Discussion
Loading...

#Tag

Log in
  • About
  • Code of conduct
  • Privacy
  • Users
  • Instances
  • About Bonfire
VoxClamantisInDeserto
VoxClamantisInDeserto
@cedesguin@mamot.fr  ·  activity timestamp 6 days ago

@cracrayol

Merci. Pour les #Thinkpad soyez attentifs, une fois de plus cette MàJ m'a tout simplement désinstallé #tlp => sudo apt install tlp

VoxClamantisInDeserto
VoxClamantisInDeserto
@cedesguin@mamot.fr replied  ·  activity timestamp 6 days ago

@cracrayol

Il semble que la coexistence entre #tlp et #power-profiles-daemon soit problématique (je n'ai pas beaucoup de détails). Il faut donc arbitrer et le choix majoritaire est en faveur de #tlp.

  • Copy link
  • Flag this comment
  • Block
cracrayol
cracrayol
@cracrayol@friendica.cracrayol.org  ·  activity timestamp 6 days ago

La mise à jour de #LinuxMint 22.3 "Zena" est disponible dans le gestionnaire de mise à jour. Après la maj de mint-update, il suffit d'aller dans Edition -> Mettre à niveau et de suivre les indications.

Sorry, no caption provided by author
Sorry, no caption provided by author
Sorry, no caption provided by author
VoxClamantisInDeserto
VoxClamantisInDeserto
@cedesguin@mamot.fr replied  ·  activity timestamp 6 days ago

@cracrayol

Merci. Pour les #Thinkpad soyez attentifs, une fois de plus cette MàJ m'a tout simplement désinstallé #tlp => sudo apt install tlp

  • Copy link
  • Flag this comment
  • Block
Andreas Wagner boosted
linrunner
linrunner
@linrunner@fosstodon.org  ·  activity timestamp last week

Version 1.9.1 of the #TLP #Linux #powersaving tool was released. It consists mainly of security fixes for #tlp-pd. For details, please refer to the publication by the #openSUSE Security Team.

https://github.com/linrunner/TLP/releases/tag/1.9.1
https://security.opensuse.org/2026/01/07/tlp-polkit-authentication-bypass.html

SUSE Security Team Blog

TLP: Polkit Authentication Bypass in Profiles Daemon in Version 1.9.0 (CVE-2025-67859)

TLP is a utility for saving laptop battery power when running Linux. In version 1.9.0 of TLP a profiles daemon has been added to the project, which provides a D-Bus interface for controlling different power profiles. An unsafe use of the Polkit authentication API in this daemon allows local users to bypass authorization and gain arbitrary control over power profiles and log level settings of TLP. While looking into the new daemon we also found a few other security issues in the area of local Denial-of-Service.
GitHub

Release 1.9.1 · linrunner/TLP

Bugfix Release Power Profiles (tlp-pd) Fix Polkit Authentication Bypass in Profiles Daemon in Version 1.9.0 (CVE-2025-67859) Version 1.8.0 and older are not affected Ensure that all processes tha...
  • Copy link
  • Flag this post
  • Block
linrunner
linrunner
@linrunner@fosstodon.org  ·  activity timestamp last week

Version 1.9.1 of the #TLP #Linux #powersaving tool was released. It consists mainly of security fixes for #tlp-pd. For details, please refer to the publication by the #openSUSE Security Team.

https://github.com/linrunner/TLP/releases/tag/1.9.1
https://security.opensuse.org/2026/01/07/tlp-polkit-authentication-bypass.html

SUSE Security Team Blog

TLP: Polkit Authentication Bypass in Profiles Daemon in Version 1.9.0 (CVE-2025-67859)

TLP is a utility for saving laptop battery power when running Linux. In version 1.9.0 of TLP a profiles daemon has been added to the project, which provides a D-Bus interface for controlling different power profiles. An unsafe use of the Polkit authentication API in this daemon allows local users to bypass authorization and gain arbitrary control over power profiles and log level settings of TLP. While looking into the new daemon we also found a few other security issues in the area of local Denial-of-Service.
GitHub

Release 1.9.1 · linrunner/TLP

Bugfix Release Power Profiles (tlp-pd) Fix Polkit Authentication Bypass in Profiles Daemon in Version 1.9.0 (CVE-2025-67859) Version 1.8.0 and older are not affected Ensure that all processes tha...
  • Copy link
  • Flag this post
  • Block
VoxClamantisInDeserto
VoxClamantisInDeserto
@cedesguin@mamot.fr  ·  activity timestamp 4 months ago

Sait-on pourquoi la màj #LinuxMint 22.1 vers 22.2 désinstalle l'indispensable #tlp ? https://doc.ubuntu-fr.org/tlp

(Indispensable pour les possesseurs d'un Thinkpad, entendons-nous)

  • Copy link
  • Flag this post
  • Block

bonfire.cafe

A space for Bonfire maintainers and contributors to communicate

bonfire.cafe: About · Code of conduct · Privacy · Users · Instances
Bonfire social · 1.0.1-beta.35 no JS en
Automatic federation enabled
Log in
  • Explore
  • About
  • Members
  • Code of Conduct