tribes/guix
1
0
Fork 0
mirror of https://git.savannah.gnu.org/git/guix.git synced 2026-04-06 21:20:33 +02:00
Code Activity

news: Announce potential security issue in glibc package.

Browse Source 
* etc/news.scm: Add entry.

Change-Id: Iea4883d83cae7dee937d46d534cfa8dad17b1028
This commit is contained in:
John Kehayias
2026-02-20 01:16:13 -05:00
parent d659fe8666
commit 4d1291eaaa
1 changed files with 10 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

10
etc/news.scm
View File

@@ -42,6 +42,16 @@
(channel-news (channel-news
(version 0) (version 0)
(entry (commit "d659fe8666c4bc38fcbdbe7b7a35101f2d7cc41b")
(title
(en "Potential security vulnerability in glibc"))
(body
(en "Guix adds the environment variable @code{GUIX_LOCPATH} to glibc,
however it was not added to potentially unsafe variables to be unset in
privileged environments. A CVE number is pending for this issue. This has
been fixed with a graft to glibc and users should update all profiles,
reconfigure their system, and reboot.")))
(entry (commit "6d4cb99a15da7f4fd55f956c55f4f4aacfcc7742") (entry (commit "6d4cb99a15da7f4fd55f956c55f4f4aacfcc7742")
(title (title
(en "@code{%desktop-services} now includes GDM on AArch64") (en "@code{%desktop-services} now includes GDM on AArch64")