Nixpkgs Security Tracker

Login with GitHub

Automatically generated suggestions

to queue a suggestion for refinement.

to remove a suggestion from the queue.

CVE-2025-8283
created 4 months ago
Netavark: podman: netavark may resolve hostnames to unexpected hosts

A vulnerability was found in the netavark package, a network stack for containers used with Podman. Due to dns.podman search domain being removed, netavark may return external servers if a valid A/AAAA record is sent as a response. When creating a container with a given name, this name will be used as the hostname for the container itself, as the podman's search domain is not added anymore the container is using the host's resolv.conf, and the DNS resolver will try to look into the search domains contained on it. If one of the domains contain a name with the same hostname as the running container, the connection will forward to unexpected external servers.

Affected products

rhcos
netavark
  • <1.15.1
container-tools:rhel8/netavark
container-tools:rhel8/containers-common

Matching in nixpkgs

pkgs.netavark

Rust based network stack for containers

  • nixos-unstable -

Package maintainers: 2

CVE-2025-3910
created 4 months ago
Org.keycloak.authentication: two factor authentication bypass

A flaw was found in Keycloak. The org.keycloak.authorization package may be vulnerable to circumventing required actions, allowing users to circumvent requirements such as setting up two-factor authentication.

Affected products

keycloak
  • <26.0.11
  • <26.2.2
  • <25.*
  • <26.1.*
rhbk/keycloak-rhel9
  • *
keycloak-rhel9-container
  • *
org.keycloak.authentication
rhbk/keycloak-rhel9-operator
  • *
rhbk/keycloak-operator-bundle
  • *
keycloak-rhel9-operator-container
  • *
keycloak-rhel9-operator-bundle-container
  • *

Matching in nixpkgs

pkgs.keycloak

Identity and access management for modern applications and services

  • nixos-unstable -

pkgs.terraform-providers.keycloak

  • nixos-unstable -

pkgs.python312Packages.python-keycloak

Provides access to the Keycloak API

  • nixos-unstable -

pkgs.python313Packages.python-keycloak

Provides access to the Keycloak API

  • nixos-unstable -

Package maintainers: 4

CVE-2025-4056
created 4 months ago
Glib: glib crash after long command line

A flaw was found in GLib. A denial of service on Windows platforms may occur if an application attempts to spawn a program using long command lines.

Affected products

glib
  • <2.84.1
bootc
glib2
loupe
librsvg2
mingw-glib2
glycin-loaders

Matching in nixpkgs

pkgs.glib

C library of programming buildings blocks

  • nixos-unstable -

pkgs.libc

GNU C Library

pkgs.bootc

Boot and upgrade via container images

  • nixos-unstable -

pkgs.glibc

GNU C Library

pkgs.iconv

GNU C Library

pkgs.loupe

Simple image viewer application written with GTK4 and Rust

  • nixos-unstable -

pkgs.alglib

Numerical analysis and data processing library

  • nixos-unstable -

pkgs.getent

pkgs.glibmm

C++ interface to the GLib library

  • nixos-unstable -

pkgs.locale

pkgs.mtrace

Perl script used to interpret and provide human readable output of the trace log contained in the file mtracedata, whose contents were produced by mtrace(3)

pkgs.spglib

C library for finding and handling crystal symmetries

  • nixos-unstable -

pkgs.taglib

Library for reading and editing audio file metadata

  • nixos-unstable -

pkgs.getconf

pkgs.poppler

PDF rendering library

pkgs.glibtool

  • nixos-unstable -

pkgs.libiconv

  • nixos-unstable -

pkgs.taglib_1

Library for reading and editing audio file metadata

  • nixos-unstable -

pkgs.dbus-glib

Obsolete glib bindings for D-Bus lightweight IPC mechanism

  • nixos-unstable -

pkgs.glibcInfo

GNU Info manual of the GNU C Library

pkgs.json-glib

Library providing (de)serialization support for the JavaScript Object Notation (JSON) format

  • nixos-unstable -

pkgs.arrow-glib

GLib bindings for Apache Arrow

  • nixos-unstable -

pkgs.i3ipc-glib

C interface library to i3wm

  • nixos-unstable -

pkgs.poppler_gi

PDF rendering library

pkgs.glibc_multi

pkgs.glibmm_2_68

C++ interface to the GLib library

  • nixos-unstable -

pkgs.libdbusmenu

Library for passing menu structures across DBus

pkgs.libglibutil

Library of glib utilities

  • nixos-unstable -

pkgs.libzim-glib

Partial GObject/C bindings for libzim

  • nixos-unstable -

pkgs.glib-testing

Test library providing test harnesses and mock classes complementing the classes provided by GLib

  • nixos-unstable -

pkgs.glibcLocales

Locale information for the GNU C Library

pkgs.jsonrpc-glib

Library to communicate using the JSON-RPC 2.0 specification

  • nixos-unstable -

pkgs.libgit2-glib

Glib wrapper library around the libgit2 git access library

  • nixos-unstable -

pkgs.libqrtr-glib

Qualcomm IPC Router protocol helper library

  • nixos-unstable -

pkgs.libvirt-glib

Wrapper library of libvirt for glib-based applications

  • nixos-unstable -

pkgs.podman-bootc

Streamlining podman+bootc interactions

  • nixos-unstable -

pkgs.taglib-sharp

Library for reading and writing metadata in media files

pkgs.mlxbf-bootctl

Control BlueField boot partitions

pkgs.safestringlib

Safer replacements for C library functions that prevent serious security vulnerabilities

pkgs.taglib_extras

Additional taglib plugins

  • nixos-unstable -

pkgs.template-glib

Library for template expansion which supports calling into GObject Introspection from templates

  • nixos-unstable -

pkgs.appstream-glib

Objects and helper methods to read and write AppStream metadata

  • nixos-unstable -

pkgs.geocode-glib_2

Convenience library for the geocoding and reverse geocoding using Nominatim service

  • nixos-unstable -

pkgs.glibc_memusage

GNU C Library

pkgs.glycin-loaders

Glycin loaders for several formats

  • nixos-unstable -

pkgs.libsignon-glib

Library for managing single signon credentials which can be used from GLib applications

  • nixos-unstable -

pkgs.telepathy-glib

  • nixos-unstable -

pkgs.glib-networking

Network-related giomodules for glib

  • nixos-unstable -

pkgs.glibcLocalesUtf8

Locale information for the GNU C Library

pkgs.libaccounts-glib

Library for managing accounts which can be used from GLib applications

  • nixos-unstable -

pkgs.unixtools.getent

pkgs.unixtools.locale

pkgs.systemd-bootchart

Boot performance graphing tool from systemd

  • nixos-unstable -

pkgs.unixtools.getconf

pkgs.kdePackages.taglib

Library for reading and editing audio file metadata

  • nixos-unstable -

pkgs.rubyPackages.glib2

pkgs.haskellPackages.glib

Binding to the GLIB library for Gtk2Hs

pkgs.haskellPackages.taglib

Binding to TagLib (ID3 tag library)

  • nixos-unstable -

pkgs.rubyPackages_3_1.glib2

pkgs.rubyPackages_3_2.glib2

pkgs.rubyPackages_3_3.glib2

pkgs.rubyPackages_3_4.glib2

pkgs.appmenu-glib-translator

Library for translating from DBusMenu to GMenuModel

  • nixos-unstable -

pkgs.haskellPackages.gi-glib

GLib bindings

  • nixos-unstable -

pkgs.haskellPackages.htaglib

Bindings to TagLib, audio meta-data library

  • nixos-unstable -

pkgs.python312Packages.dbglib

  • nixos-unstable -

pkgs.python312Packages.spglib

Python bindings for C library for finding and handling crystal symmetries

  • nixos-unstable -

pkgs.python312Packages.svglib

Pure-Python library for reading and converting SVG

  • nixos-unstable -

pkgs.python313Packages.dbglib

  • nixos-unstable -

pkgs.python313Packages.spglib

Python bindings for C library for finding and handling crystal symmetries

  • nixos-unstable -

pkgs.python313Packages.svglib

Pure-Python library for reading and converting SVG

  • nixos-unstable -

pkgs.rubyPackages.taglib-ruby

  • nixos-unstable -

pkgs.python312Packages.pytaglib

Python bindings for the Taglib audio metadata library

  • nixos-unstable -

pkgs.python313Packages.pytaglib

Python bindings for the Taglib audio metadata library

  • nixos-unstable -

pkgs.haskellPackages.glib-stopgap

Stopgap package of binding for GLib

pkgs.python312Packages.kconfiglib

Flexible Python 2/3 Kconfig implementation and library

  • nixos-unstable -

pkgs.python313Packages.kconfiglib

Flexible Python 2/3 Kconfig implementation and library

  • nixos-unstable -

pkgs.rubyPackages_3_1.taglib-ruby

  • nixos-unstable -

pkgs.rubyPackages_3_2.taglib-ruby

  • nixos-unstable -

pkgs.rubyPackages_3_3.taglib-ruby

  • nixos-unstable -

pkgs.rubyPackages_3_4.taglib-ruby

  • nixos-unstable -

pkgs.haskellPackages.bindings-glib

Low level bindings to GLib

  • nixos-unstable -

pkgs.haskellPackages.uu-parsinglib

Fast, online, error-correcting, monadic, applicative, merging, permuting, interleaving, idiomatic parser combinators

  • nixos-unstable -

pkgs.sbclPackages.cl-cffi-gtk-glib

pkgs.python312Packages.python-hglib

Library with a fast, convenient interface to Mercurial. It uses Mercurial’s command server for communication with hg

  • nixos-unstable -

pkgs.python313Packages.python-hglib

Library with a fast, convenient interface to Mercurial. It uses Mercurial’s command server for communication with hg

  • nixos-unstable -

pkgs.haskellPackages.gtk2hs-cast-glib

A type class for cast functions of Gtk2hs: glib package

pkgs.chickenPackages_5.chickenEggs.taglib

Bindings to taglib

  • nixos-unstable -

pkgs.python312Packages.locationsharinglib

Python package to retrieve coordinates from a Google account

  • nixos-unstable -

pkgs.python313Packages.locationsharinglib

Python package to retrieve coordinates from a Google account

  • nixos-unstable -

pkgs.tests.pkg-config.defaultPkgConfigPackages.taglib

Test whether taglib-2.1.1 exposes pkg-config modules taglib

  • nixos-unstable -
    • nixpkgs-unstable

pkgs.tests.hardeningFlags.glibcxxassertionsStdenvUnsupp

  • nixos-unstable -
    • nixpkgs-unstable

pkgs.tests.pkg-config.defaultPkgConfigPackages.taglib_c

Test whether taglib-2.1.1 exposes pkg-config modules taglib_c

  • nixos-unstable -
    • nixpkgs-unstable

pkgs.tests.pkg-config.defaultPkgConfigPackages."gio-2.0"

Test whether glib-2.84.4 exposes pkg-config modules gio-2.0

  • nixos-unstable -
    • nixpkgs-unstable

pkgs.tests.hardeningFlags.glibcxxassertionsExplicitEnabled

  • nixos-unstable -
    • nixpkgs-unstable

pkgs.tests.hardeningFlags-gcc.glibcxxassertionsStdenvUnsupp

  • nixos-unstable -
    • nixpkgs-unstable

pkgs.tests.hardeningFlags.glibcxxassertionsExplicitDisabled

  • nixos-unstable -
    • nixpkgs-unstable

pkgs.tests.pkg-config.defaultPkgConfigPackages.poppler-glib

Test whether poppler-glib-25.07.0 exposes pkg-config modules poppler-glib

  • nixos-unstable -
    • nixpkgs-unstable

pkgs.tests.pkg-config.defaultPkgConfigPackages."gobject-2.0"

Test whether glib-2.84.4 exposes pkg-config modules gobject-2.0

  • nixos-unstable -
    • nixpkgs-unstable

pkgs.tests.pkg-config.defaultPkgConfigPackages."gthread-2.0"

Test whether glib-2.84.4 exposes pkg-config modules gthread-2.0

  • nixos-unstable -
    • nixpkgs-unstable

pkgs.tests.hardeningFlags-clang.glibcxxassertionsStdenvUnsupp

  • nixos-unstable -
    • nixpkgs-unstable

pkgs.tests.hardeningFlags-gcc.glibcxxassertionsExplicitEnabled

  • nixos-unstable -
    • nixpkgs-unstable

pkgs.tests.hardeningFlags-gcc.glibcxxassertionsExplicitDisabled

  • nixos-unstable -
    • nixpkgs-unstable

pkgs.tests.hardeningFlags-clang.glibcxxassertionsExplicitEnabled

  • nixos-unstable -
    • nixpkgs-unstable

pkgs.tests.hardeningFlags-clang.glibcxxassertionsExplicitDisabled

  • nixos-unstable -
    • nixpkgs-unstable

pkgs.tests.pkg-config.defaultPkgConfigPackages."dbusmenu-glib-0.4"

Test whether libdbusmenu-glib-16.04.0 exposes pkg-config modules dbusmenu-glib-0.4

  • nixos-unstable -
    • nixpkgs-unstable

Package maintainers: 33

CVE-2025-5449
created 4 months ago
Libssh: integer overflow in libssh sftp server packet length validation leading to denial of service

A flaw was found in the SFTP server message decoding logic of libssh. The issue occurs due to an incorrect packet length check that allows an integer overflow when handling large payload sizes on 32-bit systems. This issue leads to failed memory allocation and causes the server process to crash, resulting in a denial of service.

Affected products

rhcos
libssh
  • =<0.11.1
libssh2

Matching in nixpkgs

pkgs.libssh

SSH client library

  • nixos-unstable -

pkgs.libssh2

Client-side C library implementing the SSH2 protocol

  • nixos-unstable -

pkgs.haskellPackages.libssh

libssh bindings

pkgs.python312Packages.ansible-pylibssh

Python bindings to client functionality of libssh specific to Ansible use case

  • nixos-unstable -

pkgs.python313Packages.ansible-pylibssh

Python bindings to client functionality of libssh specific to Ansible use case

  • nixos-unstable -

pkgs.tests.pkg-config.defaultPkgConfigPackages.libssh2

Test whether libssh2-1.11.1 exposes pkg-config modules libssh2

Package maintainers: 3

CVE-2025-8197
created 4 months ago
Libsoup: global-buffer-overflow

A global buffer overflow vulnerability was found in the soup_header_name_to_string function in Libsoup. The `soup_header_name_to_string` function does not validate the `name` parameter passed in, and directly accesses `soup_header_name_strings[name]`. The value of `name` is controllable, when `name` exceeds the index range of `soup_headr_name_string`, it will cause an out-of-bounds access.

Affected products

libsoup
libsoup3

Matching in nixpkgs

pkgs.libsoup_3

HTTP client/server library for GNOME

  • nixos-unstable -

pkgs.libsoup_2_4

HTTP client/server library for GNOME

  • nixos-unstable -

pkgs.tests.pkg-config.defaultPkgConfigPackages."libsoup-gnome-2.4"

Test whether libsoup-2.74.3 exposes pkg-config modules libsoup-gnome-2.4

  • nixos-unstable -
    • nixpkgs-unstable

Package maintainers: 6

CVE-2025-8114
created 4 months ago
: null pointer dereference in libssh kex session id calculation

A flaw was found in libssh, a library that implements the SSH protocol. When calculating the session ID during the key exchange (KEX) process, an allocation failure in cryptographic functions may lead to a NULL pointer dereference. This issue can cause the client or server to crash.

Affected products

rhcos
libssh
  • <0.11.3
libssh2

Matching in nixpkgs

pkgs.libssh

SSH client library

  • nixos-unstable -

pkgs.libssh2

Client-side C library implementing the SSH2 protocol

  • nixos-unstable -

pkgs.haskellPackages.libssh

libssh bindings

pkgs.python312Packages.ansible-pylibssh

Python bindings to client functionality of libssh specific to Ansible use case

  • nixos-unstable -

pkgs.python313Packages.ansible-pylibssh

Python bindings to client functionality of libssh specific to Ansible use case

  • nixos-unstable -

pkgs.tests.pkg-config.defaultPkgConfigPackages.libssh2

Test whether libssh2-1.11.1 exposes pkg-config modules libssh2

Package maintainers: 3

CVE-2025-53882
created 4 months ago
python-mailmans logrotate configuration allows potential escalation from mailman to root

A Reliance on Untrusted Inputs in a Security Decision vulnerability in the logrotate configuration for openSUSEs mailman3 package allows potential escalation from mailman to rootThis issue affects openSUSE Tumbleweed: from ? before 3.3.10-2.1.

Affected products

mailman3
  • <3.3.10-2.1

Matching in nixpkgs

pkgs.prometheus-mailman3-exporter

Mailman3 Exporter for Prometheus

  • nixos-unstable -

Package maintainers: 1

CVE-2025-8058
created 4 months ago
The regcomp function in the GNU C library version from …

The regcomp function in the GNU C library version from 2.4 to 2.41 is subject to a double free if some previous allocation fails. It can be accomplished either by a malloc failure or by using an interposed malloc that injects random malloc failures. The double free can allow buffer manipulation depending of how the regex is constructed. This issue affects all architectures and ABIs supported by the GNU C library.

Affected products

glibc
  • <2.43
  • <2.42

Matching in nixpkgs

pkgs.libc

GNU C Library

pkgs.glibc

GNU C Library

pkgs.iconv

GNU C Library

pkgs.getent

pkgs.locale

pkgs.mtrace

Perl script used to interpret and provide human readable output of the trace log contained in the file mtracedata, whose contents were produced by mtrace(3)

pkgs.getconf

pkgs.libiconv

  • nixos-unstable -

pkgs.glibcInfo

GNU Info manual of the GNU C Library

pkgs.glibc_multi

pkgs.glibcLocales

Locale information for the GNU C Library

pkgs.glibc_memusage

GNU C Library

pkgs.glibcLocalesUtf8

Locale information for the GNU C Library

pkgs.unixtools.getent

pkgs.unixtools.locale

pkgs.unixtools.getconf

pkgs.tests.hardeningFlags.glibcxxassertionsStdenvUnsupp

  • nixos-unstable -
    • nixpkgs-unstable

pkgs.tests.hardeningFlags.glibcxxassertionsExplicitEnabled

  • nixos-unstable -
    • nixpkgs-unstable

pkgs.tests.hardeningFlags-gcc.glibcxxassertionsStdenvUnsupp

  • nixos-unstable -
    • nixpkgs-unstable

pkgs.tests.hardeningFlags.glibcxxassertionsExplicitDisabled

  • nixos-unstable -
    • nixpkgs-unstable

pkgs.tests.hardeningFlags-clang.glibcxxassertionsStdenvUnsupp

  • nixos-unstable -
    • nixpkgs-unstable

pkgs.tests.hardeningFlags-gcc.glibcxxassertionsExplicitEnabled

  • nixos-unstable -
    • nixpkgs-unstable

pkgs.tests.hardeningFlags-gcc.glibcxxassertionsExplicitDisabled

  • nixos-unstable -
    • nixpkgs-unstable

pkgs.tests.hardeningFlags-clang.glibcxxassertionsExplicitEnabled

  • nixos-unstable -
    • nixpkgs-unstable

pkgs.tests.hardeningFlags-clang.glibcxxassertionsExplicitDisabled

  • nixos-unstable -
    • nixpkgs-unstable

Package maintainers: 2

CVE-2025-6018
created 4 months ago
Pam-config: lpe from unprivileged to allow_active in pam

A Local Privilege Escalation (LPE) vulnerability has been discovered in pam-config within Linux Pluggable Authentication Modules (PAM). This flaw allows an unprivileged local attacker (for example, a user logged in via SSH) to obtain the elevated privileges normally reserved for a physically present, "allow_active" user. The highest risk is that the attacker can then perform all allow_active yes Polkit actions, which are typically restricted to console users, potentially gaining unauthorized control over system configurations, services, or other sensitive operations.

Affected products

pam
  • <1.1.8-24.71.1

Matching in nixpkgs

pkgs.pam

Pluggable Authentication Modules, a flexible mechanism for authenticating user

  • nixos-unstable -

pkgs.ipam

Cli based IPAM written in Go with PowerDNS support

pkgs.opam

Package manager for OCaml

  • nixos-unstable -

pkgs.paml

Phylogenetic Analysis by Maximum Likelihood (PAML)

  • nixos-unstable -

pkgs.dspam

Community Driven Antispam Filter

  • nixos-unstable -

pkgs.pamix

Pulseaudio terminal mixer

  • nixos-unstable -

pkgs.rspamd

Advanced spam filtering system

  • nixos-unstable -

pkgs.openpam

Open source PAM library that focuses on simplicity, correctness, and cleanliness

pkgs.pam_p11

Authentication with PKCS#11 modules

  • nixos-unstable -

pkgs.pam_u2f

PAM module for allowing authentication with a U2F device

  • nixos-unstable -

pkgs.pamixer

Pulseaudio command line mixer

  • nixos-unstable -

pkgs.dopamine

Audio player that keeps it simple

pkgs.pam_krb5

PAM module allowing PAM-aware applications to authenticate users by performing an AS exchange with a Kerberos KDC

pkgs.pam_rssh

PAM module for authenticating via ssh-agent, written in Rust

  • nixos-unstable -

pkgs.pam_ussh

PAM module to authenticate using SSH certificates

pkgs.linux-pam

Pluggable Authentication Modules, a flexible mechanism for authenticating user

  • nixos-unstable -

pkgs.ncpamixer

Terminal mixer for PulseAudio inspired by pavucontrol

  • nixos-unstable -

pkgs.opam2json

Convert opam file syntax to JSON

  • nixos-unstable -

pkgs.pam_dp9ik

dp9ik pam module

  • nixos-unstable -

pkgs.pam_gnupg

Unlock GnuPG keys on login

  • nixos-unstable -

pkgs.pam_mount

PAM module to mount volumes for a user session

  • nixos-unstable -

pkgs.pam_mysql

PAM authentication module against a MySQL database

pkgs.pam_pgsql

Support to authenticate against PostgreSQL for PAM-enabled appliations

pkgs.pamtester

Utility program to test the PAM facility

  • nixos-unstable -

pkgs.pam_ccreds

PAM module to locally authenticate using an enterprise identity when the network is unavailable

  • nixos-unstable -
    • nixpkgs-unstable 10

pkgs.pam_mktemp

PAM for login service to provide per-user private directories

  • nixos-unstable -

pkgs.pam_rundir

Provide user runtime directory on Linux systems

  • nixos-unstable -

pkgs.pam_tmpdir

PAM module for creating safe per-user temporary directories

  • nixos-unstable -

pkgs.yubico-pam

Yubico PAM module

  • nixos-unstable -

pkgs.pam-watchid

PAM plugin module that allows the Apple Watch to be used for authentication

pkgs.apparmor-pam

Mandatory access control system - PAM service

  • nixos-unstable -

pkgs.opam-publish

Tool to ease contributions to opam repositories

  • nixos-unstable -

pkgs.pam-reattach

Reattach to the user's GUI session on macOS during authentication (for Touch ID support in tmux)

  • nixos-unstable -

pkgs.spamassassin

Open-Source Spam Filter

  • nixos-unstable -

pkgs.nss_pam_ldapd

LDAP identity and authentication for NSS/PAM

  • nixos-unstable -

pkgs.libpam-wrapper

Wrapper for testing PAM modules

  • nixos-unstable -

pkgs.opam-installer

Handle (un)installation from opam install files

  • nixos-unstable -

pkgs.pam-honeycreds

PAM module that sends warnings when fake passwords are used

  • nixos-unstable -

pkgs.rspamd-trainer

Grabs messages from a spam mailbox via IMAP and feeds them to Rspamd for training

pkgs.pam_ssh_agent_auth

PAM module for authentication through the SSH agent

  • nixos-unstable -

pkgs.rubyPackages.rpam2

pkgs.decode-spam-headers

Script that helps you understand why your E-Mail ended up in Spam

pkgs.haskellPackages.pam

Haskell binding for C PAM API

pkgs.luaPackages.lua-pam

Lua module for PAM authentication

pkgs.google-authenticator

Two-step verification, with pam module

  • nixos-unstable -

pkgs.lua51Packages.lua-pam

Lua module for PAM authentication

pkgs.lua52Packages.lua-pam

Lua module for PAM authentication

pkgs.lua53Packages.lua-pam

Lua module for PAM authentication

pkgs.rubyPackages_3_1.rpam2

pkgs.rubyPackages_3_2.rpam2

pkgs.rubyPackages_3_3.rpam2

pkgs.rubyPackages_3_4.rpam2

pkgs.kdePackages.kwallet-pam

PAM Integration with KWallet - Unlock KWallet when you login

  • nixos-unstable -

pkgs.opensmtpd-filter-rspamd

OpenSMTPD filter integration for the Rspamd daemon

  • nixos-unstable -

pkgs.python312Packages.pamqp

RabbitMQ Focused AMQP low-level library

  • nixos-unstable -

pkgs.python313Packages.pamqp

RabbitMQ Focused AMQP low-level library

  • nixos-unstable -

pkgs.sbclPackages.cl-xmlspam

pkgs.python312Packages.pamela

PAM interface using ctypes

  • nixos-unstable -

pkgs.python313Packages.pamela

PAM interface using ctypes

  • nixos-unstable -

pkgs.stalwart-mail-spam-filter

Secure & modern all-in-one mail server Stalwart (spam-filter module)

  • nixos-unstable -

pkgs.python312Packages.pypamtest

Wrapper for testing PAM modules

  • nixos-unstable -

pkgs.python313Packages.pypamtest

Wrapper for testing PAM modules

  • nixos-unstable -

pkgs.python312Packages.python-pam

Python pam module

  • nixos-unstable -

pkgs.python313Packages.python-pam

Python pam module

  • nixos-unstable -

pkgs.wordpressPackages.plugins.antispam-bee

  • nixos-unstable -

pkgs.matrix-synapse-plugins.matrix-synapse-pam

PAM auth provider for the Synapse Matrix server

  • nixos-unstable -

pkgs.matrix-synapse-plugins.synapse-http-antispam

Synapse module that forwards spam checking to an HTTP server

  • nixos-unstable -

pkgs.matrix-synapse-plugins.matrix-synapse-mjolnir-antispam

AntiSpam / Banlist plugin to be used with mjolnir

  • nixos-unstable -

pkgs.vscode-extensions.fabiospampinato.vscode-open-in-github

VS Code extension to open the current project or file in github.com

  • nixos-unstable -

Package maintainers: 55

CVE-2025-4878
created 4 months ago
Libssh: use of uninitialized variable in privatekey_from_file()

A vulnerability was found in libssh, where an uninitialized variable exists under certain conditions in the privatekey_from_file() function. This flaw can be triggered if the file specified by the filename doesn't exist and may lead to possible signing failures or heap corruption.

Affected products

rhcos
libssh
  • <0.11.2
libssh2

Matching in nixpkgs

pkgs.libssh

SSH client library

  • nixos-unstable -

pkgs.libssh2

Client-side C library implementing the SSH2 protocol

  • nixos-unstable -

pkgs.haskellPackages.libssh

libssh bindings

pkgs.python312Packages.ansible-pylibssh

Python bindings to client functionality of libssh specific to Ansible use case

  • nixos-unstable -

pkgs.python313Packages.ansible-pylibssh

Python bindings to client functionality of libssh specific to Ansible use case

  • nixos-unstable -

pkgs.tests.pkg-config.defaultPkgConfigPackages.libssh2

Test whether libssh2-1.11.1 exposes pkg-config modules libssh2

Package maintainers: 3