[Bug 1202933] VUL-0: CVE-2022-3560: pesign: pesign-authorize ExecStartPost script allows privilege escalation from pesign to root

https://bugzilla.suse.com/show_bug.cgi?id=1202933 https://bugzilla.suse.com/show_bug.cgi?id=1202933#c22 --- Comment #22 from Gary Ching-Pang Lin <glin@suse.com> --- Submitted the fix for SLE15, sr#289462. As for Tumbleweed, upgrading pesign to 116 requires efivar 38 which couldn't be built with LTO/PIE(*), so I'd merge the upstream patch first and upgrade pesign when efivar are ready. (*) https://bugzilla.suse.com/show_bug.cgi?id=1206388 -- You are receiving this mail because: You are on the CC list for the bug.