GNU Guix @guix@hachyderm.io
Public

⚠️ Update due to Security issue ⚠️

It is strongly recommended to do a "guix pull", update all profiles. Restart the Guix Daemon, on Guix System reboot.

A potential security issue was identified in Guix's glibc package which impacts the Guix Daemon when run in privileged mode.

See the discussion on Codeberg for more details:

codeberg.org/guix/guix/pulls/6

Summary card of an issue titled "gnu: glibc: Graft with fix for unsafe env variable [security-fixes]." in repository guix/guix

gnu: glibc: Graft with fix for unsafe env variable [security-fixes].

This PR is for discussion around the following security issue (see below); CVE number is pending. Before this change, the environment variable GUIX_LOCPATH is not in the unsafe variable list, meaning that it is not unset in a privileged environment. This could lead to potential security iss...

codeberg.org · Codeberg.org

0
1
0

If you have a fediverse account, you can quote this note from your own instance. Search https://hachyderm.io/users/guix/statuses/116103720508340066 on your instance and quote it. (Note that quoting is not supported in Mastodon.)