Salvatore Bonaccorso pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
0d3670a7 by Salvatore Bonaccorso at 2026-10-08T07:06:55+02:00
Track fixes for guix issues via unstable upload
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -260484,7 +260484,7 @@ CVE-2025-39800 (In the Linux kernel, the following
vulnerability has been resolv
- linux 6.16.5-1
NOTE:
https://git.kernel.org/linus/33e8f24b52d2796b8cfb28c19a1a7dd6476323a8 (6.17-rc1)
CVE-2025-59378 (In guix-daemon in GNU Guix before 1618ca7, a
content-addressed-mirrors ...)
- - guix <unfixed> (bug #1115303)
+ - guix 1.5.0-1 (bug #1115303)
[bullseye] - guix <end-of-life> (EOL in bullseye LTS)
NOTE:
https://guix.gnu.org/en/blog/2025/privilege-escalation-vulnerability-2025-2/
NOTE: https://codeberg.org/guix/guix/pulls/2419
@@ -285383,7 +285383,7 @@ CVE-2024-51977 (An unauthenticated attacker who can
access either the HTTP servi
CVE-2025-3415 (Grafana is an open-source platform for monitoring and
observability. T ...)
- grafana <removed>
CVE-2025-52993 (A race condition in the Nix, Lix, and Guix package managers
enables ch ...)
- - guix <unfixed> (bug #1108318)
+ - guix 1.5.0-1 (bug #1108318)
[bullseye] - guix <end-of-life> (EOL in bullseye LTS)
NOTE:
https://guix.gnu.org/en/blog/2025/privilege-escalation-vulnerabilities-2025/
NOTE: https://codeberg.org/guix/guix/pulls/788
@@ -285394,7 +285394,7 @@ CVE-2025-52993 (A race condition in the Nix, Lix, and
Guix package managers enab
NOTE:
https://codeberg.org/guix/guix/commit/0e79d5b6550729e6ce3bac1e979638ac054ba5a5
NOTE:
https://codeberg.org/guix/guix/commit/30a5d140aa5a789a362749d057754783fea83dde
CVE-2025-52992 (The Nix, Lix, and Guix package managers fail to properly set
permissio ...)
- - guix <unfixed> (bug #1108318)
+ - guix 1.5.0-1 (bug #1108318)
[bullseye] - guix <end-of-life> (EOL in bullseye LTS)
NOTE:
https://guix.gnu.org/en/blog/2025/privilege-escalation-vulnerabilities-2025/
NOTE: https://codeberg.org/guix/guix/pulls/788
@@ -285405,7 +285405,7 @@ CVE-2025-52992 (The Nix, Lix, and Guix package
managers fail to properly set per
NOTE:
https://codeberg.org/guix/guix/commit/0e79d5b6550729e6ce3bac1e979638ac054ba5a5
NOTE:
https://codeberg.org/guix/guix/commit/30a5d140aa5a789a362749d057754783fea83dde
CVE-2025-52991 (The Nix, Lix, and Guix package managers default to using
temporary bui ...)
- - guix <unfixed> (bug #1108318)
+ - guix 1.5.0-1 (bug #1108318)
[bullseye] - guix <end-of-life> (EOL in bullseye LTS)
NOTE:
https://guix.gnu.org/en/blog/2025/privilege-escalation-vulnerabilities-2025/
NOTE: https://codeberg.org/guix/guix/pulls/788
@@ -285416,7 +285416,7 @@ CVE-2025-52991 (The Nix, Lix, and Guix package
managers default to using tempora
NOTE:
https://codeberg.org/guix/guix/commit/0e79d5b6550729e6ce3bac1e979638ac054ba5a5
NOTE:
https://codeberg.org/guix/guix/commit/30a5d140aa5a789a362749d057754783fea83dde
CVE-2025-46416 (The Nix, Lix, and Guix package managers allow a bypass of
build isolat ...)
- - guix <unfixed> (bug #1108318)
+ - guix 1.5.0-1 (bug #1108318)
[bullseye] - guix <end-of-life> (EOL in bullseye LTS)
NOTE:
https://guix.gnu.org/en/blog/2025/privilege-escalation-vulnerabilities-2025/
NOTE: https://codeberg.org/guix/guix/pulls/788
@@ -285427,7 +285427,7 @@ CVE-2025-46416 (The Nix, Lix, and Guix package
managers allow a bypass of build
NOTE:
https://codeberg.org/guix/guix/commit/0e79d5b6550729e6ce3bac1e979638ac054ba5a5
NOTE:
https://codeberg.org/guix/guix/commit/30a5d140aa5a789a362749d057754783fea83dde
CVE-2025-46415 (A race condition in the Nix, Lix, and Guix package managers
allows the ...)
- - guix <unfixed> (bug #1108318)
+ - guix 1.5.0-1 (bug #1108318)
[bullseye] - guix <end-of-life> (EOL in bullseye LTS)
NOTE:
https://guix.gnu.org/en/blog/2025/privilege-escalation-vulnerabilities-2025/
NOTE: https://codeberg.org/guix/guix/pulls/788
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/0d3670a78aded6c1b9f8c8df5c3bba33256efd48
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/0d3670a78aded6c1b9f8c8df5c3bba33256efd48
You're receiving this email because of your account on salsa.debian.org. Manage
all notifications: https://salsa.debian.org/-/profile/notifications | Help:
https://salsa.debian.org/help
_______________________________________________
debian-security-tracker-commits mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
