Nixpkgs security tracker

Login with GitHub

⚠️ You are using a production deployment that is still only suitable for demo purposes. Any work done in this might be wiped later without notice.

Suggestion detail

Untriaged

Permalink CVE-2015-0294

created 1 month, 4 weeks ago

GnuTLS before 3.3.13 does not validate that the signature algorithms …

GnuTLS before 3.3.13 does not validate that the signature algorithms match when importing a certificate.

References

https://bugzilla.redhat.com/show_bug.cgi?id=1196323 x_transferredx_refsource_MISC
https://gitlab.com/gnutls/gnutls/commit/6e76e9b9fa845b76b0b9a45f05f4b54a052578ff x_transferredx_refsource_MISC
http://www.debian.org/security/2015/dsa-3191 x_transferredx_refsource_MISC

Affected products

GnuTLS

==before 3.3.13

Matching in nixpkgs

pkgs.gnutls

GNU Transport Layer Security Library

nixos-unstable 3.8.11
- nixpkgs-unstable 3.8.11
- nixos-unstable-small 3.8.11
nixos-25.11 3.8.11
- nixos-25.11-small 3.8.11
- nixpkgs-25.11-darwin 3.8.11

pkgs.guile-gnutls

Guile bindings for GnuTLS library

nixos-unstable 5.0.1
- nixpkgs-unstable 5.0.1
- nixos-unstable-small 5.0.1
nixos-25.11 5.0.1
- nixos-25.11-small 5.0.1
- nixpkgs-25.11-darwin 5.0.1

pkgs.python312Packages.python3-gnutls

Python wrapper for the GnuTLS library

nixos-25.11 python3-gnutls-3.1.10
- nixos-25.11-small python3-gnutls-3.1.10
- nixpkgs-25.11-darwin python3-gnutls-3.1.10

pkgs.python313Packages.python3-gnutls

Python wrapper for the GnuTLS library

nixos-unstable python3-gnutls-3.1.10
- nixpkgs-unstable python3-gnutls-3.1.10
- nixos-unstable-small python3-gnutls-3.1.10
nixos-25.11 python3-gnutls-3.1.10
- nixos-25.11-small python3-gnutls-3.1.10
- nixpkgs-25.11-darwin python3-gnutls-3.1.10

pkgs.python314Packages.python3-gnutls

Python wrapper for the GnuTLS library

nixos-unstable python3-gnutls-3.1.10
- nixpkgs-unstable python3-gnutls-3.1.10
- nixos-unstable-small python3-gnutls-3.1.10

Package maintainers

@vcunat Vladimír Čunát <v@cunat.cz>
@foo-dogsquared Gabriel Arazas <foodogsquared@foodogsquared.one>
@charlieshanley Charlie Hanley <charlieshanley@gmail.com>