USN-8773-1: GNU Guix vulnerability

Ubuntu issued USN-8773-1 fixing a GNU Guix flaw that exposed build outputs to local users before metadata finalization, enabling possible privilege escalation.

Ubuntu published security notice USN-8773-1 to address a flaw in GNU Guix where build outputs were made accessible to local users before their file metadata was finalized. A local attacker could possibly leverage this window to gain elevated privileges on the affected system. The notice ships updated packages for supported Ubuntu releases and reports no exploitation.

• GNU Guix exposed build outputs to local users before file metadata was finalized
• Issue could allow local attackers to gain elevated privileges
• Ubuntu released patched Guix packages under USN-8773-1
• No in-the-wild exploitation reported in the notice