Guix vulnerabilities

1 known vulnerability in Guix from GNU. 1 is rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 8.1 High severity

  guix: Incorrect Default Permissions

  CVE-2024-52867Nov 17, 2024GNU

  guix-daemon in GNU Guix before 5ab3c4c allows privilege escalation because build outputs are accessible by local users before file metadata concerns (e.g., for setuid and setgid programs) are properly addressed. The vulnerability can be remediated within the p