News for hackers. Stuff that matters.

A comment on Nix 2.24 is vulnerable to (remote) privilege escalation. Parent comment

Re:Nix 2.24 is vulnerable to (remote) privilege escalation by SSLy on Tuesday September 10, 2024 @09:04AM (#41500397)
I think it is https://github.com/NixOS/nix/commit/12fa019ae558641df0a23a79...
[ Parent | on HN ]
Re:Nix 2.24 is vulnerable to (remote) privilege escalation by pablo1107 on Tuesday September 10, 2024 @09:37AM (#41500637)
How can such a simple code change fixes such a big vulnerability?
[ Parent | on HN ]
Re:Nix 2.24 is vulnerable to (remote) privilege escalation by SSLy on Tuesday September 10, 2024 @10:06AM (#41500910)
Or maybe it's https://github.com/NixOS/nix/commit/35575873813f60fff26f27a6...

the commit log is tad unclear and the GHSA writer didn't bother themselves with linking the offending code

[ Parent | on HN ]
Re:Nix 2.24 is vulnerable to (remote) privilege escalation by rstarast on Tuesday September 10, 2024 @11:13AM (#41501596)
Thanks, that one seems likely.

Hmm, though this seems to affect the case-hack thingy only, which seems like a macos-specific feature...

[ Parent | on HN ]