Re: can one start rebuilding udisks due to qualsyss LPE report?

[Jonathan Wright via devel <devel@xxxxxxxxxxxxxxxxxxxxxxx>]

This is already handled in rawhide and f42:

https://bodhi.fedoraproject.org/updates/FEDORA-2025-af7ba2696c

https://bodhi.fedoraproject.org/updates/FEDORA-2025-983f83d5b3

I will PR a patch for f41 today.

On Thu, Jun 19, 2025 at 4:01 AM Marius Schwarz <fedoradev@xxxxxxxxxxxx> wrote:

Report:

https://cdn2.qualys.com/2025/06/17/suse15-pam-udisks-lpe.txt

Reported: last week to OpenWall

Impact: full root access, if you are physical local user. ( the sshd pam
LPE to  gain the local rights, shall not work( untested ))

according to koji, Fedora does not have new versions build.

BTW: bodhie is no longer resolving in dns.

bets regards,
Marius Schwarz


--
_______________________________________________
devel mailing list -- devel@xxxxxxxxxxxxxxxxxxxxxxx
To unsubscribe send an email to devel-leave@xxxxxxxxxxxxxxxxxxxxxxx
Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives: https://lists.fedoraproject.org/archives/list/devel@xxxxxxxxxxxxxxxxxxxxxxx
Do not reply to spam, report it: https://pagure.io/fedora-infrastructure/new_issue

--

Jonathan Wright
AlmaLinux OS Foundation

Mattermost: chat

-- 
_______________________________________________
devel mailing list -- devel@xxxxxxxxxxxxxxxxxxxxxxx
To unsubscribe send an email to devel-leave@xxxxxxxxxxxxxxxxxxxxxxx
Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives: https://lists.fedoraproject.org/archives/list/devel@xxxxxxxxxxxxxxxxxxxxxxx
Do not reply to spam, report it: https://pagure.io/fedora-infrastructure/new_issue