Suggestions search

All statuses

Filter by:

With package: getent

Found 2 matching suggestions

View:

Compact

Detailed

Untriaged

Permalink CVE-2026-18374

4.9 MEDIUM

CVSS version (CVSS): 3.1
Attack Vector (AV): Local (L)
Attack Complexity (AC): High (H)
Privileges Required (PR): None (N)
User Interaction (UI): None (N)
Scope (S): Unchanged (U)
Confidentiality (C): Low (L)
Integrity (I): Low (L)
Availability (A): Low (L)
Modified Attack Vector (MAV): Local (L)
Modified Attack Complexity (MAC): High (H)
Modified Privileges Required (MPR): None (N)
Modified User Interaction (MUI): None (N)
Modified Confidentiality (MC): Low (L)
Modified Scope (MS): Unchanged (U)
Modified Integrity (MI): Low (L)
Modified Availability (MA): Low (L)

created 2 weeks, 3 days ago Activity log

Created suggestion 2 weeks, 3 days ago

Passing an effectively empty string to the `,ccs=` syntax extension …

Passing an effectively empty string to the `,ccs=` syntax extension of the mode argument in the `fopen` function in the GNU C Library version 2.45 or earlier may result in a heap buffer overflow when the mode string input to the function is attacker controlled. This usage pattern is not seen in applications in common GNU/Linux distributions and applications that process user-supplied values for `ccs` should not pass them through without validation.

References

https://sourceware.org/bugzilla/show_bug.cgi?id=34574 issue-tracking
https://sourceware.org/git/?p=glibc.git;a=blob_plain;f=advisories/GLIBC-SA-2026… vendor-advisory
http://www.openwall.com/lists/oss-security/2026/08/27/6

Affected products

glibc

<2.45

Matching in nixpkgs

pkgs.libc

GNU C Library

nixos-unstable 2.42-67
- nixpkgs-unstable 2.42-67
- nixos-unstable-small 2.42-84
nixos-26.05 2.42-67
- nixos-26.05-small 2.42-67
- nixpkgs-26.05-darwin 2.42-67

pkgs.glibc

GNU C Library

nixos-unstable 2.42-67
- nixpkgs-unstable 2.42-67
- nixos-unstable-small 2.42-84
nixos-26.05 2.42-67
- nixos-26.05-small 2.42-67
- nixpkgs-26.05-darwin 2.42-67

pkgs.iconv

GNU C Library

nixos-unstable 2.42-67
- nixpkgs-unstable 2.42-67
- nixos-unstable-small 2.42-84
nixos-26.05 2.42-67
- nixos-26.05-small 2.42-67
- nixpkgs-26.05-darwin 2.42-67

pkgs.getent

None

nixos-unstable 2.42-67
- nixpkgs-unstable 2.42-67
- nixos-unstable-small 2.42-84
nixos-26.05 2.42-67
- nixos-26.05-small 2.42-67
- nixpkgs-26.05-darwin 2.42-67

pkgs.locale

None

nixos-unstable 2.42-67
- nixpkgs-unstable 2.42-67
- nixos-unstable-small 2.42-84
nixos-26.05 2.42-67
- nixos-26.05-small 2.42-67
- nixpkgs-26.05-darwin 2.42-67

pkgs.mtrace

Perl script used to interpret and provide human readable output of the trace log contained in the file mtracedata, whose contents were produced by mtrace(3)

nixos-unstable 2.42-67
- nixpkgs-unstable 2.42-67
- nixos-unstable-small 2.42-84
nixos-26.05 2.42-67
- nixos-26.05-small 2.42-67
- nixpkgs-26.05-darwin 2.42-67

pkgs.getconf

None

nixos-unstable 2.42-67
- nixpkgs-unstable 2.42-67
- nixos-unstable-small 2.42-84
nixos-26.05 2.42-67
- nixos-26.05-small 2.42-67
- nixpkgs-26.05-darwin 2.42-67

pkgs.libiconv

None

nixos-unstable 2.42
- nixpkgs-unstable 2.42
- nixos-unstable-small 2.42
nixos-26.05 2.42
- nixos-26.05-small 2.42
- nixpkgs-26.05-darwin 2.42

pkgs.glibcInfo

GNU Info manual of the GNU C Library

nixos-unstable 2.42-67
- nixpkgs-unstable 2.42-67
- nixos-unstable-small 2.42-84
nixos-26.05 2.42-67
- nixos-26.05-small 2.42-67
- nixpkgs-26.05-darwin 2.42-67

pkgs.glibc_multi

None

nixos-unstable 2.42-67
- nixpkgs-unstable 2.42-67
- nixos-unstable-small 2.42-84
nixos-26.05 2.42-67
- nixos-26.05-small 2.42-67
- nixpkgs-26.05-darwin 2.42-67

pkgs.glibcLocales

Locale information for the GNU C Library

nixos-unstable 2.42-67
- nixpkgs-unstable 2.42-67
- nixos-unstable-small 2.42-84
nixos-26.05 2.42-67
- nixos-26.05-small 2.42-67
- nixpkgs-26.05-darwin 2.42-67

pkgs.glibc_memusage

GNU C Library

nixos-unstable 2.42-67
- nixpkgs-unstable 2.42-67
- nixos-unstable-small 2.42-84
nixos-26.05 2.42-67
- nixos-26.05-small 2.42-67
- nixpkgs-26.05-darwin 2.42-67

pkgs.glibcLocalesUtf8

Locale information for the GNU C Library

nixos-unstable 2.42-67
- nixpkgs-unstable 2.42-67
- nixos-unstable-small 2.42-84
nixos-26.05 2.42-67
- nixos-26.05-small 2.42-67
- nixpkgs-26.05-darwin 2.42-67

pkgs.unixtools.getent

None

nixos-unstable 2.42-67
- nixpkgs-unstable 2.42-67
- nixos-unstable-small 2.42-84
nixos-26.05 2.42-67
- nixos-26.05-small 2.42-67
- nixpkgs-26.05-darwin 2.42-67

pkgs.unixtools.locale

None

nixos-unstable 2.42-67
- nixpkgs-unstable 2.42-67
- nixos-unstable-small 2.42-84
nixos-26.05 2.42-67
- nixos-26.05-small 2.42-67
- nixpkgs-26.05-darwin 2.42-67

pkgs.unixtools.getconf

None

nixos-unstable 2.42-67
- nixpkgs-unstable 2.42-67
- nixos-unstable-small 2.42-84
nixos-26.05 2.42-67
- nixos-26.05-small 2.42-67
- nixpkgs-26.05-darwin 2.42-67

pkgs.minimal-bootstrap.glibc

The GNU C Library

nixos-unstable 2.42
- nixpkgs-unstable 2.42
- nixos-unstable-small 2.42
nixos-26.05 2.42
- nixos-26.05-small 2.42
- nixpkgs-26.05-darwin 2.42

pkgs.minimal-bootstrap.glibc-headers

The GNU C Library

nixos-unstable -
- nixos-unstable-small 2.42

Package maintainers

@balsoft Alexander Bantyev <balsoft75@gmail.com>
@ConnorBaker Connor Baker <ConnorBaker01@gmail.com>
@andir Andreas Rammhold <andreas@rammhold.de>
@Ma27 Maximilian Bosch <maximilian@mbosch.me>
@leona-ya Leona Maroni <nix@leona.is>
@pyrox0 Pyrox <pyrox@pyrox.dev>
@Ericson2314 John Ericson <John.Ericson@Obsidian.Systems>
@alejandrosame Alejandro Sánchez Medina <alejandrosanchzmedina@gmail.com>
@siraben Siraphob Phipathananunth <bensiraphob@gmail.com>
@06kellyjac Jack <hello+nixpkgs@j-k.io>
@emilytrau Emily Trau <emily+nix@downunderctf.com>
@Gskartwii Aleksi Hannula <ahannula4@gmail.com>

Untriaged

Permalink CVE-2025-0577

4.8 MEDIUM

CVSS version (CVSS): 3.1
Attack Vector (AV): Network (N)
Attack Complexity (AC): High (H)
Privileges Required (PR): None (N)
User Interaction (UI): None (N)
Scope (S): Unchanged (U)
Confidentiality (C): Low (L)
Integrity (I): Low (L)
Availability (A): None (N)
Modified Attack Vector (MAV): Network (N)
Modified Attack Complexity (MAC): High (H)
Modified Privileges Required (MPR): None (N)
Modified User Interaction (MUI): None (N)
Modified Confidentiality (MC): Low (L)
Modified Scope (MS): Unchanged (U)
Modified Integrity (MI): Low (L)
Modified Availability (MA): None (N)

updated 6 months, 3 weeks ago by @pyrox0 Activity log

Created suggestion 6 months, 3 weeks ago
@pyrox0 ignored
13 packages
- minimal-bootstrap.glibc
- tests.hardeningFlags.glibcxxassertionsStdenvUnsupp
- tests.hardeningFlags.glibcxxassertionsExplicitEnabled
- tests.hardeningFlags-gcc.glibcxxassertionsStdenvUnsupp
- tests.hardeningFlags.glibcxxassertionsExplicitDisabled
- tests.hardeningFlags-clang.glibcxxassertionsStdenvUnsupp
- tests.hardeningFlags-gcc.glibcxxassertionsExplicitEnabled
- tests.hardeningFlags.allExplicitDisabledGlibcxxAssertions
- tests.hardeningFlags-gcc.glibcxxassertionsExplicitDisabled
- tests.hardeningFlags-clang.glibcxxassertionsExplicitEnabled
- tests.hardeningFlags-clang.glibcxxassertionsExplicitDisabled
- tests.hardeningFlags-gcc.allExplicitDisabledGlibcxxAssertions
- tests.hardeningFlags-clang.allExplicitDisabledGlibcxxAssertions
6 months, 3 weeks ago

Glibc: vdso getrandom acceleration may return predictable randomness

An insufficient entropy vulnerability was found in glibc. The getrandom and arc4random family of functions may return predictable randomness if these functions are called again after the fork, which happens concurrently with a call to any of these functions.

References

https://access.redhat.com/security/cve/CVE-2025-0577 x_refsource_REDHATvdb-entry
RHBZ#2338871 x_refsource_REDHATissue-tracking

Affected products

glibc

=<2.39-33.fc40
=<2.40-17.fc41

Matching in nixpkgs

pkgs.libc

GNU C Library

nixos-unstable 2.42-47
- nixpkgs-unstable 2.42-47
- nixos-unstable-small 2.42-47

pkgs.glibc

GNU C Library

nixos-unstable 2.42-47
- nixpkgs-unstable 2.42-47
- nixos-unstable-small 2.42-47

pkgs.iconv

GNU C Library

nixos-unstable 2.42-47
- nixpkgs-unstable 2.42-47
- nixos-unstable-small 2.42-47

pkgs.getent

None

nixos-unstable 2.42-47
- nixpkgs-unstable 2.42-47
- nixos-unstable-small 2.42-47

pkgs.locale

None

nixos-unstable 2.42-47
- nixpkgs-unstable 2.42-47
- nixos-unstable-small 2.42-47

pkgs.mtrace

Perl script used to interpret and provide human readable output of the trace log contained in the file mtracedata, whose contents were produced by mtrace(3)