PT-2021-17638

Name of the Vulnerable Software and Affected Versions: guix-daemon versions prior to v1.2.0-75109-g94f0312546 guix-daemon versions v0.11.0-3298-g2608e40988 and later Description: A security issue has been discovered that can lead to local privilege escalation. It affects multi-user setups where...

CVE-2021-27851

A security vulnerability that can lead to local privilege escalation has been found in ’guix-daemon’. It affects multi-user setups in which ’guix-daemon’ runs locally. The attack consists in having an unprivileged user spawn a build process, for instance with guix build, that makes its build...