Nixpkgs security tracker

Permalink CVE-2011-2808

created 2 months ago Activity log

Created suggestion 2 months ago

A stale layout root is set as an input element …

A stale layout root is set as an input element in WebKit in Google Chrome before Blink M13 when a child of a keygen with autofocus is accessed.

References

https://bugs.chromium.org/p/chromium/issues/detail?id=83672 x_transferredx_refsource_MISC
http://trac.webkit.org/changeset/86976 x_transferredx_refsource_MISC
http://trac.webkit.org/browser/trunk/Source/WebCore/rendering/RenderObject.h?re… x_transferredx_refsource_MISC
http://code.google.com/p/chromium/issues/detail?id=82063 x_transferredx_refsource_MISC
https://bugs.webkit.org/show_bug.cgi?id=57091 x_transferredx_refsource_MISC
http://trac.webkit.org/changeset/90568 x_transferredx_refsource_MISC
http://trac.webkit.org/changeset/90848 x_transferredx_refsource_MISC

Affected products

Chrome

==before Blink M13

Matching in nixpkgs

pkgs.netflix

Open Netflix in Google Chrome app mode

nixos-unstable -
- nixpkgs-unstable
- nixos-unstable-small
nixos-25.11 -
- nixos-25.11-small
- nixpkgs-25.11-darwin

pkgs.chromedriver

WebDriver server for running Selenium tests on Chrome

nixos-unstable 145.0.7632.67
- nixpkgs-unstable 145.0.7632.75
- nixos-unstable-small 145.0.7632.75
nixos-25.11 145.0.7632.75
- nixos-25.11-small 145.0.7632.75
- nixpkgs-25.11-darwin 145.0.7632.75

pkgs.mkchromecast

Cast macOS and Linux Audio/Video to your Google Cast and Sonos Devices

nixos-unstable 2025-12-21
- nixpkgs-unstable 2025-12-21
- nixos-unstable-small 2025-12-21
nixos-25.11 2022-10-31
- nixos-25.11-small 2022-10-31
- nixpkgs-25.11-darwin 2022-10-31

pkgs.chrome-export

Scripts to save Google Chrome's bookmarks and history as HTML bookmarks files

nixos-unstable 2.0.2
- nixpkgs-unstable 2.0.2
- nixos-unstable-small 2.0.2
nixos-25.11 2.0.2
- nixos-25.11-small 2.0.2
- nixpkgs-25.11-darwin 2.0.2

pkgs.go-chromecast

CLI for Google Chromecast, Home devices and Cast Groups

nixos-unstable 0.3.4
- nixpkgs-unstable 0.3.4
- nixos-unstable-small 0.3.4
nixos-25.11 0.3.4
- nixos-25.11-small 0.3.4
- nixpkgs-25.11-darwin 0.3.4

pkgs.google-chrome

Freeware web browser developed by Google

nixos-unstable 145.0.7632.67
- nixpkgs-unstable 145.0.7632.75
- nixos-unstable-small 145.0.7632.75
nixos-25.11 145.0.7632.75
- nixos-25.11-small 145.0.7632.75
- nixpkgs-25.11-darwin 145.0.7632.75

pkgs.xf86videoopenchrome

VIA Technologies UniChrome and Chrome9 IGP video driver for the Xorg X server

nixos-unstable 0.6.225
- nixpkgs-unstable 0.6.225
- nixos-unstable-small 0.6.225

pkgs.chrome-token-signing

Chrome and Firefox extension for signing with your eID on the web

nixos-unstable 1.1.5
- nixpkgs-unstable 1.1.5
- nixos-unstable-small 1.1.5
nixos-25.11 1.1.5
- nixos-25.11-small 1.1.5
- nixpkgs-25.11-darwin 1.1.5

pkgs.chrome-pak-customizer

Simple batch tool to customize pak files in chrome or chromium-based browser

nixos-unstable 2.0-unstable-2021-06-24
- nixpkgs-unstable 2.0-unstable-2021-06-24
- nixos-unstable-small 2.0-unstable-2021-06-24
nixos-25.11 2.0-unstable-2021-06-24
- nixos-25.11-small 2.0-unstable-2021-06-24
- nixpkgs-25.11-darwin 2.0-unstable-2021-06-24

pkgs.electron-chromedriver

WebDriver server for running Selenium tests on Chrome

nixos-unstable 38.8.1
- nixpkgs-unstable 38.8.1
- nixos-unstable-small 38.8.1
nixos-25.11 38.8.0
- nixos-25.11-small 38.8.0
- nixpkgs-25.11-darwin 38.8.0

pkgs.xf86-video-openchrome

VIA Technologies UniChrome and Chrome9 IGP video driver for the Xorg X server

nixos-unstable 0.6.225
- nixpkgs-unstable 0.6.225
- nixos-unstable-small 0.6.225

pkgs.curl-impersonate-chrome

Special build of curl that can impersonate Chrome & Firefox

nixos-25.11 1.2.0
- nixos-25.11-small 1.2.0
- nixpkgs-25.11-darwin 1.2.0

pkgs.undetected-chromedriver

Custom Selenium ChromeDriver that passes all bot mitigation systems

nixos-unstable 145.0.7632.67
- nixpkgs-unstable 145.0.7632.75
- nixos-unstable-small 145.0.7632.75
nixos-25.11 145.0.7632.75
- nixos-25.11-small 145.0.7632.75
- nixpkgs-25.11-darwin 145.0.7632.75

pkgs.electron-chromedriver_33

WebDriver server for running Selenium tests on Chrome

pkgs.electron-chromedriver_34

WebDriver server for running Selenium tests on Chrome

pkgs.electron-chromedriver_35

WebDriver server for running Selenium tests on Chrome

pkgs.electron-chromedriver_36

WebDriver server for running Selenium tests on Chrome

nixos-25.11 36.9.5
- nixos-25.11-small 36.9.5
- nixpkgs-25.11-darwin 36.9.5

pkgs.electron-chromedriver_37

WebDriver server for running Selenium tests on Chrome

nixos-unstable 37.10.3
- nixpkgs-unstable 37.10.3
- nixos-unstable-small 37.10.3
nixos-25.11 37.10.3
- nixos-25.11-small 37.10.3
- nixpkgs-25.11-darwin 37.10.3

pkgs.electron-chromedriver_38

WebDriver server for running Selenium tests on Chrome

nixos-unstable 38.8.1
- nixpkgs-unstable 38.8.1
- nixos-unstable-small 38.8.1
nixos-25.11 38.8.0
- nixos-25.11-small 38.8.0
- nixpkgs-25.11-darwin 38.8.0

pkgs.electron-chromedriver_39

WebDriver server for running Selenium tests on Chrome

nixos-unstable 39.5.2
- nixpkgs-unstable 39.5.2
- nixos-unstable-small 39.5.2
nixos-25.11 39.4.0
- nixos-25.11-small 39.4.0
- nixpkgs-25.11-darwin 39.4.0

pkgs.electron-chromedriver_40

WebDriver server for running Selenium tests on Chrome

nixos-unstable 40.3.0
- nixpkgs-unstable 40.3.0
- nixos-unstable-small 40.3.0
nixos-25.11 40.1.0
- nixos-25.11-small 40.1.0
- nixpkgs-25.11-darwin 40.1.0

pkgs.xorg.xf86videoopenchrome

None

nixos-25.11 0.6.0
- nixos-25.11-small 0.6.0
- nixpkgs-25.11-darwin 0.6.0

pkgs.ocamlPackages.chrome-trace

Chrome trace event generation library

nixos-unstable 3.20.2
- nixpkgs-unstable 3.20.2
- nixos-unstable-small 3.20.2
nixos-25.11 3.20.2
- nixos-25.11-small 3.20.2
- nixpkgs-25.11-darwin 3.20.2

pkgs.noto-fonts-monochrome-emoji

Monochrome emoji font

nixos-unstable 3.000
- nixpkgs-unstable 3.000
- nixos-unstable-small 3.000
nixos-25.11 3.000
- nixos-25.11-small 3.000
- nixpkgs-25.11-darwin 3.000

pkgs.python312Packages.pychromecast

Library for Python to communicate with the Google Chromecast

nixos-25.11 14.0.9
- nixos-25.11-small 14.0.9
- nixpkgs-25.11-darwin 14.0.9

pkgs.python313Packages.pychromecast

Library for Python to communicate with the Google Chromecast

nixos-unstable 14.0.9
- nixpkgs-unstable 14.0.9
- nixos-unstable-small 14.0.9
nixos-25.11 14.0.9
- nixos-25.11-small 14.0.9
- nixpkgs-25.11-darwin 14.0.9

pkgs.python314Packages.pychromecast

Library for Python to communicate with the Google Chromecast

nixos-unstable 14.0.9
- nixpkgs-unstable 14.0.9
- nixos-unstable-small 14.0.9

pkgs.ocamlPackages_latest.chrome-trace

Chrome trace event generation library

nixos-unstable 3.20.2
- nixpkgs-unstable 3.20.2
- nixos-unstable-small 3.20.2

pkgs.python312Packages.undetected-chromedriver

Python library for the custom Selenium ChromeDriver that passes all bot mitigation systems

nixos-25.11 3.5.5
- nixos-25.11-small 3.5.5
- nixpkgs-25.11-darwin 3.5.5

pkgs.python313Packages.undetected-chromedriver

Python library for the custom Selenium ChromeDriver that passes all bot mitigation systems

nixos-unstable 3.5.5
- nixpkgs-unstable 3.5.5
- nixos-unstable-small 3.5.5
nixos-25.11 3.5.5
- nixos-25.11-small 3.5.5
- nixpkgs-25.11-darwin 3.5.5

pkgs.python314Packages.undetected-chromedriver

Python library for the custom Selenium ChromeDriver that passes all bot mitigation systems

nixos-unstable 3.5.5
- nixpkgs-unstable 3.5.5
- nixos-unstable-small 3.5.5

pkgs.grafanaPlugins.ventura-psychrometric-panel

Grafana plugin to display air conditions on a psychrometric chart

nixos-unstable 5.1.0
- nixpkgs-unstable 5.1.0
- nixos-unstable-small 5.1.0
nixos-25.11 5.0.4
- nixos-25.11-small 5.0.4
- nixpkgs-25.11-darwin 5.0.4

Package maintainers

@bdesham Benjamin Esham <benjamin@esham.io>
@UlyssesZh Ulysses Zhan <ulysseszhan@gmail.com>
@mmahut Marek Mahut <marek.mahut@gmail.com>
@emilylange Emily Lange <nix@emilylange.de>
@networkException networkException <nix@nwex.de>
@GGG-KILLER GGG <github@ggg.dev>
@yayayayaka Yaya <github@uwu.is>
@liam-murphy14 Liam Murphy <liam.murphy137@gmail.com>
@zi3m5f zi3m5f <k7n3o3a6f@mozmail.com>
@jnsgruk Jon Seager <jon@sgrs.uk>
@johnrtitor Masum Reza <masumrezarock100@gmail.com>
@Shou Benedict Aas <x+g@shou.io>
@roberth Robert Hensing <nixpkgs@roberthensing.nl>
@nicoonoclaste nicoo <nicoo@debian.org>
@abbradar Nikolay Amiantov <ab@fmap.me>
@paveloom Pavel Sobolev <contact@paveloom.dev>
@teutat3s teutat3s <teutates@mailbox.org>
@TomaSajt TomaSajt
@nagisa Simonas Kazlauskas <nixpkgs@kazlauskas.me>

Permalink CVE-2011-1490

created 2 months ago Activity log

Created suggestion 2 months ago

A memory leak in rsyslog before 5.7.6 was found in …

A memory leak in rsyslog before 5.7.6 was found in the way deamon processed log messages are logged when multiple rulesets were used and some output batches contained messages belonging to more than one ruleset. A local attacker could cause denial of the rsyslogd daemon service via a log message belonging to more than one ruleset

References

https://security-tracker.debian.org/tracker/CVE-2011-1490 x_transferredx_refsource_MISC
https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2011-1490 x_transferredx_refsource_MISC
https://access.redhat.com/security/cve/cve-2011-1490 x_transferredx_refsource_MISC
http://lists.opensuse.org/opensuse-security-announce/2011-04/msg00005.html x_transferredx_refsource_MISC
https://github.com/rsyslog/rsyslog/commit/1ef709cc97d54f74d3fdeb83788cc4b01f4c6… x_transferredx_refsource_MISC

Affected products

rsyslog

==before 5.7.6

Matching in nixpkgs

pkgs.rsyslog

Enhanced syslog implementation

nixos-unstable 8.2512.0
- nixpkgs-unstable 8.2512.0
- nixos-unstable-small 8.2512.0
nixos-25.11 8.2510.0
- nixos-25.11-small 8.2510.0
- nixpkgs-25.11-darwin 8.2510.0

pkgs.rsyslog-light

Enhanced syslog implementation

nixos-unstable 8.2512.0
- nixpkgs-unstable 8.2512.0
- nixos-unstable-small 8.2512.0
nixos-25.11 8.2510.0
- nixos-25.11-small 8.2510.0
- nixpkgs-25.11-darwin 8.2510.0

Permalink CVE-2012-1155

created 2 months ago Activity log

Created suggestion 2 months ago

Moodle has a database activity export permission issue where the …

Moodle has a database activity export permission issue where the export function of the database activity module exports all entries even those from groups the user does not belong to

References

https://security-tracker.debian.org/tracker/CVE-2012-1155 x_transferredx_refsource_MISC
https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2012-1155 x_transferredx_refsource_MISC
https://access.redhat.com/security/cve/cve-2012-1155 x_transferredx_refsource_MISC
http://lists.fedoraproject.org/pipermail/package-announce/2012-April/078209.html x_transferredx_refsource_MISC
http://lists.fedoraproject.org/pipermail/package-announce/2012-May/081047.html x_transferredx_refsource_MISC
http://lists.fedoraproject.org/pipermail/package-announce/2012-April/078210.html x_transferredx_refsource_MISC
http://lists.fedoraproject.org/pipermail/package-announce/2012-April/077635.html x_transferredx_refsource_MISC
http://lists.fedoraproject.org/pipermail/package-announce/2012-May/080712.html x_transferredx_refsource_MISC
https://moodle.org/mod/forum/discuss.php?d=198621 x_transferredx_refsource_CONFIRM

Affected products

Moodle

==2.1.x
==2.2.x
==1.9.x
==2.0.x

Matching in nixpkgs

pkgs.moodle

Free and open-source learning management system (LMS) written in PHP

nixos-unstable 5.1.1
- nixpkgs-unstable 5.1.1
- nixos-unstable-small 5.1.1
nixos-25.11 5.0.4
- nixos-25.11-small 5.0.4
- nixpkgs-25.11-darwin 5.0.4

pkgs.moodle-dl

Moodle downloader that downloads course content fast from Moodle

nixos-unstable 2.3.13
- nixpkgs-unstable 2.3.13
- nixos-unstable-small 2.3.13
nixos-25.11 2.3.13
- nixos-25.11-small 2.3.13
- nixpkgs-25.11-darwin 2.3.13

Package maintainers

@freezeboy freezeboy
@kmein Kierán Meinhardt <kmein@posteo.de>

Permalink CVE-2012-1157

created 2 months ago Activity log

Created suggestion 2 months ago

Moodle before 2.2.2 has a default repository capabilities issue where …

Moodle before 2.2.2 has a default repository capabilities issue where all repositories are viewable by all users by default

References

http://lists.fedoraproject.org/pipermail/package-announce/2012-April/078209.html x_transferredx_refsource_MISC
https://security-tracker.debian.org/tracker/CVE-2012-1157 x_transferredx_refsource_MISC
https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2012-1157 x_transferredx_refsource_MISC
https://access.redhat.com/security/cve/cve-2012-1157 x_transferredx_refsource_MISC
http://lists.fedoraproject.org/pipermail/package-announce/2012-May/081047.html x_transferredx_refsource_MISC
http://lists.fedoraproject.org/pipermail/package-announce/2012-April/078210.html x_transferredx_refsource_MISC
http://lists.fedoraproject.org/pipermail/package-announce/2012-April/077635.html x_transferredx_refsource_MISC
http://lists.fedoraproject.org/pipermail/package-announce/2012-May/080712.html x_transferredx_refsource_MISC
https://moodle.org/mod/forum/discuss.php?d=198624 x_transferredx_refsource_CONFIRM

Affected products

Moodle

==2.1 to 2.1.4+
==2.2 to 2.2.1+
==2.0 to 2.0.7+

Matching in nixpkgs

pkgs.moodle

Free and open-source learning management system (LMS) written in PHP

nixos-unstable 5.1.1
- nixpkgs-unstable 5.1.1
- nixos-unstable-small 5.1.1
nixos-25.11 5.0.4
- nixos-25.11-small 5.0.4
- nixpkgs-25.11-darwin 5.0.4

pkgs.moodle-dl

Moodle downloader that downloads course content fast from Moodle

nixos-unstable 2.3.13
- nixpkgs-unstable 2.3.13
- nixos-unstable-small 2.3.13
nixos-25.11 2.3.13
- nixos-25.11-small 2.3.13
- nixpkgs-25.11-darwin 2.3.13

Package maintainers

@freezeboy freezeboy
@kmein Kierán Meinhardt <kmein@posteo.de>

Permalink CVE-2011-4125

created 2 months ago Activity log

Created suggestion 2 months ago

A untrusted search path issue was found in Calibre at …

A untrusted search path issue was found in Calibre at devices/linux_mount_helper.c leading to the ability of unprivileged users to execute any program as root.

References

https://git.zx2c4.com/calibre-mount-helper-exploit/about/ x_transferredx_refsource_MISC
https://www.openwall.com/lists/oss-security/2011/11/02/2 x_transferredx_refsource_MISC
https://bugs.launchpad.net/calibre/+bug/885027 x_transferredx_refsource_MISC
https://lwn.net/Articles/464824/ x_transferredx_refsource_MISC

Affected products

Calibre

==unknown

Matching in nixpkgs

pkgs.calibre

Comprehensive e-book software

nixos-unstable 8.16.2
- nixpkgs-unstable 8.16.2
- nixos-unstable-small 8.16.2
nixos-25.11 8.14.0
- nixos-25.11-small 8.14.0
- nixpkgs-25.11-darwin 8.14.0

pkgs.calibre-web

Web app for browsing, reading and downloading eBooks stored in a Calibre database

nixos-unstable 0.6.25
- nixpkgs-unstable 0.6.25
- nixos-unstable-small 0.6.25
nixos-25.11 0.6.25
- nixos-25.11-small 0.6.25
- nixpkgs-25.11-darwin 0.6.25

pkgs.pkgsRocm.calibre

Comprehensive e-book software

nixos-unstable 8.16.2
- nixpkgs-unstable 8.16.2
- nixos-unstable-small 8.16.2
nixos-25.11 8.14.0
- nixos-25.11-small 8.14.0
- nixpkgs-25.11-darwin 8.14.0

pkgs.calibre-no-speech

Comprehensive e-book software

nixos-unstable 8.16.2
- nixpkgs-unstable 8.16.2
- nixos-unstable-small 8.16.2

pkgs.pkgsRocm.calibre-no-speech

Comprehensive e-book software

nixos-unstable 8.16.2
- nixpkgs-unstable 8.16.2
- nixos-unstable-small 8.16.2

Package maintainers

@pSub Pascal Wittmann <mail@pascal-wittmann.de>
@pborzenkov Pavel Borzenkov <pavel@borzenkov.net>

Permalink CVE-2012-6083

created 2 months ago Activity log

Created suggestion 2 months ago

Freeciv before 2.3.3 allows remote attackers to cause a denial …

Freeciv before 2.3.3 allows remote attackers to cause a denial of service via a crafted packet.

References

http://www.openwall.com/lists/oss-security/2012/12/31/2 x_transferredx_refsource_MISC
https://freeciv.fandom.com/wiki/NEWS-2.3.3 x_transferredx_refsource_MISC

Affected products

freeciv

==before 2.3.3

Matching in nixpkgs

pkgs.freeciv

Multiplayer (or single player), turn-based strategy game

nixos-unstable 3.2.2
- nixpkgs-unstable 3.2.2
- nixos-unstable-small 3.2.2
nixos-25.11 3.2.1
- nixos-25.11-small 3.2.1
- nixpkgs-25.11-darwin 3.2.1

pkgs.freeciv_qt

Multiplayer (or single player), turn-based strategy game

nixos-unstable 3.2.2
- nixpkgs-unstable 3.2.2
- nixos-unstable-small 3.2.2
nixos-25.11 3.2.1
- nixos-25.11-small 3.2.1
- nixpkgs-25.11-darwin 3.2.1

pkgs.freeciv_gtk

Multiplayer (or single player), turn-based strategy game

nixos-unstable 3.2.2
- nixpkgs-unstable 3.2.2
- nixos-unstable-small 3.2.2
nixos-25.11 3.2.1
- nixos-25.11-small 3.2.1
- nixpkgs-25.11-darwin 3.2.1

pkgs.freeciv_sdl2

Multiplayer (or single player), turn-based strategy game

nixos-unstable 3.2.2
- nixpkgs-unstable 3.2.2
- nixos-unstable-small 3.2.2
nixos-25.11 3.2.1
- nixos-25.11-small 3.2.1
- nixpkgs-25.11-darwin 3.2.1

Package maintainers

@nbp Nicolas B. Pierron <nixos@nbp.name>

Permalink CVE-2011-1489

created 2 months ago Activity log

Created suggestion 2 months ago

A memory leak in rsyslog before 5.7.6 was found in …

A memory leak in rsyslog before 5.7.6 was found in the way deamon processed log messages were logged when multiple rulesets were used and some output batches contained messages belonging to more than one ruleset. A local attacker could cause denial of the rsyslogd daemon service via a log message belonging to more than one ruleset.

References

https://security-tracker.debian.org/tracker/CVE-2011-1489 x_transferredx_refsource_MISC
https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2011-1489 x_transferredx_refsource_MISC
https://access.redhat.com/security/cve/cve-2011-1489 x_transferredx_refsource_MISC
http://lists.opensuse.org/opensuse-security-announce/2011-04/msg00005.html x_transferredx_refsource_MISC
https://github.com/rsyslog/rsyslog/commit/1ef709cc97d54f74d3fdeb83788cc4b01f4c6… x_transferredx_refsource_MISC

Affected products

rsyslog

==before 5.7.6

Matching in nixpkgs

pkgs.rsyslog

Enhanced syslog implementation

nixos-unstable 8.2512.0
- nixpkgs-unstable 8.2512.0
- nixos-unstable-small 8.2512.0
nixos-25.11 8.2510.0
- nixos-25.11-small 8.2510.0
- nixpkgs-25.11-darwin 8.2510.0

pkgs.rsyslog-light

Enhanced syslog implementation

nixos-unstable 8.2512.0
- nixpkgs-unstable 8.2512.0
- nixos-unstable-small 8.2512.0
nixos-25.11 8.2510.0
- nixos-25.11-small 8.2510.0
- nixpkgs-25.11-darwin 8.2510.0

Permalink CVE-2012-4438

created 2 months ago Activity log

Created suggestion 2 months ago

Jenkins main before 1.482 and LTS before 1.466.2 allows remote …

Jenkins main before 1.482 and LTS before 1.466.2 allows remote attackers with read access and HTTP access to Jenkins master to insert data and execute arbitrary code.

References

https://security-tracker.debian.org/tracker/CVE-2012-4438 x_transferredx_refsource_MISC
http://www.openwall.com/lists/oss-security/2012/09/21/2 x_transferredx_refsource_MISC
https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2012-4438 x_transferredx_refsource_CONFIRM
https://www.cloudbees.com/jenkins-security-advisory-2012-09-17 x_transferredx_refsource_MISC

Affected products

jenkins

==1.447.2

Matching in nixpkgs

pkgs.jenkins

Extendable open source continuous integration server

nixos-unstable 2.541.1
- nixpkgs-unstable 2.541.1
- nixos-unstable-small 2.541.1
nixos-25.11 2.541.1
- nixos-25.11-small 2.541.1
- nixpkgs-25.11-darwin 2.541.1

pkgs.jenkins-job-builder

Jenkins Job Builder is a system for configuring Jenkins jobs using simple YAML files stored in Git

nixos-unstable 6.4.2
- nixpkgs-unstable 6.4.2
- nixos-unstable-small 6.4.2
nixos-25.11 6.4.2
- nixos-25.11-small 6.4.2
- nixpkgs-25.11-darwin 6.4.2

pkgs.python312Packages.jenkinsapi

Python API for accessing resources on a Jenkins continuous-integration server

nixos-25.11 0.3.15
- nixos-25.11-small 0.3.15
- nixpkgs-25.11-darwin 0.3.15

pkgs.python313Packages.jenkinsapi

Python API for accessing resources on a Jenkins continuous-integration server

nixos-unstable 0.3.15
- nixpkgs-unstable 0.3.15
- nixos-unstable-small 0.3.15
nixos-25.11 0.3.15
- nixos-25.11-small 0.3.15
- nixpkgs-25.11-darwin 0.3.15

pkgs.python314Packages.jenkinsapi

Python API for accessing resources on a Jenkins continuous-integration server

nixos-unstable 0.3.15
- nixpkgs-unstable 0.3.15
- nixos-unstable-small 0.3.15

pkgs.python312Packages.python-jenkins

Python bindings for the remote Jenkins API

nixos-25.11 1.8.3
- nixos-25.11-small 1.8.3
- nixpkgs-25.11-darwin 1.8.3

pkgs.python313Packages.python-jenkins

Python bindings for the remote Jenkins API

nixos-unstable 1.8.3
- nixpkgs-unstable 1.8.3
- nixos-unstable-small 1.8.3
nixos-25.11 1.8.3
- nixos-25.11-small 1.8.3
- nixpkgs-25.11-darwin 1.8.3

pkgs.python314Packages.python-jenkins

Python bindings for the remote Jenkins API

nixos-unstable 1.8.3
- nixpkgs-unstable 1.8.3
- nixos-unstable-small 1.8.3

pkgs.python312Packages.jenkins-job-builder

Jenkins Job Builder is a system for configuring Jenkins jobs using simple YAML files stored in Git

nixos-25.11 6.4.2
- nixos-25.11-small 6.4.2
- nixpkgs-25.11-darwin 6.4.2

pkgs.python313Packages.jenkins-job-builder

Jenkins Job Builder is a system for configuring Jenkins jobs using simple YAML files stored in Git

nixos-unstable 6.4.2
- nixpkgs-unstable 6.4.2
- nixos-unstable-small 6.4.2
nixos-25.11 6.4.2
- nixos-25.11-small 6.4.2
- nixpkgs-25.11-darwin 6.4.2

pkgs.python314Packages.jenkins-job-builder

Jenkins Job Builder is a system for configuring Jenkins jobs using simple YAML files stored in Git

nixos-unstable 6.4.2
- nixpkgs-unstable 6.4.2
- nixos-unstable-small 6.4.2

Package maintainers

@coreyoconnor Corey O'Connor <coreyoconnor@gmail.com>
@NeQuissimus Tim Steinbach <tim@nequissimus.com>
@earldouglas James Earl Douglas <james@earldouglas.com>
@Bot-wxt1221 Bot-wxt1221 <3264117476@qq.com>
@drets Dmytro Rets <dmitryrets@gmail.com>
@de11n Elliot Cameron <nixpkgs-commits@deshaw.com>
@invokes-su Souvik Sen <nixpkgs-commits@deshaw.com>
@gador Florian Brandes <florian.brandes@posteo.de>
@despsyched Priyanshu Tripathi <priyanshu.tripathi@deshaw.com>

Permalink CVE-2008-3280

created 2 months ago Activity log

Created suggestion 2 months ago

It was found that various OpenID Providers (OPs) had TLS …

It was found that various OpenID Providers (OPs) had TLS Server Certificates that used weak keys, as a result of the Debian Predictable Random Number Generator (CVE-2008-0166). In combination with the DNS Cache Poisoning issue (CVE-2008-1447) and the fact that almost all SSL/TLS implementations do not consult CRLs (currently an untracked issue), this means that it is impossible to rely on these OPs.

References

http://lists.openid.net/pipermail/openid-security/2008-August/000942.html x_transferredx_refsource_MISC
https://www.exploit-db.com/exploits/5720 x_transferredx_refsource_MISC

Affected products

openid

==unknown

Matching in nixpkgs

pkgs.perlPackages.NetOpenIDCommon

Libraries shared between Net::OpenID::Consumer and Net::OpenID::Server

nixos-unstable 1.20
- nixpkgs-unstable 1.20
- nixos-unstable-small 1.20
nixos-25.11 1.20
- nixos-25.11-small 1.20
- nixpkgs-25.11-darwin 1.20

pkgs.luaPackages.lua-resty-openidc

A library for NGINX implementing the OpenID Connect Relying Party (RP) and the OAuth 2.0 Resource Server (RS) functionality

nixos-unstable 1.8.0-1
- nixpkgs-unstable 1.8.0-1
- nixos-unstable-small 1.8.0-1
nixos-25.11 1.8.0-1
- nixos-25.11-small 1.8.0-1
- nixpkgs-25.11-darwin 1.8.0-1

pkgs.perl5Packages.NetOpenIDCommon

Libraries shared between Net::OpenID::Consumer and Net::OpenID::Server

nixos-unstable 1.20
- nixpkgs-unstable 1.20
- nixos-unstable-small 1.20

pkgs.perlPackages.NetOpenIDConsumer

Library for consumers of OpenID identities

nixos-unstable 1.18
- nixpkgs-unstable 1.18
- nixos-unstable-small 1.18
nixos-25.11 1.18
- nixos-25.11-small 1.18
- nixpkgs-25.11-darwin 1.18

pkgs.python312Packages.flask-openid

OpenID support for Flask

nixos-25.11 1.3.1
- nixos-25.11-small 1.3.1
- nixpkgs-25.11-darwin 1.3.1

pkgs.python313Packages.flask-openid

OpenID support for Flask

nixos-unstable 1.3.1
- nixpkgs-unstable 1.3.1
- nixos-unstable-small 1.3.1
nixos-25.11 1.3.1
- nixos-25.11-small 1.3.1
- nixpkgs-25.11-darwin 1.3.1

pkgs.python314Packages.flask-openid

OpenID support for Flask

nixos-unstable 1.3.1
- nixpkgs-unstable 1.3.1
- nixos-unstable-small 1.3.1

pkgs.lua51Packages.lua-resty-openidc

A library for NGINX implementing the OpenID Connect Relying Party (RP) and the OAuth 2.0 Resource Server (RS) functionality

nixos-unstable 1.8.0-1
- nixpkgs-unstable 1.8.0-1
- nixos-unstable-small 1.8.0-1
nixos-25.11 1.8.0-1
- nixos-25.11-small 1.8.0-1
- nixpkgs-25.11-darwin 1.8.0-1

pkgs.lua52Packages.lua-resty-openidc

A library for NGINX implementing the OpenID Connect Relying Party (RP) and the OAuth 2.0 Resource Server (RS) functionality

nixos-unstable 1.8.0-1
- nixpkgs-unstable 1.8.0-1
- nixos-unstable-small 1.8.0-1
nixos-25.11 1.8.0-1
- nixos-25.11-small 1.8.0-1
- nixpkgs-25.11-darwin 1.8.0-1

pkgs.lua53Packages.lua-resty-openidc

A library for NGINX implementing the OpenID Connect Relying Party (RP) and the OAuth 2.0 Resource Server (RS) functionality

nixos-unstable 1.8.0-1
- nixpkgs-unstable 1.8.0-1
- nixos-unstable-small 1.8.0-1
nixos-25.11 1.8.0-1
- nixos-25.11-small 1.8.0-1
- nixpkgs-25.11-darwin 1.8.0-1

pkgs.lua54Packages.lua-resty-openidc

A library for NGINX implementing the OpenID Connect Relying Party (RP) and the OAuth 2.0 Resource Server (RS) functionality

nixos-unstable 1.8.0-1
- nixpkgs-unstable 1.8.0-1
- nixos-unstable-small 1.8.0-1
nixos-25.11 1.8.0-1
- nixos-25.11-small 1.8.0-1
- nixpkgs-25.11-darwin 1.8.0-1

pkgs.lua55Packages.lua-resty-openidc

A library for NGINX implementing the OpenID Connect Relying Party (RP) and the OAuth 2.0 Resource Server (RS) functionality

nixos-unstable 1.8.0-1
- nixpkgs-unstable 1.8.0-1
- nixos-unstable-small 1.8.0-1

pkgs.perl538Packages.NetOpenIDCommon

Libraries shared between Net::OpenID::Consumer and Net::OpenID::Server

nixos-25.11 1.20
- nixos-25.11-small 1.20
- nixpkgs-25.11-darwin 1.20

pkgs.perl540Packages.NetOpenIDCommon

Libraries shared between Net::OpenID::Consumer and Net::OpenID::Server

nixos-25.11 1.20
- nixos-25.11-small 1.20
- nixpkgs-25.11-darwin 1.20

pkgs.perl5Packages.NetOpenIDConsumer

Library for consumers of OpenID identities

nixos-unstable 1.18
- nixpkgs-unstable 1.18
- nixos-unstable-small 1.18

pkgs.luajitPackages.lua-resty-openidc

A library for NGINX implementing the OpenID Connect Relying Party (RP) and the OAuth 2.0 Resource Server (RS) functionality

nixos-unstable 1.8.0-1
- nixpkgs-unstable 1.8.0-1
- nixos-unstable-small 1.8.0-1
nixos-25.11 1.8.0-1
- nixos-25.11-small 1.8.0-1
- nixpkgs-25.11-darwin 1.8.0-1