Bug 27121 - Keepass crashes at startup
Summary: Keepass crashes at startup
Status: RESOLVED FIXED
Alias: None
Product: Mageia
Classification: Unclassified
Component: RPM Packages (show other bugs)
Version: Cauldron
Hardware: All Linux
Priority: Normal critical
Target Milestone: ---
Assignee: Matteo Pasotti
QA Contact:
URL:
Whiteboard:
Keywords:
Depends on:
Blocks:
 
Reported: 2020-08-15 18:46 CEST by Cyril Levet
Modified: 2020-08-29 20:38 CEST (History)
2 users (show)

See Also:
Source RPM: keepass-2.45-1.mga8.src.rpm
CVE:
Status comment:


Attachments
Keepass crash log (5.44 KB, text/plain)
2020-08-15 18:46 CEST, Cyril Levet
Details
Automaticaly generated mono crash log (19.68 KB, application/json)
2020-08-15 18:47 CEST, Cyril Levet
Details

Description Cyril Levet 2020-08-15 18:46:06 CEST
Description of problem: Launching keepass leads to a fatal error with core dumped. According to the log it may be mono related


Version-Release number of selected component (if applicable): keepass-2.45-1 mono-5.20.1.34


How reproducible: Always


Steps to Reproduce:
1. Install keepass
2. Launch keepass
Comment 1 Cyril Levet 2020-08-15 18:46:52 CEST
Created attachment 11806 [details]
Keepass crash log
Comment 2 Cyril Levet 2020-08-15 18:47:37 CEST
Created attachment 11807 [details]
Automaticaly generated mono crash log
Comment 3 Morgan Leijström 2020-08-17 00:42:06 CEST
Not for solving the bug but as a workaround to get to your passwords: you may want to try keepassxc, the community fork, which we also have in Mageia, and better supported on more OS.

CC: (none) => fri

Comment 4 Lewis Smith 2020-08-17 21:40:37 CEST
+ keepassx... (& we list keepassx2, but there is no sign of this). Looks a worms nest. Maybe we could drop something here.
Thank you Cyril for reporting this; and Morgan for his comment.

Assigning this to guillomovitch as the maintainer for 'keepass'.

Assignee: bugsquad => guillomovitch

Comment 5 Guillaume Rousse 2020-08-17 22:05:15 CEST
I don't have much mono skill, and I don't use keepass anymore, as it is a PITA to maintain.
Comment 6 Cyril Levet 2020-08-17 22:24:45 CEST
I have seen that it exists other alternatives like keepassXC. But keepass was the only one that has been certified by french ANSI certification. Its forks have not been certified. 

But if there are unsolvable problem with mono I will switch to keepassXC. It's not a big deal. 

I think keepassx is a dead project and should be removed from Mageia repository. It can contains security flaws ans it is very important for a password manager to be updated. Only keepassXC (and keepass) should be usable.
Comment 7 Guillaume Rousse 2020-08-17 22:42:03 CEST
The only keepass version to have been certified was KeePass 2.10, portable version, for Windows XP and 7:
https://www.ssi.gouv.fr/uploads/IMG/cspn/anssi-cspn-cible_2010-07fr.pdf

And certification is merely a regulatory issue. Unless you're working in a constrained environment, it's unlikely to have any real interest.
Comment 8 Cyril Levet 2020-08-17 22:48:09 CEST
(In reply to Guillaume Rousse from comment #7)
> The only keepass version to have been certified was KeePass 2.10, portable
> version, for Windows XP and 7:
> https://www.ssi.gouv.fr/uploads/IMG/cspn/anssi-cspn-cible_2010-07fr.pdf
> 
> And certification is merely a regulatory issue. Unless you're working in a
> constrained environment, it's unlikely to have any real interest.

Yes I know that it is the only version that has been certified. But I have assisted at several talk by ANSI about security in a previous job and they continues to promote using Keepass as a password manager. And they say they use Keepass themselves.

But as I have written, if it is decided to delete keepass because it is too difficult to maintain I will switch with KeepassXC.
Comment 9 Morgan Leijström 2020-08-18 10:27:44 CEST
(In reply to Cyril Levet from comment #6)
> I think keepassx is a dead project and should be removed from Mageia
> repository. It can contains security flaws ans it is very important for a
> password manager to be updated. Only keepassXC (and keepass) should be
> usable.

Bug 22033 - KeePassX / KeePassX2 are unmaintained; switch to forked KeePassXC ?
Comment 10 Cyril Levet 2020-08-19 15:29:01 CEST
Similar bug in Debian bug tracker : https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=966812
Guillaume Rousse 2020-08-22 18:43:28 CEST

Assignee: guillomovitch => bugsquad

Comment 11 Aurelien Oudelet 2020-08-22 18:58:23 CEST
Assigning to mono registered packager, for further notice.

Assignee: bugsquad => matteo.pasotti
CC: (none) => ouaurelien

Comment 12 Matteo Pasotti 2020-08-29 17:25:47 CEST
I tried to reproduce it on a fresh cauldron running LXQT and it seems to properly work there.
Can you tell me please which DE are you using?

You could also install gdb to try enrich the keepass crash log.

Thanks for your report
Comment 13 Matteo Pasotti 2020-08-29 17:34:37 CEST
Also tell us which version of libx11 is installed on your system, pls.
Comment 14 Cyril Levet 2020-08-29 20:38:44 CEST
I use Gnome desktop. Now it works with the last updates. But I have no idea which update fix the problem.

So it is fixed.

Status: NEW => RESOLVED
Resolution: (none) => FIXED


Note You need to log in before you can comment on or make changes to this bug.