Bug 2290337

Summary:	Fix for CVE-2024-36041 breaks session restore under Plasma
Product:	[Fedora] Fedora	Reporter:	Tomáš Trnka <tomastrnka>
Component:	plasma-workspace	Assignee:	KDE SIG <kde-sig>
Status:	CLOSED ERRATA	QA Contact:	Fedora Extras Quality Assurance <extras-qa>
Severity:	high	Docs Contact:
Priority:	unspecified
Version:	39	CC:	jgrulich, kde-sig, kwolf, rdieter, sait.a.umar, than
Target Milestone:	---	Keywords:	Regression
Target Release:	---
Hardware:	Unspecified
OS:	Linux
Whiteboard:
Fixed In Version:	plasma-workspace-5.27.11.1-2.fc39 plasma-workspace-6.0.5.1-2.fc40	Doc Type:	If docs needed, set a value
Doc Text:		Story Points:	---
Clone Of:		Environment:
Last Closed:	2024-06-05 08:34:46 UTC	Type:	---
Regression:	---	Mount Type:	---
Documentation:	---	CRM:
Verified Versions:		Category:	---
oVirt Team:	---	RHEL 7.3 requirements from Atomic Host:
Cloudforms Team:	---	Target Upstream Version:
Embargoed:

Description Tomáš Trnka 2024-06-04 08:41:42 UTC

Updating to plasma-workspace-5.27.11.1-1.fc39 completely broke session restore in KDE apps on my machine because the ICEAuthority file is not written correctly. This is due to https://bugs.kde.org/show_bug.cgi?id=487912, which is fixed upstream by https://invent.kde.org/plasma/plasma-workspace/-/merge_requests/4405/diffs?commit_id=e109503c8ee12866ecfbd3aaf89170a753f2ea84. It would be great if we could get that patch into Fedora ASAP.

FWIW, here's an example Copr build with the patch: https://copr.fedorainfracloud.org/coprs/tootea/earlybird/build/7527631/ 

Reproducible: Always

Steps to Reproduce:
Log into a Plasma session after updating to plasma-workspace-5.27.11.1-1.fc39
Actual Results:  
Konsole tabs, Okular docs, etc. are not restored.
Journal contains messages like the following:
ksmserver[3238]: Failed to write ice auth file entry
electra ksmserver[3238]: Failed to write xsmp ice auth file entry
(These are actually harmless, they're just a symptom of a different bug introduced by the same upstream commit and also fixed by the linked merge request.)

Comment 1 Fedora Update System 2024-06-04 14:54:56 UTC

FEDORA-2024-eb9c3bff8c (plasma-workspace-6.0.5.1-2.fc40) has been submitted as an update to Fedora 40.
https://bodhi.fedoraproject.org/updates/FEDORA-2024-eb9c3bff8c

Comment 2 Fedora Update System 2024-06-04 14:54:57 UTC

FEDORA-2024-934cac977c (plasma-workspace-5.27.11.1-2.fc39) has been submitted as an update to Fedora 39.
https://bodhi.fedoraproject.org/updates/FEDORA-2024-934cac977c

Comment 3 Sammy 2024-06-04 18:17:21 UTC

This somehow broke  my logout function (I built the rpm from this source with X11 option on). I get black screen with mouse pointer showing. Could someone check to see if logout is working under Plasma(X11)? Thanks! (it was working fine before)

Comment 4 Fedora Update System 2024-06-05 02:03:44 UTC

FEDORA-2024-eb9c3bff8c has been pushed to the Fedora 40 testing repository.
Soon you'll be able to install the update with the following command:
`sudo dnf upgrade --enablerepo=updates-testing --refresh --advisory=FEDORA-2024-eb9c3bff8c`
You can provide feedback for this update here: https://bodhi.fedoraproject.org/updates/FEDORA-2024-eb9c3bff8c

See also https://fedoraproject.org/wiki/QA:Updates_Testing for more information on how to test updates.

Comment 5 Fedora Update System 2024-06-05 08:34:46 UTC

FEDORA-2024-934cac977c (plasma-workspace-5.27.11.1-2.fc39) has been pushed to the Fedora 39 stable repository.
If problem still persists, please make note of it in this bug report.

Comment 6 Sammy 2024-06-05 17:32:15 UTC

Logout works with Wayland so the problem is with X11. I cannot use Wayland because some apps are very jittery (like chrome and libreoffice).

Comment 7 Tomáš Trnka 2024-06-05 19:18:51 UTC

(In reply to Sammy from comment #6)
> Logout works with Wayland so the problem is with X11. I cannot use Wayland
> because some apps are very jittery (like chrome and libreoffice).

If the problem persists after a reboot (so it isn't a temporary glitch caused for example by updating the broken version while it is running, leaving the system in a mixed state when you attempt to log out), please post a new bug with detailed information (journal output etc.). Logout works perfectly fine for me across three different machines (all X11 on F39; Wayland doesn't have session restore to speak of).

Comment 8 Sammy 2024-06-05 20:54:27 UTC

I compiled the plasma workspace 6.0 git of today without the two patches included in this version, and logout works fine for X11.There seems to be some recent patches on there that seem like they are addressing the xauhhority issue but they are different from the ones included here.By the way I am on F40.

Comment 9 Fedora Update System 2024-06-06 01:38:30 UTC

FEDORA-2024-eb9c3bff8c (plasma-workspace-6.0.5.1-2.fc40) has been pushed to the Fedora 40 stable repository.
If problem still persists, please make note of it in this bug report.

Comment 10 Kevin Wolf 2024-06-21 07:39:10 UTC

(In reply to Tomáš Trnka from comment #7)
> If the problem persists after a reboot (so it isn't a temporary glitch
> caused for example by updating the broken version while it is running,
> leaving the system in a mixed state when you attempt to log out), please
> post a new bug with detailed information (journal output etc.).

I keep hitting the same problem consistently, too. Do we meanwhile have a separate bug (I would have expected so, but I couldn't find one) or should I create one?