Approved changes feed: RSS · Atom

cpe:2.3:a:gnu:guixsd:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorGnu (575dd98a-a14a-5d9e-a2eb-97d38d86fcb9)
ProductGuixsd (3f86dc52-fac1-5ae7-9b88-50f40d44533b)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from purl2cpe mapping

PURL mappings

PURLSourceLast updated
pkg:bitbucket/apapsch/guix purl2cpe 2026-06-01 10:11:56.502522
pkg:deb/debian/guix purl2cpe 2026-06-01 10:11:56.502525
pkg:deb/ubuntu/guix purl2cpe 2026-06-01 10:11:56.502528
pkg:github/guix-mirror/guix purl2cpe 2026-06-01 10:11:56.502531
pkg:github/pjotrp/guix purl2cpe 2026-06-01 10:11:56.502533
pkg:gnu/guix purl2cpe 2026-06-01 10:11:56.502536
pkg:rpm/opensuse/guix purl2cpe 2026-06-01 10:11:56.502539

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2017-1000455 vulnerable 2026-06-08 05:08:34.568658 Details available
GuixSD prior to Git commit 5e66574a128937e7f2fcf146d146225703ccfd5d used POSIX hard links incorrectly, leading the creation of setuid executables in "the store", violating a fundamental security assumption of GNU Guix.
Published: 2018-01-02T17:00:00.000Z
Updated: 2024-09-16T18:29:16.270Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.