Nixpkgs security tracker
2.5 LOW
- CVSS version (CVSS): 3.1
- Attack Vector (AV): Local (L)
- Attack Complexity (AC): High (H)
- Privileges Required (PR): Low (L)
- User Interaction (UI): None (N)
- Scope (S): Unchanged (U)
- Confidentiality (C): None (N)
- Integrity (I): Low (L)
- Availability (A): None (N)
- Modified Attack Vector (MAV): Local (L)
- Modified Attack Complexity (MAC): High (H)
- Modified Privileges Required (MPR): Low (L)
- Modified User Interaction (MUI): None (N)
- Modified Confidentiality (MC): None (N)
- Modified Scope (MS): Unchanged (U)
- Modified Integrity (MI): Low (L)
- Modified Availability (MA): None (N)
by @LeSuisse Activity log
- Created suggestion
-
@LeSuisse
ignored
6 packages
- opensshTest
- openssh-askpass
- openssh_hpnWithKerberos
- perlPackages.NetOpenSSH
- perl5Packages.NetOpenSSH
- lxqt.lxqt-openssh-askpass
- @LeSuisse restored package openssh_hpnWithKerberos
- @LeSuisse accepted
- @LeSuisse published on GitHub
In sshd in OpenSSH before 10.5, the restrict keyword (in …
In sshd in OpenSSH before 10.5, the restrict keyword (in authorized_keys) was supposed to be applicable to tunnel forwarding but was not.
Affected products
- <10.5
Matching in nixpkgs
pkgs.openssh
Implementation of the SSH protocol
pkgs.openssh_hpn
Implementation of the SSH protocol with high performance networking patches
pkgs.openssh_gssapi
Implementation of the SSH protocol with GSSAPI support
pkgs.opensshWithKerberos
Implementation of the SSH protocol
Ignored packages (5)
pkgs.opensshTest
Implementation of the SSH protocol
pkgs.openssh-askpass
A passphrase dialog for OpenSSH and GTK
pkgs.perlPackages.NetOpenSSH
Perl SSH client package implemented on top of OpenSSH
pkgs.perl5Packages.NetOpenSSH
Perl SSH client package implemented on top of OpenSSH
Package maintainers
-
@pyrox0 Pyrox <pyrox@pyrox.dev>
-
@andir Andreas Rammhold <andreas@rammhold.de>
-
@dasJ Janne Heß <janne@hess.ooo>
-
@helsinki-Jo Joachim Ernst <joachim.ernst@helsinki-systems.de>
-
@philiptaron Philip Taron <philip.taron@gmail.com>
-
@leona-ya Leona Maroni <nix@leona.is>
-
@numinit Morgan Jones <me+nixpkgs@numin.it>
-
@balsoft Alexander Bantyev <balsoft75@gmail.com>
-
@wahjava Ashish SHUKLA <ashish.is@lostca.se>
4.8 MEDIUM
- CVSS version (CVSS): 3.1
- Attack Vector (AV): Network (N)
- Attack Complexity (AC): High (H)
- Privileges Required (PR): None (N)
- User Interaction (UI): None (N)
- Scope (S): Unchanged (U)
- Confidentiality (C): Low (L)
- Integrity (I): Low (L)
- Availability (A): None (N)
- Modified Attack Vector (MAV): Network (N)
- Modified Attack Complexity (MAC): High (H)
- Modified Privileges Required (MPR): None (N)
- Modified User Interaction (MUI): None (N)
- Modified Confidentiality (MC): Low (L)
- Modified Scope (MS): Unchanged (U)
- Modified Integrity (MI): Low (L)
- Modified Availability (MA): None (N)
by @LeSuisse Activity log
- Created suggestion
-
@LeSuisse
ignored
5 packages
- opensshTest
- openssh-askpass
- perlPackages.NetOpenSSH
- perl5Packages.NetOpenSSH
- lxqt.lxqt-openssh-askpass
- @LeSuisse accepted
- @LeSuisse published on GitHub
In ssh in OpenSSH before 10.5, a use-after-free for realloc …
In ssh in OpenSSH before 10.5, a use-after-free for realloc data can occur if a certain pair of remote-forwarding operations are concurrent.
Affected products
- <10.5
Matching in nixpkgs
pkgs.openssh
Implementation of the SSH protocol
pkgs.openssh_hpn
Implementation of the SSH protocol with high performance networking patches
pkgs.openssh_gssapi
Implementation of the SSH protocol with GSSAPI support
pkgs.opensshWithKerberos
Implementation of the SSH protocol
Ignored packages (5)
pkgs.opensshTest
Implementation of the SSH protocol
pkgs.openssh-askpass
A passphrase dialog for OpenSSH and GTK
pkgs.perlPackages.NetOpenSSH
Perl SSH client package implemented on top of OpenSSH
pkgs.perl5Packages.NetOpenSSH
Perl SSH client package implemented on top of OpenSSH
Package maintainers
-
@pyrox0 Pyrox <pyrox@pyrox.dev>
-
@andir Andreas Rammhold <andreas@rammhold.de>
-
@dasJ Janne Heß <janne@hess.ooo>
-
@helsinki-Jo Joachim Ernst <joachim.ernst@helsinki-systems.de>
-
@philiptaron Philip Taron <philip.taron@gmail.com>
-
@leona-ya Leona Maroni <nix@leona.is>
-
@numinit Morgan Jones <me+nixpkgs@numin.it>
-
@balsoft Alexander Bantyev <balsoft75@gmail.com>
-
@wahjava Ashish SHUKLA <ashish.is@lostca.se>
3.5 LOW
- CVSS version (CVSS): 3.1
- Attack Vector (AV): Network (N)
- Attack Complexity (AC): High (H)
- Privileges Required (PR): Low (L)
- User Interaction (UI): None (N)
- Scope (S): Changed (C)
- Confidentiality (C): None (N)
- Integrity (I): Low (L)
- Availability (A): None (N)
- Modified Attack Vector (MAV): Network (N)
- Modified Attack Complexity (MAC): High (H)
- Modified Privileges Required (MPR): Low (L)
- Modified User Interaction (MUI): None (N)
- Modified Confidentiality (MC): None (N)
- Modified Scope (MS): Changed (C)
- Modified Integrity (MI): Low (L)
- Modified Availability (MA): None (N)
by @LeSuisse Activity log
- Created suggestion
-
@LeSuisse
ignored
5 packages
- opensshTest
- openssh-askpass
- perlPackages.NetOpenSSH
- perl5Packages.NetOpenSSH
- lxqt.lxqt-openssh-askpass
- @LeSuisse accepted
- @LeSuisse published on GitHub
In ssh-agent in OpenSSH before 10.5, some operations can occur …
In ssh-agent in OpenSSH before 10.5, some operations can occur remotely but were intended to occur only locally, including operations that add tokens or use keys. This is caused by misinteraction between agent locking and the session-bind@openssh.com extension.
Affected products
- <10.5
Matching in nixpkgs
pkgs.openssh
Implementation of the SSH protocol
pkgs.openssh_hpn
Implementation of the SSH protocol with high performance networking patches
pkgs.openssh_gssapi
Implementation of the SSH protocol with GSSAPI support
pkgs.opensshWithKerberos
Implementation of the SSH protocol
Ignored packages (5)
pkgs.opensshTest
Implementation of the SSH protocol
pkgs.openssh-askpass
A passphrase dialog for OpenSSH and GTK
pkgs.perlPackages.NetOpenSSH
Perl SSH client package implemented on top of OpenSSH
pkgs.perl5Packages.NetOpenSSH
Perl SSH client package implemented on top of OpenSSH
Package maintainers
-
@pyrox0 Pyrox <pyrox@pyrox.dev>
-
@andir Andreas Rammhold <andreas@rammhold.de>
-
@dasJ Janne Heß <janne@hess.ooo>
-
@helsinki-Jo Joachim Ernst <joachim.ernst@helsinki-systems.de>
-
@philiptaron Philip Taron <philip.taron@gmail.com>
-
@leona-ya Leona Maroni <nix@leona.is>
-
@numinit Morgan Jones <me+nixpkgs@numin.it>
-
@balsoft Alexander Bantyev <balsoft75@gmail.com>
-
@wahjava Ashish SHUKLA <ashish.is@lostca.se>