Table of Contents 1) Introduction 2) Insecure Polkit Rule 3) Bugfix 4) CVE Assignment 5) Timeline 6) References 1) Introduction PortProtonQt is a GUI application to simplify launching of Windows games on Linux. A review of a custom Polkit r…
Jul 15, 2026 • Matthias Gerstner, Filippo Bonazzi (editor) The seunshare program is part of the SELinux “sandbox” feature, which is used to confine untrusted programs using Linux mount namespaces and restrictive SELinux policies. The progra…
May 26, 2026 • Matthias Gerstner, Filippo Bonazzi (editor) qSnapper is a GUI frontend for the snapper utility for managing Btrfs filesystem snapshots. In April we received a review request for qSnapper, because it contains a privileged D-Bu…
Apr 29, 2026 • Zdenek Kubala, Filippo Bonazzi (editor) SELinux has been the Mandatory Access Control mechanism on openSUSE distributions such as MicroOS and Leap Micro since 2022, and most recently openSUSE Tumbleweed switched the default M…
Apr 20, 2026 • Matthias Gerstner, Filippo Bonazzi (editor) The winter months have passed for us and as usual we want to give you an overview of what topics our team covered in the area of code reviews during this time. We did not publish an…
Apr 16, 2026 • Matthias Gerstner, Filippo Bonazzi (editor) Cosmic is a Linux desktop environment written in the Rust programming language. There is an ongoing effort to package it for openSUSE Tumbleweed; in this context we reviewed a numbe…
Jan 16, 2026 • Paolo Perego, Filippo Bonazzi (editor) UYUNI is an open source system management solution, forked from Spacewalk and upstream community project from which SUSE Multi-Linux Manager is derived. The audit started in January 2024…
Table of Contents 1) Introduction 2) Completion of systemd v258 Code Review 3) D-Bus Issues in Unreleased plasma-setup KDE Package org.kde.initialsystemsetup.createnewuserautostarthook org.kde.initialsystemsetup.setnewuserhomedirectoryowner…
Jan 9, 2026 • Matthias Gerstner, Filippo Bonazzi (editor) InputPlumber is a utility for combining Linux input devices into virtual input devices. It is mostly used in the context of Linux gaming and is part of SteamOS. An openSUSE community…
Jan 7, 2026 • Matthias Gerstner, Filippo Bonazzi (editor) Foomuuri is an nftables-based firewall manager for Linux. The project includes a D-Bus daemon which offers an API similar to firewalld. In early December an openSUSE community member…
Jan 7, 2026 • Matthias Gerstner, Filippo Bonazzi (editor) TLP is a utility for saving laptop battery power when running Linux (note: the TLP acronym has no special meaning). In version 1.9.0 of TLP a profiles daemon similar to GNOME’s power…
Dec 10, 2025 • Matthias Gerstner, Filippo Bonazzi (editor) smb4k is a KDE desktop related utility which allows unprivileged mounting of Samba/CIFS network shares. The SUSE security team reviewed its privileged KAuth helper component already…