summaryrefslogtreecommitdiff
path: root/etc
diff options
context:
space:
mode:
Diffstat (limited to 'etc')
-rw-r--r--etc/news.scm39
1 files changed, 18 insertions, 21 deletions
diff --git a/etc/news.scm b/etc/news.scm
index 69fd80785ad..faf0931abdd 100644
--- a/etc/news.scm
+++ b/etc/news.scm
@@ -69,27 +69,9 @@ existants chiffrés avec les anciennes approches, veuillez utiliser
69 69
70 (entry (commit "897832f374dcdc9eeaf19d01e70b9a92fccfc68c") 70 (entry (commit "897832f374dcdc9eeaf19d01e70b9a92fccfc68c")
71 (title 71 (title
72 (en "Several security issues fixed in Guix"))
73 (body
74 (en "Several security issues (four CVE numbers pending) have been
75identified in Guix. These affect @code{guix substitute} and authentication of
76channels with attacker-controlled names in @command{guix pull} and
77@command{guix time-machine}. These issues can lead to remote privilege
78escalation, store corruption, and local sensitive information disclosure.
79Details are forthcoming in a security advisory post on the Guix blog, with a
80draft available at @uref{https://codeberg.org/guix/artwork/pulls/58}. The
81pull request @uref{https://codeberg.org/guix/guix/pulls/9665} has information
82on the commits fixing these issues.
83
84All users should immediately update their system, which will require
85reconfiguring and restarting @command{guix-daemon}. Please note that due to
86these security issues affecting substitutes, there are additional
87considerations for updating; please see the security advisory.")))
88
89 (entry (commit "897832f374dcdc9eeaf19d01e70b9a92fccfc68c")
90 (title
91 (en "Several security issues fixed in Guix") 72 (en "Several security issues fixed in Guix")
92 (de "Mehrere Sicherheitsprobleme in Guix behoben")) 73 (de "Mehrere Sicherheitsprobleme in Guix behoben")
74 (pt "Diversos problemas de segurança no Guix resolvidos"))
93 (body 75 (body
94 (en "Several security issues (four CVE numbers pending) have been 76 (en "Several security issues (four CVE numbers pending) have been
95identified in Guix. These affect @code{guix substitute} and authentication of 77identified in Guix. These affect @code{guix substitute} and authentication of
@@ -119,7 +101,22 @@ die Commits, mit denen die Probleme behoben wurden.
119Alle Benutzer sollten unmittelbar ihr System aktualisieren und dazu 101Alle Benutzer sollten unmittelbar ihr System aktualisieren und dazu
120rekonfigurieren und @command{guix-daemon} neu starten. Bitte beachten Sie, dass 102rekonfigurieren und @command{guix-daemon} neu starten. Bitte beachten Sie, dass
121weil die Sicherheitsprobleme Substitute betreffen, Sie dies vielleicht vor dem 103weil die Sicherheitsprobleme Substitute betreffen, Sie dies vielleicht vor dem
122Aktualisieren bedenken möchten; siehe die Sicherheitsempfehlung."))) 104Aktualisieren bedenken möchten; siehe die Sicherheitsempfehlung.")
105 (pt "Diversos problemas de segurança (quatro números CVE pendentes)
106foram identificados em Guix. Estes afetam @code{guix substitute} e
107autenticação de canais com nomes controlados pelo atacante em @command{guix
108pull} e @command{guix time-machine}. Estes problemas podem levar à escalação
109remota de privilégios, corrupção do armazém, e revelação local de informaÇão
110sensível. Detalhes estão vindo em uma postagem informativa no blog do Guix,
111com um rascunho disponível em
112@uref{https://codeberg.org/guix/artwork/pulls/58}. A requisição para inclusão
113em @uref{https://codeberg.org/guix/guix/pulls/9665} contém informação para os
114commits que resolvem estas questões.
115
116Todos os usuários devem atualizar seus sistemas imediatamente, o que exigirá
117reconfigurar e reiniciar o @command{guix-daemon}. Por favor note que em razão
118destas questões de segurança, existem considerações adicionais para a
119atualização; por favor observe a informação de segurança.")))
123 120
124 (entry (commit "2949c187f600841cdcddfc4f955506b34b79244f") 121 (entry (commit "2949c187f600841cdcddfc4f955506b34b79244f")
125 (title 122 (title