NixOS disclosed on 6 November that darwin.linux-builder writes its own SSH private key into the world-readable Nix store, where any local account can read it, and that the QEMU builder forwards port 31022 to every network the Mac joins. Both fixes are merged, but updating does not rotate a key already copied out. Weiterlesen: NixOS SSH Key Leak Exposes macOS Linux Builders
Intelligence View
⚡ tsecurity.de Intelligence
NixOS SSH Key Leak Exposes macOS Linux Builders
NixOS disclosed on 6 November that darwin.linux-builder writes its own SSH private key into the world-readable Nix store, where any local account can read it,…
Social ReaktionenReagiere als Erste:r — dein Feedback zählt!
🔍 CTI & Forensik
2
Cyber Threat Intelligence & Forensik
ATT&CK-Navigator · IoC-Radar · Exploit-Belege
CTI Threat Relationship Graph
Akteure · Techniken · Beziehungen
CVE / Incident Threat Actor Software MITRE ATT&CK CWE Weakness IoC
Powered by tsecurity.de
tsecurity.de Hub
Intelligence Digest gratis Dagelijks het belangrijkste beveiligingsnieuws · kan op elk moment worden opgehaald
Community Rating & Social Proof
⭐ Leser-Wertung
–
Ø / 5.0
★★★★★
Nog geen recensies van lezers
Was deze pagina nuttig?
0
Powered by tsecurity.de
tsecurity.de Hub
Verwant Story Cluster & Sources (vector AI)
12 Bronnen
CVE-2022-4906 | Google Chrome up to 107.0.5304.121 Blink Remote Code Execution (FEDORA-2023-8a94349e38)
11 andere bronnen
VVulDB Updates2 uur geledenCVE-2022-4911 | Google Chrome up to 106.0.5249.61 DevTools ui layer (FEDORA-2023-6c8de2cd15) VVulDB Updates2 uur geledenCVE-2022-4910 | Google Chrome up to 106.0.5249.119 Autofill Remote Code Execution (FEDORA-2023-8a94349e38) VVulDB Updates2 uur geledenCVE-2022-4909 | Google Chrome up to 106.0.5249.119 XML (FEDORA-2023-8a94349e38) VVulDB Updates2 uur geledenCVE-2022-4908 | Google Chrome up to 106.0.5249.119 iFrame cross-domain policy (FEDORA-2023-8a94349e38) VVulDB Updates2 uur geledenCVE-2022-4907 | Google Chrome up to 107.0.5304.121 FFmpeg uninitialized pointer (FEDORA-2023-8a94349e38) VVulDB Updates1 uur geledenCVE-2022-4912 | Google Chrome up to 104.0.5112.102 MathML type confusion (FEDORA-2023-6c8de2cd15)
+5
11 Bronnen
Amazon’s Black Friday Audible deal is here: Subscribe for $0.99 a month plus a $20 bonus
10 andere bronnen
LLatest from TechRadar1 uur geledenVZMORE slashes $229 off its AX9 Max Ryzen AI 9 mini PC for Black Friday LLatest from TechRadar1 uur geledenWhy wait for Black Friday? Samsung’s early laundry deals are already here LLatest from TechRadar1 uur geledenNot sure what tech is worth buying this Black Friday? Ask our experts for advice GGiga.de1 uur geledenBlack Friday 2026 bei Samsung gestartet: Galaxy S26, Tablets und TVs jetzt günstiger RSS- Futurezone1 uur geledenAkku-Kettensäge im Amazon-Deal: Dieses kompakte Modell ist ideal für Haus und Garten Tt3n.de2 uur geledenBlack Friday 2026 bei Amazon, Mediamarkt und Otto: Diese Termine solltest du kennen
+4
7 Bronnen
Reddit launches AI-powered Reviews feature – with 10,000 products to start
6 andere bronnen
ZZDNET2 uur geledenReddit launches AI-powered Reviews feature – with 10,000 products to start EEngadget2 uur geledenReddit is (sort of) getting into the product reviews business TTechCrunch2 uur geledenReddit is turning user conversations into AI-powered product reviews ZZDNET2 uur geledenReddit launches AI-powered Reviews feature – with 10,000 products to start ZZDNET2 uur geledenReddit launches AI-powered Reviews feature – with 10,000 products to start TTechCrunch2 uur geledenReddit is turning user conversations into AI-powered product reviews
Mehr aus dieser Kategorie
Blättern: Pfeiltasten [ ← ] [ → ] · Tasten j / k · mobil: Wischen
HAND-OFF
Auf Smartphone übergeben (ADVISORY)
Scannen Sie den QR-Code mit der Smartphone-Kamera für sofortigen mobilen Zugriff:
https://tsecurity.de/nl/4326751/linux-tips-hardening/nixos-ssh-key-leak-exposes-macos-linux-builders/