Nixpkgs security tracker

Login with GitHub

⚠️ You are using a production deployment that is still only suitable for demo purposes. Any work done in this might be wiped later without notice.

Suggestion detail

Dismissed

Permalink CVE-2020-11936

3.1 LOW

CVSS version: 3.1
Attack vector (AV): NETWORK
Attack complexity (AC): HIGH
Privileges required (PR): LOW
User interaction (UI): NONE
Scope (S): UNCHANGED
Confidentiality impact (C): LOW
Integrity impact (I): NONE
Availability impact (A): NONE

updated 1 year, 2 months ago by @fricklerhandwerk Activity log

Created automatic suggestion 1 year, 2 months ago
@fricklerhandwerk dismissed 1 year, 2 months ago

gdbus setgid privilege escalation

gdbus setgid privilege escalation

References

https://bugs.launchpad.net/ubuntu/+source/apport/+bug/1885633 issue-tracking
https://www.cve.org/CVERecord?id=CVE-2020-11936 issue-tracking
https://bugs.launchpad.net/ubuntu/+source/apport/+bug/1885633 issue-tracking
https://www.cve.org/CVERecord?id=CVE-2020-11936 issue-tracking

Affected products

apport

<2.20.11-0ubuntu27.6

Matching in nixpkgs

pkgs.haskellPackages.apportionment

Round a set of numbers while maintaining its sum

nixos-unstable 0.0.0.4
- nixpkgs-unstable 0.0.0.4
- nixos-unstable-small 0.0.0.4

Package maintainers

@thielema Henning Thielemann <nix@henning-thielemann.de>