#69728 [PATCH security] daemon: Protect against FD escape when building fixed-output derivations (CVE-2024-27297).

Received: (at 69728-done) by debbugs.gnu.org; 13 Mar 2024 10:03:49 +0000
From debbugs-submit-bounces@debbugs.gnu.org Wed Mar 13 06:03:49 2024
Received: from localhost ([127.0.0.1]:44745 helo=debbugs.gnu.org)
	by debbugs.gnu.org with esmtp (Exim 4.84_2)
	(envelope-from <debbugs-submit-bounces@debbugs.gnu.org>)
	id 1rkLSe-0003HF-G3
	for submit@debbugs.gnu.org; Wed, 13 Mar 2024 06:03:48 -0400
Received: from eggs.gnu.org ([209.51.188.92]:51966)
 by debbugs.gnu.org with esmtp (Exim 4.84_2)
 (envelope-from <ludo@gnu.org>) id 1rkLSY-0003Gy-Lm
 for 69728-done@debbugs.gnu.org; Wed, 13 Mar 2024 06:03:47 -0400
Received: from fencepost.gnu.org ([2001:470:142:3::e])
 by eggs.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256)
 (Exim 4.90_1) (envelope-from <ludo@gnu.org>)
 id 1rkLPm-0005DD-2J; Wed, 13 Mar 2024 06:00:50 -0400
DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed; d=gnu.org;
 s=fencepost-gnu-org; h=MIME-Version:Date:References:In-Reply-To:Subject:To:
 From; bh=CMd9QMbQrQsdwGBWfWIN1kjA9bymQL0GrxIg0y+Tu30=; b=A4R/YuhH8AjMkb66ByaK
 KwaNJ5YnsxGMcvTTGZq7Ptd9e5uqtmdfCj6uaLrOtIu0LnhXHjVKR/z7Zoh0C9A8SIzsm4UiI8xm3
 zKR0C6RcebMfCt0A0dmtimMXxpgl6ES3JoHKqzMngaFADabRM3ZbU94leWQEGeMtnwDbenB9LS1mf
 eiiwX7j0kIHjVK7TR5OlRfM0WsVQZwnvejT2RGTAE3O7BFVQ7+aAg/fUq6+KKbDLt7mlang6nyU+X
 XQCnfO/GEqgYMVlggrdi6Cd8i/oRJvgZrWtdHxZyWJ+aam9/BM5nZ13d0eFNOSSxD+GUqgiEyZvzw
 HkYMe+uq5euG1g==;
From: Ludovic Courtès <ludo@gnu.org>
To: John Kehayias <john.kehayias@protonmail.com>
Subject: Re: bug#69728: [PATCH security] daemon: Protect against FD escape
 when building fixed-output derivations (CVE-2024-27297).
In-Reply-To: <87a5n3jwln.fsf_-_@gnu.org> ("Ludovic Courtès"'s message of "Tue, 12 Mar 2024 16:31:00 +0100")
References: <f541e64f128d82e6d9eca3b1d40e833dc06fd968.1710154382.git.ludo@gnu.org>
 <87frwwo1mo.fsf@gnu.org> <871q8flg17.fsf_-_@gnu.org>
 <87msr334do.fsf@protonmail.com> <87a5n3jwln.fsf_-_@gnu.org>
Date: Wed, 13 Mar 2024 11:00:42 +0100
Message-ID: <871q8ejvsl.fsf_-_@gnu.org>
User-Agent: Gnus/5.13 (Gnus v5.13)
MIME-Version: 1.0
Content-Type: text/plain; charset=utf-8
Content-Transfer-Encoding: quoted-printable
X-Spam-Score: -2.3 (--)
X-Debbugs-Envelope-To: 69728-done
Cc: Picnoir <picnoir@alternativebit.fr>, guix-security@gnu.org,
 Théophane Hufschmitt <theophane.hufschmitt@tweag.io>,
 69728-done@debbugs.gnu.org
X-BeenThere: debbugs-submit@debbugs.gnu.org
X-Mailman-Version: 2.1.18
Precedence: list
List-Id: <debbugs-submit.debbugs.gnu.org>
List-Unsubscribe: <https://debbugs.gnu.org/cgi-bin/mailman/options/debbugs-submit>, 
 <mailto:debbugs-submit-request@debbugs.gnu.org?subject=unsubscribe>
List-Archive: <https://debbugs.gnu.org/cgi-bin/mailman/private/debbugs-submit/>
List-Post: <mailto:debbugs-submit@debbugs.gnu.org>
List-Help: <mailto:debbugs-submit-request@debbugs.gnu.org?subject=help>
List-Subscribe: <https://debbugs.gnu.org/cgi-bin/mailman/listinfo/debbugs-submit>, 
 <mailto:debbugs-submit-request@debbugs.gnu.org?subject=subscribe>
Errors-To: debbugs-submit-bounces@debbugs.gnu.org
Sender: "Debbugs-submit" <debbugs-submit-bounces@debbugs.gnu.org>
X-Spam-Score: -3.3 (---)