Nixpkgs security tracker

Dismissed

(exclusively hosted service)

Permalink CVE-2025-54914

10.0 CRITICAL

CVSS version: 3.1
Attack vector (AV):
Attack complexity (AC):
Privileges required (PR):
User interaction (UI):
Scope (S):
Confidentiality impact (C):
Integrity impact (I):
Availability impact (A):

updated 1 month, 1 week ago by @ADMIN Activity log

Created automatic suggestion 2 months ago
@ADMIN dismissed 1 month, 1 week ago

Azure Networking Elevation of Privilege Vulnerability

References

Azure Networking Elevation of Privilege Vulnerability vendor-advisory
Azure Networking Elevation of Privilege Vulnerability vendor-advisory
Azure Networking Elevation of Privilege Vulnerability vendor-advisory
Azure Networking Elevation of Privilege Vulnerability vendor-advisory
Azure Networking Elevation of Privilege Vulnerability vendor-advisory
Azure Networking Elevation of Privilege Vulnerability vendor-advisory
Azure Networking Elevation of Privilege Vulnerability vendor-advisory
Azure Networking Elevation of Privilege Vulnerability vendor-advisory
Azure Networking Elevation of Privilege Vulnerability vendor-advisory
Azure Networking Elevation of Privilege Vulnerability vendor-advisory
Azure Networking Elevation of Privilege Vulnerability vendor-advisory
Azure Networking Elevation of Privilege Vulnerability vendor-advisory
Azure Networking Elevation of Privilege Vulnerability vendor-advisory
Azure Networking Elevation of Privilege Vulnerability vendor-advisory
Azure Networking Elevation of Privilege Vulnerability vendor-advisory
Azure Networking Elevation of Privilege Vulnerability patchvendor-advisory

Affected products

Networking

==-
==N/A

Matching in nixpkgs

pkgs.s6-networking

Suite of small networking utilities for Unix systems

nixos-unstable 2.7.1.0
- nixpkgs-unstable 2.7.1.0
- nixos-unstable-small 2.7.1.0
nixos-25.11 2.7.1.0
- nixos-25.11-small 2.7.1.0
- nixpkgs-25.11-darwin 2.7.1.0

pkgs.glib-networking

Network-related giomodules for glib

nixos-unstable 2.80.1
- nixpkgs-unstable 2.80.1
- nixos-unstable-small 2.80.1
nixos-25.11 2.80.1
- nixos-25.11-small 2.80.1
- nixpkgs-25.11-darwin 2.80.1

pkgs.networking-ts-cxx

Experimental implementation of the C++ Networking Technical Specification

nixos-unstable 2019-02-27
- nixpkgs-unstable 2019-02-27
- nixos-unstable-small 2019-02-27
nixos-25.11 2019-02-27
- nixos-25.11-small 2019-02-27
- nixpkgs-25.11-darwin 2019-02-27

pkgs.gamenetworkingsockets

GameNetworkingSockets is a basic transport layer for games

nixos-unstable 1.4.1
- nixpkgs-unstable 1.4.1
- nixos-unstable-small 1.4.1
nixos-25.11 1.4.1
- nixos-25.11-small 1.4.1
- nixpkgs-25.11-darwin 1.4.1

pkgs.s6-networking-man-pages

Port of the documentation for the s6-networking suite to mdoc

nixos-unstable 2.7.0.4.1
- nixpkgs-unstable 2.7.0.4.1
- nixos-unstable-small 2.7.0.4.1
nixos-25.11 2.7.0.4.1
- nixos-25.11-small 2.7.0.4.1
- nixpkgs-25.11-darwin 2.7.0.4.1

pkgs.skawarePackages.s6-networking

Suite of small networking utilities for Unix systems

nixos-unstable 2.7.1.0
- nixpkgs-unstable 2.7.1.0
- nixos-unstable-small 2.7.1.0
nixos-25.11 2.7.1.0
- nixos-25.11-small 2.7.1.0
- nixpkgs-25.11-darwin 2.7.1.0

pkgs.haskellPackages.gogol-servicenetworking

Google Service Networking SDK

nixos-unstable 1.0.0
- nixpkgs-unstable 1.0.0
- nixos-unstable-small 1.0.0
nixos-25.11 1.0.0
- nixos-25.11-small 1.0.0
- nixpkgs-25.11-darwin 1.0.0

pkgs.skawarePackages.s6-networking-man-pages

Port of the documentation for the s6-networking suite to mdoc

nixos-unstable 2.7.0.4.1
- nixpkgs-unstable 2.7.0.4.1
- nixos-unstable-small 2.7.0.4.1
nixos-25.11 2.7.0.4.1
- nixos-25.11-small 2.7.0.4.1
- nixpkgs-25.11-darwin 2.7.0.4.1

Package maintainers

@sternenseemann Lukas Epple <sternenseemann@systemli.org>
@bobby285271 Bobby Rong <rjl931189261@126.com>
@hedning Tor Hedin Brønner <torhedinbronner@gmail.com>
@jtojnar Jan Tojnar <jtojnar@gmail.com>
@dasj19 Daniel Șerbănescu <daniel@serbanescu.dk>
@bhipple Benjamin Hipple <bhipple@protonmail.com>
@pmahoney Patrick Mahoney <pat@polycrystal.org>
@alyssais Alyssa Ross <hi@alyssa.is>
@Profpatsch Profpatsch <mail@profpatsch.de>

Untriaged

Permalink CVE-2025-60019

3.7 LOW

CVSS version: 3.1
Attack vector (AV): NETWORK
Attack complexity (AC): HIGH
Privileges required (PR): NONE
User interaction (UI): NONE
Scope (S): UNCHANGED
Confidentiality impact (C): NONE
Integrity impact (I): NONE
Availability impact (A): LOW

created 4 months, 1 week ago

Glib-networking: uninitialized memory dereferences on glib-networking through glib-networking/tls/openssl/gtlsbio.c via g_tls_bio_new_from_iostream() and g_tls_bio_new_from_datagram_based()

glib-networking's OpenSSL backend fails to properly check the return value of memory allocation routines. An out of memory condition could potentially result in writing to an invalid memory location.

References

https://access.redhat.com/security/cve/CVE-2025-60019 vdb-entryx_refsource_REDHAT
RHBZ#2398140 x_refsource_REDHATissue-tracking
https://gitlab.gnome.org/GNOME/glib-networking/-/issues/227
https://access.redhat.com/security/cve/CVE-2025-60019 vdb-entryx_refsource_REDHAT
RHBZ#2398140 x_refsource_REDHATissue-tracking
https://gitlab.gnome.org/GNOME/glib-networking/-/issues/227

Affected products

glib-networking

<2.80.2

Matching in nixpkgs

pkgs.glib-networking

Network-related giomodules for glib

nixos-unstable 2.80.1
- nixpkgs-unstable 2.80.1
- nixos-unstable-small 2.80.1

Package maintainers

@bobby285271 Bobby Rong <rjl931189261@126.com>
@jtojnar Jan Tojnar <jtojnar@gmail.com>
@hedning Tor Hedin Brønner <torhedinbronner@gmail.com>
@dasj19 Daniel Șerbănescu <daniel@serbanescu.dk>

Untriaged

Permalink CVE-2025-60018

4.8 MEDIUM

CVSS version: 3.1
Attack vector (AV): NETWORK
Attack complexity (AC): HIGH
Privileges required (PR): NONE
User interaction (UI): NONE
Scope (S): UNCHANGED
Confidentiality impact (C): LOW
Integrity impact (I): NONE
Availability impact (A): LOW

created 4 months, 1 week ago

Glib-networking: out of bound reads on glib-networking through tls/openssl/gtlscertificate-openssl.c via "g_tls_certificate_openssl_get_property()"

glib-networking's OpenSSL backend fails to properly check the return value of a call to BIO_write(), resulting in an out of bounds read.

References

https://access.redhat.com/security/cve/CVE-2025-60018 vdb-entryx_refsource_REDHAT
RHBZ#2398135 x_refsource_REDHATissue-tracking
https://gitlab.gnome.org/GNOME/glib-networking/-/issues/226
https://access.redhat.com/security/cve/CVE-2025-60018 vdb-entryx_refsource_REDHAT
RHBZ#2398135 x_refsource_REDHATissue-tracking
https://gitlab.gnome.org/GNOME/glib-networking/-/issues/226

Affected products

glib-networking

<2.80.2

Matching in nixpkgs

pkgs.glib-networking

Network-related giomodules for glib

nixos-unstable 2.80.1
- nixpkgs-unstable 2.80.1
- nixos-unstable-small 2.80.1

Package maintainers

@bobby285271 Bobby Rong <rjl931189261@126.com>
@jtojnar Jan Tojnar <jtojnar@gmail.com>
@hedning Tor Hedin Brønner <torhedinbronner@gmail.com>
@dasj19 Daniel Șerbănescu <daniel@serbanescu.dk>

Suggestions search

References

Affected products

Matching in nixpkgs

pkgs.s6-networking

pkgs.glib-networking

pkgs.networking-ts-cxx

pkgs.gamenetworkingsockets

pkgs.s6-networking-man-pages

pkgs.skawarePackages.s6-networking

pkgs.haskellPackages.gogol-servicenetworking

pkgs.skawarePackages.s6-networking-man-pages

Package maintainers

References

Affected products

Matching in nixpkgs

pkgs.glib-networking

Package maintainers

References

Affected products

Matching in nixpkgs

pkgs.glib-networking

Package maintainers