Packages / Debian 12 (Bookworm) / Source / devel / nix
Purely functional package manager (binaries)
Purely functional package manager (systemd setup)
Matching against OpenFactory catalog package versions is in progress.
| CVE | Severity | Version impact |
|---|---|---|
| [CVE-2026-110452] Published: The multi-user installer in Nix before 2.35.3 sets the ownership of store contents to the user (who invoked the installer) even though it should be root ownership. | Medium(4) | AffectedDetails (4)
|
| [CVE-2026-110450] Published: Nix before 2.35.3 and Lix before 2.95.4 allow privilege escalation via a repair operation because it could destroy and then replace a store path before content verification. | High(8) | AffectedDetails (4)
|
| [CVE-2026-110449] Published: Nix before 2.35.3 and Lix before 2.95.4 have an integer overflow and resultant out-of-bounds write when evaluating untrusted expressions because list allocation is mishandled. | High(7.5) | AffectedDetails (4)
|
| [CVE-2026-64846] Published: Nix is a package manager for Linux and other Unix systems. Prior to 2.35.0, a malicious derivation executed with the recursive-nix experimental feature can exploit a time-of-check/time-of-use race inv | Low(2.8) | AffectedDetails (4)
|
| [CVE-2024-47174] Published: Nix vulnerabilities | Medium | AffectedDetails (4)
|
| [CVE-2024-38531] Published: Nix vulnerabilities | Medium | AffectedDetails (4)
|
| CVE | Severity | Version impact |
|---|---|---|
| [CVE-2026-110453] Published: Nix before 2.35.3, when unsandboxed on macOS or FreeBSD, incorrectly allows connections made by build users from daemon clients. | Medium(4.3) | Not affectedDetails (4)
|
| [CVE-2026-110451] Published: Nix before 2.35.3 and Lix before 2.95.4 on macOS allow a Seatbelt sandbox escape (for an unconfined build) because a certain size threshold is mishandled. | Medium(4.3) | Not affectedDetails (4)
|
| [CVE-2026-39860] Published: Nix is a package manager for Linux and other Unix systems. A bug in the fix for CVE-2024-27297 allowed for arbitrary overwrites of files writable by the Nix process orchestrating the builds (typically | Critical(9) | Not affectedDetails (4)
|
| [CVE-2026-44028] Published: An issue was discovered in Nix before 2.34.7 and Lix before 2.95.2. Unbounded recursion in the NAR (Nix Archive) parser could lead to a stack-to-heap overflow when the parser is run on a coroutine sta | High(7.8) | Not affectedDetails (4)
|
| [CVE-2026-44029] Published: An issue was discovered in Nix before 2.34.7. Writing to arbitrary files can occur via "nix-prefetch-url --unpack" or "nix store prefetch-file --unpack" directory traversal. The fixed versions are 2.3 | High(7.1) | Not affectedDetails (4)
|
| [CVE-2024-45593] Published: Nix vulnerabilities | Medium | Not affectedDetails (4)
|
Last synced:
Authoritative source; repository metadata signature verified
bookworm-main-amd64:9e0b5aabb2465b3d2e7a7fe27f9913846277833f7a2826e7767acccff5b588c5
Authoritative source; repository metadata signature verified
bookworm-main-arm64:2ddb1737692e8c45c53e8d57c0ce4cd21c78c5703b830c3226b1423566a06c00