| Summary: | [2023.1] libxml2 update to 2.10.3 breaks ABI by removing 111 symbols -> runtime failures | ||
|---|---|---|---|
| Product: | [ROSA-based products] ROSA Fresh | Reporter: | Giovanni Mariani <mc2374> |
| Component: | Packages from Main | Assignee: | ROSA Linux Bugs <bugs> |
| Status: | CONFIRMED --- | QA Contact: | ROSA Linux Bugs <bugs> |
| Severity: | major | ||
| Priority: | High | ||
| Version: | All | ||
| Target Milestone: | --- | ||
| Hardware: | All | ||
| OS: | Linux | ||
| URL: | https://bugzilla.redhat.com/show_bug.cgi?id=2139546 | ||
| Whiteboard: | |||
| Platform: | --- | ROSA Vulnerability identifier: | |
| RPM Package: | libxml2-2.10.3-1.src.rpm | ISO-related: | |
| Bad POT generating: | Upstream: | ||
Found this the hard way in a fresh 2023.1 install in a Workstation VM: vgauth from open-vm-tools fails due a symbol lookup error in libxmlsec1.so.1... **************** gmariani@rosa2023 ~ $ systemctl status vgauthd.service vgauthd.service - VGAuth Service for open-vm-tools Loaded: loaded (/lib/systemd/system/vgauthd.service; enabled; vendor preset: disabled) Active: failed (Result: exit-code) since Wed 2023-03-08 17:10:35 CET; 2h 14min ago Docs: http://github.com/vmware/open-vm-tools Main PID: 824 (code=exited, status=127) CPU: 13ms Mar 08 17:10:32 rosa2023.1 systemd[1]: Started VGAuth Service for open-vm-tools. Mar 08 17:10:35 rosa2023.1 VGAuthService[824]: /usr/bin/VGAuthService: symbol lookup error: /usr/lib64/libxmlsec1.so.1: undefined symbol: xmlIOFTPRead, version LIBXML2_2.4.30 Mar 08 17:10:35 rosa2023.1 systemd[1]: vgauthd.service: Main process exited, code=exited, status=127/n/a Mar 08 17:10:35 rosa2023.1 systemd[1]: vgauthd.service: Failed with result 'exit-code'. *************** Rebuilding or updating open-vm-tools fails with linking errors for the same missing symbols. According to the Fedora bug #2139546 linked above the culprit is a change in the ABI exposed by libxml2 since 2.10.3 release While for open-vm-tools there is an easy workaround, this issue affects also ImageMagick, GraphicsMagick and openconnect (I don't test them at runtime, though...), so I guess we should adopt for libxml2 the change proposed in https://bugzilla.redhat.com/show_bug.cgi?id=2139546#c7 and pushed as advisory FEDORA-2022-d7349a124a...