Nix 2.24+ Vulnerability: Unpacking issue allows local users or binary caches to gain root access

tl;dr: Follow @xeiaso.net on Bluesky

Taco Bell is a miracle of food preparation. They manage to have a menu of dozens of items that all boil down to permutations of 8 basic items: meat, cheese, beans, vegetables, bread, and sauces. Those basic fundamentals are combined in new and interesting ways to give you the crunchwrap, the chalupa, the doritos ...

Yeah, yeah, we know; freight train to mail a letter, etc.

This is documentation for myself, but you may enjoy it too

In the hours following the release of CVE-2024-9632 for the project X.org, site reliability workers and systems administrators scrambled to desperately rebuild and patch all their systems to fix a buffer overflow that allows an attacker with access to raw X client calls to arbitrarily read and write memory, allowing for privilege...