Your message dated Mon, 12 Oct 2026 22:37:26 -0400
with message-id <[email protected]>
and subject line Re: sddm: empty xorg-session.log in directories with random
names
has caused the Debian Bug report #940100,
regarding sddm: empty xorg-session.log in directories with random names
to be marked as done.
This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.
(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact [email protected]
immediately.)
--
940100: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=940100
Debian Bug Tracking System
Contact [email protected] with problems
--- Begin Message ---
Package: sddm
Version: 0.18.0-1
Severity: important
Dear Maintainer,
upon each login, the following directories and file are created in the user's
home directory:
<random>/.local/share/sddm/xorg-session.log
Here, <random> is a two-letter string, such as 2V or ;V or �U. The random part
changes, so with time, the home directory will be cluttered.
The file xorg-session.log is empty.
Apperently the same problem is described at
https://www.reddit.com/r/openSUSE/comments/aqdqhj/many_xorgsession_logs_in_home/,
but no solution is given.
Thanks for looking into this.
-- System Information:
Debian Release: 10.1
APT prefers stable-updates
APT policy: (500, 'stable-updates'), (500, 'stable')
Architecture: amd64 (x86_64)
Kernel: Linux 4.19.0-6-amd64 (SMP w/6 CPU cores)
Kernel taint flags: TAINT_OOT_MODULE, TAINT_UNSIGNED_MODULE
Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8),
LANGUAGE=en_US:en (charmap=UTF-8)
Shell: /bin/sh linked to /usr/bin/dash
Init: systemd (via /run/systemd/system)
LSM: AppArmor: enabled
Versions of packages sddm depends on:
ii adduser 3.118
ii debconf [debconf-2.0] 1.5.71
ii libc6 2.28-10
ii libgcc1 1:8.3.0-6
ii libpam0g 1.3.1-5
ii libqt5core5a 5.11.3+dfsg1-1
ii libqt5dbus5 5.11.3+dfsg1-1
ii libqt5gui5 5.11.3+dfsg1-1
ii libqt5network5 5.11.3+dfsg1-1
ii libqt5qml5 5.11.3-4
ii libqt5quick5 5.11.3-4
ii libstdc++6 8.3.0-6
ii libsystemd0 241-7~deb10u1
ii libxcb-xkb1 1.13.1-2
ii libxcb1 1.13.1-2
ii qml-module-qtquick2 5.11.3-4
ii x11-common 1:7.7+19
ii xserver-xorg [xserver] 1:7.7+19
Versions of packages sddm recommends:
ii haveged 1.9.1-7
ii libpam-systemd 241-7~deb10u1
ii sddm-theme-breeze [sddm-theme] 4:5.14.5.1-1
ii sddm-theme-debian-maui [sddm-theme] 0.18.0-1
Versions of packages sddm suggests:
ii libpam-kwallet5 5.14.5-1
pn qtvirtualkeyboard-plugin <none>
-- debconf information:
sddm/daemon_name: /usr/bin/sddm
* shared/default-x-display-manager: sddm
--- End Message ---
--- Begin Message ---
Version: 0.18.1-1
On Thu, 12 Sep 2019 14:03:35 +0200 Lasse Kliemann <[email protected]>
wrote:
Package: sddm
Version: 0.18.0-1
Severity: important
Dear Maintainer,
upon each login, the following directories and file are created in the user's
home directory:
<random>/.local/share/sddm/xorg-session.log
Here, <random> is a two-letter string, such as 2V or ;V or �U. The random part changes, so with time, the home directory will be cluttered.
The file xorg-session.log is empty.
Apperently the same problem is described at
https://www.reddit.com/r/openSUSE/comments/aqdqhj/many_xorgsession_logs_in_home/,
but no solution is given.
Thanks for looking into this.
-- System Information:
Debian Release: 10.1
APT prefers stable-updates
APT policy: (500, 'stable-updates'), (500, 'stable')
Architecture: amd64 (x86_64)
Kernel: Linux 4.19.0-6-amd64 (SMP w/6 CPU cores)
Kernel taint flags: TAINT_OOT_MODULE, TAINT_UNSIGNED_MODULE
Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8),
LANGUAGE=en_US:en (charmap=UTF-8)
Shell: /bin/sh linked to /usr/bin/dash
Init: systemd (via /run/systemd/system)
LSM: AppArmor: enabled
Versions of packages sddm depends on:
ii adduser 3.118
ii debconf [debconf-2.0] 1.5.71
ii libc6 2.28-10
ii libgcc1 1:8.3.0-6
ii libpam0g 1.3.1-5
ii libqt5core5a 5.11.3+dfsg1-1
ii libqt5dbus5 5.11.3+dfsg1-1
ii libqt5gui5 5.11.3+dfsg1-1
ii libqt5network5 5.11.3+dfsg1-1
ii libqt5qml5 5.11.3-4
ii libqt5quick5 5.11.3-4
ii libstdc++6 8.3.0-6
ii libsystemd0 241-7~deb10u1
ii libxcb-xkb1 1.13.1-2
ii libxcb1 1.13.1-2
ii qml-module-qtquick2 5.11.3-4
ii x11-common 1:7.7+19
ii xserver-xorg [xserver] 1:7.7+19
Versions of packages sddm recommends:
ii haveged 1.9.1-7
ii libpam-systemd 241-7~deb10u1
ii sddm-theme-breeze [sddm-theme] 4:5.14.5.1-1
ii sddm-theme-debian-maui [sddm-theme] 0.18.0-1
Versions of packages sddm suggests:
ii libpam-kwallet5 5.14.5-1
pn qtvirtualkeyboard-plugin <none>
The random directory prefixes described in this report match a
use-after-free in SDDM 0.18.0. UserSession::setupChildProcess()
freed the getpwnam_r() buffer before using pw.pw_dir to construct
the session log path.
Upstream release-branch commit e4ec22d0f46eb3837d9f29a7b0c5a6ca1a4433dd
keeps that buffer alive with QScopedPointer and copies the home directory
before constructing the log path. The fix is present in upstream
0.18.1 and Debian 0.18.1-1.
Closing with the historical fixed version.
Regards,
Boyuan Yang
OpenPGP_0xC293E7B461825ACE.asc
Description: OpenPGP public key
OpenPGP_signature.asc
Description: OpenPGP digital signature
--- End Message ---
