[Stable Update] 2019-07-17 - Kernels, KDE, Browsers, Systemd, Octopi, LibreOffice

Flawless update as usual, but question what does this mean? I have LUKS enabled, is there anything I have to do or was this done automatically for me?

1 Like

have you tried installing an override with systemctl edit sys-fs-fuse-connections.mount instead?

[Unit]
StartLimitBurst=
StartLimitBurst=10

Here's the CVE:

Calamares versions 3.1 through 3.2.10 copies a LUKS encryption keyfile from /crypto_keyfile.bin (mode 0600 owned by root) to /boot within a globally readable initramfs image with insecure permissions, which allows this originally protected file to be read by any user, thereby disclosing decryption keys for LUKS containers created with Full Disk Encryption.

So I would suggest looking for keyfiles in your /boot and /boot/initramfs*.img (gzip, can be opened with mc on CLI).

I am not exactly sure which install scenario (and why the hell) actually requires a keyfile there though...

Hi. I couldn't install the update.. :frowning:
Here's the output of pamac.

:: Synchronizing package databases...
core                               149.1 KiB  3.64M/s 00:00 [################################] 100%
extra                             1754.5 KiB  5.65M/s 00:00 [################################] 100%
community                            5.3 MiB  5.54M/s 00:01 [################################] 100%
multilib                           183.7 KiB  4.85M/s 00:00 [################################] 100%
:: Starting full system upgrade...
:: Replace ttf-freefont with extra/gnu-free-fonts? [Y/n] y
resolving dependencies...
looking for conflicting packages...

Packages (89) bzip2-1.0.8-1.1  ca-certificates-mozilla-3.45-1  code-1.36.0-1  cpupower-5.2-1
             dnsmasq-2.80-4  dunst-1.4.1-2  dunstify-1.4.1-2  enchant-2.2.4-1
             evolution-data-server-3.32.4-1  flatpak-1.4.2-1  glib2-2.60.5-1
             gnome-shell-1:3.32.2+6+g8b9874089-1  gnu-free-fonts-20120503-6  gnutls-3.6.8-3
             go-2:1.12.7-1  gst-plugins-bad-1.16.0-4  guile-2.2.6-1  iana-etc-20190702-1
             intel-tbb-2019.8-1  iproute2-5.2.0-1  iso-codes-4.3-1  js60-60.8.0-1  kauth-5.60.0-1
             kcoreaddons-5.60.0-1  kitemmodels-5.60.0-1  kwindowsystem-5.60.0-1  ldb-1:1.5.5-1
             lib32-bzip2-1.0.8-1  lib32-glib2-2.60.5-1  lib32-gnutls-3.6.8-2
             lib32-libpciaccess-0.15-1  lib32-mesa-19.1.2-1  lib32-nettle-3.5.1-1  libev-4.27-1
             libice-1.0.10-1  libpciaccess-0.15-1  libreoffice-fresh-6.2.5-1
             libsynctex-2019.51075-2  libteam-1.29-1  libwbclient-4.10.6-1  libwebp-1.0.3-1
             linux51-5.1.18-1  linux51-bbswitch-0.8-17  linux51-headers-5.1.18-1
             linux51-nvidia-1:430.26-9  lollypop-1.1.4.2-1  lv2-1.16.0-2  mesa-19.1.2-1
             mutter-3.32.2+40+gccab0f470-1  nettle-3.5.1-1  node-gyp-5.0.2-1
             noto-fonts-20190111-2  npm-6.10.1-1  nss-3.45-1  os-prober-1.77-1  pamac-cli-8.0.3-3
             pamac-common-8.0.3-3  pamac-gtk-8.0.3-3  papirus-icon-theme-20190708-1
             poppler-0.78.0-1  poppler-glib-0.78.0-1  pyqt5-common-5.13.0-1  pyside2-5.13.0-2
             python-pillow-6.1.0-1  python-pyqt5-5.13.0-1  python-shiboken2-5.13.0-3
             python-sip-pyqt5-4.19.18-1  qemu-4.0.0-3  qemu-arch-extra-4.0.0-3
             qt5-webengine-5.13.0-2  rtmpdump-1:2.4.r96.fa8646d-5  samba-4.10.6-1
             smbclient-4.10.6-1  sqlite-3.29.0-1  stoken-0.92-3  systemd-242.32-3.1
             systemd-libs-242.32-3.1  systemd-sysvcompat-242.32-3.1  totem-3.32.1-1
             ttf-droid-20121017-7  ttf-freefont-20120503-5 [removal]  ttf-liberation-2.00.5-2
             wget-1.20.3-2  wine-4.12.1-1  xorg-server-1.20.5-2  xorg-server-common-1.20.5-2
             xorg-server-xwayland-1.20.5-2  xorg-setxkbmap-1.3.2-1  xorg-xauth-1.1-1

Total Installed Size:  3107.42 MiB
Net Upgrade Size:        -5.69 MiB

:: Proceed with installation? [Y/n] y
(88/88) checking keys in keyring                             [################################] 100%
(88/88) checking package integrity                           [################################] 100%
(88/88) loading package files                                [################################] 100%
(88/88) checking for file conflicts                          [################################] 100%
error: failed to commit transaction (conflicting files)
npm: /usr/lib/node_modules/npm/node_modules/call-limit/CHANGELOG.md exists in filesystem
npm: /usr/lib/node_modules/npm/node_modules/call-limit/LICENSE exists in filesystem
npm: /usr/lib/node_modules/npm/node_modules/cross-spawn/node_modules/lru-cache/LICENSE exists in filesystem
npm: /usr/lib/node_modules/npm/node_modules/cross-spawn/node_modules/lru-cache/README.md exists in filesystem
npm: /usr/lib/node_modules/npm/node_modules/cross-spawn/node_modules/lru-cache/index.js exists in filesystem
npm: /usr/lib/node_modules/npm/node_modules/cross-spawn/node_modules/lru-cache/package.json exists in filesystem
npm: /usr/lib/node_modules/npm/node_modules/cross-spawn/node_modules/yallist/LICENSE exists in filesystem
npm: /usr/lib/node_modules/npm/node_modules/cross-spawn/node_modules/yallist/README.md exists in filesystem
npm: /usr/lib/node_modules/npm/node_modules/cross-spawn/node_modules/yallist/iterator.js exists in filesystem
npm: /usr/lib/node_modules/npm/node_modules/cross-spawn/node_modules/yallist/package.json exists in filesystem
npm: /usr/lib/node_modules/npm/node_modules/cross-spawn/node_modules/yallist/yallist.js exists in filesystem
npm: /usr/lib/node_modules/npm/node_modules/env-paths/index.js exists in filesystem
npm: /usr/lib/node_modules/npm/node_modules/env-paths/license exists in filesystem
npm: /usr/lib/node_modules/npm/node_modules/env-paths/package.json exists in filesystem
npm: /usr/lib/node_modules/npm/node_modules/env-paths/readme.md exists in filesystem
npm: /usr/lib/node_modules/npm/node_modules/libnpmconfig/node_modules/p-limit/index.d.ts exists in filesystem
npm: /usr/lib/node_modules/npm/node_modules/libnpmconfig/node_modules/p-try/index.d.ts exists in filesystem
npm: /usr/lib/node_modules/npm/node_modules/libnpmsearch/.travis.yml exists in filesystem
npm: /usr/lib/node_modules/npm/node_modules/libnpmsearch/appveyor.yml exists in filesystem
npm: /usr/lib/node_modules/npm/node_modules/npm-registry-fetch/node_modules/make-fetch-happen/CHANGELOG.md exists in filesystem
npm: /usr/lib/node_modules/npm/node_modules/npm-registry-fetch/node_modules/make-fetch-happen/LICENSE exists in filesystem
npm: /usr/lib/node_modules/npm/node_modules/npm-registry-fetch/node_modules/make-fetch-happen/README.md exists in filesystem
npm: /usr/lib/node_modules/npm/node_modules/npm-registry-fetch/node_modules/make-fetch-happen/agent.js exists in filesystem
npm: /usr/lib/node_modules/npm/node_modules/npm-registry-fetch/node_modules/make-fetch-happen/cache.js exists in filesystem
npm: /usr/lib/node_modules/npm/node_modules/npm-registry-fetch/node_modules/make-fetch-happen/index.js exists in filesystem
npm: /usr/lib/node_modules/npm/node_modules/npm-registry-fetch/node_modules/make-fetch-happen/package.json exists in filesystem
npm: /usr/lib/node_modules/npm/node_modules/npm-registry-fetch/node_modules/make-fetch-happen/warning.js exists in filesystem
npm: /usr/lib/node_modules/npm/node_modules/split-on-first/index.d.ts exists in filesystem
npm: /usr/lib/node_modules/npm/node_modules/split-on-first/index.js exists in filesystem
npm: /usr/lib/node_modules/npm/node_modules/split-on-first/license exists in filesystem
npm: /usr/lib/node_modules/npm/node_modules/split-on-first/package.json exists in filesystem
npm: /usr/lib/node_modules/npm/node_modules/split-on-first/readme.md exists in filesystem
Errors occurred, no packages were upgraded.

Please use forum search.

Check the offending dirs with pacman -Qo and trash them.

Oh and stop running npm install -g

3 Likes

Thanks :smile:
But, where should I put my node_modules ? :thinking:

Normally you put them in your project dir? I.e. npm install --save

There should be a pacman package if that's a CLI tool we are talking about. If there isn't one, you might as well create it on AUR yourself :slight_smile:

:man_shrugging: This is just generic guidance to prevent such issues in the future.

1 Like

Gnome edition 18.1.0-rc5 (stable) is now online.

seed, people, seed :smiley:

1 Like

no, there's no tracker.

1 Like

But... There is. I'm currently connected to it.

oh! @philm, is there a new tracker?

Pretty sure. I even got a seeder other than osdn (Ty)

pi-hole-ftl (AUR) needed rebuild due to upgrade of nettle to 3.5.1-1

Otherwise flawless as ever, MATE, kernel 5.1

1 Like

Updated without problems, Manjaro KDE. Thanks!

No issues for me. I updated two XFCE systems (my third one will wait until August because it is in another country). I have the Snap Store loaded on my Macbook. It works somewhat well, but at times is a little slow.

Smooth as silk update over here :ok_hand:
XFCE
linux419

plasma, octopi same problem as 0.9.0-9 to 0.9.0-11 menu in english and no possible to choose terminal
ufw.service got disable after reboot, have to enable the service and to restart two time to have it enable

Strange thing; I installed the 5.2 kernel after installing the updates. The module linux52-tp_smapi is installed, however I don't actually see the module in /usr/lib/modules/extramodules-5.2-MANJARO. The linux51-tp_smapi module is in the respective directory for 5.1 however. I tried reinstalling it and the result is the same. Any thoughts here?

No issues here. But could the announcements be on the notification? so I don't miss it.

Thank you

Forum kindly sponsored by Bytemark