Issues after upgrade to 3.3.12 and latex security fix

Administrators
1

Hi,

just upgraded to the last version, but I receive logger emails containing errors while generating pdfs with latex (OS is Rocky 9):

2026-03-24 13:17:42,348  ERROR    ff5a7503fd764258  -       indico.flask              LaTeX compilation of /opt/indico/tmp/indico-texgen-60m2h1dl/single_doc.tex failed
Traceback (most recent call last):
  File "/opt/indico/.venv/lib/python3.12/site-packages/flask/app.py", line 917, in full_dispatch_request
    rv = self.dispatch_request()
         ^^^^^^^^^^^^^^^^^^^^^^^
  File "/opt/indico/.venv/lib/python3.12/site-packages/flask/app.py", line 902, in dispatch_request
    return self.ensure_sync(self.view_functions[rule.endpoint])(**view_args)  # type: ignore[no-any-return]
           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
  File "/opt/indico/.venv/lib/python3.12/site-packages/indico/web/flask/util.py", line 82, in wrapper
    return obj().process()
           ^^^^^^^^^^^^^^^
  File "/opt/indico/.venv/lib/python3.12/site-packages/indico/web/rh.py", line 312, in process
    res = self._do_process()
          ^^^^^^^^^^^^^^^^^^
  File "/opt/indico/.venv/lib/python3.12/site-packages/indico/modules/events/controllers/base.py", line 106, in _do_process
    rv = RHEventBase._do_process(self)
         ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
  File "/opt/indico/.venv/lib/python3.12/site-packages/indico/web/rh.py", line 280, in _do_process
    rv = self._process()
         ^^^^^^^^^^^^^^^
  File "/opt/indico/.venv/lib/python3.12/site-packages/indico/modules/events/contributions/controllers/display.py", line 237, in _process
    data = generate_cached_pdf(lambda c: ContribToPDF(c).generate(as_bytes=True), 'contrib', self.contrib)
           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
  File "/opt/indico/.venv/lib/python3.12/site-packages/indico/legacy/pdfinterface/latex.py", line 88, in generate_cached_pdf
    data = fn(obj) if obj is not None else fn()
           ^^^^^^^
  File "/opt/indico/.venv/lib/python3.12/site-packages/indico/modules/events/contributions/controllers/display.py", line 237, in <lambda>
    data = generate_cached_pdf(lambda c: ContribToPDF(c).generate(as_bytes=True), 'contrib', self.contrib)
                                         ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
  File "/opt/indico/.venv/lib/python3.12/site-packages/indico/legacy/pdfinterface/latex.py", line 115, in generate
    filename = latex.run(self.LATEX_TEMPLATE, **self._args)
               ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
  File "/opt/indico/.venv/lib/python3.12/site-packages/indico/legacy/pdfinterface/latex.py", line 381, in run
    raise LaTeXRuntimeException(source_filename, log_filename)
indico.legacy.pdfinterface.latex.LaTeXRuntimeException: LaTeX compilation of /opt/indico/tmp/indico-texgen-60m2h1dl/single_doc.tex failed

Maybe I lost something, could you be so kind to help me?

Thank you in advance for your time.

Cheers,

Cristiano.

2

Hi this error message is too generic - please share the output of the .log file(s) in /opt/indico/tmp/indico-texgen-60m2h1dl/.

3

Hi,

thank you, this is the output:

cat /opt/indico/tmp/indico-texgen-60m2h1dl/output.log 
This is XeTeX, Version 3.141592653-2.6-0.999998 (TeX Live 2026) (preloaded format=xelatex)
entering extended mode
! I can't write on file `single_doc.log'.
(Press Enter to retry, or Control-D to exit; default file extension is `.log')
Please type another transcript file name
! Emergency stop
No pages of output.

Cristiano.

4

Can you share the output of these two commands?

ls -dZ /opt/indico/tmp
ls -laZ /opt/indico/tmp/indico-texgen-60m2h1dl
5

Also, try running restorecon -R /opt/indico/{tmp,cache} and see if that fixes it. I just realized that this is not part of the SELinux step in the docs…

6 
[root@indico ~]# ls -dZ /opt/indico/tmp
ls -laZ /opt/indico/tmp/indico-texgen-60m2h1dl
unconfined_u:object_r:usr_t:s0 /opt/indico/tmp
total 220
drwxr-x---.    2 indico apache system_u:object_r:usr_t:s0         82 Mar 24 13:43 .
drwx--x---. 2498 indico apache unconfined_u:object_r:usr_t:s0 618496 Mar 24 13:49 ..
lrwxrwxrwx.    1 indico apache system_u:object_r:usr_t:s0         59 Mar 24 13:17 fonts -> /opt/indico/.venv/lib/python3.12/site-packages/indico_fonts
-rw-r-----.    1 indico apache system_u:object_r:usr_t:s0        313 Mar 24 13:17 output.log
-rw-r-----.    1 indico apache system_u:object_r:usr_t:s0       6165 Mar 24 13:17 single_doc.tex
-rw-------.    1 indico apache system_u:object_r:usr_t:s0       8499 Mar 24 13:17 tmp0we8e9v7.png
[root@indico ~]#

After running the restorecon command:

[root@indico ~]# ls -laZ /opt/indico/tmp/indico-texgen-60m2h1dl
total 220
drwxr-x---.    2 indico apache system_u:object_r:indico_tmp_t:s0         82 Mar 24 13:43 .
drwx--x---. 2500 indico apache unconfined_u:object_r:indico_tmp_t:s0 618496 Mar 24 13:52 ..
lrwxrwxrwx.    1 indico apache system_u:object_r:indico_tmp_t:s0         59 Mar 24 13:17 fonts -> /opt/indico/.venv/lib/python3.12/site-packages/indico_fonts
-rw-r-----.    1 indico apache system_u:object_r:indico_tmp_t:s0        313 Mar 24 13:17 output.log
-rw-r-----.    1 indico apache system_u:object_r:indico_tmp_t:s0       6165 Mar 24 13:17 single_doc.tex
-rw-------.    1 indico apache system_u:object_r:indico_tmp_t:s0       8499 Mar 24 13:17 tmp0we8e9v7.png
[root@indico ~]#

Now it seems that there are no errors.

Thank you very much,

Cristiano.

7

Thanks for confirming, I’ll update the upgrade docs.

1 Like