[Stable Update] 2021-03-18 - Kernels, Plasma, Frameworks, LibreOffice, Firefox, Systemd

Hmm, interesting so there was something fixed in os-prober that could classify as a vulnerability. The question is if this also is the issue because of which os-prober got disabled in the first place.

@Frog I don’t think all vulnerabilities in grub are solely used to bypass secure boot. There might be other attack vectors here aswell (although I do not know enough about grub to tell you what could be a possible one). Of course a patch to boothole does not make a difference if your system is not using secure boot. That’s one of the reasons I’d like to know what the vulnerability was in the first place.

Maybe someone else can shed more light on this?

There were links to all the information on the grub issues in the 2021-03-08 stable update thread however, here is a link again to a posting from ubuntu on the 8 security issues that are now fixed.

https://wiki.ubuntu.com/SecurityTeam/KnowledgeBase/GRUB2SecureBootBypass2021

Almost all (7 of the 8) have to do with secure boot issues or vulnerabilities that allow the secure boot issue to take place.

1 Like

Solved here: Manjaro KDE - After the last update replaces pulseaudio with pipewire, no more audio volume controls - #19 by ciacnorris

It can’t. I always ended up killing a grub-mount in those cases.

A post was merged into an existing topic: Update requests for packages imported from Arch Linux

This is exactly what I’ve been looking for, must have overlooked it in the other thread. Thank you very much!

Pretty sure you dont need this anymore. None of my XFCE installations have it and my volume keys are working as expected. My guess is that this package is interfering with the way XFCE now handles things. Remove and reboot, see if that helps.

EDIT:
Multimedia keys are now handled by xfce4-pulseaudio-plugin (which sits in the notification area).
If you right click on the notification area icon and select “properties”, you will find an option to toggle this behavior.

1 Like

After this updated I’m facing random issue related to the OS. Suddenly the system lock the mouse, make log off, to black screen and reload the screen in a kind of pixeled image e starts to blink the screen not completing the load bar so it requires me to to push reset bottom.

It was needed to use the my cellphone camera to get an image.

Is there any log I should get information to post here in order to better understand what is happening?

I made the update at 25/mar and this issue happen only two times, been surfing in the internet and playing games with any issue, it’s really happen random and more when like the system is not in issue maybe maybe some issue related to energy management, don’t know.

Regards,

System:
  Kernel: 5.10.23-1-MANJARO x86_64 bits: 64 compiler: gcc v: 10.2.0 
  parameters: BOOT_IMAGE=/boot/vmlinuz-5.10-x86_64 
  root=UUID=dfa33105-8d9e-4555-9174-609a71216485 ro quiet apparmor=1 
  security=apparmor resume=UUID=493ccde5-7f80-4bf5-b22c-98ce796aade6 
  udev.log_priority=3 
  Desktop: KDE Plasma 5.21.3 tk: Qt 5.15.2 wm: kwin_x11 vt: 1 dm: SDDM 
  Distro: Manjaro Linux base: Arch Linux 
Machine:
  Type: Desktop Mobo: Gigabyte model: GA-870A-UD3 v: x.x serial: <filter> 
  BIOS: Award v: F5 date: 08/01/2011 
Memory:
  RAM: total: 7.77 GiB used: 2.93 GiB (37.7%) 
  RAM Report: permissions: Unable to run dmidecode. Root privileges required. 
CPU:
  Info: Quad Core model: AMD Phenom II X4 965 bits: 64 type: MCP arch: K10 
  family: 10 (16) model-id: 4 stepping: 3 microcode: 10000C8 cache: L2: 2 MiB 
  bogomips: 27334 
  Speed: 800 MHz min/max: 800/3400 MHz Core speeds (MHz): 1: 800 2: 800 3: 800 
  4: 2200 
  Flags: 3dnow 3dnowext 3dnowprefetch abm apic clflush cmov cmp_legacy 
  constant_tsc cpuid cr8_legacy cx16 cx8 de extapic extd_apicid fpu fxsr 
  fxsr_opt ht hw_pstate ibs lahf_lm lbrv lm mca mce misalignsse mmx mmxext 
  monitor msr mtrr nonstop_tsc nopl npt nrip_save nx osvw pae pat pdpe1gb pge 
  pni popcnt pse pse36 rdtscp rep_good sep skinit sse sse2 sse4a svm svm_lock 
  syscall tsc vme vmmcall wdt 
  Vulnerabilities: Type: itlb_multihit status: Not affected 
  Type: l1tf status: Not affected 
  Type: mds status: Not affected 
  Type: meltdown status: Not affected 
  Type: spec_store_bypass status: Not affected 
  Type: spectre_v1 
  mitigation: usercopy/swapgs barriers and __user pointer sanitization 
  Type: spectre_v2 
  mitigation: Full AMD retpoline, STIBP: disabled, RSB filling 
  Type: srbds status: Not affected 
  Type: tsx_async_abort status: Not affected 
Graphics:
  Device-1: AMD Ellesmere [Radeon RX 470/480/570/570X/580/580X/590] 
  vendor: Micro-Star MSI driver: amdgpu v: kernel bus-ID: 01:00.0 
  chip-ID: 1002:67df class-ID: 0300 
  Display: x11 server: X.Org 1.20.10 compositor: kwin_x11 driver: 
  loaded: amdgpu,ati unloaded: modesetting,radeon alternate: fbdev,vesa 
  display-ID: :0 screens: 1 
  Screen-1: 0 s-res: 1920x1080 s-dpi: 96 s-size: 508x285mm (20.0x11.2") 
  s-diag: 582mm (22.9") 
  Monitor-1: DVI-D-0 res: 1920x1080 hz: 60 dpi: 96 
  size: 510x290mm (20.1x11.4") diag: 587mm (23.1") 
  OpenGL: renderer: Radeon RX 570 Series (POLARIS10 DRM 3.40.0 
  5.10.23-1-MANJARO LLVM 11.1.0) 
  v: 4.6 Mesa 20.3.4 direct render: Yes 
Audio:
  Device-1: AMD SBx00 Azalia vendor: Gigabyte GA-880GMA-USB3 
  driver: snd_hda_intel v: kernel bus-ID: 00:14.2 chip-ID: 1002:4383 
  class-ID: 0403 
  Device-2: AMD Ellesmere HDMI Audio [Radeon RX 470/480 / 570/580/590] 
  vendor: Micro-Star MSI driver: snd_hda_intel v: kernel bus-ID: 01:00.1 
  chip-ID: 1002:aaf0 class-ID: 0403 
  Sound Server-1: ALSA v: k5.10.23-1-MANJARO running: yes 
  Sound Server-2: JACK v: 0.125.0 running: no 
  Sound Server-3: PulseAudio v: 14.2 running: yes 
  Sound Server-4: PipeWire v: 0.3.23 running: yes 
Network:
  Device-1: Realtek RTL8111/8168/8411 PCI Express Gigabit Ethernet 
  vendor: Gigabyte driver: r8169 v: kernel port: 9e00 bus-ID: 06:00.0 
  chip-ID: 10ec:8168 class-ID: 0200 
  IF: enp6s0 state: up speed: 100 Mbps duplex: full mac: <filter> 
  IP v4: <filter> type: dynamic noprefixroute scope: global 
  broadcast: <filter> 
  IP v6: <filter> type: noprefixroute scope: link 
  WAN IP: <filter> 
Bluetooth:
  Message: No Bluetooth data was found. 
Logical:
  Message: No LVM data was found. 
RAID:
  Message: No RAID data was found. 
Drives:
  Local Storage: total: 2.48 TiB used: 1.83 TiB (73.8%) 
  SMART Message: Unable to run smartctl. Root privileges required. 
  ID-1: /dev/sda maj-min: 8:0 vendor: SanDisk model: SSD PLUS 240GB 
  size: 223.58 GiB block-size: physical: 512 B logical: 512 B speed: 6.0 Gb/s 
  rotation: SSD serial: <filter> rev: 00RL scheme: MBR 
  ID-2: /dev/sdb maj-min: 8:16 vendor: Corsair model: Corsair Force GS 
  size: 119.24 GiB block-size: physical: 512 B logical: 512 B speed: 6.0 Gb/s 
  rotation: SSD serial: <filter> rev: 5.07 scheme: MBR 
  ID-3: /dev/sdc maj-min: 8:32 vendor: Patriot model: Burst size: 223.57 GiB 
  block-size: physical: 512 B logical: 512 B speed: 6.0 Gb/s rotation: SSD 
  serial: <filter> rev: KB.3 scheme: MBR 
  ID-4: /dev/sdd maj-min: 8:48 vendor: Crucial model: CT120BX100SSD1 
  size: 111.79 GiB block-size: physical: 512 B logical: 512 B speed: 6.0 Gb/s 
  rotation: SSD serial: <filter> rev: MU01 scheme: GPT 
  ID-5: /dev/sde maj-min: 8:64 vendor: Western Digital model: WD20PURZ-85GU6Y0 
  size: 1.82 TiB block-size: physical: 4096 B logical: 512 B speed: 6.0 Gb/s 
  rotation: 5400 rpm serial: <filter> rev: 0A80 scheme: MBR 
  Optical-1: /dev/sr0 vendor: HL-DT-ST model: DVDRAM GH22NS50 rev: TN02 
  dev-links: cdrom 
  Features: speed: 48 multisession: yes audio: yes dvd: yes 
  rw: cd-r,cd-rw,dvd-r,dvd-ram state: running 
Partition:
  ID-1: / raw-size: 214.77 GiB size: 210.4 GiB (97.96%) 
  used: 45.82 GiB (21.8%) fs: ext4 dev: /dev/sdc1 maj-min: 8:33 
  label: LINUX-SSD uuid: dfa33105-8d9e-4555-9174-609a71216485 
  ID-2: /home/<filter>/Games raw-size: 111.79 GiB size: 109.47 GiB (97.93%) 
  used: 58.34 GiB (53.3%) fs: ext4 dev: /dev/sdd1 maj-min: 8:49 
  label: LINUX-GAMES uuid: ef7d7ba9-f8da-4419-b9a3-ca9e2232da86 
  ID-3: /home/<filter>/HDD-DATA-2T raw-size: 1.82 TiB size: 1.82 TiB (100.00%) 
  used: 1.73 TiB (95.0%) fs: ntfs dev: /dev/sde1 maj-min: 8:65 label: DATA_2T 
  uuid: 28A6726FA6723CFE 
Swap:
  Kernel: swappiness: 60 (default) cache-pressure: 100 (default) 
  ID-1: swap-1 type: partition size: 8.8 GiB used: 0 KiB (0.0%) priority: -2 
  dev: /dev/sdc2 maj-min: 8:34 label: N/A 
  uuid: 493ccde5-7f80-4bf5-b22c-98ce796aade6 
Unmounted:
  ID-1: /dev/sda1 maj-min: 8:1 size: 100 MiB fs: ntfs label: System Reserved 
  uuid: E680DA2C5F90FD24 
  ID-2: /dev/sda2 maj-min: 8:2 size: 223.48 GiB fs: ntfs label: WIN-SSD 
  uuid: 07492E03A516286B 
  ID-3: /dev/sdb1 maj-min: 8:17 size: 119.24 GiB fs: ntfs label: WIN-GAMES 
  uuid: EAE6EE7DE6EE4A01 
USB:
  Hub-1: 1-0:1 info: Full speed (or root) Hub ports: 5 rev: 2.0 
  speed: 480 Mb/s chip-ID: 1d6b:0002 class-ID: 0900 
  Hub-2: 2-0:1 info: Full speed (or root) Hub ports: 5 rev: 2.0 
  speed: 480 Mb/s chip-ID: 1d6b:0002 class-ID: 0900 
  Hub-3: 3-0:1 info: Full speed (or root) Hub ports: 4 rev: 2.0 
  speed: 480 Mb/s chip-ID: 1d6b:0002 class-ID: 0900 
  Hub-4: 4-0:1 info: Full speed (or root) Hub ports: 5 rev: 1.1 speed: 12 Mb/s 
  chip-ID: 1d6b:0001 class-ID: 0900 
  Hub-5: 5-0:1 info: Full speed (or root) Hub ports: 5 rev: 1.1 speed: 12 Mb/s 
  chip-ID: 1d6b:0001 class-ID: 0900 
  Hub-6: 6-0:1 info: Full speed (or root) Hub ports: 2 rev: 1.1 speed: 12 Mb/s 
  chip-ID: 1d6b:0001 class-ID: 0900 
  Hub-7: 7-0:1 info: Full speed (or root) Hub ports: 4 rev: 1.1 speed: 12 Mb/s 
  chip-ID: 1d6b:0001 class-ID: 0900 
  Device-1: 7-3:2 info: SINO WEALTH USB KEYBOARD type: Keyboard,HID 
  driver: hid-generic,usbhid interfaces: 2 rev: 1.1 speed: 1.5 Mb/s 
  power: 100mA chip-ID: 258a:0001 class-ID: 0300 
  Device-2: 7-4:3 info: Pixart Imaging Optical Mouse type: Mouse 
  driver: hid-generic,usbhid interfaces: 1 rev: 1.1 speed: 1.5 Mb/s 
  power: 100mA chip-ID: 093a:2521 class-ID: 0301 
  Hub-8: 8-0:1 info: Full speed (or root) Hub ports: 2 rev: 2.0 
  speed: 480 Mb/s chip-ID: 1d6b:0002 class-ID: 0900 
  Hub-9: 9-0:1 info: Full speed (or root) Hub ports: 2 rev: 3.0 speed: 5 Gb/s 
  chip-ID: 1d6b:0003 class-ID: 0900 
Sensors:
  System Temperatures: cpu: 39.5 C mobo: N/A gpu: amdgpu temp: 45.0 C 
  Fan Speeds (RPM): N/A gpu: amdgpu fan: 922 
Info:
  Processes: 257 Uptime: 45m wakeups: 0 Init: systemd v: 247 tool: systemctl 
  Compilers: gcc: 10.2.0 Packages: pacman: 1364 lib: 431 flatpak: 0 
  Shell: Bash v: 5.1.0 running-in: yakuake inxi: 3.3.03 

If it’s happening when the system is idle it could be trying to suspend and running into a problem.

Check the settings in ‘System Settings’ > ‘Power Management’ > ‘Energy Saving’

Thanks for this nice update.

After the update of the 8th March and once again after this update, the shortcut Alt + Shift for switching from one keyboard layout to another, does not work any more. To make it working again, I have found a workaround: I have to put the laptop to sleep, and make it wake up from the sleep: after that, it works again from one keyboard to a second one but not to the third and fourth one configured. So I have to put it to sleep two more times, in order to be able to switch between my four different keyboard layouts. Would it be possible to change this small problem, if it would appear after a next update?

Thanks!

Regarding the Power Management, only the screen was configured, the system remains as default.

even before the update, I had problems with assigning rights on the hhd disk, but after the update, the same problems appeared already in the home partition, only a reboot helps
gnome

If someone has a similar problem, I have seen in the meantime that my above posted problem was linked by the deletion of one variant of the keyboard layout that I was using. This deletion was done during an update but the keyboard was broadly functional so that I have noticed later that some keys were not functional as they should be.

So I have choised now an other variant of a keyboard layout and I should not encounter this problem any more.

A post was split to a new topic: After restarting the PC the desktop doesn´t show up

It seems that some of us have problems to connect to password protected samba shares with nautilus, thunar and pcmanfm since samba client upgrade to 4.14 :

Did other people have the same problem ?

2 posts were split to a new topic: Removing python2-dbus breaks dependency ‘python2-dbus’ required by key-mon

The error I mentioned previously looks like a driver error, maybe due to the last 5.10 kernel update I think it was from 5.10.18 to 5.10.23. I just turned my desktop on but after logon I was working on the laptop so the the desktop was basically in idle and the GPU driver present error, maybe when KDE tried to turn the screen off, I can’t precisely confirm for a while because it is the first time I was able to use log file properly. If it’s the driver i’m going to wait the next kernel update to see if it will be fixed.


Looks like today (April 9) should be another one stable update (size of download is 1.3GB), but I don’t see any announcement. Maybe that is a mistake so I will just wait while it is announced officially.

I updated 3 non-essential machines already and everything went fine :wink: 2 x Intel video laptop with kernel 5.10 and Cinnamon DE, 1 x Nvidia video desktop with kernel 5.10 and Cinnamon DE.

I am holding off on the essential machines until the announcement has been published.