ZeroHour

Search: “privilege escalation”

1 stories in the last 24h

USN-8773-1: GNU Guix vulnerability

Ubuntu issued USN-8773-1 fixing a GNU Guix flaw that exposed build outputs to local users before metadata finalization, enabling possible privilege escalation.

Ubuntu published security notice USN-8773-1 to address a flaw in GNU Guix where build outputs were made accessible to local users before their file metadata was finalized. A local attacker could possibly leverage this window to gain elevated privileges on the affected system. The notice ships updated packages for supported Ubuntu releases and reports no exploitation.

Ubuntu Security Noticesupdated · 14h agofirst · 22h agoAdvisory 16 sources