Arch Linux User Repository

Build fails with vulnerability warnings

/home/user/.cache/pikaur/build/omnisharp-roslyn/src/omnisharp-roslyn/src/OmniSharp.LanguageServerProtocol/OmniSharp.LanguageServerProtocol.csproj : error NU1903: Warning As Error: Package 'Microsoft.Extensions.Caching.Memory' 8.0.0 has a known high severity vulnerability, https://github.com/advisories/GHSA-qj66-m88j-hmgj [/home/user/.cache/pikaur/build/omnisharp-roslyn/src/omnisharp-roslyn/src/OmniSharp.Stdio.Driver/OmniSharp.Stdio.Driver.csproj]

and

/home/user/.cache/pikaur/build/omnisharp-roslyn/src/omnisharp-roslyn/src/OmniSharp.LanguageServerProtocol/OmniSharp.LanguageServerProtocol.csproj : error NU1903: Warning As Error: Package 'System.Text.Json' 8.0.4 has a known high severity vulnerability, https://github.com/advisories/GHSA-8g4q-xg66-9fp4 [/home/user/.cache/pikaur/build/omnisharp-roslyn/src/omnisharp-roslyn/src/OmniSharp.Stdio.Driver/OmniSharp.Stdio.Driver.csproj]

Fails with

~/.cache/paru/clone/omnisharp-roslyn/src/omnisharp-roslyn-1.39.11/src/OmniSharp.LanguageServerProtocol/OmniSharp.LanguageServerProtocol.csproj : error NU1903: Warning As Error: Package 'System.Text.Json' 8.0.0 has a known high severity vulnerability, https://github.com/advisories/GHSA-hh2w-p6rv-4g7w [~/.cache/paru/clone/omnisharp-roslyn/src/omnisharp-roslyn-1.39.11/src/OmniSharp.Stdio.Driver/OmniSharp.Stdio.Driver.csproj]

EDIT: After upgrading from .NET 6 to 7 today, This doesn't seem to be happening anymore

after a reinstall, I am no longer able to build. I get the following errors repeated throughout the build. I suspect it may have to do with openSSL3?

System.TypeInitializationException: The type initializer for 'LibGit2Sharp.Core.NativeMethods' threw an exception. ---> System.DllNotFoundException: lib/linux-x64/libgit2-572e4d8.so assembly:<unknown assembly> type:<unknown type> member:(null)

/usr/share/dotnet/sdk/6.0.110/Sdks/Microsoft.NET.Sdk/targets/Microsoft.NET.CrossGen.targets(463,5): error : Cannot get required symbol EVP_MD_size from libssl [/home/user/.cache/yay/omnisharp-roslyn/src/omnisharp-roslyn-1.39.2/src/OmniSharp.Stdio.Driver/OmniSharp.Stdio.Driver.csproj

 /home/user/.nuget/packages/microsoft.sourcelink.common/1.0.0/build/Microsoft.SourceLink.Common.targets(52,5): warning : Source control information is not available - the generated source link is empty. [/home/user/.cache/yay/omnisharp-roslyn/src/omnisharp-roslyn-1.39.2/src/OmniSharp.LanguageServerProtocol/OmniSharp.LanguageServerProtocol.csproj]

System.TypeInitializationException: The type initializer for 'LibGit2Sharp.Core.NativeMethods' threw an exception. ---> System.DllNotFoundException: lib/linux-x64/libgit2-572e4d8.so assembly:<unknown assembly> type:<unknown type> member:(null)System.TypeInitializationException: The type initializer for 'LibGit2Sharp.Core.NativeMethods' threw an exception. ---> System.DllNotFoundException: lib/linux-x64/libgit2-572e4d8.so assembly:<unknown assembly> type:<unknown type> member:(null)/home/user/.nuget/packages/microsoft.sourcelink.common/1.0.0/build

Microsoft.SourceLink.Common.targets(52,5): warning : Source control information is not available - the generated source link is empty. [/home/user/.cache/yay/omnisharp-roslyn/src/omnisharp-roslyn-1.39.2/src/OmniSharp.Abstractions/OmniSharp.Abstractions.csproj]/usr/share/dotnet/sdk/6.0.110/Sdks/Microsoft.NET.Sdk/targets/Microsoft.NET.CrossGen.targets(463,5): error : Cannot get required symbol EVP_MD_size from libssl [/home/user/.cache/yay/omnisharp-roslyn/src/omnisharp-roslyn-1.39.2/src/OmniSharp.Stdio.Driver/OmniSharp.Stdio.Driver.csproj]/home/user/.nuget/packages/microsoft.sourcelink.common/1.0.0/build/Microsoft.SourceLink.Common.targets(52,5): warning : Source control information is not available - the generated source link is empty. [/home/user/.cache/yay/omnisharp-roslyn/src/omnisharp-roslyn-1.39.2/src/OmniSharp.LanguageServerProtocol/OmniSharp.LanguageServerProtocol.csproj]

Getting lots of these in my build log:

/usr/share/dotnet/sdk/6.0.110/Sdks/Microsoft.NET.Sdk/targets/Microsoft.NET.CrossGen.targets(463,5): error : Cannot get required symbol EVP_MD_size from libssl [/home/jane/.cache/pacaur/omnisharp-roslyn/src/omnisharp-roslyn-1.39.2/src/OmniSharp.Stdio.Driver/OmniSharp.Stdio.Driver.csproj]

dotnet-sdk is also a runtime dependency.

$ omnisharp
Could not locate MSBuild instance to register with OmniSharp.
{"Event":"log","Body":{"LogLevel":"INFORMATION","Name":"OmniSharp.Stdio.Host","Message":"Starting OmniSharp on Unknown 0.0 (Unknown)"},"Seq":1,"Type":"event"}
{"Event":"log","Body":{"LogLevel":"INFORMATION","Name":"OmniSharp.Services.DotNetCliService","Message":"Checking the 'DOTNET_ROOT' environment variable to find a .NET SDK"},"Seq":2,"Type":"event"}
{"Event":"log","Body":{"LogLevel":"INFORMATION","Name":"OmniSharp.Services.DotNetCliService","Message":"DotNetPath set to /usr/share/dotnet/dotnet"},"Seq":3,"Type":"event"}
{"Event":"log","Body":{"LogLevel":"ERROR","Name":"OmniSharp.MSBuild.Discovery.Providers.SdkInstanceProvider","Message":"OmniSharp requires the .NET 6 SDK or higher be installed. Please visit https://dotnet.microsoft.com/download/dotnet/6.0 to download the .NET SDK."},"Seq":4,"Type":"event"}
{"Event":"log","Body":{"LogLevel":"INFORMATION","Name":"OmniSharp.MSBuild.Discovery.MSBuildLocator","Message":"Located 0 MSBuild instance(s)"},"Seq":5,"Type":"event"}

do not work with dotnet-sdk-bin in my case. I had this message :

Install the [7.0.100-preview.4.22252.9] .NET Core SDK or update

I resolved it by installing dotnet-sdk-preview-bin.

Lines 44 and 45 have licenses spelled wrong, sending it to an incorrect folder. It's currently licences when it should be licenses.

we really need an update

This needs an update, doesnt pass validitiy check.