[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
bug#69777: Please add a test for CVE-2024-27297
From: |
Vagrant Cascadian |
Subject: |
bug#69777: Please add a test for CVE-2024-27297 |
Date: |
Wed, 13 Mar 2024 08:29:36 -0700 |
It would be really nice, especially for downstream distributors, if
there was a test for CVE-2024-27297.
There is working code to test this in the excellent blog post on the
subject, which is a likely good starting point!
https://guix.gnu.org/en/blog/2024/fixed-output-derivation-sandbox-bypass-cve-2024-27297/
Super extra bonus points if the test is backwards compatible with guix
1.4 and 1.2 :)
live well,
vagrant
signature.asc
Description: PGP signature
- bug#69777: Please add a test for CVE-2024-27297,
Vagrant Cascadian <=