Nixpkgs Security Tracker

Login with GitHub

Suggestion detail

Untriaged
Permalink CVE-2024-4437
7.5 HIGH
  • CVSS version: 3.1
  • Attack vector (AV): NETWORK
  • Attack complexity (AC): LOW
  • Privileges required (PR): NONE
  • User interaction (UI): NONE
  • Scope (S): UNCHANGED
  • Confidentiality impact (C): NONE
  • Integrity impact (I): NONE
  • Availability impact (A): HIGH
created 6 months ago
Etcd: incomplete fix for cve-2021-44716 in openstack platform

The etcd package distributed with the Red Hat OpenStack platform has an incomplete fix for CVE-2021-44716. This issue occurs because the etcd package in the Red Hat OpenStack platform is using http://golang.org/x/net/http2 instead of the one provided by Red Hat Enterprise Linux versions, meaning it should be updated at compile time instead.

References

Affected products

etcd
  • ==3.3.23
  • *

Matching in nixpkgs

pkgs.netcdf

Libraries for the Unidata network Common Data Format

  • nixos-unstable -

pkgs.pnetcdf

Parallel I/O Library for NetCDF File Access

  • nixos-unstable -

pkgs.etcd_3_4

Distributed reliable key-value store for the most critical data of a distributed system

  • nixos-unstable -

pkgs.etcd_3_5

Distributed reliable key-value store for the most critical data of a distributed system

  • nixos-unstable -

pkgs.etcd_3_6

Distributed reliable key-value store for the most critical data of a distributed system

  • nixos-unstable -

pkgs.netcdf-mpi

Libraries for the Unidata network Common Data Format

  • nixos-unstable -

Package maintainers