Security upgrade causes lost of wallet

[Hynek Vychodil]

Security upgrade
[UPGRADE] libpam-kwallet-common:amd64 4:5.10.5-0ubuntu1 -> 4:5.10.5-0ubuntu1.1
[UPGRADE] libpam-kwallet5:amd64 4:5.10.5-0ubuntu1 -> 4:5.10.5-0ubuntu1.1
Caused crash of plasma desktop (It means kwindow decoration disappeared, panels become inactive, taskmanager become inactive - click on task bar does nothing, start menu is inactive ...)
After restart, kwallet open dialog doesn't appear.
Wifi dosen't connect (beacuse there is nowhere get password of course).
Kwallet manager when starterted by application launcher (Alt+F2) dosen' show my wallet.
Google chrome doesn't log to my account.
and so on.

ProblemType: Bug
DistroRelease: Ubuntu 17.10
Package: libpam-kwallet5 4:5.10.5-0ubuntu1.1
ProcVersionSignature: Ubuntu 4.13.0-39.44-generic 4.13.16
Uname: Linux 4.13.0-39-generic x86_64
ApportVersion: 2.20.7-0ubuntu3.8
Architecture: amd64
Date: Fri May 4 17:20:35 2018
InstallationDate: Installed on 2017-11-09 (176 days ago)
InstallationMedia: Kubuntu 17.10 "Artful Aardvark" - Release amd64 (20171017.1)
SourcePackage: kwallet-pam
UpgradeStatus: No upgrade log present (probably fresh install)

[Hynek Vychodil (vychodil-hynek)]

As a bonus, Kwallet Manager becomes very irresponsive. It takes second to an interior of KWallet Manager draw (it starts showing a content of the windows bellow where window appear and takes second to empty window with the only menu appear).

[Hynek Vychodil (vychodil-hynek)]

There are missing all wallets in KWallet system settings.

[Hynek Vychodil (vychodil-hynek)]

Fortunately, it is possible to install older package and all works as expected.
aptitude install libpam-kwallet5=4:5.10.5-0ubuntu1 libpam-kwallet-common=4:5.10.5-0ubuntu1

Please remove the buggy version from the repository!

[Josue (josue-tille)]

Hello,

I have the same issue.

[Launchpad Janitor (janitor)]

Status changed to 'Confirmed' because the bug affects multiple users.

[Josue (josue-tille)]

Sorry, it's also on ubuntu 16.04

[Steve Beattie (sbeattie)]

Thanks for the report, and sorry for the regression. I see the original reporter is on 17.10. Can people confirm that they are also seeing this as a result of the corresponding 18.04 and 16.04 updates?

[Launchpad Janitor (janitor)]

This bug was fixed in the package kwallet-pam - 4:5.10.5-0ubuntu1.2

---------------
kwallet-pam (4:5.10.5-0ubuntu1.2) artful-security; urgency=medium

  * REGRESSION UPDATE: revert CVE-2018-10380 fixes in
    4:5.12.4-0ubuntu1.1, as it caused people to lose wallets
    (LP: #1769187)
    - drop fix-CVE-2018-10380-1.patch and fix-CVE-2018-10380-2.patch

 -- Steve Beattie <email address hidden> Fri, 04 May 2018 10:05:36 -0700

[Launchpad Janitor (janitor)]

This bug was fixed in the package kwallet-pam - 4:5.12.4-0ubuntu1.2

---------------
kwallet-pam (4:5.12.4-0ubuntu1.2) bionic-security; urgency=medium

  * REGRESSION UPDATE: revert CVE-2018-10380 fixes in
    4:5.12.4-0ubuntu1.1, as it caused people to lose wallets
    (LP: #1769187)
    - drop fix-CVE-2018-10380-1.patch and fix-CVE-2018-10380-2.patch

 -- Steve Beattie <email address hidden> Fri, 04 May 2018 09:59:02 -0700

[vip (piotr-budny)]

libpam-kwallet5_5.12.4-0ubuntu1.2_amd64.deb libpam-kwallet4_5.12.4-0ubuntu1.2_amd64.deb libpam-kwallet-common_5.12.4-0ubuntu1.2_all.deb

for Bionic seems fine and fixes.

[Michael Skelton (sk3l)]

Bumped into this issue, and I updated with the recently released patch. My wallet is accessible again, and kwallet is back to normal operation. Fix looks good.

[Josue (josue-tille)]

Hello,

Will you provide a patch for ubuntu 16.04 (Xenial) ?

[Steve Beattie (sbeattie)]

Hi Josue,

I'm not sure why Launchpad didn't report it here, but the problematic patches were reverted for xenial in 4:5.5.5-0ubuntu1.2 (https://launchpad.net/ubuntu/+source/kwallet-pam/4:5.5.5-0ubuntu1.2).

Thanks.

[Hynek Vychodil (vychodil-hynek)]

I confirm an upgrade to 4:5.10.5-0ubuntu1.2 seems working fine for me.

[UPGRADE] libpam-kwallet-common:amd64 4:5.10.5-0ubuntu1 -> 4:5.10.5-0ubuntu1.2
[UPGRADE] libpam-kwallet5:amd64 4:5.10.5-0ubuntu1 -> 4:5.10.5-0ubuntu1.2

Distributor ID: Ubuntu
Description: Ubuntu 17.10
Release: 17.10
Codename: artful

[Josue (josue-tille)]

Hello,

Ok on my side (ubuntu 16.04). Thank you