#47576 - [security] ibus-daemon launches ungrafted subprocesses

Package	Source(s)		Maintainer(s)
guix		PTS Buildd Popcon

Message #20 received at 47576@debbugs.gnu.org (full text, mbox, reply):

Received: (at 47576) by debbugs.gnu.org; 3 Apr 2021 13:16:59 +0000
From debbugs-submit-bounces@debbugs.gnu.org Sat Apr 03 09:16:59 2021
Received: from localhost ([127.0.0.1]:33379 helo=debbugs.gnu.org)
	by debbugs.gnu.org with esmtp (Exim 4.84_2)
	(envelope-from <debbugs-submit-bounces@debbugs.gnu.org>)
	id 1lSg94-0006I1-ND
	for submit@debbugs.gnu.org; Sat, 03 Apr 2021 09:16:59 -0400
Received: from andre.telenet-ops.be ([195.130.132.53]:56072)
 by debbugs.gnu.org with esmtp (Exim 4.84_2)
 (envelope-from <maximedevos@telenet.be>) id 1lSg8y-0006Hp-TP
 for 47576@debbugs.gnu.org; Sat, 03 Apr 2021 09:16:56 -0400
Received: from butterfly.local ([213.132.158.53])
 by andre.telenet-ops.be with bizsmtp
 id oDGq2400619Qjf101DGq98; Sat, 03 Apr 2021 15:16:51 +0200
Message-ID: <6df8bcf53b5f73402ae375f3772a9675c94250ae.camel@telenet.be>
Subject: Re: bug#47576: [security] ibus-daemon launches ungrafted subprocesses
From: Maxime Devos <maximedevos@telenet.be>
To: Mark H Weaver <mhw@netris.org>, 47576@debbugs.gnu.org
Date: Sat, 03 Apr 2021 15:16:49 +0200
In-Reply-To: <877dljdenq.fsf@netris.org>
References: <87pmzcdljm.fsf@netris.org> <877dljdenq.fsf@netris.org>
Content-Type: multipart/signed; micalg="pgp-sha256";
 protocol="application/pgp-signature"; boundary="=-7Nbw6Cpz6Dh+b82F/T9Y"
User-Agent: Evolution 3.34.2 
MIME-Version: 1.0
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=telenet.be; s=r21;
 t=1617455811; bh=UJFiu9vyIKmXTI+KPS4NfIlrKvIjDLv2bgxWoroijSs=;
 h=Subject:From:To:Date:In-Reply-To:References;
 b=vEY3j+2VPNpuB7roqBhREae24BAUUtQXB6kMP14OznSwgRVQbN8FcwVMXA59Ne/J/
 yH6fWvF2ogF/GHUdRUMQDeIKyIBWlD4mmqvNVnxtzEhBBqyuy/gjVgNCzhoi5W9SUM
 Pfyu4EX5ns9zm3cxDUQJaxiqPExJN+vTBm7dIchWSJWRYQAvyJ5s+QzLL0GUhija9+
 nBqefp8PZl4jobGokyN20Y3TfRW1GNjLHFl+adJSHNBOS3Svq7mLM8FHt+oviEDzsZ
 ABfirxoeMej8J9aRE9M85ZkMz/V/7CmGAV4gBeZ6uHzRpnNp/30g9iE4aEp0NUpRG1
 D+ihnz4P/9MZw==
X-Spam-Score: -0.7 (/)
X-Debbugs-Envelope-To: 47576
X-BeenThere: debbugs-submit@debbugs.gnu.org
X-Mailman-Version: 2.1.18
Precedence: list
List-Id: <debbugs-submit.debbugs.gnu.org>
List-Unsubscribe: <https://debbugs.gnu.org/cgi-bin/mailman/options/debbugs-submit>, 
 <mailto:debbugs-submit-request@debbugs.gnu.org?subject=unsubscribe>
List-Archive: <https://debbugs.gnu.org/cgi-bin/mailman/private/debbugs-submit/>
List-Post: <mailto:debbugs-submit@debbugs.gnu.org>
List-Help: <mailto:debbugs-submit-request@debbugs.gnu.org?subject=help>
List-Subscribe: <https://debbugs.gnu.org/cgi-bin/mailman/listinfo/debbugs-submit>, 
 <mailto:debbugs-submit-request@debbugs.gnu.org?subject=subscribe>
Errors-To: debbugs-submit-bounces@debbugs.gnu.org
Sender: "Debbugs-submit" <debbugs-submit-bounces@debbugs.gnu.org>
X-Spam-Score: -1.7 (-)

[Message part 1 (text/plain, inline)]

On Sat, 2021-04-03 at 03:12 -0400, Mark H Weaver wrote:
> [...]
> 
> The following ungrafted libraries are loaded by processes from the
> mysterious old version of 'ibus' on my system: glib, cairo, and libx11.
> I still have no clue where the reference to that mysterious old version
> (/gnu/store/a4r6q1fbfqapy5hrrxap1yg96rjgln6q-ibus-1.5.22) is coming
> from.
> 
> Are other people seeing this?  Here's an easy way to check:
> 
> [...]
> 
> If you run this command, do you also see different 'ibus' store items
> used by the daemon and its subprocesses?

I also see different store items:

$ ps axf | grep -e -ibus-
> 1141 tty7     Sl     0:00  |           |   \_ /gnu/store/a7lxf1i35yqil6pxwxhzvr5q3xcqldyq-ibus-1.5.22/bin/ibus-daemon --panel disable -r
--xim
> 1146 tty7     Sl     0:00  |           |       \_ /gnu/store/7m04iv3pks6m6p8czw1mj58194rnfjyy-ibus-1.5.22/libexec/ibus-dconf
> 1269 tty7     Sl     0:00  |           |       \_ /gnu/store/7m04iv3pks6m6p8czw1mj58194rnfjyy-ibus-1.5.22/libexec/ibus-engine-simple
> 1148 tty7     Sl     0:00 /gnu/store/a7lxf1i35yqil6pxwxhzvr5q3xcqldyq-ibus-1.5.22/libexec/ibus-x11 --kill-daemon
> 25649 pts/5    S+     0:00      \_ grep --color=auto -e -ibus-

FWIW, this is on MATE.  (TODO to self: investigate why GNOME Shell crashes
after a few seconds.)

Greetings,
Maxime.

[signature.asc (application/pgp-signature, inline)]

Display info messages

Send a report that this bug log contains spam.

debbugs.gnu.org maintainers <help-debbugs@gnu.org>. Last modified: Sun Dec 22 02:27:07 2024; Machine Name: wallace-server

GNU bug tracking system

Debbugs is free software and licensed under the terms of the GNU Public License version 2. The current version can be obtained from https://bugs.debian.org/debbugs-source/.

#47576 [security] ibus-daemon launches ungrafted subprocesses