Nixpkgs security tracker
6.4 MEDIUM
- CVSS version (CVSS): 3.1
- Attack Vector (AV): Local (L)
- Attack Complexity (AC): High (H)
- Privileges Required (PR): High (H)
- User Interaction (UI): None (N)
- Scope (S): Unchanged (U)
- Confidentiality (C): High (H)
- Integrity (I): High (H)
- Availability (A): High (H)
- Modified Attack Vector (MAV): Local (L)
- Modified Attack Complexity (MAC): High (H)
- Modified Privileges Required (MPR): High (H)
- Modified User Interaction (MUI): None (N)
- Modified Confidentiality (MC): High (H)
- Modified Scope (MS): Unchanged (U)
- Modified Integrity (MI): High (H)
- Modified Availability (MA): High (H)
by @LeSuisse Activity log
- Created suggestion
- @LeSuisse ignored package udev
In nspawn in systemd 233 through 259 before 260, an …
In nspawn in systemd 233 through 259 before 260, an escape-to-host action can occur via a crafted optional config file.
Affected products
- <260
Matching in nixpkgs
pkgs.systemd
System and service manager for Linux
pkgs.systemd-lsp
Language server implementation for systemd unit files made in Rust
-
nixos-unstable 2026.01.06
- nixpkgs-unstable 2026.01.06
- nixos-unstable-small 2026.01.06
-
nixos-25.11 2025.10.16
- nixos-25.11-small 2025.10.16
- nixpkgs-25.11-darwin 2025.10.16
pkgs.systemdLibs
System and service manager for Linux
pkgs.rofi-systemd
Control your systemd units using rofi
pkgs.systemd-wait
Wait for a systemd unit to enter a specific state
-
nixos-unstable 0.1+2018-10-05
- nixpkgs-unstable 0.1+2018-10-05
- nixos-unstable-small 0.1+2018-10-05
-
nixos-25.11 0.1+2018-10-05
- nixos-25.11-small 0.1+2018-10-05
- nixpkgs-25.11-darwin 0.1+2018-10-05
pkgs.systemdUkify
System and service manager for Linux
pkgs.systemdgenie
Systemd management utility
-
nixos-unstable 0.99.0-unstable-2026-03-07
- nixpkgs-unstable 0.99.0-unstable-2026-03-07
- nixos-unstable-small 0.99.0-unstable-2026-03-07
-
nixos-25.11 0.99.0-unstable-2025-10-11
- nixos-25.11-small 0.99.0-unstable-2025-10-11
- nixpkgs-25.11-darwin 0.99.0-unstable-2025-10-11
pkgs.systemdMinimal
System and service manager for Linux
pkgs.systemd-netlogd
Forwards messages from the journal to other hosts over the network
pkgs.systemd-bootchart
Boot performance graphing tool from systemd
pkgs.systemd-credsubst
envsubst for systemd credentials
pkgs.systemd-manager-tui
Program for managing systemd services through a TUI
pkgs.systemd-journal2gelf
Export entries from systemd's journal and send them to a graylog server using gelf
-
nixos-unstable 0-unstable-2023-03-10
- nixpkgs-unstable 0-unstable-2023-03-10
- nixos-unstable-small 0-unstable-2023-03-10
-
nixos-25.11 0-unstable-2023-03-10
- nixos-25.11-small 0-unstable-2023-03-10
- nixpkgs-25.11-darwin 0-unstable-2023-03-10
pkgs.systemd-lock-handler
Translates systemd-system lock/sleep signals into systemd-user target activations
pkgs.ocamlPackages.systemd
OCaml module for native access to the systemd facilities
pkgs.phpExtensions.systemd
PHP extension allowing native interaction with systemd and its journal
-
nixos-unstable 0.1.2-unstable-2018-06-11
- nixpkgs-unstable 0.1.2-unstable-2018-06-11
- nixos-unstable-small 0.1.2-unstable-2018-06-11
-
nixos-25.11 0.1.2-unstable-2018-06-11
- nixos-25.11-small 0.1.2-unstable-2018-06-11
- nixpkgs-25.11-darwin 0.1.2-unstable-2018-06-11
pkgs.haskellPackages.systemd
Systemd facilities (Socket activation, Notify)
pkgs.php82Extensions.systemd
PHP extension allowing native interaction with systemd and its journal
-
nixos-unstable 0.1.2-unstable-2018-06-11
- nixpkgs-unstable 0.1.2-unstable-2018-06-11
- nixos-unstable-small 0.1.2-unstable-2018-06-11
-
nixos-25.11 0.1.2-unstable-2018-06-11
- nixos-25.11-small 0.1.2-unstable-2018-06-11
- nixpkgs-25.11-darwin 0.1.2-unstable-2018-06-11
pkgs.php83Extensions.systemd
PHP extension allowing native interaction with systemd and its journal
-
nixos-unstable 0.1.2-unstable-2018-06-11
- nixpkgs-unstable 0.1.2-unstable-2018-06-11
- nixos-unstable-small 0.1.2-unstable-2018-06-11
-
nixos-25.11 0.1.2-unstable-2018-06-11
- nixos-25.11-small 0.1.2-unstable-2018-06-11
- nixpkgs-25.11-darwin 0.1.2-unstable-2018-06-11
pkgs.php84Extensions.systemd
PHP extension allowing native interaction with systemd and its journal
-
nixos-unstable 0.1.2-unstable-2018-06-11
- nixpkgs-unstable 0.1.2-unstable-2018-06-11
- nixos-unstable-small 0.1.2-unstable-2018-06-11
-
nixos-25.11 0.1.2-unstable-2018-06-11
- nixos-25.11-small 0.1.2-unstable-2018-06-11
- nixpkgs-25.11-darwin 0.1.2-unstable-2018-06-11
pkgs.php85Extensions.systemd
PHP extension allowing native interaction with systemd and its journal
-
nixos-unstable 0.1.2-unstable-2018-06-11
- nixpkgs-unstable 0.1.2-unstable-2018-06-11
- nixos-unstable-small 0.1.2-unstable-2018-06-11
-
nixos-25.11 0.1.2-unstable-2018-06-11
- nixos-25.11-small 0.1.2-unstable-2018-06-11
- nixpkgs-25.11-darwin 0.1.2-unstable-2018-06-11
pkgs.systemd-language-server
Language Server for Systemd unit files
pkgs.update-systemd-resolved
Helper script for OpenVPN to directly update the DNS settings of a link through systemd-resolved via DBus
pkgs.haskellPackages.systemd-api
systemd bindings
pkgs.nagiosPlugins.check_systemd
Nagios / Icinga monitoring plugin to check systemd for failed units
pkgs.prometheus-systemd-exporter
Exporter for systemd unit metrics
pkgs.haskellPackages.warp-systemd
Socket activation and other systemd integration for the Warp web server (WAI)
pkgs.ocamlPackages_latest.systemd
OCaml module for native access to the systemd facilities
pkgs.gnomeExtensions.systemd-status
Show systemd system state
pkgs.gnomeExtensions.systemd-manager
GNOME Shell extension to manage systemd services
pkgs.python312Packages.systemd-python
Python module for native access to the systemd facilities
pkgs.python313Packages.systemd-python
Python module for native access to the systemd facilities
pkgs.python314Packages.systemd-python
Python module for native access to the systemd facilities
pkgs.haskellPackages.libsystemd-journal
Haskell bindings to libsystemd-journal
pkgs.python312Packages.systemdunitparser
SystemdUnitParser is an extension to Python's configparser.RawConfigParser to properly parse systemd unit files
pkgs.python313Packages.systemdunitparser
SystemdUnitParser is an extension to Python's configparser.RawConfigParser to properly parse systemd unit files
pkgs.python314Packages.systemdunitparser
SystemdUnitParser is an extension to Python's configparser.RawConfigParser to properly parse systemd unit files
pkgs.python312Packages.jupyterhub-systemdspawner
JupyterHub Spawner using systemd for resource isolation
pkgs.python313Packages.jupyterhub-systemdspawner
JupyterHub Spawner using systemd for resource isolation
pkgs.python314Packages.jupyterhub-systemdspawner
JupyterHub Spawner using systemd for resource isolation
pkgs.gnomeExtensions.systemd-offline-update-indicator
Show an indicator for pending systemd offline updates.
pkgs.tests.pkg-config.defaultPkgConfigPackages.libudev
Test whether systemd-259.3 exposes pkg-config modules libudev
pkgs.tests.pkg-config.defaultPkgConfigPackages.libsystemd
Test whether systemd-259.3 exposes pkg-config modules libsystemd
Package maintainers
-
@linsui linsui <linsui555@gmail.com>
-
@doronbehar Doron Behar <me@doronbehar.com>
-
@honnip Jung seungwoo <me@honnip.page>
-
@sternenseemann Lukas Epple <sternenseemann@systemli.org>
-
@mpscholten Marc Scholten <marc@digitallyinduced.com>
-
@symphorien Guillaume Girol <symphorien_nixpkgs@xlumurb.eu>
-
@atagen atagen
-
@aanderse Aaron Andersen <aaron@fosslib.net>
-
@piotrkwiecinski Piotr Kwiecinski <piokwiecinski+nixpkgs@gmail.com>
-
@talyz Kim Lindberger <kim.lindberger@gmail.com>
-
@Ma27 Maximilian Bosch <maximilian@mbosch.me>
-
@chkno Scott Worley <scottworley@scottworley.com>
-
@RaitoBezarius Ryan Lahfa <ryan@lahfa.xyz>
-
@colonelpanic8 Ivan Malison <IvanMalison@gmail.com>
-
@balsoft Alexander Bantyev <balsoft75@gmail.com>
-
@infinisil Silvan Mosberger <contact@infinisil.com>
-
@pyrox0 Pyrox <pyrox@pyrox.dev>
-
@ElvishJerricco Will Fancher <elvishjerricco@gmail.com>
-
@nikstur nikstur <nikstur@outlook.com>
-
@arianvp Arian van Putten <arian.vanputten@gmail.com>
-
@flokli Florian Klink <flokli@flokli.de>
-
@LordGrimmauld Sören Bender <soeren@benjos.de>
-
@brianmcgillion Brian McGillion <bmg.avoin@gmail.com>
-
@veehaitch Vincent Haupert <mail@vincent-haupert.de>
-
@fpletz Franz Pletz <fpletz@fnordicwalking.de>
-
@GaetanLepage Gaetan Lepage <gaetan@glepage.com>
-
@liff Olli Helenius <liff@iki.fi>
-
@mahyarmirrashed Mahyar Mirrashed <mah.mirr@gmail.com>
-
@VuiMuich Johannes Mayrhofer <vuimuich@quantentunnel.de>
-
@getchoo Seth Flynn <getchoo@tuta.io>
-
@benley Benjamin Staffin <benley@gmail.com>
-
@pasqui23 pasqui23 <p3dimaria@hotmail.it>
-
@eadwu Edmund Wu <edmund.wu@protonmail.com>
-
@kamadorueda Kevin Amado <kamadorueda@gmail.com>