[Pkg-utopia-maintainers] Bug#1114484: flatpak-session-helper leaks memory

[Martin Schwenke]

Package: flatpak
Version: 1.16.1-1
Severity: normal
Tags: upstream patch
X-Debbugs-Cc: martin at meltin.net

Dear Maintainer,

Depending on the application, flatpak-session-helper can leak memory
at an alarming rate.

For example, when using the StreamController flatpak the memory leak
can render a system unusable after about a week.

flatpak-session-helper appears to run alongside each flatpak
application, or similar, so it isn't easy to avoid.

This has been fixed upstream via commit:

  cd80e843 session-helper: Avoid a memory leak

The issue was tracked upstream via:

  https://github.com/flatpak/flatpak/issues/5821

It would be fabulous to have this fix in the Debian flatpak package.

Thanks!

peace & happiness,
martin


-- Package-specific info:
Permissions of /usr/bin/bwrap:
-rwxr-xr-x 1 root root 80272 Dec 30  2024 /usr/bin/bwrap
/etc/sysctl.d/*-bubblewrap.conf:
cat: '/etc/sysctl.d/*-bubblewrap.conf': No such file or directory
/usr/lib/sysctl.d/50-bubblewrap.conf:
# Enable unprivileged creation of new user namespaces in older Debian
# kernels.
#
# If this is not desired, copy this file to
# /etc/sysctl.d/50-bubblewrap.conf and change the value of this parameter
# to 0, then use dpkg-statoverride to make /usr/bin/bwrap setuid root.
#
# For more details see https://deb.li/bubblewrap or
# /usr/share/doc/bubblewrap/README.Debian
kernel.unprivileged_userns_clone=1
/proc/sys/kernel/unprivileged_userns_clone:
1
/proc/sys/user/max_cgroup_namespaces:
255859
/proc/sys/user/max_ipc_namespaces:
255859
/proc/sys/user/max_mnt_namespaces:
255859
/proc/sys/user/max_net_namespaces:
255859
/proc/sys/user/max_pid_namespaces:
255859
/proc/sys/user/max_time_namespaces:
255859
/proc/sys/user/max_user_namespaces:
255859
/proc/sys/user/max_uts_namespaces:
255859

-- System Information:
Debian Release: 13.0
  APT prefers stable-updates
  APT policy: (990, 'stable-updates'), (990, 'stable-security'), (990, 'stable')
Architecture: amd64 (x86_64)

Kernel: Linux 6.12.32-rt-amd64 (SMP w/12 CPU threads; PREEMPT)
Locale: LANG=en_AU.UTF-8, LC_CTYPE=en_AU.UTF-8 (charmap=UTF-8), LANGUAGE=en_AU:en
Shell: /bin/sh linked to /usr/bin/dash
Init: sysvinit (via /sbin/init)
LSM: AppArmor: enabled

Versions of packages flatpak depends on:
ii  adduser                3.152
ii  bubblewrap             0.11.0-2
ii  fuse3                  3.17.2-3
ii  libappstream5          1.0.5-1
ii  libarchive13t64        3.7.4-4
ii  libc6                  2.41-12
ii  libcurl3t64-gnutls     8.14.1-2
ii  libdconf1              0.40.0-5
ii  libfuse3-4             3.17.2-3
ii  libgdk-pixbuf-2.0-0    2.42.12+dfsg-4
ii  libglib2.0-0t64        2.84.3-1
ii  libgpgme11t64          1.24.2-3
ii  libjson-glib-1.0-0     1.10.6+ds-2
ii  libmalcontent-0-0      0.13.0-2
ii  libostree-1-1          2025.2-1
ii  libpolkit-agent-1-0    126-2
ii  libpolkit-gobject-1-0  126-2
ii  libseccomp2            2.6.0-2
ii  libsystemd0            257.7-1
ii  libwayland-client0     1.23.1-3
ii  libxau6                1:1.0.11-1
ii  libxml2                2.12.7+dfsg+really2.9.14-2.1+deb13u1
ii  libzstd1               1.5.7+dfsg-1
ii  xdg-dbus-proxy         0.1.6-1

Versions of packages flatpak recommends:
ii  ca-certificates                                      20250419
ii  dbus [default-dbus-system-bus]                       1.16.2-2
ii  desktop-file-utils                                   0.28-1
ii  gtk-update-icon-cache                                4.18.6+ds-2
ii  hicolor-icon-theme                                   0.18-2
pn  libpam-systemd                                       <none>
ii  p11-kit                                              0.25.5-3
ii  polkitd                                              126-2
ii  shared-mime-info                                     2.4-5+b2
ii  xdg-desktop-portal                                   1.20.3+ds-1
ii  xdg-desktop-portal-gtk [xdg-desktop-portal-backend]  1.15.3-1
ii  xdg-user-dirs                                        0.18-2

Versions of packages flatpak suggests:
ii  avahi-daemon    0.8-16
pn  malcontent-gui  <none>

Versions of packages bubblewrap depends on:
ii  libc6        2.41-12
ii  libcap2      1:2.75-10+b1
ii  libselinux1  3.8.1-1

Versions of packages bubblewrap recommends:
ii  procps  2:4.0.4-9

-- no debconf information