Gnu Guix vulnerabilities

• eclipse foundation guix The GUIX binary resource (theme) loader sizes its arena and populates it in two separate passes that traverse the resource file with independent cursor arithmetic. Because gx_page_header_data_size is… CVE-2026-103414 8.4 HighOctober 14, 2026
• eclipse foundation guix `gx_binres_theme_load()` sizes its theme buffer for the theme it was asked for, and allocates it... CVE-2026-102729 5.9 MediumSeptember 29, 2026
• gnu guix In guix-daemon in GNU Guix before 1618ca7, a content-addressed-mirrors file can be written to... CVE-2025-59378 5.7 MediumSeptember 15, 2025
• gnu guix guix-daemon in GNU Guix before 5ab3c4c allows privilege escalation because build outputs are... CVE-2024-52867 Fix available 8.1 HighNovember 8, 2024
• gnu guix, gnu guix guix-daemon +1 more Local privilege escalation in GNU Guix via guix-daemon and '--keep-failed' CVE-2021-27851 Fix available 5.5 MediumApril 26, 2021
• gnu guix GNU Guix 1.0.1 allows local users to gain access to an arbitrary user's account because the... CVE-2019-18192 7.8 HighOctober 17, 2019
• gnu guixsd GuixSD prior to Git commit 5e66574a128937e7f2fcf146d146225703ccfd5d used POSIX hard links... CVE-2017-1000455 5.5 MediumJanuary 2, 2018