oss-sec mailing list archives

Re: Risk of local privilege escalation in GNU Guix

From: Jan Engelhardt <jengelh () inai de>
Date: Mon, 5 Apr 2021 20:31:29 +0200 (CEST)


On Monday 2021-04-05 19:55, Henri Salo wrote:

On Mon, Apr 05, 2021 at 12:43:15PM -0400, Leo Famulari wrote:

We applied for a CVE ID via MITRE's web form [0] on March 18, 2021.
We have not yet received a reply. Does anybody know if that is expected?


This is not normal.


Maybe it is? A recent requesto f mine took 13 days to complete.
With Leo's request being 2 weeks old now as well, and considering
there is some public holiday thing going on, his request might
get a response tomorrow.

Current thread:

Re: Risk of local privilege escalation in GNU Guix Leo Famulari (Apr 05)
- Re: Risk of local privilege escalation in GNU Guix Henri Salo (Apr 05)
  - Re: Risk of local privilege escalation in GNU Guix Jan Engelhardt (Apr 05)
    - Re: Risk of local privilege escalation in GNU Guix Leo Famulari (Apr 05)
  - Re: Risk of local privilege escalation in GNU Guix Leo Famulari (Apr 05)
- Re: Risk of local privilege escalation in GNU Guix Leo Famulari (Apr 09)
- <Possible follow-ups>
- Re: Risk of local privilege escalation in GNU Guix Leo Famulari (Apr 10)