Nixpkgs security tracker

Untriaged

Permalink CVE-2023-20587

7.1 HIGH

CVSS version: 3.1
Attack vector (AV): LOCAL
Attack complexity (AC): LOW
Privileges required (PR): LOW
User interaction (UI): NONE
Scope (S): UNCHANGED
Confidentiality impact (C): HIGH
Integrity impact (I): HIGH
Availability impact (A): NONE

created 11 months, 1 week ago

Improper Access Control in System Management Mode (SMM) may allow …

Improper Access Control in System Management Mode (SMM) may allow an attacker access to the SPI flash potentially leading to arbitrary code execution.

References

https://www.amd.com/en/corporate/product-security/bulletin/AMD-SB-7009 vendor-advisory
https://www.amd.com/en/corporate/product-security/bulletin/AMD-SB-7009 vendor-advisoryx_transferred
https://www.amd.com/en/corporate/product-security/bulletin/AMD-SB-7009 vendor-advisory
https://www.amd.com/en/corporate/product-security/bulletin/AMD-SB-7009 vendor-advisory
https://www.amd.com/en/corporate/product-security/bulletin/AMD-SB-7009 vendor-advisoryx_transferred
https://www.amd.com/en/corporate/product-security/bulletin/AMD-SB-7009 vendor-advisory
https://www.amd.com/en/corporate/product-security/bulletin/AMD-SB-7009 vendor-advisoryx_transferred

Affected products

PI

==various
==various

AMD EPYC(TM) Embedded 7003

==various

AMD EPYC(TM) Embedded 9003

==various

AMD EPYC(TM) Embedded 3000

==various

AMD EPYC(TM) Embedded 7002

==various

Matching in nixpkgs

pkgs.spoofdpi

Simple and fast anti-censorship tool written in Go

nixos-unstable 0.12.0
- nixpkgs-unstable 0.12.0
- nixos-unstable-small 0.12.0

pkgs.perl538Packages.PPI

Parse, Analyze and Manipulate Perl (without perl)

nixos-unstable 1.277
- nixpkgs-unstable 1.277
- nixos-unstable-small 1.277

pkgs.perl540Packages.PPI

Parse, Analyze and Manipulate Perl (without perl)

nixos-unstable 1.277
- nixpkgs-unstable 1.277
- nixos-unstable-small 1.277

pkgs.haskellPackages.hsPID

PID control loop

nixos-unstable 0.1.2
- nixpkgs-unstable 0.1.2
- nixos-unstable-small 0.1.2

pkgs.spirv-llvm-translator

Tool and a library for bi-directional translation between SPIR-V and LLVM IR

nixos-unstable 18.1.0
- nixpkgs-unstable 18.1.0
- nixos-unstable-small 18.1.0

pkgs.perl538Packages.GSSAPI

Perl extension providing access to the GSSAPIv2 library

nixos-unstable 0.28
- nixpkgs-unstable 0.28
- nixos-unstable-small 0.28

pkgs.perl540Packages.GSSAPI

Perl extension providing access to the GSSAPIv2 library

nixos-unstable 0.28
- nixpkgs-unstable 0.28
- nixos-unstable-small 0.28

pkgs.perl538Packages.PDFAPI2

Create, modify, and examine PDF files

nixos-unstable API2-2.045
- nixpkgs-unstable API2-2.045
- nixos-unstable-small API2-2.045

pkgs.perl540Packages.PDFAPI2

Create, modify, and examine PDF files

nixos-unstable API2-2.045
- nixpkgs-unstable API2-2.045
- nixos-unstable-small API2-2.045

pkgs.haskellPackages.EdisonAPI

A library of efficient, purely-functional data structures (API)

nixos-unstable 1.3.3.1
- nixpkgs-unstable 1.3.3.1
- nixos-unstable-small 1.3.3.1

pkgs.perl538Packages.PPIxUtils

Utility functions for PPI

nixos-unstable 0.003
- nixpkgs-unstable 0.003
- nixos-unstable-small 0.003

pkgs.perl540Packages.PPIxUtils

Utility functions for PPI

nixos-unstable 0.003
- nixpkgs-unstable 0.003
- nixos-unstable-small 0.003

pkgs.perl538Packages.PPIxRegexp

Parse regular expressions

nixos-unstable 0.088
- nixpkgs-unstable 0.088
- nixos-unstable-small 0.088

pkgs.perl540Packages.PPIxRegexp

Parse regular expressions

nixos-unstable 0.088
- nixpkgs-unstable 0.088
- nixos-unstable-small 0.088

pkgs.perl538Packages.ProcPIDFile

Manage process id files

nixos-unstable 1.29
- nixpkgs-unstable 1.29
- nixos-unstable-small 1.29

pkgs.perl540Packages.ProcPIDFile

Manage process id files

nixos-unstable 1.29
- nixpkgs-unstable 1.29
- nixos-unstable-small 1.29

pkgs.perl538Packages.WWWTwilioAPI

Accessing Twilio's REST API with Perl

nixos-unstable 0.21
- nixpkgs-unstable 0.21
- nixos-unstable-small 0.21

pkgs.perl540Packages.WWWTwilioAPI

Accessing Twilio's REST API with Perl

nixos-unstable 0.21
- nixpkgs-unstable 0.21
- nixos-unstable-small 0.21

pkgs.perl538Packages.OpenAPIClient

Client for talking to an Open API powered server

nixos-unstable 1.07
- nixpkgs-unstable 1.07
- nixos-unstable-small 1.07

pkgs.perl538Packages.PPIxQuoteLike

Parse Perl string literals and string-literal-like things

nixos-unstable 0.023
- nixpkgs-unstable 0.023
- nixos-unstable-small 0.023

pkgs.perl538Packages.PPIxUtilities

Extensions to PPI|PPI

nixos-unstable 1.001000
- nixpkgs-unstable 1.001000
- nixos-unstable-small 1.001000

pkgs.perl540Packages.OpenAPIClient

Client for talking to an Open API powered server

nixos-unstable 1.07
- nixpkgs-unstable 1.07
- nixos-unstable-small 1.07

pkgs.perl540Packages.PPIxQuoteLike

Parse Perl string literals and string-literal-like things

nixos-unstable 0.023
- nixpkgs-unstable 0.023
- nixos-unstable-small 0.023

pkgs.perl540Packages.PPIxUtilities

Extensions to PPI|PPI

nixos-unstable 1.001000
- nixpkgs-unstable 1.001000
- nixos-unstable-small 1.001000

pkgs.perl538Packages.MojoliciousPluginOpenAPI

OpenAPI / Swagger plugin for Mojolicious

nixos-unstable 5.09
- nixpkgs-unstable 5.09
- nixos-unstable-small 5.09

pkgs.perl540Packages.MojoliciousPluginOpenAPI

OpenAPI / Swagger plugin for Mojolicious

nixos-unstable 5.09
- nixpkgs-unstable 5.09
- nixos-unstable-small 5.09

Package maintainers

@de11n Elliot Cameron <nixpkgs-commits@deshaw.com>
@invokes-su Souvik Sen <nixpkgs-commits@deshaw.com>
@stigtsp Stig Palmquist <stig@stig.io>
@gloaming Craig Hall <ch9871@gmail.com>
@s0me1newithhand7s hand7s <s0me1newithhand7s@gmail.com>

Untriaged

Permalink CVE-2023-31346

6.0 MEDIUM

CVSS version: 3.1
Attack vector (AV): LOCAL
Attack complexity (AC): LOW
Privileges required (PR): HIGH
User interaction (UI): NONE
Scope (S): CHANGED
Confidentiality impact (C): HIGH
Integrity impact (I): NONE
Availability impact (A): NONE

created 1 year ago

Failure to initialize memory in SEV Firmware may allow a …

Failure to initialize memory in SEV Firmware may allow a privileged attacker to access stale data from other guests.

References

https://www.amd.com/en/corporate/product-security/bulletin/AMD-SB-3007 vendor-advisory
https://www.amd.com/en/corporate/product-security/bulletin/AMD-SB-3007 vendor-advisoryx_transferred
https://www.amd.com/en/corporate/product-security/bulletin/AMD-SB-3007 vendor-advisory
https://www.amd.com/en/corporate/product-security/bulletin/AMD-SB-3007 vendor-advisory
https://www.amd.com/en/corporate/product-security/bulletin/AMD-SB-3007 vendor-advisoryx_transferred
https://www.amd.com/en/corporate/product-security/bulletin/AMD-SB-3007 vendor-advisory
https://www.amd.com/en/corporate/product-security/bulletin/AMD-SB-3007 vendor-advisoryx_transferred

Affected products

PI

==various

Matching in nixpkgs

pkgs.spoofdpi

Simple and fast anti-censorship tool written in Go

nixos-unstable 0.12.0
- nixpkgs-unstable 0.12.0
- nixos-unstable-small 0.12.0

pkgs.perl538Packages.PPI

Parse, Analyze and Manipulate Perl (without perl)

nixos-unstable 1.277
- nixpkgs-unstable 1.277
- nixos-unstable-small 1.277

pkgs.perl540Packages.PPI

Parse, Analyze and Manipulate Perl (without perl)

nixos-unstable 1.277
- nixpkgs-unstable 1.277
- nixos-unstable-small 1.277

pkgs.haskellPackages.hsPID

PID control loop

nixos-unstable 0.1.2
- nixpkgs-unstable 0.1.2
- nixos-unstable-small 0.1.2

pkgs.spirv-llvm-translator

Tool and a library for bi-directional translation between SPIR-V and LLVM IR

nixos-unstable 18.1.0
- nixpkgs-unstable 18.1.0
- nixos-unstable-small 18.1.0

pkgs.perl538Packages.GSSAPI

Perl extension providing access to the GSSAPIv2 library

nixos-unstable 0.28
- nixpkgs-unstable 0.28
- nixos-unstable-small 0.28

pkgs.perl540Packages.GSSAPI

Perl extension providing access to the GSSAPIv2 library

nixos-unstable 0.28
- nixpkgs-unstable 0.28
- nixos-unstable-small 0.28

pkgs.perl538Packages.PDFAPI2

Create, modify, and examine PDF files

nixos-unstable API2-2.045
- nixpkgs-unstable API2-2.045
- nixos-unstable-small API2-2.045

pkgs.perl540Packages.PDFAPI2

Create, modify, and examine PDF files

nixos-unstable API2-2.045
- nixpkgs-unstable API2-2.045
- nixos-unstable-small API2-2.045

pkgs.haskellPackages.EdisonAPI

A library of efficient, purely-functional data structures (API)

nixos-unstable 1.3.3.1
- nixpkgs-unstable 1.3.3.1
- nixos-unstable-small 1.3.3.1

pkgs.perl538Packages.PPIxUtils

Utility functions for PPI

nixos-unstable 0.003
- nixpkgs-unstable 0.003
- nixos-unstable-small 0.003

pkgs.perl540Packages.PPIxUtils

Utility functions for PPI

nixos-unstable 0.003
- nixpkgs-unstable 0.003
- nixos-unstable-small 0.003

pkgs.perl538Packages.PPIxRegexp

Parse regular expressions

nixos-unstable 0.088
- nixpkgs-unstable 0.088
- nixos-unstable-small 0.088

pkgs.perl540Packages.PPIxRegexp

Parse regular expressions

nixos-unstable 0.088
- nixpkgs-unstable 0.088
- nixos-unstable-small 0.088

pkgs.perl538Packages.ProcPIDFile

Manage process id files

nixos-unstable 1.29
- nixpkgs-unstable 1.29
- nixos-unstable-small 1.29

pkgs.perl540Packages.ProcPIDFile

Manage process id files

nixos-unstable 1.29
- nixpkgs-unstable 1.29
- nixos-unstable-small 1.29

pkgs.perl538Packages.WWWTwilioAPI

Accessing Twilio's REST API with Perl

nixos-unstable 0.21
- nixpkgs-unstable 0.21
- nixos-unstable-small 0.21

pkgs.perl540Packages.WWWTwilioAPI

Accessing Twilio's REST API with Perl

nixos-unstable 0.21
- nixpkgs-unstable 0.21
- nixos-unstable-small 0.21

pkgs.perl538Packages.OpenAPIClient

Client for talking to an Open API powered server

nixos-unstable 1.07
- nixpkgs-unstable 1.07
- nixos-unstable-small 1.07

pkgs.perl538Packages.PPIxQuoteLike

Parse Perl string literals and string-literal-like things

nixos-unstable 0.023
- nixpkgs-unstable 0.023
- nixos-unstable-small 0.023

pkgs.perl538Packages.PPIxUtilities

Extensions to PPI|PPI

nixos-unstable 1.001000
- nixpkgs-unstable 1.001000
- nixos-unstable-small 1.001000

pkgs.perl540Packages.OpenAPIClient

Client for talking to an Open API powered server

nixos-unstable 1.07
- nixpkgs-unstable 1.07
- nixos-unstable-small 1.07

pkgs.perl540Packages.PPIxQuoteLike

Parse Perl string literals and string-literal-like things

nixos-unstable 0.023
- nixpkgs-unstable 0.023
- nixos-unstable-small 0.023

pkgs.perl540Packages.PPIxUtilities

Extensions to PPI|PPI

nixos-unstable 1.001000
- nixpkgs-unstable 1.001000
- nixos-unstable-small 1.001000

pkgs.perl538Packages.MojoliciousPluginOpenAPI

OpenAPI / Swagger plugin for Mojolicious

nixos-unstable 5.09
- nixpkgs-unstable 5.09
- nixos-unstable-small 5.09

pkgs.perl540Packages.MojoliciousPluginOpenAPI

OpenAPI / Swagger plugin for Mojolicious

nixos-unstable 5.09
- nixpkgs-unstable 5.09
- nixos-unstable-small 5.09

Package maintainers

@de11n Elliot Cameron <nixpkgs-commits@deshaw.com>
@invokes-su Souvik Sen <nixpkgs-commits@deshaw.com>
@stigtsp Stig Palmquist <stig@stig.io>
@gloaming Craig Hall <ch9871@gmail.com>
@s0me1newithhand7s hand7s <s0me1newithhand7s@gmail.com>

Untriaged

Permalink CVE-2023-20578

7.5 HIGH

CVSS version: 3.1
Attack vector (AV): LOCAL
Attack complexity (AC): HIGH
Privileges required (PR): HIGH
User interaction (UI): NONE
Scope (S): CHANGED
Confidentiality impact (C): HIGH
Integrity impact (I): HIGH
Availability impact (A): HIGH

created 1 year ago

A TOCTOU (Time-Of-Check-Time-Of-Use) in SMM may allow an attacker with …

A TOCTOU (Time-Of-Check-Time-Of-Use) in SMM may allow an attacker with ring0 privileges and access to the BIOS menu or UEFI shell to modify the communications buffer potentially resulting in arbitrary code execution.

References

https://www.amd.com/en/resources/product-security/bulletin/amd-sb-3003.html vendor-advisory
https://www.amd.com/en/resources/product-security/bulletin/amd-sb-3003.html vendor-advisory
https://www.amd.com/en/resources/product-security/bulletin/amd-sb-3003.html vendor-advisory
https://www.amd.com/en/resources/product-security/bulletin/amd-sb-3003.html vendor-advisory

Affected products

PI

==NaplesPI 1.0.0.K

epyc_7001

==1.0.0.k

epyc_7002

==1.0.0.g

epyc_9004

==1.0.0.2

epyc_embedded_3000

==1.1.0.a

epyc_embedded_7002

==1.0.0.a

epyc_embedded_7003

==1.0.0.7

epyc_embedded_9003

==1.0.0.0

ryzen_embedded_7000

==1.0.0.0

ryzen_embedded_v3000

==1.0.0.8

AMD EPYC™ Embedded 3000

==SnowyOwl PI 1.1.0.A

AMD EPYC™ Embedded 7002

==EmbRomePI-SP3 1.0.0.A

AMD EPYC™ Embedded 7003

==EmbMilanPI-SP3 1.0.0.7

AMD EPYC™ Embedded 9003

==EmbGenoaPI-SP5 1.0.0.0

AMD RyzenTM Embedded V3000

==EmbeddedPI-FP7r2 1.0.0.8

AMD Ryzen™ Embedded 7000

==EmbeddedAM5PI 1.0.0.0

AMD EPYC™ 7002 Processors

==RomePI 1.0.0.G

AMD EPYC™ 7003 Processors

==MilanPI 1.0.0.B

AMD EPYC™ 9004 Processors

==GenoaPI 1.0.0.2

AMD Ryzen™ 7000 Series Desktop Processors

==ComboAM5 1.0.0.1

AMD Ryzen™ Threadripper™ PRO 5000WX Processors

==ChagallWSPI-sWRX8 1.0.0.7

AMD Ryzen™ 6000 Series Processors with Radeon™ Graphics

==RembrandtPI-FP7 1.0.0.9b

AMD Ryzen™ 7020 Series Processors with Radeon™ Graphics

==MendocinoPI-FT6 1.0.0.0

AMD Ryzen™ 7035 Series Processors with Radeon™ Graphics

==RembrandtPI-FP7 1.0.0.9b

Matching in nixpkgs

pkgs.spoofdpi

Simple and fast anti-censorship tool written in Go

nixos-unstable 0.12.0
- nixpkgs-unstable 0.12.0
- nixos-unstable-small 0.12.0

pkgs.perl538Packages.PPI

Parse, Analyze and Manipulate Perl (without perl)

nixos-unstable 1.277
- nixpkgs-unstable 1.277
- nixos-unstable-small 1.277

pkgs.perl540Packages.PPI

Parse, Analyze and Manipulate Perl (without perl)

nixos-unstable 1.277
- nixpkgs-unstable 1.277
- nixos-unstable-small 1.277

pkgs.haskellPackages.hsPID

PID control loop

nixos-unstable 0.1.2
- nixpkgs-unstable 0.1.2
- nixos-unstable-small 0.1.2

pkgs.spirv-llvm-translator

Tool and a library for bi-directional translation between SPIR-V and LLVM IR

nixos-unstable 18.1.0
- nixpkgs-unstable 18.1.0
- nixos-unstable-small 18.1.0

pkgs.perl538Packages.GSSAPI

Perl extension providing access to the GSSAPIv2 library

nixos-unstable 0.28
- nixpkgs-unstable 0.28
- nixos-unstable-small 0.28

pkgs.perl540Packages.GSSAPI

Perl extension providing access to the GSSAPIv2 library

nixos-unstable 0.28
- nixpkgs-unstable 0.28
- nixos-unstable-small 0.28

pkgs.perl538Packages.PDFAPI2

Create, modify, and examine PDF files

nixos-unstable API2-2.045
- nixpkgs-unstable API2-2.045
- nixos-unstable-small API2-2.045

pkgs.perl540Packages.PDFAPI2

Create, modify, and examine PDF files

nixos-unstable API2-2.045
- nixpkgs-unstable API2-2.045
- nixos-unstable-small API2-2.045

pkgs.haskellPackages.EdisonAPI

A library of efficient, purely-functional data structures (API)

nixos-unstable 1.3.3.1
- nixpkgs-unstable 1.3.3.1
- nixos-unstable-small 1.3.3.1

pkgs.perl538Packages.PPIxUtils

Utility functions for PPI

nixos-unstable 0.003
- nixpkgs-unstable 0.003
- nixos-unstable-small 0.003

pkgs.perl540Packages.PPIxUtils

Utility functions for PPI

nixos-unstable 0.003
- nixpkgs-unstable 0.003
- nixos-unstable-small 0.003

pkgs.perl538Packages.PPIxRegexp

Parse regular expressions

nixos-unstable 0.088
- nixpkgs-unstable 0.088
- nixos-unstable-small 0.088

pkgs.perl540Packages.PPIxRegexp

Parse regular expressions

nixos-unstable 0.088
- nixpkgs-unstable 0.088
- nixos-unstable-small 0.088

pkgs.perl538Packages.ProcPIDFile

Manage process id files

nixos-unstable 1.29
- nixpkgs-unstable 1.29
- nixos-unstable-small 1.29

pkgs.perl540Packages.ProcPIDFile

Manage process id files

nixos-unstable 1.29
- nixpkgs-unstable 1.29
- nixos-unstable-small 1.29

pkgs.perl538Packages.WWWTwilioAPI

Accessing Twilio's REST API with Perl

nixos-unstable 0.21
- nixpkgs-unstable 0.21
- nixos-unstable-small 0.21

pkgs.perl540Packages.WWWTwilioAPI

Accessing Twilio's REST API with Perl

nixos-unstable 0.21
- nixpkgs-unstable 0.21
- nixos-unstable-small 0.21

pkgs.perl538Packages.OpenAPIClient

Client for talking to an Open API powered server

nixos-unstable 1.07
- nixpkgs-unstable 1.07
- nixos-unstable-small 1.07

pkgs.perl538Packages.PPIxQuoteLike

Parse Perl string literals and string-literal-like things

nixos-unstable 0.023
- nixpkgs-unstable 0.023
- nixos-unstable-small 0.023

pkgs.perl538Packages.PPIxUtilities

Extensions to PPI|PPI

nixos-unstable 1.001000
- nixpkgs-unstable 1.001000
- nixos-unstable-small 1.001000

pkgs.perl540Packages.OpenAPIClient

Client for talking to an Open API powered server

nixos-unstable 1.07
- nixpkgs-unstable 1.07
- nixos-unstable-small 1.07

pkgs.perl540Packages.PPIxQuoteLike

Parse Perl string literals and string-literal-like things

nixos-unstable 0.023
- nixpkgs-unstable 0.023
- nixos-unstable-small 0.023

pkgs.perl540Packages.PPIxUtilities

Extensions to PPI|PPI

nixos-unstable 1.001000
- nixpkgs-unstable 1.001000
- nixos-unstable-small 1.001000

pkgs.perl538Packages.MojoliciousPluginOpenAPI

OpenAPI / Swagger plugin for Mojolicious

nixos-unstable 5.09
- nixpkgs-unstable 5.09
- nixos-unstable-small 5.09

pkgs.perl540Packages.MojoliciousPluginOpenAPI

OpenAPI / Swagger plugin for Mojolicious

nixos-unstable 5.09
- nixpkgs-unstable 5.09
- nixos-unstable-small 5.09

Package maintainers

@de11n Elliot Cameron <nixpkgs-commits@deshaw.com>
@invokes-su Souvik Sen <nixpkgs-commits@deshaw.com>
@stigtsp Stig Palmquist <stig@stig.io>
@gloaming Craig Hall <ch9871@gmail.com>
@s0me1newithhand7s hand7s <s0me1newithhand7s@gmail.com>

Untriaged

Permalink CVE-2023-31347

4.9 MEDIUM

CVSS version: 3.1
Attack vector (AV): NETWORK
Attack complexity (AC): LOW
Privileges required (PR): HIGH
User interaction (UI): NONE
Scope (S): UNCHANGED
Confidentiality impact (C): NONE
Integrity impact (I): HIGH
Availability impact (A): NONE

created 1 year ago

Due to a code bug in Secure_TSC, SEV firmware may …

Due to a code bug in Secure_TSC, SEV firmware may allow an attacker with high privileges to cause a guest to observe an incorrect TSC when Secure TSC is enabled potentially resulting in a loss of guest integrity.

References

https://www.amd.com/en/corporate/product-security/bulletin/AMD-SB-3007 vendor-advisory
https://www.amd.com/en/corporate/product-security/bulletin/AMD-SB-3007 vendor-advisoryx_transferred
https://www.amd.com/en/corporate/product-security/bulletin/AMD-SB-3007 vendor-advisory
https://www.amd.com/en/corporate/product-security/bulletin/AMD-SB-3007 vendor-advisory
https://www.amd.com/en/corporate/product-security/bulletin/AMD-SB-3007 vendor-advisoryx_transferred
https://www.amd.com/en/corporate/product-security/bulletin/AMD-SB-3007 vendor-advisory
https://www.amd.com/en/corporate/product-security/bulletin/AMD-SB-3007 vendor-advisoryx_transferred
https://www.amd.com/en/corporate/product-security/bulletin/AMD-SB-3007 vendor-advisory
https://www.amd.com/en/corporate/product-security/bulletin/AMD-SB-3007 vendor-advisoryx_transferred

Affected products

PI

==various

Matching in nixpkgs

pkgs.spoofdpi

Simple and fast anti-censorship tool written in Go

nixos-unstable 0.12.0
- nixpkgs-unstable 0.12.0
- nixos-unstable-small 0.12.0

pkgs.perl538Packages.PPI

Parse, Analyze and Manipulate Perl (without perl)

nixos-unstable 1.277
- nixpkgs-unstable 1.277
- nixos-unstable-small 1.277

pkgs.perl540Packages.PPI

Parse, Analyze and Manipulate Perl (without perl)

nixos-unstable 1.277
- nixpkgs-unstable 1.277
- nixos-unstable-small 1.277

pkgs.haskellPackages.hsPID

PID control loop

nixos-unstable 0.1.2
- nixpkgs-unstable 0.1.2
- nixos-unstable-small 0.1.2

pkgs.spirv-llvm-translator

Tool and a library for bi-directional translation between SPIR-V and LLVM IR

nixos-unstable 18.1.0
- nixpkgs-unstable 18.1.0
- nixos-unstable-small 18.1.0

pkgs.perl538Packages.GSSAPI

Perl extension providing access to the GSSAPIv2 library

nixos-unstable 0.28
- nixpkgs-unstable 0.28
- nixos-unstable-small 0.28

pkgs.perl540Packages.GSSAPI

Perl extension providing access to the GSSAPIv2 library

nixos-unstable 0.28
- nixpkgs-unstable 0.28
- nixos-unstable-small 0.28

pkgs.perl538Packages.PDFAPI2

Create, modify, and examine PDF files

nixos-unstable API2-2.045
- nixpkgs-unstable API2-2.045
- nixos-unstable-small API2-2.045

pkgs.perl540Packages.PDFAPI2

Create, modify, and examine PDF files

nixos-unstable API2-2.045
- nixpkgs-unstable API2-2.045
- nixos-unstable-small API2-2.045

pkgs.haskellPackages.EdisonAPI

A library of efficient, purely-functional data structures (API)

nixos-unstable 1.3.3.1
- nixpkgs-unstable 1.3.3.1
- nixos-unstable-small 1.3.3.1

pkgs.perl538Packages.PPIxUtils

Utility functions for PPI

nixos-unstable 0.003
- nixpkgs-unstable 0.003
- nixos-unstable-small 0.003

pkgs.perl540Packages.PPIxUtils

Utility functions for PPI

nixos-unstable 0.003
- nixpkgs-unstable 0.003
- nixos-unstable-small 0.003

pkgs.perl538Packages.PPIxRegexp

Parse regular expressions

nixos-unstable 0.088
- nixpkgs-unstable 0.088
- nixos-unstable-small 0.088

pkgs.perl540Packages.PPIxRegexp

Parse regular expressions

nixos-unstable 0.088
- nixpkgs-unstable 0.088
- nixos-unstable-small 0.088

pkgs.perl538Packages.ProcPIDFile

Manage process id files

nixos-unstable 1.29
- nixpkgs-unstable 1.29
- nixos-unstable-small 1.29

pkgs.perl540Packages.ProcPIDFile

Manage process id files

nixos-unstable 1.29
- nixpkgs-unstable 1.29
- nixos-unstable-small 1.29

pkgs.perl538Packages.WWWTwilioAPI

Accessing Twilio's REST API with Perl

nixos-unstable 0.21
- nixpkgs-unstable 0.21
- nixos-unstable-small 0.21

pkgs.perl540Packages.WWWTwilioAPI

Accessing Twilio's REST API with Perl

nixos-unstable 0.21
- nixpkgs-unstable 0.21
- nixos-unstable-small 0.21

pkgs.perl538Packages.OpenAPIClient

Client for talking to an Open API powered server

nixos-unstable 1.07
- nixpkgs-unstable 1.07
- nixos-unstable-small 1.07

pkgs.perl538Packages.PPIxQuoteLike

Parse Perl string literals and string-literal-like things

nixos-unstable 0.023
- nixpkgs-unstable 0.023
- nixos-unstable-small 0.023

pkgs.perl538Packages.PPIxUtilities

Extensions to PPI|PPI

nixos-unstable 1.001000
- nixpkgs-unstable 1.001000
- nixos-unstable-small 1.001000

pkgs.perl540Packages.OpenAPIClient

Client for talking to an Open API powered server

nixos-unstable 1.07
- nixpkgs-unstable 1.07
- nixos-unstable-small 1.07

pkgs.perl540Packages.PPIxQuoteLike

Parse Perl string literals and string-literal-like things

nixos-unstable 0.023
- nixpkgs-unstable 0.023
- nixos-unstable-small 0.023

pkgs.perl540Packages.PPIxUtilities

Extensions to PPI|PPI

nixos-unstable 1.001000
- nixpkgs-unstable 1.001000
- nixos-unstable-small 1.001000

pkgs.perl538Packages.MojoliciousPluginOpenAPI

OpenAPI / Swagger plugin for Mojolicious

nixos-unstable 5.09
- nixpkgs-unstable 5.09
- nixos-unstable-small 5.09

pkgs.perl540Packages.MojoliciousPluginOpenAPI

OpenAPI / Swagger plugin for Mojolicious

nixos-unstable 5.09
- nixpkgs-unstable 5.09
- nixos-unstable-small 5.09

Package maintainers

@de11n Elliot Cameron <nixpkgs-commits@deshaw.com>
@invokes-su Souvik Sen <nixpkgs-commits@deshaw.com>
@stigtsp Stig Palmquist <stig@stig.io>
@gloaming Craig Hall <ch9871@gmail.com>
@s0me1newithhand7s hand7s <s0me1newithhand7s@gmail.com>

Untriaged

Permalink CVE-2023-20579

4.4 MEDIUM

CVSS version: 3.1
Attack vector (AV): LOCAL
Attack complexity (AC): LOW
Privileges required (PR): HIGH
User interaction (UI): NONE
Scope (S): UNCHANGED
Confidentiality impact (C): NONE
Integrity impact (I): NONE
Availability impact (A): HIGH

created 1 year, 1 month ago

Improper Access Control in the AMD SPI protection feature may …

Improper Access Control in the AMD SPI protection feature may allow a user with Ring0 (kernel mode) privileged access to bypass protections potentially resulting in loss of integrity and availability.