Nixpkgs Security Tracker

nixos-unstable 1.20180408
- nixpkgs-unstable 1.20180408
- nixos-unstable-small 1.20180408
nixos-25.11 1.20180408
- nixos-25.11-small 1.20180408
- nixpkgs-25.11-darwin 1.20180408

pkgs.typstPackages.shadowed_0_1_0

Box shadows for Typst

nixos-unstable 0.1.0
- nixpkgs-unstable 0.1.0
- nixos-unstable-small 0.1.0
nixos-25.11 0.1.0
- nixos-25.11-small 0.1.0
- nixpkgs-25.11-darwin 0.1.0

pkgs.typstPackages.shadowed_0_1_1

Box shadows for Typst

nixos-unstable 0.1.1
- nixpkgs-unstable 0.1.1
- nixos-unstable-small 0.1.1
nixos-25.11 0.1.1
- nixos-25.11-small 0.1.1
- nixpkgs-25.11-darwin 0.1.1

pkgs.typstPackages.shadowed_0_1_2

Box shadows for Typst

nixos-unstable 0.1.2
- nixpkgs-unstable 0.1.2
- nixos-unstable-small 0.1.2
nixos-25.11 0.1.2
- nixos-25.11-small 0.1.2
- nixpkgs-25.11-darwin 0.1.2

pkgs.typstPackages.shadowed_0_2_0

Box shadows for Typst

nixos-unstable 0.2.0
- nixpkgs-unstable 0.2.0
- nixos-unstable-small 0.2.0
nixos-25.11 0.2.0
- nixos-25.11-small 0.2.0
- nixpkgs-25.11-darwin 0.2.0

pkgs.typstPackages.shadowed_0_3_0

Box shadows for Typst

nixos-unstable -
- nixos-unstable-small 0.3.0

pkgs.wayfirePlugins.wayfire-shadows

Wayfire plugin that adds window shadows

pkgs.haskellPackages.Unixutils-shadow

A simple interface to shadow passwords (aka, shadow.h)

nixos-unstable 1.0.0
- nixpkgs-unstable 1.0.0
- nixos-unstable-small 1.0.0
nixos-25.11 1.0.0
- nixos-25.11-small 1.0.0
- nixpkgs-25.11-darwin 1.0.0

pkgs.obs-studio-plugins.obs-stroke-glow-shadow

OBS plugin to provide efficient Stroke, Glow, and Shadow effects on masked sources

nixos-unstable v1.5.2
- nixpkgs-unstable v1.5.2
- nixos-unstable-small v1.5.2
nixos-25.11 v1.5.2
- nixos-25.11-small v1.5.2
- nixpkgs-25.11-darwin v1.5.2

pkgs.tests.hardeningFlags.shadowStackExplicitEnabled

None

nixos-unstable -
- nixpkgs-unstable
- nixos-unstable-small
nixos-25.11 -
- nixos-25.11-small
- nixpkgs-25.11-darwin

pkgs.tests.hardeningFlags.shadowStackExplicitDisabled

None

nixos-unstable -
- nixpkgs-unstable
- nixos-unstable-small
nixos-25.11 -
- nixos-25.11-small
- nixpkgs-25.11-darwin

pkgs.tests.hardeningFlags-gcc.shadowStackExplicitEnabled

None

nixos-unstable -
- nixpkgs-unstable
- nixos-unstable-small
nixos-25.11 -
- nixos-25.11-small
- nixpkgs-25.11-darwin

pkgs.tests.hardeningFlags.allExplicitDisabledShadowStack

None

nixos-unstable -
- nixpkgs-unstable
- nixos-unstable-small
nixos-25.11 -
- nixos-25.11-small
- nixpkgs-25.11-darwin

pkgs.tests.hardeningFlags-gcc.shadowStackExplicitDisabled

None

nixos-unstable -
- nixpkgs-unstable
- nixos-unstable-small
nixos-25.11 -
- nixos-25.11-small
- nixpkgs-25.11-darwin

pkgs.tests.hardeningFlags-clang.shadowStackExplicitEnabled

None

nixos-unstable -
- nixpkgs-unstable
- nixos-unstable-small
nixos-25.11 -
- nixos-25.11-small
- nixpkgs-25.11-darwin

pkgs.tests.hardeningFlags-clang.shadowStackExplicitDisabled

None

nixos-unstable -
- nixpkgs-unstable
- nixos-unstable-small
nixos-25.11 -
- nixos-25.11-small
- nixpkgs-25.11-darwin

pkgs.tests.hardeningFlags-gcc.allExplicitDisabledShadowStack

None

nixos-unstable -
- nixpkgs-unstable
- nixos-unstable-small
nixos-25.11 -
- nixos-25.11-small
- nixpkgs-25.11-darwin

pkgs.tests.hardeningFlags-clang.allExplicitDisabledShadowStack

None

nixos-unstable -
- nixpkgs-unstable
- nixos-unstable-small
nixos-25.11 -
- nixos-25.11-small
- nixpkgs-25.11-darwin

Package maintainers

@oxzi Alvar Penning <post@0x21.biz>
@oluceps oluceps <nixos@oluceps.uk>
@ahrzb AmirHossein Roozbahani <ahrzb5@gmail.com>
@cherrypiejam Gongqi Huang
@wineee Lu Hongxu <lhongxu@outlook.com>
@flexiondotorg Martin Wimpress <martin@wimpress.org>
@RossSmyth Ross Smyth

Dismissed

Permalink CVE-2005-4890

updated 1 month ago by @LeSuisse Activity log

Created automatic suggestion 1 month ago
@LeSuisse removed
40 packages
- tests.hardeningFlags-clang.allExplicitDisabledShadowStack
- tests.hardeningFlags-clang.shadowStackExplicitDisabled
- tests.hardeningFlags-clang.shadowStackExplicitEnabled
- tests.hardeningFlags.allExplicitDisabledShadowStack
- tests.hardeningFlags-gcc.shadowStackExplicitEnabled
- tests.hardeningFlags.shadowStackExplicitEnabled
- tests.hardeningFlags-gcc.shadowStackExplicitDisabled
- tests.hardeningFlags.shadowStackExplicitDisabled
- tests.hardeningFlags-gcc.allExplicitDisabledShadowStack
- obs-studio-plugins.obs-stroke-glow-shadow
- su
- qsudo
- sudo-rs
- psudohash
- shadowenv
- shadowfox
- sudo-font
- shadow-tls
- darwin.sudo
- gnome-sudoku
- doas-sudo-shim
- lxqt.lxqt-sudo
- go-shadowsocks2
- shadowsocks-rust
- yaziPlugins.sudo
- shadowsocks-libev
- libsForQt5.ksudoku
- kdePackages.ksudoku
- typstPackages.shadowed
- plasma5Packages.ksudoku
- shadowsocks-v2ray-plugin
- fishPlugins.plugin-sudope
- haskellPackages.shadowsocks
- typstPackages.shadowed_0_1_0
- shadow
- haskellPackages.Unixutils-shadow
- wayfirePlugins.wayfire-shadows
- typstPackages.shadowed_0_2_0
- typstPackages.shadowed_0_1_2
- typstPackages.shadowed_0_1_1
1 month ago
@LeSuisse added package shadow 1 month ago
@LeSuisse dismissed 1 month ago

There is a possible tty hijacking in shadow 4.x before …

There is a possible tty hijacking in shadow 4.x before 4.1.5 and sudo 1.x before 1.7.4 via "su - user -c program". The user session can be escaped to the parent session by using the TIOCSTI ioctl to push characters into the input buffer to be read by the next process.

References

https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2005-4890 x_refsource_MISC
https://access.redhat.com/security/cve/cve-2005-4890 x_refsource_MISC
http://www.openwall.com/lists/oss-security/2012/11/06/8 x_refsource_MISC
http://www.openwall.com/lists/oss-security/2013/05/20/3 x_refsource_MISC
http://www.openwall.com/lists/oss-security/2013/11/28/10 x_refsource_MISC
http://www.openwall.com/lists/oss-security/2013/11/29/5 x_refsource_MISC
http://www.openwall.com/lists/oss-security/2014/10/20/9 x_refsource_MISC
http://www.openwall.com/lists/oss-security/2014/10/21/1 x_refsource_MISC
http://www.openwall.com/lists/oss-security/2016/02/25/6 x_refsource_MISC
http://www.openwall.com/lists/oss-security/2014/12/15/5 x_refsource_MISC
https://security-tracker.debian.org/tracker/CVE-2005-4890 x_refsource_MISC
http://www.openwall.com/lists/oss-security/2014/12/15/5 x_transferred x_refsource_MISC
https://security-tracker.debian.org/tracker/CVE-2005-4890 x_transferred x_refsource_MISC
https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2005-4890 x_transferred x_refsource_MISC
https://access.redhat.com/security/cve/cve-2005-4890 x_transferred x_refsource_MISC
http://www.openwall.com/lists/oss-security/2012/11/06/8 x_transferred x_refsource_MISC
http://www.openwall.com/lists/oss-security/2013/05/20/3 x_transferred x_refsource_MISC
http://www.openwall.com/lists/oss-security/2013/11/28/10 x_transferred x_refsource_MISC
http://www.openwall.com/lists/oss-security/2013/11/29/5 x_transferred x_refsource_MISC
http://www.openwall.com/lists/oss-security/2014/10/20/9 x_transferred x_refsource_MISC
http://www.openwall.com/lists/oss-security/2014/10/21/1 x_transferred x_refsource_MISC
http://www.openwall.com/lists/oss-security/2016/02/25/6 x_transferred x_refsource_MISC

Affected products

sudo

==1.x before 1.7.4

shadow

==4.x before 4.1.5

Matching in nixpkgs

pkgs.sudo

Command to run commands as root

nixos-unstable 1.9.17p2
- nixpkgs-unstable 1.9.17p2
- nixos-unstable-small 1.9.17p2
nixos-25.11 1.9.17p2
- nixos-25.11-small 1.9.17p2
- nixpkgs-25.11-darwin 1.9.17p2

pkgs.shadow

Suite containing authentication-related tools such as passwd and su

nixos-unstable 4.18.0
- nixpkgs-unstable 4.18.0
- nixos-unstable-small 4.18.0
nixos-25.11 4.18.0
- nixos-25.11-small 4.18.0
- nixpkgs-25.11-darwin 4.18.0

Package maintainers

@rhendric Ryan Hendrickson

Old issue. Never impacted the current stable branch.

Suggestions search

References

Affected products

Matching in nixpkgs

pkgs.su

pkgs.shadow

pkgs.shadowenv

pkgs.shadowfox

pkgs.shadow-tls

pkgs.go-shadowsocks2

pkgs.shadowsocks-rust

pkgs.shadowsocks-libev

pkgs.typstPackages.shadowed

pkgs.shadowsocks-v2ray-plugin

pkgs.haskellPackages.shadowsocks

pkgs.typstPackages.shadowed_0_1_0

pkgs.typstPackages.shadowed_0_1_1

pkgs.typstPackages.shadowed_0_1_2

pkgs.typstPackages.shadowed_0_2_0

pkgs.typstPackages.shadowed_0_3_0

pkgs.wayfirePlugins.wayfire-shadows

pkgs.haskellPackages.Unixutils-shadow

pkgs.obs-studio-plugins.obs-stroke-glow-shadow

pkgs.tests.hardeningFlags.shadowStackExplicitEnabled

pkgs.tests.hardeningFlags.shadowStackExplicitDisabled

pkgs.tests.hardeningFlags-gcc.shadowStackExplicitEnabled

pkgs.tests.hardeningFlags.allExplicitDisabledShadowStack

pkgs.tests.hardeningFlags-gcc.shadowStackExplicitDisabled

pkgs.tests.hardeningFlags-clang.shadowStackExplicitEnabled

pkgs.tests.hardeningFlags-clang.shadowStackExplicitDisabled

pkgs.tests.hardeningFlags-gcc.allExplicitDisabledShadowStack

pkgs.tests.hardeningFlags-clang.allExplicitDisabledShadowStack

Package maintainers

References

Affected products

Matching in nixpkgs

pkgs.sudo

pkgs.shadow

Package maintainers