Nixpkgs security tracker

Login with GitHub

⚠️ You are using a production deployment that is still only suitable for demo purposes. Any work done in this might be wiped later without notice.

Suggestions search

Untriaged

Filter by:

With package: lomiri.libusermetrics

Found 2 matching suggestions

View:

Compact

Detailed

Permalink CVE-2012-5630

created 2 months ago Activity log

Created suggestion 2 months ago

libuser 0.56 and 0.57 has a TOCTOU (time-of-check time-of-use) race …

libuser 0.56 and 0.57 has a TOCTOU (time-of-check time-of-use) race condition when copying and removing directory trees.

References

https://security-tracker.debian.org/tracker/CVE-2012-5630 x_transferredx_refsource_MISC
https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2012-5630 x_transferredx_refsource_MISC
Red Hat vendor-advisoryx_transferredx_refsource_REDHAT
Fedora x_refsource_FEDORAvendor-advisoryx_transferred
https://www.securityfocus.com/bid/59285 x_transferredx_refsource_MISC

Affected products

libuser

==0.57
==0.56

Matching in nixpkgs

pkgs.lomiri.libusermetrics

Enables apps to locally store interesting numerical data for later presentation

nixos-unstable 1.4.0
- nixpkgs-unstable 1.4.0
- nixos-unstable-small 1.4.0
nixos-25.11 1.3.3
- nixos-25.11-small 1.3.3
- nixpkgs-25.11-darwin 1.3.3

Package maintainers

@OPNA2608 Cosima Neidahl <opna2608@protonmail.com>

Permalink CVE-2012-5644

created 2 months ago Activity log

Created suggestion 2 months ago

libuser has information disclosure when moving user's home directory

libuser has information disclosure when moving user's home directory

References

https://security-tracker.debian.org/tracker/CVE-2012-5644 x_transferredx_refsource_MISC
https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2012-5644 x_transferredx_refsource_MISC
http://lists.fedoraproject.org/pipermail/package-announce/2013-April/102068.html x_transferredx_refsource_MISC
Red Hat vendor-advisoryx_transferredx_refsource_REDHAT

Affected products

libuser

==Fixed in 1:0.60

Matching in nixpkgs

pkgs.lomiri.libusermetrics

Enables apps to locally store interesting numerical data for later presentation

nixos-unstable 1.4.0
- nixpkgs-unstable 1.4.0
- nixos-unstable-small 1.4.0
nixos-25.11 1.3.3
- nixos-25.11-small 1.3.3
- nixpkgs-25.11-darwin 1.3.3

Package maintainers

@OPNA2608 Cosima Neidahl <opna2608@protonmail.com>

1