diff options
Diffstat (limited to 'etc')
| -rw-r--r-- | etc/news.scm | 39 |
1 files changed, 18 insertions, 21 deletions
diff --git a/etc/news.scm b/etc/news.scm index 69fd80785ad..faf0931abdd 100644 --- a/etc/news.scm +++ b/etc/news.scm | |||
| @@ -69,27 +69,9 @@ existants chiffrés avec les anciennes approches, veuillez utiliser | |||
| 69 | 69 | ||
| 70 | (entry (commit "897832f374dcdc9eeaf19d01e70b9a92fccfc68c") | 70 | (entry (commit "897832f374dcdc9eeaf19d01e70b9a92fccfc68c") |
| 71 | (title | 71 | (title |
| 72 | (en "Several security issues fixed in Guix")) | ||
| 73 | (body | ||
| 74 | (en "Several security issues (four CVE numbers pending) have been | ||
| 75 | identified in Guix. These affect @code{guix substitute} and authentication of | ||
| 76 | channels with attacker-controlled names in @command{guix pull} and | ||
| 77 | @command{guix time-machine}. These issues can lead to remote privilege | ||
| 78 | escalation, store corruption, and local sensitive information disclosure. | ||
| 79 | Details are forthcoming in a security advisory post on the Guix blog, with a | ||
| 80 | draft available at @uref{https://codeberg.org/guix/artwork/pulls/58}. The | ||
| 81 | pull request @uref{https://codeberg.org/guix/guix/pulls/9665} has information | ||
| 82 | on the commits fixing these issues. | ||
| 83 | |||
| 84 | All users should immediately update their system, which will require | ||
| 85 | reconfiguring and restarting @command{guix-daemon}. Please note that due to | ||
| 86 | these security issues affecting substitutes, there are additional | ||
| 87 | considerations for updating; please see the security advisory."))) | ||
| 88 | |||
| 89 | (entry (commit "897832f374dcdc9eeaf19d01e70b9a92fccfc68c") | ||
| 90 | (title | ||
| 91 | (en "Several security issues fixed in Guix") | 72 | (en "Several security issues fixed in Guix") |
| 92 | (de "Mehrere Sicherheitsprobleme in Guix behoben")) | 73 | (de "Mehrere Sicherheitsprobleme in Guix behoben") |
| 74 | (pt "Diversos problemas de segurança no Guix resolvidos")) | ||
| 93 | (body | 75 | (body |
| 94 | (en "Several security issues (four CVE numbers pending) have been | 76 | (en "Several security issues (four CVE numbers pending) have been |
| 95 | identified in Guix. These affect @code{guix substitute} and authentication of | 77 | identified in Guix. These affect @code{guix substitute} and authentication of |
| @@ -119,7 +101,22 @@ die Commits, mit denen die Probleme behoben wurden. | |||
| 119 | Alle Benutzer sollten unmittelbar ihr System aktualisieren und dazu | 101 | Alle Benutzer sollten unmittelbar ihr System aktualisieren und dazu |
| 120 | rekonfigurieren und @command{guix-daemon} neu starten. Bitte beachten Sie, dass | 102 | rekonfigurieren und @command{guix-daemon} neu starten. Bitte beachten Sie, dass |
| 121 | weil die Sicherheitsprobleme Substitute betreffen, Sie dies vielleicht vor dem | 103 | weil die Sicherheitsprobleme Substitute betreffen, Sie dies vielleicht vor dem |
| 122 | Aktualisieren bedenken möchten; siehe die Sicherheitsempfehlung."))) | 104 | Aktualisieren bedenken möchten; siehe die Sicherheitsempfehlung.") |
| 105 | (pt "Diversos problemas de segurança (quatro números CVE pendentes) | ||
| 106 | foram identificados em Guix. Estes afetam @code{guix substitute} e | ||
| 107 | autenticação de canais com nomes controlados pelo atacante em @command{guix | ||
| 108 | pull} e @command{guix time-machine}. Estes problemas podem levar à escalação | ||
| 109 | remota de privilégios, corrupção do armazém, e revelação local de informaÇão | ||
| 110 | sensível. Detalhes estão vindo em uma postagem informativa no blog do Guix, | ||
| 111 | com um rascunho disponível em | ||
| 112 | @uref{https://codeberg.org/guix/artwork/pulls/58}. A requisição para inclusão | ||
| 113 | em @uref{https://codeberg.org/guix/guix/pulls/9665} contém informação para os | ||
| 114 | commits que resolvem estas questões. | ||
| 115 | |||
| 116 | Todos os usuários devem atualizar seus sistemas imediatamente, o que exigirá | ||
| 117 | reconfigurar e reiniciar o @command{guix-daemon}. Por favor note que em razão | ||
| 118 | destas questões de segurança, existem considerações adicionais para a | ||
| 119 | atualização; por favor observe a informação de segurança."))) | ||
| 123 | 120 | ||
| 124 | (entry (commit "2949c187f600841cdcddfc4f955506b34b79244f") | 121 | (entry (commit "2949c187f600841cdcddfc4f955506b34b79244f") |
| 125 | (title | 122 | (title |
