workaround: Remove bundled libraries from the leaked LD_LIBRARY_PATH#391
Open
cxrvh wants to merge 1 commit into
Open
workaround: Remove bundled libraries from the leaked LD_LIBRARY_PATH#391cxrvh wants to merge 1 commit into
cxrvh wants to merge 1 commit into
Conversation
Contributor
|
🚧 Test build enqueued. |
Contributor
|
🚧 Started test build. |
Contributor
|
❌ Test build failed. Help
|
cxrvh
force-pushed
the
workaround-zed-sandbox-escape
branch
from
July 1, 2026 17:03
c3d8c4f to
16b308b
Compare
Contributor
|
🚧 Test build enqueued. |
Contributor
|
🚧 Started test build. |
Contributor
|
✅ Test build succeeded. To test this build, install it from the testing repository: Built for aarch64 and x86_64 architectures. |
Author
|
This is, in my opinion, the simplest workaround for the
I haven't tested running it unsandboxed - please test this. Alternatives would be for example building a patched CLI or some kind of script shenanigans. |
cxrvh
force-pushed
the
workaround-zed-sandbox-escape
branch
from
July 2, 2026 16:12
16b308b to
f6c3e07
Compare
Contributor
|
🚧 Test build enqueued. |
Contributor
|
🚧 Started test build. |
Contributor
|
✅ Test build succeeded. To test this build, install it from the testing repository: Built for aarch64 and x86_64 architectures. |
|
Works for me |
Zed's Flatpak sandbox escape leaks the bundled libraries by pointing LD_LIBRARY_PATH to /app/lib. That's Flatpak specific and because the libraries from LD_LIBRARY_PATH take precedence over but are ncompatible with the host's libraries, host tools fail when started from Zed. A similar issue exists inside the sandbox: /app/lib takes precedences over the runtime libraries & therefore the incompatible Zed libraries lead to issues. Work around the issues by moving the libraries: - /app/lib must be kept empty until the issue is fixed upstream - Patch zed-editor's RPATH & move Zed's bundled libraries into /app/libzed in order to limit their scope to zed-editor - Move any Flatpak bundled libraries into /app/libflatpak to avoid leaking them into the host Closes flathub#330
cxrvh
force-pushed
the
workaround-zed-sandbox-escape
branch
from
July 16, 2026 16:52
f6c3e07 to
34b71e5
Compare
Contributor
|
🚧 Test build enqueued. |
Contributor
|
🚧 Started test build. |
Contributor
|
✅ Test build succeeded. To test this build, install it from the testing repository: Built for aarch64 and x86_64 architectures. |
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
3 participants
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Zed's Flatpak sandbox escape leaks the bundled libraries by setting LD_LIBRARY_PATH. That's Flatpak specific. Because the libraries from LD_LIBRARY_PATH take precedence over but are incompatible with the host's libraries, host tools fail when started from Zed.
A similar issue exists inside the sandbox: /app/lib takes precedences over the runtime libraries & therefore the incompatible Zed libraries lead to issues.
Work around the issues by moving the libraries:
Closes #330