[Git][security-tracker-team/security-tracker][master] Track fixes for guix issues via unstable upload

[Salvatore Bonaccorso (@carnil)]

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
0d3670a7 by Salvatore Bonaccorso at 2026-10-08T07:06:55+02:00
Track fixes for guix issues via unstable upload

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -260484,7 +260484,7 @@ CVE-2025-39800 (In the Linux kernel, the following vulnerability has been resolv
 	- linux 6.16.5-1
 	NOTE: https://git.kernel.org/linus/33e8f24b52d2796b8cfb28c19a1a7dd6476323a8 (6.17-rc1)
 CVE-2025-59378 (In guix-daemon in GNU Guix before 1618ca7, a content-addressed-mirrors ...)
-	- guix <unfixed> (bug #1115303)
+	- guix 1.5.0-1 (bug #1115303)
 	[bullseye] - guix <end-of-life> (EOL in bullseye LTS)
 	NOTE: https://guix.gnu.org/en/blog/2025/privilege-escalation-vulnerability-2025-2/
 	NOTE: https://codeberg.org/guix/guix/pulls/2419
@@ -285383,7 +285383,7 @@ CVE-2024-51977 (An unauthenticated attacker who can access either the HTTP servi
 CVE-2025-3415 (Grafana is an open-source platform for monitoring and observability. T ...)
 	- grafana <removed>
 CVE-2025-52993 (A race condition in the Nix, Lix, and Guix package managers enables ch ...)
-	- guix <unfixed> (bug #1108318)
+	- guix 1.5.0-1 (bug #1108318)
 	[bullseye] - guix <end-of-life> (EOL in bullseye LTS)
 	NOTE: https://guix.gnu.org/en/blog/2025/privilege-escalation-vulnerabilities-2025/
 	NOTE: https://codeberg.org/guix/guix/pulls/788
@@ -285394,7 +285394,7 @@ CVE-2025-52993 (A race condition in the Nix, Lix, and Guix package managers enab
 	NOTE: https://codeberg.org/guix/guix/commit/0e79d5b6550729e6ce3bac1e979638ac054ba5a5
 	NOTE: https://codeberg.org/guix/guix/commit/30a5d140aa5a789a362749d057754783fea83dde
 CVE-2025-52992 (The Nix, Lix, and Guix package managers fail to properly set permissio ...)
-	- guix <unfixed> (bug #1108318)
+	- guix 1.5.0-1 (bug #1108318)
 	[bullseye] - guix <end-of-life> (EOL in bullseye LTS)
 	NOTE: https://guix.gnu.org/en/blog/2025/privilege-escalation-vulnerabilities-2025/
 	NOTE: https://codeberg.org/guix/guix/pulls/788
@@ -285405,7 +285405,7 @@ CVE-2025-52992 (The Nix, Lix, and Guix package managers fail to properly set per
 	NOTE: https://codeberg.org/guix/guix/commit/0e79d5b6550729e6ce3bac1e979638ac054ba5a5
 	NOTE: https://codeberg.org/guix/guix/commit/30a5d140aa5a789a362749d057754783fea83dde
 CVE-2025-52991 (The Nix, Lix, and Guix package managers default to using temporary bui ...)
-	- guix <unfixed> (bug #1108318)
+	- guix 1.5.0-1 (bug #1108318)
 	[bullseye] - guix <end-of-life> (EOL in bullseye LTS)
 	NOTE: https://guix.gnu.org/en/blog/2025/privilege-escalation-vulnerabilities-2025/
 	NOTE: https://codeberg.org/guix/guix/pulls/788
@@ -285416,7 +285416,7 @@ CVE-2025-52991 (The Nix, Lix, and Guix package managers default to using tempora
 	NOTE: https://codeberg.org/guix/guix/commit/0e79d5b6550729e6ce3bac1e979638ac054ba5a5
 	NOTE: https://codeberg.org/guix/guix/commit/30a5d140aa5a789a362749d057754783fea83dde
 CVE-2025-46416 (The Nix, Lix, and Guix package managers allow a bypass of build isolat ...)
-	- guix <unfixed> (bug #1108318)
+	- guix 1.5.0-1 (bug #1108318)
 	[bullseye] - guix <end-of-life> (EOL in bullseye LTS)
 	NOTE: https://guix.gnu.org/en/blog/2025/privilege-escalation-vulnerabilities-2025/
 	NOTE: https://codeberg.org/guix/guix/pulls/788
@@ -285427,7 +285427,7 @@ CVE-2025-46416 (The Nix, Lix, and Guix package managers allow a bypass of build
 	NOTE: https://codeberg.org/guix/guix/commit/0e79d5b6550729e6ce3bac1e979638ac054ba5a5
 	NOTE: https://codeberg.org/guix/guix/commit/30a5d140aa5a789a362749d057754783fea83dde
 CVE-2025-46415 (A race condition in the Nix, Lix, and Guix package managers allows the ...)
-	- guix <unfixed> (bug #1108318)
+	- guix 1.5.0-1 (bug #1108318)
 	[bullseye] - guix <end-of-life> (EOL in bullseye LTS)
 	NOTE: https://guix.gnu.org/en/blog/2025/privilege-escalation-vulnerabilities-2025/
 	NOTE: https://codeberg.org/guix/guix/pulls/788



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/0d3670a78aded6c1b9f8c8df5c3bba33256efd48

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/0d3670a78aded6c1b9f8c8df5c3bba33256efd48
You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20261008/dafb1587/attachment-0001.htm>