This bug was fixed in the package glib2.0 - 2.62.4-1~ubuntu19.10.1 --------------- glib2.0 (2.62.4-1~ubuntu19.10.1) eoan; urgency=medium
* No-change backport from unstable to eoan (LP: #1850932). + Contains fix for LP: #1844853 - "IBus no longer works in Qt applications after upgrade" glib2.0 (2.62.4-1) unstable; urgency=medium * Team upload [ Steve Langasek ] * debian/tests/build: Make cross-test friendly (Closes: #946355) [ Iain Lane ] * debian/tests/build: Style fixes [ Simon McVittie ] * New upstream release glib2.0 (2.62.3-2) unstable; urgency=medium * Team upload * Rename pkg.glib2.0.noinsttest build profile to noinsttest. This is now registered on <https://wiki.debian.org/BuildProfileSpec>. glib2.0 (2.62.3-1) unstable; urgency=medium * Team upload * New upstream release - Drop patches that were applied upstream * Don't build libglib2.0-tests under pkg.glib2.0.noinsttest build profile. This is a prototype of the proposed standard build profile noinsttest. If the build profiles include both nocheck and pkg.glib2.0.noinsttest, we can drop the libdbus-1-dev build-dependency without harming test coverage or altering the contents of binary packages. * d/gbp.conf: Use upstream/2.62.x branch glib2.0 (2.62.2-3) unstable; urgency=medium * Team upload [ Iain Lane ] * control: Drop `debian/experimental` from Vcs-* [ Simon McVittie ] * Build-depend on libdbus-1-dev for better test coverage * Update to upstream commit 2.62.2-28-g3cf25070e: - d/p/goption-Relax-assertion-to-avoid-being-broken-by-kdeinit5.patch: Fix assertion failure when called from a process that overwrites its argv, such as kdeinit5 - d/p/gdbus-peer-Specifically-listen-on-127.0.0.1.patch: Improve reliability of gdbus-peer test in some container environments - d/p/gdbusserver-Delete-socket-and-nonce-file-when-stopping-se.patch, d/p/gdbusserver-Keep-a-strong-reference-to-the-server-in-call.patch, d/p/gdbusauthmechanismsha1-Remove-unnecessary-g_warning-calls.patch, d/p/gdbusauthmechanismsha1-Create-.dbus-keyrings-directory-re.patch, d/p/tests-Move-main-loop-and-test-GUID-into-test-functions-in.patch, d/p/tests-Isolate-directories-in-gdbus-peer-test.patch, d/p/gdbus-peer-test-Improve-diagnostics-if-g_rmdir-fails.patch, d/p/gdbus-peer-test-Stop-GDBusServer-before-tearing-down-temp.patch, d/p/gdbus-peer-test-Use-unix-dir-address-if-exact-format-does.patch, d/p/gdbus-server-auth-test-Create-temporary-directory-for-Uni.patch: Mark as applied upstream in 2.62.x branch * d/p/gdbus-server-auth-test-Include-gcredentialsprivate.h.patch: Apply patch from 2.63.x to fix missing coverage in test for #941018 * d/p/Make-ld-executable-configurable.patch: Apply patch from 2.63.x to use cross ld where necessary * d/p/gdbus-server-auth-test-Create-temporary-directory-for-Uni.patch: Mark as applied upstream in 2.63.x branch * Improve patch metadata: use more URLs for bug references glib2.0 (2.62.2-2) unstable; urgency=medium * Team upload * Update to upstream commit 2.62.2-14-gfcbb88823: - d/p/gdesktopappinfo-Allocate-DesktopFileDir-structs-dynamical.patch, d/p/gdesktopappinfo-Cancel-file-monitor-when-resetting-a-Desk.patch, d/p/glocalfilemonitor-Keep-a-weak-ref-to-the-monitor-in-GFile.patch: Fix intermittent test failures for GDesktopAppInfo (Closes: #941550) - d/p/gvariant-Limit-recursion-in-g_variant_parse.patch: Ensure that parsing a text-format GVariant does not run out of stack space - d/p/tests-Use-objcopy-from-the-cross-compilation-file-if-conf.patch, d/p/docs-Add-objcopy-to-example-cross-compilation-file.patch: Use the appropriate architecture's objcopy when cross-compiling - d/p/gtestutils-Add-additional-non-NULL-check-in-g_assert_cmpm.patch: Avoid false positive NULL dereference warnings in g_assert_cmpmem() - d/p/gspawn-Port-to-g_poll-from-select.patch: Fix launching subprocesses when a very large number of fds are open - d/p/gcredentialsprivate-Document-the-various-private-macros.patch, d/p/credentials-Invalid-Linux-struct-ucred-means-no-informati.patch, d/p/GDBus-prefer-getsockopt-style-credentials-passing-APIs.patch: Ensure libdbus clients can authenticate with a GDBusServer like the one in ibus (Closes: #941018) * d/p/gdbusserver-Delete-socket-and-nonce-file-when-stopping-se.patch, d/p/gdbusserver-Keep-a-strong-reference-to-the-server-in-call.patch, d/p/Add-a-test-for-GDBusServer-authentication.patch: Backport regression test for #941018 from upstream git master * d/p/gdbusauthmechanismsha1-Remove-unnecessary-g_warning-calls.patch, d/p/gdbusauthmechanismsha1-Create-.dbus-keyrings-directory-re.patch, d/p/tests-Move-main-loop-and-test-GUID-into-test-functions-in.patch, d/p/tests-Isolate-directories-in-gdbus-peer-test.patch: Backport reliability fixes for gdbus-peer test from upstream git master * d/p/gdbus-peer-test-Improve-diagnostics-if-g_rmdir-fails.patch, d/p/gdbus-peer-test-Stop-GDBusServer-before-tearing-down-temp.patch, d/p/gdbus-peer-test-Use-unix-dir-address-if-exact-format-does.patch, d/p/gdbus-server-auth-test-Create-temporary-directory-for-Uni.patch: Add some proposed patches to improve GDBus unit tests * d/p/debian/mimeapps-test-Mark-as-flaky.patch: Drop patch, hopefully no longer needed with #941550 fixed * d/p/debian/taptestrunner-Stop-looking-like-an-executable-script.patch: Make taptestrunner non-executable to avoid a Lintian warning glib2.0 (2.62.2-1) unstable; urgency=medium * New upstream release + Fixes use after free when calling g_dbus_connection_flush_sync() in a dedicated thread (LP: #1848202) -- Iain Lane <i...@orangesquash.org.uk> Wed, 05 Feb 2020 16:43:07 +0000 -- You received this bug notification because you are a member of Ubuntu Touch seeded packages, which is subscribed to ibus in Ubuntu. https://bugs.launchpad.net/bugs/1844853 Title: IBus no longer works in Qt applications after upgrade Status in GLib: Fix Released Status in ibus: Fix Released Status in glib2.0 package in Ubuntu: Fix Released Status in ibus package in Ubuntu: Fix Released Status in glib2.0 source package in Xenial: Fix Released Status in glib2.0 source package in Bionic: Fix Released Status in glib2.0 source package in Disco: Won't Fix Status in glib2.0 source package in Eoan: Fix Released Status in glib2.0 source package in Focal: Fix Released Status in ibus source package in Focal: Fix Released Status in glib2.0 package in Debian: Fix Released Bug description: [Impact] IBus was broken for Qt applications as a regression due to the fix of CVE-2019-14822. As a result the IBus patch was disabled temporarily, which fixed IBus from a usability POV. The real fix has been made in glib2.0, and the updates in -proposed will allow the IBus patch to be re-enabled. [Test Case] * On a standard Ubuntu {eoan,disco,bionic,xenial} installation - Upgrade the glib2.0 packages from {eoan,disco,bionic,xenial}-proposed - Upgrade the ibus packages from https://launchpad.net/~ubuntu-security-proposed/+archive/ubuntu/ppa - Install some IBus input method, e.g. ibus-libpinyin - Install some Qt application, e.g. Kate * Relogin (maybe reboot) * Add the input method to the input sources * Open the Qt app and try to input something using the IBus IM => Find that the transliteration works as expected [Regression Potential] The applicable patches origin from glib upstream: https://gitlab.gnome.org/GNOME/glib/merge_requests/1176 Consequently the changes have been reviewed by the glib maintainer, but also tested by the IBus maintainer, by me (gunnarhj), and - of course - the author Simon McVittie. The changes have been in Debian unstable since 2019-10-30. [Original description] Kubuntu Release 18.04.3 LTS Expected behavior: ibus continues working as before after applying security update 1.5.17-ubuntu5.1 from version 1.5.17-ubuntu5. Observed behavior: ibus is not usable anymore in Qt applications. After updating ibus and the related packages ibus-gtk, ibus-gtk3, libibus-1.0-5 and gir1.2-ibus-1.0 all from version 1.5.17-ubuntu5 to 1.5.17-ubuntu5.1, I can no longer use ibus in Qt applications. Using shift-space no longer changes the selected input method and even when i switch to the mozc input method in a gtk application, i can not use it in any Qt applications. When starting qtconfig in a terminal, I also get the following message: Bus::open: Connect ibus failed! IBusInputContext::createInputContext: no connection to ibus-daemon This bug was not present in version 1.5.17-3ubuntu5 and I also confirmed that downgrading the packages to version 1.5.17-3ubuntu4 restores ibus functionality in Qt applications. ProblemType: Bug DistroRelease: Ubuntu 18.04 Package: ibus 1.5.17-3ubuntu5.1 ProcVersionSignature: Ubuntu 5.0.0-30.32~18.04.1-generic 5.0.21 Uname: Linux 5.0.0-30-generic x86_64 NonfreeKernelModules: nvidia_modeset nvidia ApportVersion: 2.20.9-0ubuntu7.7 Architecture: amd64 CurrentDesktop: KDE Date: Sat Sep 21 07:58:56 2019 InstallationDate: Installed on 2019-06-28 (84 days ago) InstallationMedia: Kubuntu 18.04.2 LTS "Bionic Beaver" - Release amd64 (20190210) SourcePackage: ibus UpgradeStatus: No upgrade log present (probably fresh install) To manage notifications about this bug go to: https://bugs.launchpad.net/glib/+bug/1844853/+subscriptions -- Mailing list: https://launchpad.net/~touch-packages Post to : touch-packages@lists.launchpad.net Unsubscribe : https://launchpad.net/~touch-packages More help : https://help.launchpad.net/ListHelp