USN-8773-1: GNU Guix vulnerability
Ubuntu issued USN-8773-1 fixing a GNU Guix flaw that exposed build outputs to local users before metadata finalization, enabling possible privilege escalation.
Ubuntu published security notice USN-8773-1 to address a flaw in GNU Guix where build outputs were made accessible to local users before their file metadata was finalized. A local attacker could possibly leverage this window to gain elevated privileges on the affected system. The notice ships updated packages for supported Ubuntu releases and reports no exploitation.
- GNU Guix exposed build outputs to local users before file metadata was finalized
- Issue could allow local attackers to gain elevated privileges
- Ubuntu released patched Guix packages under USN-8773-1
- No in-the-wild exploitation reported in the notice
- Products
- GNU Guix
From the original article
It was discovered that GNU Guix incorrectly made build outputs accessible to local users before their file metadata was finalized. A local attacker could possibly use this issue to gain elevated privileges.
ubuntu.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.