Bug 2290337 - Fix for CVE-2024-36041 breaks session restore under Plasma
Summary: Fix for CVE-2024-36041 breaks session restore under Plasma
Keywords:
Status: CLOSED ERRATA
Alias: None
Product: Fedora
Classification: Fedora
Component: plasma-workspace
Version: 39
Hardware: Unspecified
OS: Linux
unspecified
high
Target Milestone: ---
Assignee: KDE SIG
QA Contact: Fedora Extras Quality Assurance
URL:
Whiteboard:
Depends On:
Blocks:
TreeView+ depends on / blocked
 
Reported: 2024-06-04 08:41 UTC by Tomáš Trnka
Modified: 2024-06-21 07:39 UTC (History)
6 users (show)

Fixed In Version: plasma-workspace-5.27.11.1-2.fc39 plasma-workspace-6.0.5.1-2.fc40
Clone Of:
Environment:
Last Closed: 2024-06-05 08:34:46 UTC
Type: ---
Embargoed:


Attachments (Terms of Use)

Description Tomáš Trnka 2024-06-04 08:41:42 UTC
Updating to plasma-workspace-5.27.11.1-1.fc39 completely broke session restore in KDE apps on my machine because the ICEAuthority file is not written correctly. This is due to https://bugs.kde.org/show_bug.cgi?id=487912, which is fixed upstream by https://invent.kde.org/plasma/plasma-workspace/-/merge_requests/4405/diffs?commit_id=e109503c8ee12866ecfbd3aaf89170a753f2ea84. It would be great if we could get that patch into Fedora ASAP.

FWIW, here's an example Copr build with the patch: https://copr.fedorainfracloud.org/coprs/tootea/earlybird/build/7527631/ 

Reproducible: Always

Steps to Reproduce:
Log into a Plasma session after updating to plasma-workspace-5.27.11.1-1.fc39
Actual Results:  
Konsole tabs, Okular docs, etc. are not restored.
Journal contains messages like the following:
ksmserver[3238]: Failed to write ice auth file entry
electra ksmserver[3238]: Failed to write xsmp ice auth file entry
(These are actually harmless, they're just a symptom of a different bug introduced by the same upstream commit and also fixed by the linked merge request.)

Comment 1 Fedora Update System 2024-06-04 14:54:56 UTC
FEDORA-2024-eb9c3bff8c (plasma-workspace-6.0.5.1-2.fc40) has been submitted as an update to Fedora 40.
https://bodhi.fedoraproject.org/updates/FEDORA-2024-eb9c3bff8c

Comment 2 Fedora Update System 2024-06-04 14:54:57 UTC
FEDORA-2024-934cac977c (plasma-workspace-5.27.11.1-2.fc39) has been submitted as an update to Fedora 39.
https://bodhi.fedoraproject.org/updates/FEDORA-2024-934cac977c

Comment 3 Sammy 2024-06-04 18:17:21 UTC
This somehow broke  my logout function (I built the rpm from this source with X11 option on). I get black screen with mouse pointer showing. Could someone check to see if logout is working under Plasma(X11)? Thanks! (it was working fine before)

Comment 4 Fedora Update System 2024-06-05 02:03:44 UTC
FEDORA-2024-eb9c3bff8c has been pushed to the Fedora 40 testing repository.
Soon you'll be able to install the update with the following command:
`sudo dnf upgrade --enablerepo=updates-testing --refresh --advisory=FEDORA-2024-eb9c3bff8c`
You can provide feedback for this update here: https://bodhi.fedoraproject.org/updates/FEDORA-2024-eb9c3bff8c

See also https://fedoraproject.org/wiki/QA:Updates_Testing for more information on how to test updates.

Comment 5 Fedora Update System 2024-06-05 08:34:46 UTC
FEDORA-2024-934cac977c (plasma-workspace-5.27.11.1-2.fc39) has been pushed to the Fedora 39 stable repository.
If problem still persists, please make note of it in this bug report.

Comment 6 Sammy 2024-06-05 17:32:15 UTC
Logout works with Wayland so the problem is with X11. I cannot use Wayland because some apps are very jittery (like chrome and libreoffice).

Comment 7 Tomáš Trnka 2024-06-05 19:18:51 UTC
(In reply to Sammy from comment #6)
> Logout works with Wayland so the problem is with X11. I cannot use Wayland
> because some apps are very jittery (like chrome and libreoffice).

If the problem persists after a reboot (so it isn't a temporary glitch caused for example by updating the broken version while it is running, leaving the system in a mixed state when you attempt to log out), please post a new bug with detailed information (journal output etc.). Logout works perfectly fine for me across three different machines (all X11 on F39; Wayland doesn't have session restore to speak of).

Comment 8 Sammy 2024-06-05 20:54:27 UTC
I compiled the plasma workspace 6.0 git of today without the two patches included in this version, and logout works fine for X11.There seems to be some recent patches on there that seem like they are addressing the xauhhority issue but they are different from the ones included here.By the way I am on F40.

Comment 9 Fedora Update System 2024-06-06 01:38:30 UTC
FEDORA-2024-eb9c3bff8c (plasma-workspace-6.0.5.1-2.fc40) has been pushed to the Fedora 40 stable repository.
If problem still persists, please make note of it in this bug report.

Comment 10 Kevin Wolf 2024-06-21 07:39:10 UTC
(In reply to Tomáš Trnka from comment #7)
> If the problem persists after a reboot (so it isn't a temporary glitch
> caused for example by updating the broken version while it is running,
> leaving the system in a mixed state when you attempt to log out), please
> post a new bug with detailed information (journal output etc.).

I keep hitting the same problem consistently, too. Do we meanwhile have a separate bug (I would have expected so, but I couldn't find one) or should I create one?


Note You need to log in before you can comment on or make changes to this bug.