Nix and Lix local root-privilege-escalation vulnerabilities
The Lix and Nix projects have jointlydisclosed a set of vulnerabilities that can be used to escalate privilegesto root on systems running the Lix or Nix daemons. "All systems that builduntrusted derivations are affected.
" Releases with fixes from each projectare available today. CVE IDs have not yet been requested. See the announcementfor more details on the vulnerabilities.