CVE-2024-36050

Nix through 2.22.1 mishandles certain usage of hash caches, which makes it easier for attackers to replace current source code with attacker-controlle...

Description d'origine

La description telle que publiée par la source (souvent en anglais).

Nix through 2.22.1 mishandles certain usage of hash caches, which makes it easier for attackers to replace current source code with attacker-controlled source code by luring a maintainer into accepting a malicious pull request.

Source: OSV.dev (Open Source Vulnerabilities) NVD OSV

État des correctifs par distribution

Paquets corrigés publiés par chaque distribution pour cette CVE

Debian DEBIAN-CVE-2024-36050 nix
Ubuntu UBUNTU-CVE-2024-36050 nix

Références

advisory discourse.nixos.org
advisory github.com
advisory nvd.nist.gov
report github.com
report github.com
web discourse.nixos.org