Bug 29359 - qtbase5 version detection of mysql broken with MariaDB 10.6
Summary: qtbase5 version detection of mysql broken with MariaDB 10.6
Status: RESOLVED FIXED
Alias: None
Product: Mageia
Classification: Unclassified
Component: Security (show other bugs)
Version: 8
Hardware: All Linux
Priority: High critical
Target Milestone: ---
Assignee: QA Team
QA Contact: Sec team
URL:
Whiteboard: MGA8-32-OK MGA8-64-OK
Keywords: advisory, validated_update
: 31568 31577 (view as bug list)
Depends on:
Blocks: 31545
  Show dependency treegraph
 
Reported: 2021-08-11 21:06 CEST by Aurelian R
Modified: 2023-02-20 22:26 CET (History)
14 users (show)

See Also:
Source RPM: qtbase5-5.15.2-4.5.mga8.src.rpm
CVE: CVE-2022-25255 CVE-2023-24607
Status comment:


Attachments
QtBase5 patch (2.43 KB, application/mbox)
2021-08-11 21:06 CEST, Aurelian R
Details
spec file (87.25 KB, text/plain)
2021-10-04 12:28 CEST, Aurelian R
Details

Description Aurelian R 2021-08-11 21:06:51 CEST
Created attachment 12898 [details]
QtBase5 patch

MariaDB 10.6 changed the mysql_get_client_version output to return the library version (30200 as of 10.6.3) instead of the server version.
QtBase5 bug link: https://bugreports.qt.io/browse/QTBUG-95071
This bug seems to be fixed in versions 5.15.6, 6.2.0 Beta3 of QtBase5
Link to patch that fixes it:
https://codereview.qt-project.org/gitweb?p=qt%2Fqtbase.git;a=commit;h=211369133cf40b2f522caaff259c19069ed23ca4

Attached is the patch mentioned in the above link adapted against qtbase5-5.15.2-10.mga9.src.rpm that fixes the issue.
I could not retrieve emails from imap.gmail.com until qtbase5 wasn't patched. Once patched, installed and rebooted the system I was able to retrieve the emails with Kmail.    

Observed journalctl errors in Cauldron while trying to retrieve emails from imap.gmail.com with Kmail:

Aug 11 20:18:52 akonadi_imap_resource[7271]: org.kde.pim.imapresource: Detected inconsistency in local cache, we're missing some messages. Server:  38  Local:  0
Aug 11 20:18:52 akonadi_imap_resource[7271]: org.kde.pim.imapresource: Refetching complete mailbox.
Aug 11 20:18:52 akonadiserver[7182]: org.kde.pim.akonadiserver: DATABASE ERROR:
Aug 11 20:18:52 akonadiserver[7182]: org.kde.pim.akonadiserver:   Error code: "1292"
Aug 11 20:18:52 akonadiserver[7182]: org.kde.pim.akonadiserver:   DB error:  "Incorrect datetime value: '2021-08-11T17:18:52Z' for column `akonadi`.`pimitemtable`.`datetime` at row 1"
Aug 11 20:18:52 akonadiserver[7182]: org.kde.pim.akonadiserver:   Error text: "Incorrect datetime value: '2021-08-11T17:18:52Z' for column `akonadi`.`pimitemtable`.`datetime` at row 1 QMYSQL: Unable to execute query"
Aug 11 20:18:52 akonadiserver[7182]: org.kde.pim.akonadiserver:   Values: QMap((":0", QVariant(int, 0))(":1", QVariant(QString, "1"))(":2", QVariant(QString, ""))(":3", QVariant(QString, ""))(":4", QVariant(qlonglong, 26))(":5", QVariant(qlonglong, 6))(":6", QVariant(QDateTime, QDateTime(2021-08-11 17:18:52.791 UTC Qt::UTC)))(":7", QVariant(QDateTime, QDateTime(2021-08-11 17:18:52.790 UTC Qt::UTC)))(":8", QVariant(bool, false))(":9", QVariant(qlonglong, 54921)))
Aug 11 20:18:52 akonadiserver[7182]: org.kde.pim.akonadiserver:   Query: "INSERT INTO PimItemTable (rev, remoteId, remoteRevision, gid, collectionId, mimeTypeId, datetime, atime, dirty, size) VALUES (:0, :1, :2, :3, :4, :5, :6, :7, :8, :9)"
Aug 11 20:18:52 akonadiserver[7182]: org.kde.pim.akonadiserver: Error during insertion into table "PimItemTable" "Incorrect datetime value: '2021-08-11T17:18:52Z' for column `akonadi`.`pimitemtable`.`datetime` at row 1 QMYSQL: Unable to execute query"
Aug 11 20:18:52 akonadiserver[7182]: org.kde.pim.akonadiserver: Error while handling command CreateItem on connection akonadi_imap_resource_1 (0x23896e0)
Aug 11 20:18:52 akonadi_imap_resource[7271]: org.kde.pim.akonadicore: ""
Aug 11 20:18:52 akonadi_imap_resource[7271]: org.kde.pim.akonadicore: Creating/updating items from the akonadi database failed: "Failed to append item"
Aug 11 20:18:52 akonadi_imap_resource[7271]: org.kde.pim.akonadicore: Error during ItemSync:  "Failed to append item"

Regards.
Comment 1 Lewis Smith 2021-08-11 21:18:05 CEST
Thank you for the detailed report and all its references; and this:
> Attached is the patch mentioned in the above link adapted
> against qtbase5-5.15.2-10.mga9.src.rpm that fixes the issue.
Assigning to NicolasL (registered maintainer); CC'ing DavidG who has also done recent patches.

CC: (none) => geiger.david68210
Assignee: bugsquad => mageia

Curtis Hildebrand 2021-08-16 21:51:01 CEST

CC: (none) => curtis_mageia

Cristian Pîrîu 2021-08-17 12:34:28 CEST

CC: (none) => office

Comment 2 Cristian Pîrîu 2021-09-03 16:12:47 CEST
This annoying bug is still present.
Thomas Bigot 2021-09-09 17:00:01 CEST

CC: (none) => thomas.bigot

Comment 3 Cristian Pîrîu 2021-09-16 12:34:08 CEST
At the risk of becoming annoying, can someone solve this bug, please.
Comment 4 Nicolas Lécureuil 2021-09-16 15:52:30 CEST
thank you, i will take a look to this.
Comment 5 Cristian Pîrîu 2021-10-04 08:12:00 CEST
Bug is still present with qtbase5 5.15.2-11.mga9 version.
Comment 6 Aurelian R 2021-10-04 12:28:38 CEST
Created attachment 12938 [details]
spec file

(In reply to Cristian Pîrîu from comment #5)
> Bug is still present with qtbase5 5.15.2-11.mga9 version.

If you like to apply the patch for your system I attached the spec file for this package. To generate the rpm packages you need rpmbuild installed, the source package ( https://distrib-coffee.ipsl.jussieu.fr/pub/linux/Mageia/distrib/cauldron/SRPMS/core/release/qtbase5-5.15.2-11.mga9.src.rpm ) and the files attached to this thread(qtbase-QTBUG-95071.patch, qtbase5.spec).
For a default rpmbuild setup (https://wiki.mageia.org/en/Packaging_for_beginners), the steps to build are:
# rpm -i qtbase5-5.15.2-11.mga9.src.rpm
# cp qtbase-QTBUG-95071.patch ~/rpmbuild/SOURCES
# cp qtbase5.spec ~/rpmbuild/SPECS
# cd ~/rpmbuild
# sudo urpmi --buildrequires SPECS/qtbase5.spec
# rpmbuild -ba SPECS/qtbase5.spec

From all the rpm packages generated in ~/rpmbuild/RPMS, on my system, I needed to install these:
sudo urpmi qtbase5-common-5.15.2-11.mga9X.x86_64.rpm \
   lib64qt5-database-plugin-ibase-5.15.2-11.mga9X.x86_64.rpm \
   lib64qt5-database-plugin-mysql-5.15.2-11.mga9X.x86_64.rpm \
   lib64qt5-database-plugin-odbc-5.15.2-11.mga9X.x86_64.rpm \
   lib64qt5-database-plugin-pgsql-5.15.2-11.mga9X.x86_64.rpm \
   lib64qt5-database-plugin-sqlite-5.15.2-11.mga9X.x86_64.rpm \
   lib64qt5-database-plugin-tds-5.15.2-11.mga9X.x86_64.rpm \
   lib64qt5dbus5-5.15.2-11.mga9X.x86_64.rpm \
   lib64qt5eglfskmssupport5-5.15.2-11.mga9X.x86_64.rpm \
   lib64qt5gui5-5.15.2-11.mga9X.x86_64.rpm \
   lib64qt5network5-5.15.2-11.mga9X.x86_64.rpm \
   lib64qt5opengl5-5.15.2-11.mga9X.x86_64.rpm \
   lib64qt5printsupport5-5.15.2-11.mga9X.x86_64.rpm \
   lib64qt5sql5-5.15.2-11.mga9X.x86_64.rpm \
   lib64qt5widgets5-5.15.2-11.mga9X.x86_64.rpm \
   lib64qt5xml5-5.15.2-11.mga9X.x86_64.rpm

This is a hack as I see it, hence *mga9X*, (mageia's devs will see it as such too :) ), so it may have unintended consequences thou my system doesn't seem to, just thread carefully.
P.S. One can almost always easily revert to official rpms ( urpmi --downgrade qtbase5-common-5.15.2-11.mga9 )
Regards
Comment 7 Nicolas Lécureuil 2021-10-04 15:59:58 CEST
patch just added into cauldron.

Will be available in some hours.
Comment 8 Aurelian R 2021-10-04 20:16:07 CEST
Installed the latest qtbase5 rpms( in fact I had to replace my rpms and to reboot the system). 

$ rpm -qa --last 
lib64qt5xml5-5.15.2-12.mga9.x86_64            Mon 04 Oct 2021 08:54:45 PM EEST
lib64qt5widgets5-5.15.2-12.mga9.x86_64        Mon 04 Oct 2021 08:54:45 PM EEST
lib64qt5sql5-5.15.2-12.mga9.x86_64            Mon 04 Oct 2021 08:54:45 PM EEST
lib64qt5printsupport5-5.15.2-12.mga9.x86_64   Mon 04 Oct 2021 08:54:45 PM EEST
lib64qt5opengl5-5.15.2-12.mga9.x86_64         Mon 04 Oct 2021 08:54:45 PM EEST
lib64qt5network5-5.15.2-12.mga9.x86_64        Mon 04 Oct 2021 08:54:45 PM EEST
lib64qt5gui5-5.15.2-12.mga9.x86_64            Mon 04 Oct 2021 08:54:45 PM EEST
lib64qt5eglfskmssupport5-5.15.2-12.mga9.x86_64 Mon 04 Oct 2021 08:54:45 PM EEST
lib64qt5dbus5-5.15.2-12.mga9.x86_64           Mon 04 Oct 2021 08:54:45 PM EEST
lib64qt5-database-plugin-tds-5.15.2-12.mga9.x86_64 Mon 04 Oct 2021 08:54:45 PM EEST
lib64qt5-database-plugin-sqlite-5.15.2-12.mga9.x86_64 Mon 04 Oct 2021 08:54:45 PM EEST
lib64qt5-database-plugin-pgsql-5.15.2-12.mga9.x86_64 Mon 04 Oct 2021 08:54:45 PM EEST
lib64qt5-database-plugin-odbc-5.15.2-12.mga9.x86_64 Mon 04 Oct 2021 08:54:45 PM EEST
lib64qt5-database-plugin-mysql-5.15.2-12.mga9.x86_64 Mon 04 Oct 2021 08:54:45 PM EEST
lib64qt5-database-plugin-ibase-5.15.2-12.mga9.x86_64 Mon 04 Oct 2021 08:54:45 PM EEST
qtbase5-common-5.15.2-12.mga9.x86_64          Mon 04 Oct 2021 08:47:13 PM EEST

Successfully tested Kmail to send/receive emails using imap.gmail.com.

From my side this bug should be closed as resolved.
Best regards.
Comment 9 Cristian Pîrîu 2021-10-05 08:08:42 CEST
I can confirm that everything is working as expected, thank you.
Comment 10 papoteur 2021-10-08 13:58:34 CEST
Hello,
Is Mageia 8 affected by this bug?

CC: (none) => yves.brungard_mageia

Comment 11 papoteur 2021-10-08 14:00:29 CEST
>Is Mageia 8 affected by this bug?
I presume that no, because Mageia 8 has Mariadb 10.5
Comment 12 Nicolas Lécureuil 2021-10-08 15:05:22 CEST
i think it can't hurt to add the patch, because if we update mariadb version ( which can happen ) we will hit this bug

wdyt ?
Comment 13 papoteur 2023-02-17 07:43:25 CET
MariaDB has been updated to 10.6 and this bug exploded in Mageia 8.
I applied the fix in Updates testing.
New rpm are :

qtbase5-examples-5.15.2-4.6.mga8
lib64qt5linuxaccessibilitysupport-static-devel-5.15.2-4.6.mga8
lib64qt5themesupport-static-devel-5.15.2-4.6.mga8
lib64qt5inputsupport-static-devel-5.15.2-4.6.mga8
lib64qt5gui5-5.15.2-4.6.mga8
qtbase5-common-devel-5.15.2-4.6.mga8
lib64qt5widgets5-5.15.2-4.6.mga8
lib64qt5fbsupport-static-devel-5.15.2-4.6.mga8
lib64qt5gui-devel-5.15.2-4.6.mga8
lib64qt5fontdatabasesupport-static-devel-5.15.2-4.6.mga8
lib64qt5core5-5.15.2-4.6.mga8
lib64qt5core-devel-5.15.2-4.6.mga8
lib64qt5opengl-devel-5.15.2-4.6.mga8
lib64qt5kmssupport-static-devel-5.15.2-4.6.mga8
lib64qt5eglsupport-static-devel-5.15.2-4.6.mga8
lib64qt5eventdispatchersupport-static-devel-5.15.2-4.6.mga8
lib64qt5platformcompositorsupport-static-devel-5.15.2-4.6.mga8
lib64qt5vulkansupport-static-devel-5.15.2-4.6.mga8
lib64qt5widgets-devel-5.15.2-4.6.mga8
lib64qt5devicediscoverysupport-static-devel-5.15.2-4.6.mga8
lib64qt5xkbcommonsupport-static-devel-5.15.2-4.6.mga8
lib64qt5servicesupport-static-devel-5.15.2-4.6.mga8
lib64qt5xcbqpa5-5.15.2-4.6.mga8
qtbase5-common-5.15.2-4.6.mga8
lib64qt5network5-5.15.2-4.6.mga8
lib64qt5edid-devel-5.15.2-4.6.mga8
lib64qt5eglfsdeviceintegration5-5.15.2-4.6.mga8
lib64qt5accessibilitysupport-static-devel-5.15.2-4.6.mga8
lib64qt5test-devel-5.15.2-4.6.mga8
lib64qt5dbus5-5.15.2-4.6.mga8
lib64qt5glxsupport-static-devel-5.15.2-4.6.mga8
lib64qt5printsupport5-5.15.2-4.6.mga8
lib64qt5network-devel-5.15.2-4.6.mga8
lib64qt5opengl5-5.15.2-4.6.mga8
lib64qt5sql5-5.15.2-4.6.mga8
lib64qt5xml5-5.15.2-4.6.mga8
lib64qt5test5-5.15.2-4.6.mga8
lib64qt5-database-plugin-odbc-5.15.2-4.6.mga8
lib64qt5eglfskmssupport5-5.15.2-4.6.mga8
lib64qt5dbus-devel-5.15.2-4.6.mga8
lib64qt5-database-plugin-ibase-5.15.2-4.6.mga8
lib64qt5printsupport-devel-5.15.2-4.6.mga8
lib64qt5-database-plugin-pgsql-5.15.2-4.6.mga8
lib64qt5sql-devel-5.15.2-4.6.mga8
lib64qt5concurrent-devel-5.15.2-4.6.mga8
lib64qt5xml-devel-5.15.2-4.6.mga8
lib64qt5eglfsdeviceintegration-devel-5.15.2-4.6.mga8
lib64qt5platformsupport-devel-5.15.2-4.6.mga8
lib64qt5-database-plugin-tds-5.15.2-4.6.mga8
lib64qt5-database-plugin-sqlite-5.15.2-4.6.mga8
lib64qt5-database-plugin-mysql-5.15.2-4.6.mga8
lib64qt5base5-devel-5.15.2-4.6.mga8
lib64qt5eglfskmssupport-devel-5.15.2-4.6.mga8
lib64qt5xcbqpa-devel-5.15.2-4.6.mga8
lib64qt5concurrent5-5.15.2-4.6.mga8
lib64qt5bootstrap-static-devel-5.15.2-4.6.mga8
qtbase5-doc-5.15.2-4.6.mga8.noarch.rpm

For info, the patch applied is:
https://codereview.qt-project.org/c/qt/qtbase/+/363883

Priority: Normal => High
Version: Cauldron => 8
Severity: normal => critical
Source RPM: qtbase5-5.15.2-10.mga9.src.rpm => qtbase5-5.15.2-4.5.mga8.src.rpm
Assignee: mageia => qa-bugs

Comment 14 Morgan Leijström 2023-02-17 10:09:03 CET
mga8 -64 Plasma

I have not noticed problems before, but I don't use Kmail (nor akonadi)

Clean update, reboot, and have not noticed any problems since (just an hour normal use of LibreOffice, Thunderbird...)

Updated the 18 relevant packages this system had, to:

- lib64qt5-database-plugin-ibase-5.15.2-4.6.mga8.x86_64
- lib64qt5-database-plugin-mysql-5.15.2-4.6.mga8.x86_64
- lib64qt5-database-plugin-sqlite-5.15.2-4.6.mga8.x86_64
- lib64qt5concurrent5-5.15.2-4.6.mga8.x86_64
- lib64qt5core5-5.15.2-4.6.mga8.x86_64
- lib64qt5dbus5-5.15.2-4.6.mga8.x86_64
- lib64qt5eglfsdeviceintegration5-5.15.2-4.6.mga8.x86_64
- lib64qt5eglfskmssupport5-5.15.2-4.6.mga8.x86_64
- lib64qt5gui5-5.15.2-4.6.mga8.x86_64
- lib64qt5network5-5.15.2-4.6.mga8.x86_64
- lib64qt5opengl5-5.15.2-4.6.mga8.x86_64
- lib64qt5printsupport5-5.15.2-4.6.mga8.x86_64
- lib64qt5sql5-5.15.2-4.6.mga8.x86_64
- lib64qt5test5-5.15.2-4.6.mga8.x86_64
- lib64qt5widgets5-5.15.2-4.6.mga8.x86_64
- lib64qt5xcbqpa5-5.15.2-4.6.mga8.x86_64
- lib64qt5xml5-5.15.2-4.6.mga8.x86_64
- qtbase5-common-5.15.2-4.6.mga8.x86_64

CC: (none) => fri

Comment 15 Jybz 2023-02-17 12:16:31 CET
Hello,

after updating:
> urpmi --nokeep --downgrade --media "Core Updates Testing" lib64qt5sql5-5.15.2-4.6.mga8 lib64qt5-database-plugin-mysql-5.15.2-4.6.mga8
I manage to send and receive my sent email on qa-discuss mailing list.
> https://ml.mageia.org/l/arc/qa-discuss/2023-02/msg00257.html

Can be pushed to Core Updates

CC: (none) => j.biernacki+mga

Comment 16 Jybz 2023-02-17 13:19:45 CET
I just update the whole list except doc, session still reboots.
Comment 17 Morgan Leijström 2023-02-17 13:27:52 CET
Clarification for others: Jybz have earlier updated by other methods, therefore the downgrade.

(In reply to Jybz from comment #16)
> I just update the whole list except doc, session still reboots.

I hope you mean that after reboot it works correctly?
- Or does it crash-reboot?
David Walser 2023-02-17 15:28:20 CET

Blocks: (none) => 31545

Comment 18 Jybz 2023-02-17 17:00:00 CET
Sorry ! Tired...

Session still re-opens. things are working.

I also did a reboot because just leave and reenter in plasma reset my "touch-pad slap behavior". But after a real powercycle of the machine, everything is correct.
Comment 19 sturmvogel 2023-02-17 17:04:13 CET
*** Bug 31568 has been marked as a duplicate of this bug. ***

CC: (none) => tim

Comment 20 David Walser 2023-02-17 18:14:54 CET
papoteur just added a patch for CVE-2023-24607.  Can you please also fix CVE-2022-25255 (Bug 29977) for qtbase5?
Comment 21 David Walser 2023-02-17 18:35:41 CET
(In reply to David Walser from comment #20)
> papoteur just added a patch for CVE-2023-24607.  Can you please also fix
> CVE-2022-25255 (Bug 29977) for qtbase5?

David Geiger has fixed that in qtbase5-5.15.2-4.8.mga8 which is building now.

Component: RPM Packages => Security
CVE: (none) => CVE-2022-25255 CVE-2023-24607
QA Contact: (none) => security

Comment 22 bascule teller 2023-02-17 22:51:10 CET
I have used testing to update the two rpms:
lib64qt5sql5-5.15.2-4.6.mga8
lib64qt5-database-plugin-mysql-5.15.2-4.6.mga8
and the problem I had with missing emails:
https://ml.mageia.org/l/arc/discuss/2023-02/msg00046.html
has gone away!

bascule

CC: (none) => asura

Comment 23 Morgan Leijström 2023-02-17 23:25:26 CET
Like comment 14 - now updated cleanly to -4.8, rebooted, keep using it OK.
Comment 24 papoteur 2023-02-18 08:45:56 CET
New rpm are :

qtbase5-examples-5.15.2-4.8.mga8
lib64qt5linuxaccessibilitysupport-static-devel-5.15.2-4.8.mga8
lib64qt5themesupport-static-devel-5.15.2-4.8.mga8
lib64qt5inputsupport-static-devel-5.15.2-4.8.mga8
lib64qt5gui5-5.15.2-4.8.mga8
qtbase5-common-devel-5.15.2-4.8.mga8
lib64qt5widgets5-5.15.2-4.8.mga8
lib64qt5fbsupport-static-devel-5.15.2-4.8.mga8
lib64qt5gui-devel-5.15.2-4.8.mga8
lib64qt5fontdatabasesupport-static-devel-5.15.2-4.8.mga8
lib64qt5core5-5.15.2-4.8.mga8
lib64qt5core-devel-5.15.2-4.8.mga8
lib64qt5opengl-devel-5.15.2-4.8.mga8
lib64qt5kmssupport-static-devel-5.15.2-4.8.mga8
lib64qt5eglsupport-static-devel-5.15.2-4.8.mga8
lib64qt5eventdispatchersupport-static-devel-5.15.2-4.8.mga8
lib64qt5platformcompositorsupport-static-devel-5.15.2-4.8.mga8
lib64qt5vulkansupport-static-devel-5.15.2-4.8.mga8
lib64qt5widgets-devel-5.15.2-4.8.mga8
lib64qt5devicediscoverysupport-static-devel-5.15.2-4.8.mga8
lib64qt5xkbcommonsupport-static-devel-5.15.2-4.8.mga8
lib64qt5servicesupport-static-devel-5.15.2-4.8.mga8
lib64qt5xcbqpa5-5.15.2-4.8.mga8
qtbase5-common-5.15.2-4.8.mga8
lib64qt5network5-5.15.2-4.8.mga8
lib64qt5edid-devel-5.15.2-4.8.mga8
lib64qt5eglfsdeviceintegration5-5.15.2-4.8.mga8
lib64qt5accessibilitysupport-static-devel-5.15.2-4.8.mga8
lib64qt5test-devel-5.15.2-4.8.mga8
lib64qt5dbus5-5.15.2-4.8.mga8
lib64qt5glxsupport-static-devel-5.15.2-4.8.mga8
lib64qt5printsupport5-5.15.2-4.8.mga8
lib64qt5network-devel-5.15.2-4.8.mga8
lib64qt5opengl5-5.15.2-4.8.mga8
lib64qt5sql5-5.15.2-4.8.mga8
lib64qt5xml5-5.15.2-4.8.mga8
lib64qt5test5-5.15.2-4.8.mga8
lib64qt5-database-plugin-odbc-5.15.2-4.8.mga8
lib64qt5eglfskmssupport5-5.15.2-4.8.mga8
lib64qt5dbus-devel-5.15.2-4.8.mga8
lib64qt5-database-plugin-ibase-5.15.2-4.8.mga8
lib64qt5printsupport-devel-5.15.2-4.8.mga8
lib64qt5-database-plugin-pgsql-5.15.2-4.8.mga8
lib64qt5sql-devel-5.15.2-4.8.mga8
lib64qt5concurrent-devel-5.15.2-4.8.mga8
lib64qt5xml-devel-5.15.2-4.8.mga8
lib64qt5eglfsdeviceintegration-devel-5.15.2-4.8.mga8
lib64qt5platformsupport-devel-5.15.2-4.8.mga8
lib64qt5-database-plugin-tds-5.15.2-4.8.mga8
lib64qt5-database-plugin-sqlite-5.15.2-4.8.mga8
lib64qt5-database-plugin-mysql-5.15.2-4.8.mga8
lib64qt5base5-devel-5.15.2-4.8.mga8
lib64qt5eglfskmssupport-devel-5.15.2-4.8.mga8
lib64qt5xcbqpa-devel-5.15.2-4.8.mga8
lib64qt5concurrent5-5.15.2-4.8.mga8
lib64qt5bootstrap-static-devel-5.15.2-4.8.mga8
qtbase5-doc-5.15.2-4.8.mga8.noarch.rpm

This add patches for 
bug 31545 and bug 29977
Comment 25 papoteur 2023-02-18 09:03:37 CET
Installed 
lib64qt5test-devel-5.15.2-4.8.mga8.x86_64     
lib64qt5test5-5.15.2-4.8.mga8.x86_64          
lib64qt5base5-devel-5.15.2-4.8.mga8.x86_64    
lib64qt5xml-devel-5.15.2-4.8.mga8.x86_64      
lib64qt5xml5-5.15.2-4.8.mga8.x86_64           
lib64qt5widgets-devel-5.15.2-4.8.mga8.x86_64  
lib64qt5sql-devel-5.15.2-4.8.mga8.x86_64      
lib64qt5sql5-5.15.2-4.8.mga8.x86_64           
lib64qt5printsupport-devel-5.15.2-4.8.mga8.x86_64 
lib64qt5printsupport5-5.15.2-4.8.mga8.x86_64  
lib64qt5opengl-devel-5.15.2-4.8.mga8.x86_64   
lib64qt5opengl5-5.15.2-4.8.mga8.x86_64        
lib64qt5network-devel-5.15.2-4.8.mga8.x86_64  
lib64qt5gui-devel-5.15.2-4.8.mga8.x86_64      
lib64qt5eglfskmssupport-devel-5.15.2-4.8.mga8.x86_64 
lib64qt5eglfsdeviceintegration-devel-5.15.2-4.8.mga8.x86_64 
lib64qt5-database-plugin-tds-5.15.2-4.8.mga8.x86_64 
lib64qt5-database-plugin-sqlite-5.15.2-4.8.mga8.x86_64 
lib64qt5-database-plugin-pgsql-5.15.2-4.8.mga8.x86_64 
lib64qt5-database-plugin-odbc-5.15.2-4.8.mga8.x86_64 
lib64qt5-database-plugin-mysql-5.15.2-4.8.mga8.x86_64 
lib64qt5-database-plugin-ibase-5.15.2-4.8.mga8.x86_64 
lib64qt5concurrent-devel-5.15.2-4.8.mga8.x86_64 
lib64qt5concurrent5-5.15.2-4.8.mga8.x86_64    
qtbase5-common-devel-5.15.2-4.8.mga8.x86_64   
lib64qt5xcbqpa-devel-5.15.2-4.8.mga8.x86_64   
lib64qt5widgets5-5.15.2-4.8.mga8.x86_64       
lib64qt5gui5-5.15.2-4.8.mga8.x86_64           
lib64qt5eglfskmssupport5-5.15.2-4.8.mga8.x86_64 
lib64qt5eglfsdeviceintegration5-5.15.2-4.8.mga8.x86_64 
lib64qt5dbus-devel-5.15.2-4.8.mga8.x86_64     
lib64qt5core-devel-5.15.2-4.8.mga8.x86_64     
qtbase5-common-5.15.2-4.8.mga8.x86_64         
lib64qt5xcbqpa5-5.15.2-4.8.mga8.x86_64        
lib64qt5network5-5.15.2-4.8.mga8.x86_64       
lib64qt5dbus5-5.15.2-4.8.mga8.x86_64          
lib64qt5core5-5.15.2-4.8.mga8.x86_64         

Restarted the computer
Launched some applications, including korganizer
All seems OK.
Comment 26 Morgan Leijström 2023-02-18 21:18:47 CET
For this important package it would be good to test on 32 bit also I think.

Please someone write an advisory proposal so it is ready to be used quickly.

Whiteboard: (none) => MGA8-64-OK

Comment 27 papoteur 2023-02-18 21:52:58 CET
Advisory
===================
Qt had a test of mariadb to adapt its instructions accordingly
However, since MariaDB 10.6, the version reported is no more what is expected.
Akonadi fails to update the data for kmail (mga#29359)
Fix for CVE-2023-24607: Fix a possible DOS involving the Qt SQL ODBC driver plugin.
Fix for CVE-2022-23853 / CVE-2022-25255 Avoid unintentionally using binaries from CWD
===================
Comment 28 Thomas Andrews 2023-02-19 21:41:20 CET
Tested on Foolishness, my Dell Inspiron 5100, real 32-bit hardware, running mga8 Xfce with the desktop kernel.

I expected qtbase5 packages on Plasma systems, but was surprised to see a number of them already installed on my Xfce system. So, I used qarepo to update them, with no issues, and rebooted.

Then I used "urpmq --whatrequires-recursive qtbase5-common" and found out why these packages were there. I saw where, among other things, it's used with Gimp, gutenprint-gimp2, hplip-gui, vlc, and others. While I don't use kmail, I do use those.

I had been going to try installing my HP Envy Photo 7800 series all-in-one as a wireless device for a while, so I tried that. The printer shows up in the HP Device Manager, and Gimp can access the scanner, as well as print with either the hplip or Gutenprint drivers. VLC had no problems with playing video files, either.

While I didn't exercise any of these applications to their fullest, nothing crashed with what I DID try, and I saw no new problems with anything else.

I'm giving this a 32-bit OK, and validating. Advisory in Comment 27.

Whiteboard: MGA8-64-OK => MGA8-32-OK MGA8-64-OK
Keywords: (none) => validated_update
CC: (none) => andrewsfarm, sysadmin-bugs

Comment 29 sturmvogel 2023-02-20 06:58:13 CET
*** Bug 31577 has been marked as a duplicate of this bug. ***

CC: (none) => dan

Comment 30 Morgan Leijström 2023-02-20 16:06:34 CET
This validated bugfix is important to ship ASAP as i.e Kmail is unusable without it

Advisory proposal in comment 27

CC: (none) => davidwhodgins

Comment 31 Frank Schneider 2023-02-20 20:19:04 CET
Today I only updated the lib64qt5-database-plugin-mysql package from the "Core Updates Testing" medium to version 5.15.2-4.8.mga8.x86_64. It installed itself. There were no missing dependencies.
To my surprise and delight, Akonadi is working again. All modules in Kontact ran without error messages.

CC: (none) => neue_chance

Dave Hodgins 2023-02-20 20:37:23 CET

Keywords: (none) => advisory

Comment 32 Mageia Robot 2023-02-20 22:26:58 CET
An update for this issue has been pushed to the Mageia Updates repository.

https://advisories.mageia.org/MGASA-2023-0051.html

Resolution: (none) => FIXED
Status: NEW => RESOLVED


Note You need to log in before you can comment on or make changes to this bug.