[Bug 1154725] New: Regrassion: fix for CVE-2019-14822 (#1150011) prevent Qt applications from connecting ibus-daemon due to race condition in GDBusServer
http://bugzilla.opensuse.org/show_bug.cgi?id=1154725 Bug ID: 1154725 Summary: Regrassion: fix for CVE-2019-14822 (#1150011) prevent Qt applications from connecting ibus-daemon due to race condition in GDBusServer Classification: openSUSE Product: openSUSE Distribution Version: Leap 15.1 Hardware: Other OS: Other Status: NEW Severity: Major Priority: P5 - None Component: X11 Applications Assignee: bnc-team-screening@forge.provo.novell.com Reporter: ftake@geeko.jp QA Contact: qa-bugs@suse.de Found By: --- Blocker: --- After applying the patch to fix CVE-2019-14822 (#1150011), Qt application cannot connect to ibus-daemon. Due to the race condition bug with GDBus, ibus client using libdbus (including Qt platform input context plugin, aka ibus-qt) cannot connect to ibus-daemon's D-Bus server. This problem did not reproduce before applying the patch because the race condition happens restricting clients but the old insecure ibus-daemon does not check clients. Workaround is restarting ibus-daemon repeatedly until the problem is fixed. Ubuntu has already reverted the patch for CVE-2019-14822 https://bugs.launchpad.net/ubuntu/+source/ibus/+bug/1844853 A bug report in IBus project https://github.com/ibus/ibus/issues/2137 A fix for GDBus server https://gitlab.gnome.org/GNOME/glib/merge_requests/1176 -- You are receiving this mail because: You are on the CC list for the bug.
http://bugzilla.opensuse.org/show_bug.cgi?id=1154725 Fuminobu Takeyama <ftake@geeko.jp> changed: What |Removed |Added ---------------------------------------------------------------------------- Status|NEW |CONFIRMED CC| |qzhao@suse.com -- You are receiving this mail because: You are on the CC list for the bug.
http://bugzilla.opensuse.org/show_bug.cgi?id=1154725 Fuminobu Takeyama <ftake@geeko.jp> changed: What |Removed |Added ---------------------------------------------------------------------------- Depends on| |1155768 -- You are receiving this mail because: You are on the CC list for the bug.
http://bugzilla.opensuse.org/show_bug.cgi?id=1154725 http://bugzilla.opensuse.org/show_bug.cgi?id=1154725#c1 --- Comment #1 from Fuminobu Takeyama <ftake@geeko.jp> --- This problem should be resolve in glib2 side (#1155768). -- You are receiving this mail because: You are on the CC list for the bug.
http://bugzilla.opensuse.org/show_bug.cgi?id=1154725 Bug 1154725 depends on bug 1155768, which changed state. Bug 1155768 Summary: glib2: libdbus client fail to authenticate due to race condition with GDBusServer http://bugzilla.opensuse.org/show_bug.cgi?id=1155768 What |Removed |Added ---------------------------------------------------------------------------- Status|NEW |RESOLVED Resolution|--- |FIXED -- You are receiving this mail because: You are on the CC list for the bug.
http://bugzilla.opensuse.org/show_bug.cgi?id=1154725 http://bugzilla.opensuse.org/show_bug.cgi?id=1154725#c2 Fuminobu Takeyama <ftake@geeko.jp> changed: What |Removed |Added ---------------------------------------------------------------------------- Status|CONFIRMED |RESOLVED Resolution|--- |FIXED --- Comment #2 from Fuminobu Takeyama <ftake@geeko.jp> --- Already fixed in glib2. -- You are receiving this mail because: You are on the CC list for the bug.
participants (1)
-
bugzilla_noreply@novell.com