Sync Updates for Week 50, 2023

EbonJaeger

Heya folks! It's time for the weekly roundup of news!

Let's start off with some of this week's CVE fixes. Xorg released fixes for two high severity vulnerabilities: CVE-2023-6337 and CVE-2023-6478. We updated to the fixed versions of xorg-server and xwayland. Xorg isn't the only one this time around, though. Budgie Extras fixed some CVE issues as well: CVE-2023-49344, CVE-2023-49345, CVE-2023-49346, CVE-2023-49347. All the Budgie Extras CVEs are the same vulnerability, just across different applets, and carry a severity score of medium.

We have made some refinements to XFCE this week. You will now be able to open the applications menu by pressing the Super key. mugshot has been added, enabling users to change their user account details such as profile picture and real name. Clicking the user profile picture in the menu launches mugshot. Since XFCE does not provide a graphical way to manage user accounts on the system, MATE User Manager has been added to the list of packages installed by default. Existing installations will have to add this manually by installing the mate-user-admin package. Icon scaling in the system tray has been enabled. Lastly, automatic login has been fixed.

Plasma received a lot of attention, too, in preparation for the updated ISO. Plasma was updated to 5.27.10, KDE Frameworks to 5.112, and KDE Gear was updated to 23.08.4. Additionally, Kasts, a "convergent podcast application" and newer addition to upstream KDE Gear was added to the repository (though Reilly, repository maintainer for RSSGuard and in no way biased whatsoever, would like you to know that RSSGuard also supports podcasts 😉 ).

We are still doing a lot of testing ahead of a new ISO release. Our focus has been fixing issues found by us and Release Tester backers. This will continue through the next week, and multiple syncs may occur if and when new ISO Release Candidates need to be made. Thank you testers for your help! Note: The RC1 ISOs went out with the wrong repository enabled. If you want to switch to the Stable repository, run:

sudo eopkg ar Solus https://cdn.getsol.us/repo/shannon/eopkg-index.xml.xz

The keen-eyed among you might notice a new name in this week's updates. That's right, we have a version name for 4.5! It will be called Solus 4.5 Resilience! A ton of work has already gone into this, and we're not done yet. But it is drawing closer and closer!

Other updates this week include:

Collapsed

Mesa 23.3.1
Linux-current 6.6.7 and Linux-lts 5.15.143. Sorry, there were too many fixes for us to ignore in 6.6.7 so you won't be able to say you ran kernel 6.6.6 on Solus.
Linux-firmware 20231211, bringing updated AMDGPU firmware, IWLWIFI, Cirrus, Mediatek, and other firmware packages
Systemd 253.14 (note that we'll probably upgrade to Systemd 254 after the ISO is released, isn't that so exciting???)
AMDGPU_Top 0.5.0
Borg 1.2.7, thanks Algent!
Brave 1.61.104, thanks Algent!
Broot 1.30.0, thanks Algent!
Cherrytree 1.0.3, thanks Algent!
Deepin-icon-theme 2023.11.28, thanks Algent!
FreePlane 1.11.8, thanks Algent!
FreeRDP 2.11.4, thanks Aleks!
Heroic Games Launcher 2.11.0, Thanks Zach!
OpenRGB 0.9
Opera Stable 105.0.4970.48, Thanks Harvey!
RSSGuard 4.6.3
Signal-Desktop 6.42.0, thanks Algent!
Strawberry 1.0.22, thanks Harvey!
SVT-AV1 1.8.0
Thunderbird 115.5.2, Thanks Harvey!
Vivaldi-Stable 6.5.3206.39, thanks Harvey!
VSCode 1.85.1, Thanks Harvey!
Zathura 0.5.4, thanks Algent!

That’s all for this week, folks! Check back next week for more awesome sync news!

brent

EbonJaeger re: budgie extras cve's: is it normal a DE's cluster of features/applets get targeted? those cve's seemed unusual to a casual observer like me but I don't read cve stuff daily.

WetGeek

EbonJaeger CVE-2023-49344, CVE-2023-49345, CVE-2023-49346, CVE-2023-49347

What does "CVE" stand for?

hdansin

EbonJaeger I'm not sure if it was because of this mesa update or the last one, but I had to run the chromium gpu cache command to get Webcord (a wrapper for discord) working again:

find ~/.config -name GPUCache -exec rm -rv {} +

Harvey

brent
The entire point for black hats / white hats is to find a way to do something you are not supposed to be able to do.

I used to use Microsoft Access for privilege escalation allowing me to run anything as administrator. Everything is a viable target for research.

WetGeek What does "CVE" stand for?

Common Vulnerabilities and Exposures

Harvey

hdansin As explained in the help center for that command: https://help.getsol.us/docs/user/troubleshooting/#broken-ui-with-chromium-applications

This is due to a bug in chromium which has been fixed upstream. Unfortunately every chromium app needs to move to a chromium version that contains that fix (Not something Solus can control). So that command will be needed for some time yet.

Patrice

Thanks guy, this sync went without problem.
Thanks to @ReillyBrogan for my protonmail-bridge previous sync issue, it's solved.
Great job you are doing.

penny-farthing

Thanks again for this update (89 packages, 0.99 GiB).
No particular problems since this one at this time (I'm using the Budgie desktop).

Except that when I do a package integrity check after this one (sudo eopkg check), I get the following error:

**Vérification de l'intégrité de flatpak                                        Cassé
Fichier corrompu : usr/lib/tmpfiles.d/flatpak.conf**

Please note that I didn't have this error with the previous update (12/13/2023).

What should I do to solve this problem?
Thank you in advance for your help.

joluveba

penny-farthing Except that when I do a package integrity check after this one (sudo eopkg check), I get the following error:

Vérification de l'intégrité de flatpak Cassé
Fichier corrompu : usr/lib/tmpfiles.d/flatpak.conf
if(window.hljsLoader && !document.currentScript.parentNode.hasAttribute('data-s9e-livepreview-onupdate')) {
window.hljsLoader.highlightBlocks(document.currentScript.parentNode);
}

Please note that I didn't have this error with the previous update (12/13/2023).

Axios
Dunno mine shows it to.

I just did a sudo eopkg check, and I have the same problem:

I tried reinstalling flatpak, but it didn't solve the issue.

ermo

penny-farthing

I can confirm that there is some sort of issue here:

htpc@orangebox ~ $ eopkg sf /usr/lib/tmpfiles.d/flatpak.conf 
Searching for /usr/lib/tmpfiles.d/flatpak.conf
Package flatpak has file /usr/lib/tmpfiles.d/flatpak.conf
htpc@orangebox ~ $ sudo eopkg check flatpak
Checking integrity of flatpak    Broken
Corrupted file: /usr/lib/tmpfiles.d/flatpak.conf
htpc@orangebox ~ $ sudo eopkg it --reinstall flatpak
Total size of package(s): 1.38 MB
Downloading 1 / 1
Package flatpak found in repository Stable
flatpak-1.14.5-72-1-x86_64.eopkg [cached]
Installing 1 / 1
flatpak-1.14.5-72-1-x86_64.eopkg [cached]
Installing flatpak, version 1.14.5, release 72
Extracting the files of flatpak
Installed flatpak
 [✓] Syncing filesystems                                                success
 [✓] Updating dynamic library cache                                     success
 [✓] Updating system users                                              success
 [✓] Updating systemd tmpfiles                                          success
 [✓] Reloading systemd configuration                                    success
 [✓] Updating manpages database                                         success
htpc@orangebox ~ $ sudo eopkg check flatpak
Checking integrity of flatpak    Broken
Corrupted file: /usr/lib/tmpfiles.d/flatpak.conf
htpc@orangebox ~ $  eopkg blame flatpak
Name: flatpak, version: 1.14.5, release: 72
Package Maintainer: Reilly Brogan <reilly@reillybrogan.com>
Release Updater: Reilly Brogan <reilly@reillybrogan.com>
Update Date: 2023-12-15

flatpak: Update to v1.14.5

Release notes available [here](https://github.com/flatpak/flatpak/releases/tag/1.14.5)

Signed-off-by: Reilly Brogan <reilly@reillybrogan.com>

htpc@orangebox ~ $ htpc@orangebox ~ $ cat /usr/lib/tmpfiles.d/flatpak.conf 
d /var/lib/flatpak/exports/share 0755 root root -
d /var/lib/flatpak/exports/share/applications 0755 root root -
d /var/lib/flatpak/exports/share/icons 0755 root root -
htpc@orangebox ~ $ tree -L 2 /var/lib/flatpak/exports
/var/lib/flatpak/exports
├── bin
└── share
    ├── applications
    ├── icons
    └── metainfo

What I don't know is whether this actually matters in practice, since the folders mentioned in the tmpfiles.d configuration file do appear to have been created?

Axios

Dunno mine shows it to.

marcvg

Congrats on 4.5, the name defines the Solus OS: SOLID!

Solarmass

No issues here!

Lucien_Lachance

no problems
noticed the solus logo on the bottom of the gdm screen, either thats new or i havent been paying attention

brent

ermo can confirm:

sudo eopkg check flatpak
[sudo] password for work:
Checking integrity of flatpak    Broken
Corrupted file: /usr/lib/tmpfiles.d/flatpak.conf

edit--flatpak appears to function just fine:

$ flatpak search eolie
Name       Description      Application ID       Version      Branch     Remotes
Eolie      Web browser      org.gnome.Eolie      0.9.101      stable     flathub
~ $ flatpak install org.gnome.Eolie
Looking for matches…
Required runtime for org.gnome.Eolie/x86_64/stable (runtime/org.gnome.Platform/x86_64/40) found in remote flathub
Do you want to install it? [Y/n]: y

Info: runtime org.gnome.Platform branch 40 is end-of-life, with reason:
   The GNOME 40 runtime is no longer supported as of March 21, 2022. Please ask your application developer to migrate to a supported platform.
Info: applications using this runtime:
   org.gnome.Eolie

Info: runtime org.freedesktop.Platform.GL.default branch 20.08 is end-of-life, with reason:
   org.freedesktop.Platform 20.08 is no longer receiving fixes and security updates. Please update to a supported runtime version.
Info: applications using this runtime:
   org.gnome.Eolie

org.gnome.Eolie permissions:
    ipc                       network         pulseaudio             wayland
    x11                       dri             file access [1]        dbus access [2]
    bus ownership [3]

    [1] home, ~/.config/chrome, ~/.config/chromium, ~/.mozilla/firefox
    [2] org.freedesktop.secrets
    [3] org.gnome.Eolie.Proxy.*


        ID                                      Branch     Op     Remote      Download
 1.     org.freedesktop.Platform.GL.default     20.08      i      flathub     < 106.4 MB
 2.     org.freedesktop.Platform.openh264       2.0        i      flathub       < 1.5 MB
 3.     org.gnome.Eolie.Locale                  stable     i      flathub     < 228.7 kB (partial)
 4.     org.gnome.Platform.Locale               40         i      flathub     < 333.9 MB (partial)
 5.     org.gnome.Platform                      40         i      flathub     < 367.4 MB
 6.     org.gnome.Eolie                         stable     i      flathub       < 5.7 MB

Proceed with these changes to the system installation? [Y/n]:

Solarmass

eopkg check flatpak says it's broken for me too
reinstalling doesn't help

TraceyC

If someone who is seeing the error for flatpak when checking integrity can open a bug on our tracker the developers can look into it. Thanks!

brent

TraceyC done.

penny-farthing

TraceyC

That's done:
https://github.com/getsolus/packages/issues/1038

At your disposal if needed.

MikeK61

I`m not sure it has to do with the flatpak issue.
Since a few days when i play Pinball FX on steam the monitor turns off like in standby after a few minutes in game.
After i hit the enter key it comes up and the screen is slugish.
I have to exit the game and reload but after a 5 minutes the same happens again.
Last sweek i could play this game for 3 hours without any problems.

Any ideas ?

Edit: Solved, own stupidity.