mirror of
https://github.com/NixOS/nixpkgs.git
synced 2024-11-24 07:53:19 +00:00
633a3b8f19
guix has recently announced a security vulnerability that allows local users to gain priveleges of build users, and further manipulate output of any build (including with setguid). This commit fixes the issue by backporting the remediation commits pushed to guix main to 1.4.0 as a patch. Users will still have to reboot and follow other remediation steps as described in the guix blogpost. Refs: https://guix.gnu.org/en/blog/2024/build-user-takeover-vulnerability/ Signed-off-by: Christina Sørensen <christina@cafkafk.com> |
||
|---|---|---|
| .. | ||
| gucharmap | ||
| guile-aspell | ||
| guile-avahi | ||
| guile-cairo | ||
| guile-chickadee | ||
| guile-commonmark | ||
| guile-config | ||
| guile-fibers | ||
| guile-gcrypt | ||
| guile-git | ||
| guile-gnutls | ||
| guile-goblins | ||
| guile-hall | ||
| guile-json | ||
| guile-lib | ||
| guile-lzlib | ||
| guile-lzma | ||
| guile-ncurses | ||
| guile-opengl | ||
| guile-quickcheck | ||
| guile-reader | ||
| guile-sdl | ||
| guile-sdl2 | ||
| guile-semver | ||
| guile-sjson | ||
| guile-sqlite3 | ||
| guile-ssh | ||
| guile-xcb | ||
| guile-zlib | ||
| guile-zstd | ||
| guix | ||
| gummy | ||
| gungnir | ||