Nixpkgs Security Tracker

Login with GitHub

Suggestions search

All statuses
Filter by:
With package: aws-lambda-rie

Found 2 matching suggestions

Untriaged
Permalink CVE-2023-29403
created 5 months, 2 weeks ago
Unsafe behavior in setuid/setgid binaries in runtime

On Unix platforms, the Go runtime does not behave differently when a binary is run with the setuid/setgid bits. This can be dangerous in certain cases, such as when dumping memory state, or assuming the status of standard i/o file descriptors. If a setuid/setgid binary is executed with standard I/O file descriptors closed, opening any files can result in unexpected content being read or written with elevated privileges. Similarly, if a setuid/setgid program is terminated, either via panic or signal, it may leak the contents of its registers.

References

Affected products

runtime
  • <1.20.5
  • <1.19.10

Matching in nixpkgs

pkgs.onnxruntime

Cross-platform, high performance scoring engine for ML models

  • nixos-unstable -

pkgs.kata-runtime

Lightweight Virtual Machines like containers that provide the workload isolation and security of VMs

  • nixos-unstable -

pkgs.aws-lambda-rie

Locally test Lambda functions packaged as container images

  • nixos-unstable -

pkgs.dotnetCorePackages.runtime_9_0

Core functionality needed to create .NET Core projects, that is shared between Visual Studio and CLI (wrapper)

  • nixos-unstable -
Untriaged
Permalink CVE-2024-35758
created 5 months, 2 weeks ago
WordPress Interface theme <= 3.1.0 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Theme Horse Interface allows Stored XSS.This issue affects Interface: from n/a through 3.1.0.

References

Affected products

interface
  • =<3.1.0

Matching in nixpkgs

pkgs.aws-lambda-rie

Locally test Lambda functions packaged as container images

  • nixos-unstable -

Package maintainers