try, and can hopefully shed some light:
> 
> In a local X session with fluxbox, I don't see the EACCESS in
> strace.
> 
> In an ssh session with X11 forwarding to an XQuartz server, I still
> get the EACCESS.
> 
> Couldn't try with a remote Xorg server though, maybe someone else
> can verify this.

Seems like not much has happened on this bug for about two years and I
don't see anything in the changelog pointing at potential fixes, so I
*assume* the bug still applies. Can somebody confirm?

Has anybody tried to find the upstream commit that may exist based on
the quote that Niels pasted?

Paul

-------------- next part --------------
A non-text attachment was scrubbed...
Name: OpenPGP_signature
Type: application/pgp-signature
Size: 495 bytes
Desc: OpenPGP digital signature
URL: <http://alioth-lists.debian.net/pipermail/pkg-freedesktop-maintainers/attachments/20210206/9a25da6d/attachment.sig>