Nix and Lix local root-privilege-escalation vulnerabilities (lwn.net)
<p>The <a href="https://lix.systems/">Lix</a> and <a
href="https://nixos.org/">Nix</a> projects have <a
href="https://lwn.net/ml/all/CAPC5pGTROE2ouaN1uV9Q%2B6a%2BsUym-yijZYtvL8%3DTP6c%2BSUqL1g%40mail.gmail.com/">jointly
disclosed</a> a set of vulnerabilities that can be used to escalate privileges
to root on systems running the Lix or Nix daemons. "<q>All systems that build
untrusted derivations are affected.</q>" Releases with fixes from each project
are available today. CVE IDs have not yet been requested. See the announcement
for more details on the vulnerabilities.</p>
<p></p>
href="https://nixos.org/">Nix</a> projects have <a
href="https://lwn.net/ml/all/CAPC5pGTROE2ouaN1uV9Q%2B6a%2BsUym-yijZYtvL8%3DTP6c%2BSUqL1g%40mail.gmail.com/">jointly
disclosed</a> a set of vulnerabilities that can be used to escalate privileges
to root on systems running the Lix or Nix daemons. "<q>All systems that build
untrusted derivations are affected.</q>" Releases with fixes from each project
are available today. CVE IDs have not yet been requested. See the announcement
for more details on the vulnerabilities.</p>
<p></p>
Comments