Nixpkgs security tracker

Login with GitHub
⚠️ You are using a production deployment that is still only suitable for demo purposes. Any work done in this might be wiped later without notice.

Automatically generated suggestions

to slate a suggestion for refinement.

to mark a suggestion as irrelevant and log the reason.

View:
Compact
Detailed
created 2 months ago Activity log
  • Created suggestion
The BrowserID (Mozilla Persona) module 7.x-1.x before 7.x-1.3 for Drupal …

The BrowserID (Mozilla Persona) module 7.x-1.x before 7.x-1.3 for Drupal allows remote attackers to hijack the authentication of arbitrary users via the audience identifier.

References

Affected products

BrowserID
  • ==7.x-1.x before 7.x-1.3

Matching in nixpkgs

created 2 months ago Activity log
  • Created suggestion
systemd 37-1 does not properly handle non-existent services, which causes …

systemd 37-1 does not properly handle non-existent services, which causes a denial of service (failure of login procedure).

Affected products

systemd
  • ==37-1

Matching in nixpkgs

pkgs.udev

System and service manager for Linux

pkgs.systemd

System and service manager for Linux

pkgs.systemd-netlogd

Forwards messages from the journal to other hosts over the network

pkgs.systemd-bootchart

Boot performance graphing tool from systemd

  • nixos-unstable 235
    • nixpkgs-unstable 235
    • nixos-unstable-small 235
  • nixos-25.11 235
    • nixos-25.11-small 235
    • nixpkgs-25.11-darwin 235

pkgs.ocamlPackages.systemd

OCaml module for native access to the systemd facilities

  • nixos-unstable 1.3
    • nixpkgs-unstable 1.3
    • nixos-unstable-small 1.3
  • nixos-25.11 1.3
    • nixos-25.11-small 1.3
    • nixpkgs-25.11-darwin 1.3

pkgs.update-systemd-resolved

Helper script for OpenVPN to directly update the DNS settings of a link through systemd-resolved via DBus

pkgs.python313Packages.systemdunitparser

SystemdUnitParser is an extension to Python's configparser.RawConfigParser to properly parse systemd unit files

  • nixos-unstable 0.4
    • nixpkgs-unstable 0.4
    • nixos-unstable-small 0.4
  • nixos-25.11 0.4
    • nixos-25.11-small 0.4
    • nixpkgs-25.11-darwin 0.4
created 2 months ago Activity log
  • Created suggestion
foomatic-rip filter v4.0.12 and prior used insecurely creates temporary files …

foomatic-rip filter v4.0.12 and prior used insecurely creates temporary files for storage of PostScript data by rendering the data when the debug mode was enabled. This flaw may be exploited by a local attacker to conduct symlink attacks by overwriting arbitrary files accessible with the privileges of the user running the foomatic-rip universal print filter.

Affected products

foomatic-filters
  • ==4.0.12 and prior

Matching in nixpkgs

Package maintainers

created 2 months ago Activity log
  • Created suggestion
The AX.25 daemon (ax25d) in ax25-tools before 0.0.8-13 does not …

The AX.25 daemon (ax25d) in ax25-tools before 0.0.8-13 does not check the return value of a setuid call. The setuid call is responsible for dropping privileges but if the call fails the daemon would continue to run with root privileges which can allow possible privilege escalation.

Affected products

ax25-tools
  • ==before 0.0.8-13

Matching in nixpkgs

Package maintainers

created 2 months ago Activity log
  • Created suggestion
An integer overflow condition in poppler before 0.16.3 can occur …

An integer overflow condition in poppler before 0.16.3 can occur when parsing CharCodes for fonts.

Affected products

poppler
  • ==before 0.16.3

Matching in nixpkgs

Package maintainers

created 2 months ago Activity log
  • Created suggestion
Google Chrome before 3.0 does not properly handle XML documents, …

Google Chrome before 3.0 does not properly handle XML documents, which allows remote attackers to obtain sensitive information via a crafted web site.

References

Affected products

Chrome
  • ==before 3.0

Matching in nixpkgs

pkgs.netflix

Open Netflix in Google Chrome app mode

  • nixos-unstable -
    • nixpkgs-unstable
    • nixos-unstable-small
  • nixos-25.11 -
    • nixos-25.11-small
    • nixpkgs-25.11-darwin

pkgs.chrome-export

Scripts to save Google Chrome's bookmarks and history as HTML bookmarks files

pkgs.go-chromecast

CLI for Google Chromecast, Home devices and Cast Groups

created 2 months ago Activity log
  • Created suggestion
An Elevated Privileges issue exists in JBoss AS 7 Community …

An Elevated Privileges issue exists in JBoss AS 7 Community Release due to the improper implementation in the security context propagation, A threat gets reused from the thread pool that still retains the security context from the process last used, which lets a local user obtain elevated privileges.

Affected products

JBoss
  • ==AS 7 Community Release

Matching in nixpkgs

Package maintainers

created 2 months ago Activity log
  • Created suggestion
v86d before 0.1.10 do not verify if received netlink messages …

v86d before 0.1.10 do not verify if received netlink messages are sent by the kernel. This could allow unprivileged users to manipulate the video mode and potentially other consequences.

References

Affected products

v86d
  • ==before 0.1.10

Matching in nixpkgs

Package maintainers

created 2 months ago Activity log
  • Created suggestion
The NEEDBITS macro in the inflate_dynamic function in inflate.c for …

The NEEDBITS macro in the inflate_dynamic function in inflate.c for unzip can be invoked using invalid buffers, which allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via unknown vectors that trigger a free of uninitialized or previously-freed data.

References

Affected products

n/a
  • ==n/a
unzip
  • <6.0

Matching in nixpkgs

pkgs.unzip

Extraction utility for archives compressed in .zip format

  • nixos-unstable 6.0
    • nixpkgs-unstable 6.0
    • nixos-unstable-small 6.0
  • nixos-25.11 6.0
    • nixos-25.11-small 6.0
    • nixpkgs-25.11-darwin 6.0

pkgs.runzip

Tool to convert filename encoding inside a ZIP archive

  • nixos-unstable 1.4
    • nixpkgs-unstable 1.4
    • nixos-unstable-small 1.4
  • nixos-25.11 1.4
    • nixos-25.11-small 1.4
    • nixpkgs-25.11-darwin 1.4

pkgs.unzipNLS

Extraction utility for archives compressed in .zip format

  • nixos-unstable 6.0
    • nixpkgs-unstable 6.0
    • nixos-unstable-small 6.0
  • nixos-25.11 6.0
    • nixos-25.11-small 6.0
    • nixpkgs-25.11-darwin 6.0

Package maintainers

created 2 months ago Activity log
  • Created suggestion
Cross-site scripting (XSS) vulnerability in the Activity module 6.x-1.x for …

Cross-site scripting (XSS) vulnerability in the Activity module 6.x-1.x for Drupal.

References

Affected products

Activity
  • ==6.x-1.x

Matching in nixpkgs

pkgs.pg_activity

Top like application for PostgreSQL server activity monitoring

pkgs.gnomeExtensions.activitywatch-status

Shows the total time spent on the computer, fork of [activitywatch-status-gnome-shell](https://codeberg.org/cweiske/activitywatch-status-gnome-shell/)

  • nixos-unstable 2
    • nixpkgs-unstable 2
    • nixos-unstable-small 2
  • nixos-25.11 2
    • nixos-25.11-small 2
    • nixpkgs-25.11-darwin 2

pkgs.gnomeExtensions.activity-app-launcher

Integrates a category-based application launcher in the activities window. IMPORTANT: it needs the 'gnome-menus' and 'libgnome-menu-3-dev'; they must be installed in the system before installing this extension.

  • nixos-unstable 47
    • nixpkgs-unstable 47
    • nixos-unstable-small 47
  • nixos-25.11 45
    • nixos-25.11-small 45
    • nixpkgs-25.11-darwin 45

pkgs.gnomeExtensions.drive-activity-indicator

Visualize the activity of storage drives (disk activity LED simulator).

  • nixos-unstable 8
    • nixpkgs-unstable 8
    • nixos-unstable-small 8
  • nixos-25.11 8
    • nixos-25.11-small 8
    • nixpkgs-25.11-darwin 8