fix: Adhere to CIS Independent 1.1.* benchmarks #146

NoRePercussions · 2024-12-16T01:46:07Z

Apply hardening changes by default to NixOS systems to comply with CIS Independent benchmarks. This batch of changes ensures compliance with most of the 1.1.* series.

github-actions · 2024-12-16T01:50:42Z

Report for `roland`

Version changes:

Version 1 -> 2:
  aa: ∅ → ε
  abstractions: ∅ → ε, +10.3 KiB
  abstractions-X: ∅ → ε
  abstractions-cups: ∅ → ε
  abstractions-dbus-session: ∅ → ε
  abstractions-dri: ∅ → ε
  abstractions-nss: ∅ → ε
  abstractions-opencl: ∅ → ε
  abstractions-p11: ∅ → ε
  abstractions-postfix: ∅ → ε
  abstractions-qt5: ∅ → ε
  abstractions-ssl_certs: ∅ → ε
  abstractions-ssl_keys: ∅ → ε
  abstractions-tunables: ∅ → ε
  apparmor: ∅ → ε
  apparmor-bin-utils: ∅ → 4.0.3, +262.0 KiB
  apparmor-closure-rules-mallocLib: ∅ → ε
  apparmor-closure-rules-security.wrappers.dbus-daemon-launch: ∅ → ε, +27.8 KiB
  apparmor-closure-rules-security.wrappers.fusermount: ∅ → ε, +16.0 KiB
  apparmor-closure-rules-security.wrappers.fusermount3: ∅ → ε, +16.0 KiB
  apparmor-closure-rules-security.wrappers.mount: ∅ → ε, +59.0 KiB
  apparmor-closure-rules-security.wrappers.newgidmap: ∅ → ε, +10.4 KiB
  apparmor-closure-rules-security.wrappers.newgrp: ∅ → ε, +10.4 KiB
  apparmor-closure-rules-security.wrappers.newuidmap: ∅ → ε, +10.4 KiB
  apparmor-closure-rules-security.wrappers.pkexec: ∅ → ε, +28.6 KiB
  apparmor-closure-rules-security.wrappers.polkit-agent-helper: ∅ → 1, +28.1 KiB
  apparmor-closure-rules-security.wrappers.sg: ∅ → ε, +10.3 KiB
  apparmor-closure-rules-security.wrappers.su: ∅ → ε, +10.9 KiB
  apparmor-closure-rules-security.wrappers.sudo: ∅ → ε, +10.4 KiB
  apparmor-closure-rules-security.wrappers.sudoedit: ∅ → ε, +10.4 KiB
  apparmor-closure-rules-security.wrappers.umount: ∅ → ε, +59.0 KiB
  apparmor-closure-rules-security.wrappers.unix_chkpwd: ∅ → ε
  apparmor-parser: ∅ → 4.0.3, +2033.0 KiB
  apparmor-profiles: ∅ → 4.0.3, +531.2 KiB
  apparmor-utils: ∅ → 4.0.3, +1152.5 KiB
  apparmor.d: ∅ → ε, +13.9 KiB
  etc-apparmor-apparmor.conf: ∅ → ε
  etc-apparmor-parser.conf: ∅ → ε
  etc-ld-nix.so.preload: ∅ → ε
  fix-rc.apparmor.functions.sh: ∅ → ε
  glib: +15310.5 KiB
  glibc-iconv: ∅ → 2.40
  gobject-introspection: +1492.3 KiB
  gobject-introspection-wrapped: ∅ → 1.82.0, +61.9 KiB
  initrd-linux: 6.6.63 → ∅, -25115.2 KiB
  initrd-linux-hardened: ∅ → 6.6.63, +25055.3 KiB
  libapparmor: +156.6 KiB
  libffi: +20.5 KiB
  linux: 6.6.63, 6.6.63-modules → ∅, -144460.7 KiB
  linux-hardened: ∅ → 6.6.63, 6.6.63-modules, +125460.9 KiB
  logprof.conf: ∅ → ε
  malloc-provider: ∅ → ε, +387.6 KiB
  nixos-security.wrappers: ∅ → ε
  nixos-security.wrappers-dbus-daemon-launch: ∅ → ε
  nixos-security.wrappers-fusermount3: ∅ → ε
  nixos-security.wrappers-polkit-agent-helper: ∅ → 1
  nixos-security.wrappers-unix_chkpwd: ∅ → ε
  python3: +593.0 KiB
  python3.12-dbus-python: ∅ → 1.3.2, +689.0 KiB
  python3.12-mako: ∅ → 1.3.5, +1003.8 KiB
  python3.12-markupsafe: ∅ → 3.0.2, +85.6 KiB
  python3.12-notify2: ∅ → 0.3.1, +53.2 KiB
  python3.12-pycairo: ∅ → 1.27.0, +500.8 KiB
  python3.12-pygobject: ∅ → 3.50.0, +1245.0 KiB
  python3.12-setuptools: ∅ → 75.1.1, +13312.8 KiB
  system: +12.7 KiB
  unit-apparmor.service: ∅ → ε
  unit-disable-kernel-module-loading.service: ∅ → ε
  unit-script-disable-kernel-module-loading: ∅ → ε
  zfs-kernel: +29.9 KiB

Security vulnerability report

68 derivations with active advisories 3 derivations left out due to whitelisting

audiofile-0.3.6

/nix/store/33f9bfl4x6qn8jr49j52f0pryrnw5dmi-audiofile-0.3.6.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2020-18781 5.5

avahi-0.8

/nix/store/g7rr3grck9v6hgalwv3v407i6jb0c2nw-avahi-0.8.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2021-26720 7.8

bind-9.18.28

/nix/store/xh5rmqfsmg9f814wpi8n7x205sciiqkb-bind-9.18.28.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2019-6470 7.5

cereal-0.5.8.3

/nix/store/vz1xdxi8zx5wa87zsaf7lqxxxa6raj36-cereal-0.5.8.3.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2020-11105 9.8
https://nvd.nist.gov/vuln/detail/CVE-2020-11104 5.3

commonmark-0.2.6.1

/nix/store/gh1sy55vdhh0x7qwzr6r179l3ya8xd3q-commonmark-0.2.6.1.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2019-10010 6.1

cups-2.4.11

/nix/store/vhwfpl5nz8lj8n4p29ifv2l8ya11q5ii-cups-2.4.11.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2022-26691 6.7

dash-0.5.12

/nix/store/6sdcssnc6gwpynp5i4yyl26cfaq1m44r-dash-0.5.12.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2024-21485 5.4

dbus-0.9.7

/nix/store/y9xm0bjcc1hja0zwmj6zln28h1859qld-dbus-0.9.7.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2019-12749 7.1
https://nvd.nist.gov/vuln/detail/CVE-2022-42010 6.5
https://nvd.nist.gov/vuln/detail/CVE-2022-42011 6.5
https://nvd.nist.gov/vuln/detail/CVE-2022-42012 6.5

dbus-1

/nix/store/8rkcj8imxkvv31y3nx9673rzk6xa7vhm-dbus-1.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2019-12749 7.1
https://nvd.nist.gov/vuln/detail/CVE-2022-42010 6.5
https://nvd.nist.gov/vuln/detail/CVE-2022-42011 6.5
https://nvd.nist.gov/vuln/detail/CVE-2022-42012 6.5

ecdsa-0.14.8

/nix/store/mrjr2hkn329ahjhxblfjm0mpdcpxb0mc-ecdsa-0.14.8.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2024-23342 7.4

flex-2.6.4

/nix/store/jaj0k6xr2yg2kbfq87vk59gkdrbf0qp4-flex-2.6.4.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2019-6293 5.5

foundation-0.0.30

/nix/store/0b0m3xdsbar42w75ll3d1d2clj83q9sc-foundation-0.0.30.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2020-26304 7.5

fuse-2.9.9

/nix/store/3dzmyy01h2nc7zbbqrh3s06v6qfrbc4w-fuse-2.9.9.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2019-14860 6.5
https://nvd.nist.gov/vuln/detail/CVE-2019-14900 6.5

fuse-2.9.9-closefrom-glibc-2-34.patch?id=8a970396fca7aca2d5a761b8e7a8242f1eef14c9

/nix/store/bq5w9cmpsj8wnkbbxqhfa4dc8yi9lwzs-fuse-2.9.9-closefrom-glibc-2-34.patch?id=8a970396fca7aca2d5a761b8e7a8242f1eef14c9.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2019-14860 6.5
https://nvd.nist.gov/vuln/detail/CVE-2019-14900 6.5

fuse-3.16.2

/nix/store/wxjd9jq04vxwrfvmlk922yk1kqn3m2gi-fuse-3.16.2.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2019-14860 6.5
https://nvd.nist.gov/vuln/detail/CVE-2019-14900 6.5

gcc-13.3.0

/nix/store/nrvcrj7crcvwr3hc4mf1jx68kihnnzhk-gcc-13.3.0.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2023-4039 4.8

git-2.47.0

/nix/store/n3lfnnsxaw96pgfjsjzmybn8p96paccb-git-2.47.0.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2022-36882 8.8
https://nvd.nist.gov/vuln/detail/CVE-2022-30947 7.5
https://nvd.nist.gov/vuln/detail/CVE-2022-36883 7.5
https://nvd.nist.gov/vuln/detail/CVE-2022-38663 6.5
https://nvd.nist.gov/vuln/detail/CVE-2021-21684 6.1
https://nvd.nist.gov/vuln/detail/CVE-2020-2136 5.4
https://nvd.nist.gov/vuln/detail/CVE-2022-36884 5.3
https://nvd.nist.gov/vuln/detail/CVE-2019-1003010 4.3

go-1.21.0-linux-amd64-bootstrap

go-1.23.3

/nix/store/k427v9wgcg9ify27mcqxrkpw5fd16xmg-go-1.23.3.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2023-49292 4.8

gstreamer-1.24.7

/nix/store/6fq0lgmpwg56pyy7am9g6i3wd4qg1dw1-gstreamer-1.24.7.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2024-47541 7.5
https://nvd.nist.gov/vuln/detail/CVE-2024-47542 7.5

h2-0.3.26

/nix/store/la8c8hy05cwxs9f086plk7l4z88fd3sq-h2-0.3.26.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2022-45868 7.8

h2-0.4.6

/nix/store/n8m0szx8rydnlsw05qq2gmk21n4iy9rx-h2-0.4.6.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2022-45868 7.8

hedgehog-1.4

/nix/store/xh621jbc0n9kh9b073wc5rqzxr0332im-hedgehog-1.4.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2021-4276 8.8

hedgehog-1.4-r8.cabal

/nix/store/5gvv44apmf9l53735nh1ib822m5spmhy-hedgehog-1.4-r8.cabal.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2021-4276 8.8

home-0.5.9

/nix/store/bd7f3qsl19gbvbb55r0c8q6jqm5w3p8d-home-0.5.9.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2023-3612 8.8
https://nvd.nist.gov/vuln/detail/CVE-2021-25264 6.7

http-0.2.12

/nix/store/hrz7drnfvc91q04ralsgir75vrwnjlkr-http-0.2.12.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2020-35669 6.1

http-1.1.0

/nix/store/glamhy314lmaad4fwh3pbxlf3k6spafw-http-1.1.0.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2022-36032 5.3
https://nvd.nist.gov/vuln/detail/CVE-2023-26044 5.3

http-client-0.7.17

/nix/store/cqb89h1rr7gr59dvmh99z85m68q45c04-http-client-0.7.17.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2020-11021 7.5

hyper-0.14.30

/nix/store/bms54yvx38ivslv2ahc062r4h6r2h7xj-hyper-0.14.30.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2024-23741 9.8

hyper-1.4.1

/nix/store/l4ahpf8vwi7x3wk1px9p8gk428b6qq1k-hyper-1.4.1.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2024-23741 9.8

jbig2dec-0.20

/nix/store/pr1r7cdzm4laidhprixqyi5wz0sx15gj-jbig2dec-0.20.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2023-46361 6.5

lapack-3

/nix/store/dpy88j0j0c9dcb999vsp3jx3ca1qbw31-lapack-3.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2021-4048 9.1

libmemcached-1.0.18

/nix/store/fx9747kdbz0viharnphbf6hra15zg111-libmemcached-1.0.18.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2023-27478 6.5

libmpeg2-0.5.1

/nix/store/6vfab32frsmailcdd0vi0r32m7iy970n-libmpeg2-0.5.1.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2022-37416 6.5

libsndfile-1.2.2

/nix/store/vz6q5vicj8c3k80972cm9ymraa9pryvg-libsndfile-1.2.2.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2024-50613 6.5
https://nvd.nist.gov/vuln/detail/CVE-2024-50612 5.5

lodepng-3.10.1

/nix/store/5nhrpz5qkiqps4lk5f30pqvdldx67rjl-lodepng-3.10.1.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2019-17178 7.5

network-3.1.4.0

network-3.1.4.0-r1.cabal

ninja-1.12.1

/nix/store/pz7202j72vpa53gsndnr5lbmnry83dxk-ninja-1.12.1.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2021-4336 9.8

numpy-0.21.0

/nix/store/gxp5455v13birp3m0ysq394hlgzzx2jf-numpy-0.21.0.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2019-6446 9.8
https://nvd.nist.gov/vuln/detail/CVE-2021-41496 5.5
https://nvd.nist.gov/vuln/detail/CVE-2021-34141 5.3
https://nvd.nist.gov/vuln/detail/CVE-2021-41495 5.3

oh-my-zsh-2024-10-01

/nix/store/62h1d1wfphcjisphklngqp99wv4zf5zk-oh-my-zsh-2024-10-01.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2021-3727 9.8

openvpn-2.6.12

/nix/store/pacyl2g4nsgbqws18i04yr1kpc9viynw-openvpn-2.6.12.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2020-27569 7.5

patch-2.7.6

/nix/store/q1lc7fcv1y4b80hhgch0nr6kraanhlm8-patch-2.7.6.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2019-20633 5.5

pip-20.3.4-source

/nix/store/5q6hvac0xdr3yv98fs0f71k8xwpbf601-pip-20.3.4-source.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2021-3572 5.7
https://nvd.nist.gov/vuln/detail/CVE-2023-5752 3.3

polkit-1.pam

/nix/store/nljyrqyg5adz7xa3i8g3ks06yr6x4fi3-polkit-1.pam.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2021-4034 7.8

python-2.7.18.8

quote-1.0.36

/nix/store/l7vf84jx0qkgygbf74qlywsyb95xi6pi-quote-1.0.36.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2020-16194 5.3

quote-1.0.37

/nix/store/hi6v9jf3k8qxhl7abxdagsl8ika8frpi-quote-1.0.37.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2020-16194 5.3

rubygems-3.5.22

/nix/store/v77a7dw77ihbzx4r1xambbsv5b0mj9p0-rubygems-3.5.22.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2022-36073 8.8

safe-0.3.21

safe-0.3.21-r1.cabal

samba-4.20.4

/nix/store/g2ir1yxzm805ynxp07lhrshq1s2q2all-samba-4.20.4.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2022-37966 8.1
https://nvd.nist.gov/vuln/detail/CVE-2022-38023 8.1
https://nvd.nist.gov/vuln/detail/CVE-2022-32743 7.5
https://nvd.nist.gov/vuln/detail/CVE-2022-37967 7.2
https://nvd.nist.gov/vuln/detail/CVE-2021-3670 6.5
https://nvd.nist.gov/vuln/detail/CVE-2022-1615 5.5

sassc-3.6.2

/nix/store/bcza9qr27p4jm48sqbqsxlcjxyk1lxfg-sassc-3.6.2.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2022-43357 7.5

semver-1.0.23

/nix/store/rsziza4ljh27xn10j8bxi50nybg2g69g-semver-1.0.23.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2022-25883 7.5

setuptools-44.0.0-source

/nix/store/5jksm485yv19fb868gl9rx77zk9qczxq-setuptools-44.0.0-source.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2022-40897 5.9

stringbuilder-0.5.1

/nix/store/94gawjfylw1kw5yf8fp82av7cackfbyv-stringbuilder-0.5.1.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2024-21524 9.1

vault-0.3.1.5

vault-0.3.1.5-r8.cabal

warp-3.3.31

wheel-0.37.1-source

/nix/store/mwlwr419l571yw7ijphq2mlrzi0l2rhp-wheel-0.37.1-source.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2022-40898 7.5

xdg-utils-1.2.1

/nix/store/pasfw3hhxwff3j49ml4a1s1zsx647c69-xdg-utils-1.2.1.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2020-27748 6.5

yaml-0.11.11.2

/nix/store/2z7iwngbwgzdyrgpnkyac2h0ki3g6dcn-yaml-0.11.11.2.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2022-3064 7.5
https://nvd.nist.gov/vuln/detail/CVE-2021-4235 5.5

yaml-0.11.11.2-r2.cabal

/nix/store/yzv0ggapmjwr6428sjw50xlqxqxynwlv-yaml-0.11.11.2-r2.cabal.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2022-3064 7.5
https://nvd.nist.gov/vuln/detail/CVE-2021-4235 5.5

yara-4.5.0

/nix/store/h0fir8drk530vpj40jmc0vv4188ai96n-yara-4.5.0.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2021-45429 5.5

yasm-1.3.0

zlib-0.6.3.0

/nix/store/gxs4459akwd2akban6lw7cw9vwl1mjgi-zlib-0.6.3.0.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2022-37434 9.8
https://nvd.nist.gov/vuln/detail/CVE-2023-45853 9.8
https://nvd.nist.gov/vuln/detail/CVE-2023-6992 5.5

zlib-0.6.3.0-r5.cabal

/nix/store/0gcka4h1y9ah9h7jkpam6glw9jgm4zaj-zlib-0.6.3.0-r5.cabal.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2022-37434 9.8
https://nvd.nist.gov/vuln/detail/CVE-2023-45853 9.8
https://nvd.nist.gov/vuln/detail/CVE-2023-6992 5.5

zlib-1.3.1

/nix/store/6nvdzyjrhc9h84y2iqby9qpzw0v7gz4d-zlib-1.3.1.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2023-6992 5.5

use --show-whitelisted to see derivations with only whitelisted CVEs

github-actions · 2024-12-16T01:50:47Z

Report for `elmira`

Version changes:

Security vulnerability report

52 derivations with active advisories'
'3 derivations left out due to whitelisting'
''
'------------------------------------------------------------------------'
'Security-11.0'
''
'/nix/store/9mpkcgnh1jvmmansq114yp04nw168z4j-Security-11.0.drv'
'CVE                                                CVSSv3'
'https://nvd.nist.gov/vuln/detail/CVE-2022-34893    7.8'
'https://nvd.nist.gov/vuln/detail/CVE-2022-37347    5.5'
'https://nvd.nist.gov/vuln/detail/CVE-2022-37348    5.5'
'https://nvd.nist.gov/vuln/detail/CVE-2024-3779     5.5'
''
'------------------------------------------------------------------------'
'cereal-0.5.8.3'
''
'/nix/store/bmchn3zxf42jhz26vk9xpallsp5aswr7-cereal-0.5.8.3.drv'
'CVE                                                CVSSv3'
'https://nvd.nist.gov/vuln/detail/CVE-2020-11105    9.8'
'https://nvd.nist.gov/vuln/detail/CVE-2020-11104    5.3'
''
'------------------------------------------------------------------------'
'commonmark-0.2.6.1'
''
'/nix/store/ckk0m4m7bvsvq3y166v2dc8y6mnv7r69-commonmark-0.2.6.1.drv'
'CVE                                                CVSSv3'
'https://nvd.nist.gov/vuln/detail/CVE-2019-10010    6.1'
''
'------------------------------------------------------------------------'
'dash-0.5.12'
''
'/nix/store/5a1yhw5sab099fcab7jmff91np6h2pgi-dash-0.5.12.drv'
'CVE                                                CVSSv3'
'https://nvd.nist.gov/vuln/detail/CVE-2024-21485    5.4'
''
'------------------------------------------------------------------------'
'ecdsa-0.14.8'
''
'/nix/store/xaz32pwlhlsb9bql48rmh0b4l8rsfxrl-ecdsa-0.14.8.drv'
'CVE                                                CVSSv3'
'https://nvd.nist.gov/vuln/detail/CVE-2024-23342    7.4'
''
'------------------------------------------------------------------------'
'flex-2.6.4'
''
'/nix/store/aq3ifqrvdhw42laabmfcm6vb3lxzrwnh-flex-2.6.4.drv'
'CVE                                                CVSSv3'
'https://nvd.nist.gov/vuln/detail/CVE-2019-6293     5.5'
''
'------------------------------------------------------------------------'
'foundation-0.0.30'
''
'/nix/store/dad475sgczmm1bii9crifs15kp4z0bzm-foundation-0.0.30.drv'
'CVE                                                CVSSv3'
'https://nvd.nist.gov/vuln/detail/CVE-2020-26304    7.5'
''
'------------------------------------------------------------------------'
'gcc-13.3.0'
''
'/nix/store/j7zw10lbmzni672k8pcg3xd7y5082lfk-gcc-13.3.0.drv'
'CVE                                                CVSSv3'
'https://nvd.nist.gov/vuln/detail/CVE-2023-4039     4.8'
''
'------------------------------------------------------------------------'
'git-2.47.0'
''
'/nix/store/4ajm156ahbk34lf5a5dclah9zk74qnwf-git-2.47.0.drv'
'CVE                                                CVSSv3'
'https://nvd.nist.gov/vuln/detail/CVE-2022-36882    8.8'
'https://nvd.nist.gov/vuln/detail/CVE-2022-30947    7.5'
'https://nvd.nist.gov/vuln/detail/CVE-2022-36883    7.5'
'https://nvd.nist.gov/vuln/detail/CVE-2022-38663    6.5'
'https://nvd.nist.gov/vuln/detail/CVE-2021-21684    6.1'
'https://nvd.nist.gov/vuln/detail/CVE-2020-2136     5.4'
'https://nvd.nist.gov/vuln/detail/CVE-2022-36884    5.3'
'https://nvd.nist.gov/vuln/detail/CVE-2019-1003010  4.3'
''
'------------------------------------------------------------------------'
'go-1.21.0-darwin-arm64-bootstrap'
''
'/nix/store/v3jb9287s0gqn0lx9rllaq6jw5ch87c4-go-1.21.0-darwin-arm64-bootstrap.drv'
'CVE                                                CVSSv3'
'https://nvd.nist.gov/vuln/detail/CVE-2023-39320    9.8'
'https://nvd.nist.gov/vuln/detail/CVE-2024-24790    9.8'
'https://nvd.nist.gov/vuln/detail/CVE-2023-39323    8.1'
'https://nvd.nist.gov/vuln/detail/CVE-2023-39321    7.5'
'https://nvd.nist.gov/vuln/detail/CVE-2023-39322    7.5'
'https://nvd.nist.gov/vuln/detail/CVE-2023-39325    7.5'
'https://nvd.nist.gov/vuln/detail/CVE-2023-44487    7.5'
'https://nvd.nist.gov/vuln/detail/CVE-2023-39318    6.1'
'https://nvd.nist.gov/vuln/detail/CVE-2023-39319    6.1'
'https://nvd.nist.gov/vuln/detail/CVE-2024-24789    5.5'
'https://nvd.nist.gov/vuln/detail/CVE-2023-49292    4.8'
''
'------------------------------------------------------------------------'
'go-1.23.3'
''
'/nix/store/h0fnip35k4lsrzpmqcpys5n79mybdyiz-go-1.23.3.drv'
'CVE                                                CVSSv3'
'https://nvd.nist.gov/vuln/detail/CVE-2023-49292    4.8'
''
'------------------------------------------------------------------------'
'h2-0.3.26'
''
'/nix/store/vihj1w1npqm6q4xbh39lyw5khpnlvhvz-h2-0.3.26.drv'
'CVE                                                CVSSv3'
'https://nvd.nist.gov/vuln/detail/CVE-2022-45868    7.8'
''
'------------------------------------------------------------------------'
'h2-0.4.6'
''
'/nix/store/v82f4bwwmqj6qpmzj96ybzd9kyszd1rw-h2-0.4.6.drv'
'CVE                                                CVSSv3'
'https://nvd.nist.gov/vuln/detail/CVE-2022-45868    7.8'
''
'------------------------------------------------------------------------'
'hedgehog-1.4'
''
'/nix/store/apaxcwddcnsgf7q83yfbrqxail385j6m-hedgehog-1.4.drv'
'CVE                                                CVSSv3'
'https://nvd.nist.gov/vuln/detail/CVE-2021-4276     8.8'
''
'------------------------------------------------------------------------'
'hedgehog-1.4-r8.cabal'
''
'/nix/store/8y2m5bi6dvjqbr70q4rlmxgb6da83aq7-hedgehog-1.4-r8.cabal.drv'
'CVE                                                CVSSv3'
'https://nvd.nist.gov/vuln/detail/CVE-2021-4276     8.8'
''
'------------------------------------------------------------------------'
'home-0.5.9'
''
'/nix/store/vsin7csryzrx00vfxs8jh4mpmj7h4xyn-home-0.5.9.drv'
'CVE                                                CVSSv3'
'https://nvd.nist.gov/vuln/detail/CVE-2023-3612     8.8'
'https://nvd.nist.gov/vuln/detail/CVE-2021-25264    6.7'
''
'------------------------------------------------------------------------'
'http-0.2.12'
''
'/nix/store/8qvmf59xyxd53a0vvyfp4cfzf8nvywpf-http-0.2.12.drv'
'CVE                                                CVSSv3'
'https://nvd.nist.gov/vuln/detail/CVE-2020-35669    6.1'
''
'------------------------------------------------------------------------'
'http-1.1.0'
''
'/nix/store/59m0pz70kj816z6l9qgzmalpi4khx0gx-http-1.1.0.drv'
'CVE                                                CVSSv3'
'https://nvd.nist.gov/vuln/detail/CVE-2022-36032    5.3'
'https://nvd.nist.gov/vuln/detail/CVE-2023-26044    5.3'
''
'------------------------------------------------------------------------'
'http-client-0.7.17'
''
'/nix/store/lrvcf8pmwjrbqplhd3439alk8ijj1q7h-http-client-0.7.17.drv'
'CVE                                                CVSSv3'
'https://nvd.nist.gov/vuln/detail/CVE-2020-11021    7.5'
''
'------------------------------------------------------------------------'
'hyper-0.14.30'
''
'/nix/store/mpfg2svmnf8khds1ncv464dwz5gxqz3i-hyper-0.14.30.drv'
'CVE                                                CVSSv3'
'https://nvd.nist.gov/vuln/detail/CVE-2024-23741    9.8'
''
'------------------------------------------------------------------------'
'hyper-1.4.1'
''
'/nix/store/48h2s522w424skz6p62shypqcgspz8w8-hyper-1.4.1.drv'
'CVE                                                CVSSv3'
'https://nvd.nist.gov/vuln/detail/CVE-2024-23741    9.8'
''
'------------------------------------------------------------------------'
'jbig2dec-0.20'
''
'/nix/store/3fd8z58msva514bbxr045gzihjfy68lg-jbig2dec-0.20.drv'
'CVE                                                CVSSv3'
'https://nvd.nist.gov/vuln/detail/CVE-2023-46361    6.5'
''
'------------------------------------------------------------------------'
'lapack-3'
''
'/nix/store/vcnjigkk1vchsnbdibfw1579whg23yzv-lapack-3.drv'
'CVE                                                CVSSv3'
'https://nvd.nist.gov/vuln/detail/CVE-2021-4048     9.1'
''
'------------------------------------------------------------------------'
'libmemcached-1.0.18'
''
'/nix/store/rcqp7z3qj65f50js00av52plbb04mg5n-libmemcached-1.0.18.drv'
'CVE                                                CVSSv3'
'https://nvd.nist.gov/vuln/detail/CVE-2023-27478    6.5'
''
'------------------------------------------------------------------------'
'lodepng-3.10.1'
''
'/nix/store/2lwg17aqk4hy48xd0glx20rhpv4k4zjg-lodepng-3.10.1.drv'
'CVE                                                CVSSv3'
'https://nvd.nist.gov/vuln/detail/CVE-2019-17178    7.5'
''
'------------------------------------------------------------------------'
'lua-5.2.4'
''
'/nix/store/kbg5d1dsilj7jhalfpygxaw3206fqddp-lua-5.2.4.drv'
'CVE                                                CVSSv3'
'https://nvd.nist.gov/vuln/detail/CVE-2021-43519    5.5'
''
'------------------------------------------------------------------------'
'mercurial-6.8.2'
''
'/nix/store/z15k4mrm15w9r0llk054a8fq40k3bdcd-mercurial-6.8.2.drv'
'CVE                                                CVSSv3'
'https://nvd.nist.gov/vuln/detail/CVE-2022-43410    5.3'
''
'------------------------------------------------------------------------'
'network-3.1.4.0'
''
'/nix/store/mcaah2g3p2sz6hkzqlsfiq9yr6gj1rf3-network-3.1.4.0.drv'
'CVE                                                CVSSv3'
'https://nvd.nist.gov/vuln/detail/CVE-2021-35048    9.8'
'https://nvd.nist.gov/vuln/detail/CVE-2021-35047    8.8'
'https://nvd.nist.gov/vuln/detail/CVE-2021-35049    8.8'
'https://nvd.nist.gov/vuln/detail/CVE-2022-24388    8.8'
'https://nvd.nist.gov/vuln/detail/CVE-2022-24389    8.8'
'https://nvd.nist.gov/vuln/detail/CVE-2022-24390    8.8'
'https://nvd.nist.gov/vuln/detail/CVE-2022-24391    8.8'
'https://nvd.nist.gov/vuln/detail/CVE-2022-24392    8.8'
'https://nvd.nist.gov/vuln/detail/CVE-2022-24393    8.8'
'https://nvd.nist.gov/vuln/detail/CVE-2022-24394    8.8'
'https://nvd.nist.gov/vuln/detail/CVE-2022-0486     7.8'
'https://nvd.nist.gov/vuln/detail/CVE-2022-0997     7.8'
'https://nvd.nist.gov/vuln/detail/CVE-2021-35050    7.5'
''
'------------------------------------------------------------------------'
'network-3.1.4.0-r1.cabal'
''
'/nix/store/2fhkzar4lzxcp7a0i7h8j0z5d9wgbix1-network-3.1.4.0-r1.cabal.drv'
'CVE                                                CVSSv3'
'https://nvd.nist.gov/vuln/detail/CVE-2021-35048    9.8'
'https://nvd.nist.gov/vuln/detail/CVE-2021-35047    8.8'
'https://nvd.nist.gov/vuln/detail/CVE-2021-35049    8.8'
'https://nvd.nist.gov/vuln/detail/CVE-2022-24388    8.8'
'https://nvd.nist.gov/vuln/detail/CVE-2022-24389    8.8'
'https://nvd.nist.gov/vuln/detail/CVE-2022-24390    8.8'
'https://nvd.nist.gov/vuln/detail/CVE-2022-24391    8.8'
'https://nvd.nist.gov/vuln/detail/CVE-2022-24392    8.8'
'https://nvd.nist.gov/vuln/detail/CVE-2022-24393    8.8'
'https://nvd.nist.gov/vuln/detail/CVE-2022-24394    8.8'
'https://nvd.nist.gov/vuln/detail/CVE-2022-0486     7.8'
'https://nvd.nist.gov/vuln/detail/CVE-2022-0997     7.8'
'https://nvd.nist.gov/vuln/detail/CVE-2021-35050    7.5'
''
'------------------------------------------------------------------------'
'ninja-1.12.1'
''
'/nix/store/d83j6fyglfwgnxvmpzs2yyrsvs2ibdlh-ninja-1.12.1.drv'
'CVE                                                CVSSv3'
'https://nvd.nist.gov/vuln/detail/CVE-2021-4336     9.8'
''
'------------------------------------------------------------------------'
'numpy-0.21.0'
''
'/nix/store/b2apz4qydiw28g8h3c6r6axhizxcfmk3-numpy-0.21.0.drv'
'CVE                                                CVSSv3'
'https://nvd.nist.gov/vuln/detail/CVE-2019-6446     9.8'
'https://nvd.nist.gov/vuln/detail/CVE-2021-41496    5.5'
'https://nvd.nist.gov/vuln/detail/CVE-2021-34141    5.3'
'https://nvd.nist.gov/vuln/detail/CVE-2021-41495    5.3'
''
'------------------------------------------------------------------------'
'oh-my-zsh-2024-10-01'
''
'/nix/store/niidwqpjjxgvb7mnj89z3sm0dxgzhqk2-oh-my-zsh-2024-10-01.drv'
'CVE                                                CVSSv3'
'https://nvd.nist.gov/vuln/detail/CVE-2021-3727     9.8'
''
'------------------------------------------------------------------------'
'openmp-16.0.6'
''
'/nix/store/a64zi68932gi63vrrgv9gg1jzp20pn0i-openmp-16.0.6.drv'
'CVE                                                CVSSv3'
'https://nvd.nist.gov/vuln/detail/CVE-2022-26345    7.3'
''
'------------------------------------------------------------------------'
'patch-2.7.6'
''
'/nix/store/4z3m2xpkq7s6wzv683m1pksxwv4b767b-patch-2.7.6.drv'
'CVE                                                CVSSv3'
'https://nvd.nist.gov/vuln/detail/CVE-2019-20633    5.5'
''
'------------------------------------------------------------------------'
'quote-1.0.36'
''
'/nix/store/2r5az7w52w02gwfw0vaqrmh3d5lib3hc-quote-1.0.36.drv'
'CVE                                                CVSSv3'
'https://nvd.nist.gov/vuln/detail/CVE-2020-16194    5.3'
''
'------------------------------------------------------------------------'
'quote-1.0.37'
''
'/nix/store/yb0da2n42vpfsjzzvnhfpafapdaxzzi0-quote-1.0.37.drv'
'CVE                                                CVSSv3'
'https://nvd.nist.gov/vuln/detail/CVE-2020-16194    5.3'
''
'------------------------------------------------------------------------'
'rubygems-3.5.22'
''
'/nix/store/gzyq3qsf8bhvzdapfzl0gbc5rzlyand7-rubygems-3.5.22.drv'
'CVE                                                CVSSv3'
'https://nvd.nist.gov/vuln/detail/CVE-2022-36073    8.8'
''
'------------------------------------------------------------------------'
'safe-0.3.21'
''
'/nix/store/dl4pwqjgja2pv0wscsyz3wlj90bs31x2-safe-0.3.21.drv'
'CVE                                                CVSSv3'
'https://nvd.nist.gov/vuln/detail/CVE-2022-28872    8.8'
'https://nvd.nist.gov/vuln/detail/CVE-2019-11644    7.8'
'https://nvd.nist.gov/vuln/detail/CVE-2022-38164    6.5'
'https://nvd.nist.gov/vuln/detail/CVE-2022-47524    5.4'
'https://nvd.nist.gov/vuln/detail/CVE-2021-44751    5.3'
'https://nvd.nist.gov/vuln/detail/CVE-2021-40834    4.3'
'https://nvd.nist.gov/vuln/detail/CVE-2021-40835    4.3'
'https://nvd.nist.gov/vuln/detail/CVE-2022-28868    4.3'
'https://nvd.nist.gov/vuln/detail/CVE-2022-28869    4.3'
'https://nvd.nist.gov/vuln/detail/CVE-2022-28870    4.3'
'https://nvd.nist.gov/vuln/detail/CVE-2022-28873    4.3'
'https://nvd.nist.gov/vuln/detail/CVE-2021-33596    4.1'
'https://nvd.nist.gov/vuln/detail/CVE-2021-33594    3.5'
'https://nvd.nist.gov/vuln/detail/CVE-2021-33595    3.5'
'https://nvd.nist.gov/vuln/detail/CVE-2022-38163    3.5'
''
'------------------------------------------------------------------------'
'safe-0.3.21-r1.cabal'
''
'/nix/store/qykv90apw9kwdkdamcgn85njq920pznc-safe-0.3.21-r1.cabal.drv'
'CVE                                                CVSSv3'
'https://nvd.nist.gov/vuln/detail/CVE-2022-28872    8.8'
'https://nvd.nist.gov/vuln/detail/CVE-2019-11644    7.8'
'https://nvd.nist.gov/vuln/detail/CVE-2022-38164    6.5'
'https://nvd.nist.gov/vuln/detail/CVE-2022-47524    5.4'
'https://nvd.nist.gov/vuln/detail/CVE-2021-44751    5.3'
'https://nvd.nist.gov/vuln/detail/CVE-2021-40834    4.3'
'https://nvd.nist.gov/vuln/detail/CVE-2021-40835    4.3'
'https://nvd.nist.gov/vuln/detail/CVE-2022-28868    4.3'
'https://nvd.nist.gov/vuln/detail/CVE-2022-28869    4.3'
'https://nvd.nist.gov/vuln/detail/CVE-2022-28870    4.3'
'https://nvd.nist.gov/vuln/detail/CVE-2022-28873    4.3'
'https://nvd.nist.gov/vuln/detail/CVE-2021-33596    4.1'
'https://nvd.nist.gov/vuln/detail/CVE-2021-33594    3.5'
'https://nvd.nist.gov/vuln/detail/CVE-2021-33595    3.5'
'https://nvd.nist.gov/vuln/detail/CVE-2022-38163    3.5'
''
'------------------------------------------------------------------------'
'sassc-3.6.2'
''
'/nix/store/znbw6is62ag61yy0wlfl37s8gvxqxwqd-sassc-3.6.2.drv'
'CVE                                                CVSSv3'
'https://nvd.nist.gov/vuln/detail/CVE-2022-43357    7.5'
''
'------------------------------------------------------------------------'
'semver-1.0.23'
''
'/nix/store/s6sp7z7wa2znl851cnrrdw5xarvffgwa-semver-1.0.23.drv'
'CVE                                                CVSSv3'
'https://nvd.nist.gov/vuln/detail/CVE-2022-25883    7.5'
''
'------------------------------------------------------------------------'
'shellcheck-0.10.0'
''
'/nix/store/85r7v1s7lra3513l2cl8jzxynhybzpv2-shellcheck-0.10.0.drv'
'CVE                                                CVSSv3'
'https://nvd.nist.gov/vuln/detail/CVE-2021-28794    9.8'
''
'------------------------------------------------------------------------'
'stringbuilder-0.5.1'
''
'/nix/store/ad1sa3wmv83izi4c60f9zrgwzsdsfa3b-stringbuilder-0.5.1.drv'
'CVE                                                CVSSv3'
'https://nvd.nist.gov/vuln/detail/CVE-2024-21524    9.1'
''
'------------------------------------------------------------------------'
'vault-0.3.1.5'
''
'/nix/store/0hb6c4d0zplrnwbp4s4mw3s9d80q94y5-vault-0.3.1.5.drv'
'CVE                                                CVSSv3'
'https://nvd.nist.gov/vuln/detail/CVE-2023-24999    8.1'
'https://nvd.nist.gov/vuln/detail/CVE-2020-13223    7.5'
'https://nvd.nist.gov/vuln/detail/CVE-2021-27400    7.5'
'https://nvd.nist.gov/vuln/detail/CVE-2023-6337     7.5'
'https://nvd.nist.gov/vuln/detail/CVE-2023-0620     6.7'
'https://nvd.nist.gov/vuln/detail/CVE-2023-0665     6.5'
'https://nvd.nist.gov/vuln/detail/CVE-2024-8365     6.5'
'https://nvd.nist.gov/vuln/detail/CVE-2021-41802    5.4'
'https://nvd.nist.gov/vuln/detail/CVE-2023-2121     5.4'
'https://nvd.nist.gov/vuln/detail/CVE-2020-25594    5.3'
'https://nvd.nist.gov/vuln/detail/CVE-2021-3024     5.3'
'https://nvd.nist.gov/vuln/detail/CVE-2021-38554    5.3'
'https://nvd.nist.gov/vuln/detail/CVE-2022-41316    5.3'
'https://nvd.nist.gov/vuln/detail/CVE-2023-25000    4.7'
''
'------------------------------------------------------------------------'
'vault-0.3.1.5-r8.cabal'
''
'/nix/store/x6kd3m0qhd7v8m4xapyx484s164mw5is-vault-0.3.1.5-r8.cabal.drv'
'CVE                                                CVSSv3'
'https://nvd.nist.gov/vuln/detail/CVE-2023-24999    8.1'
'https://nvd.nist.gov/vuln/detail/CVE-2020-13223    7.5'
'https://nvd.nist.gov/vuln/detail/CVE-2021-27400    7.5'
'https://nvd.nist.gov/vuln/detail/CVE-2023-6337     7.5'
'https://nvd.nist.gov/vuln/detail/CVE-2023-0620     6.7'
'https://nvd.nist.gov/vuln/detail/CVE-2023-0665     6.5'
'https://nvd.nist.gov/vuln/detail/CVE-2024-8365     6.5'
'https://nvd.nist.gov/vuln/detail/CVE-2021-41802    5.4'
'https://nvd.nist.gov/vuln/detail/CVE-2023-2121     5.4'
'https://nvd.nist.gov/vuln/detail/CVE-2020-25594    5.3'
'https://nvd.nist.gov/vuln/detail/CVE-2021-3024     5.3'
'https://nvd.nist.gov/vuln/detail/CVE-2021-38554    5.3'
'https://nvd.nist.gov/vuln/detail/CVE-2022-41316    5.3'
'https://nvd.nist.gov/vuln/detail/CVE-2023-25000    4.7'
''
'------------------------------------------------------------------------'
'warp-3.3.31'
''
'/nix/store/9hdqb3ckkniha1bqms9m7y9cr8gas39a-warp-3.3.31.drv'
'CVE                                                CVSSv3'
'https://nvd.nist.gov/vuln/detail/CVE-2022-3320     9.8'
'https://nvd.nist.gov/vuln/detail/CVE-2022-3512     8.8'
'https://nvd.nist.gov/vuln/detail/CVE-2022-4428     8.0'
'https://nvd.nist.gov/vuln/detail/CVE-2022-2145     7.8'
'https://nvd.nist.gov/vuln/detail/CVE-2022-2225     7.8'
'https://nvd.nist.gov/vuln/detail/CVE-2023-0652     7.8'
'https://nvd.nist.gov/vuln/detail/CVE-2023-1412     7.8'
'https://nvd.nist.gov/vuln/detail/CVE-2023-1862     7.3'
'https://nvd.nist.gov/vuln/detail/CVE-2023-2754     6.8'
'https://nvd.nist.gov/vuln/detail/CVE-2022-4457     5.5'
'https://nvd.nist.gov/vuln/detail/CVE-2023-0238     5.5'
'https://nvd.nist.gov/vuln/detail/CVE-2023-0654     3.7'
''
'------------------------------------------------------------------------'
'yaml-0.11.11.2'
''
'/nix/store/48kzq9gr5vx4rfvq579kpg5ng5zs20l6-yaml-0.11.11.2.drv'
'CVE                                                CVSSv3'
'https://nvd.nist.gov/vuln/detail/CVE-2022-3064     7.5'
'https://nvd.nist.gov/vuln/detail/CVE-2021-4235     5.5'
''
'------------------------------------------------------------------------'
'yaml-0.11.11.2-r2.cabal'
''
'/nix/store/vmgy2w5ssi0ch1q9ix1w9qbws1pnwz4v-yaml-0.11.11.2-r2.cabal.drv'
'CVE                                                CVSSv3'
'https://nvd.nist.gov/vuln/detail/CVE-2022-3064     7.5'
'https://nvd.nist.gov/vuln/detail/CVE-2021-4235     5.5'
''
'------------------------------------------------------------------------'
'yasm-1.3.0'
''
'/nix/store/3qm6p49csmgyhzq3hncz5jxxqgwsig37-yasm-1.3.0.drv'
'CVE                                                CVSSv3'
'https://nvd.nist.gov/vuln/detail/CVE-2021-33454    5.5'
'https://nvd.nist.gov/vuln/detail/CVE-2021-33455    5.5'
'https://nvd.nist.gov/vuln/detail/CVE-2021-33456    5.5'
'https://nvd.nist.gov/vuln/detail/CVE-2021-33457    5.5'
'https://nvd.nist.gov/vuln/detail/CVE-2021-33458    5.5'
'https://nvd.nist.gov/vuln/detail/CVE-2021-33459    5.5'
'https://nvd.nist.gov/vuln/detail/CVE-2021-33460    5.5'
'https://nvd.nist.gov/vuln/detail/CVE-2021-33461    5.5'
'https://nvd.nist.gov/vuln/detail/CVE-2021-33462    5.5'
'https://nvd.nist.gov/vuln/detail/CVE-2021-33463    5.5'
'https://nvd.nist.gov/vuln/detail/CVE-2021-33464    5.5'
'https://nvd.nist.gov/vuln/detail/CVE-2021-33465    5.5'
'https://nvd.nist.gov/vuln/detail/CVE-2021-33466    5.5'
'https://nvd.nist.gov/vuln/detail/CVE-2021-33467    5.5'
'https://nvd.nist.gov/vuln/detail/CVE-2021-33468    5.5'
'https://nvd.nist.gov/vuln/detail/CVE-2023-30402    5.5'
'https://nvd.nist.gov/vuln/detail/CVE-2023-31972    5.5'
'https://nvd.nist.gov/vuln/detail/CVE-2023-31973    5.5'
'https://nvd.nist.gov/vuln/detail/CVE-2023-31974    5.5'
'https://nvd.nist.gov/vuln/detail/CVE-2023-51258    5.5'
'https://nvd.nist.gov/vuln/detail/CVE-2023-31975    3.3'
''
'------------------------------------------------------------------------'
'zlib-0.6.3.0'
''
'/nix/store/xza3xf4khdrq6grxsvjqq4ai4zxw7d44-zlib-0.6.3.0.drv'
'CVE                                                CVSSv3'
'https://nvd.nist.gov/vuln/detail/CVE-2022-37434    9.8'
'https://nvd.nist.gov/vuln/detail/CVE-2023-45853    9.8'
'https://nvd.nist.gov/vuln/detail/CVE-2023-6992     5.5'
''
'------------------------------------------------------------------------'
'zlib-0.6.3.0-r5.cabal'
''
'/nix/store/mn48wmy5w4cxmkj82ki1smcjnq1am873-zlib-0.6.3.0-r5.cabal.drv'
'CVE                                                CVSSv3'
'https://nvd.nist.gov/vuln/detail/CVE-2022-37434    9.8'
'https://nvd.nist.gov/vuln/detail/CVE-2023-45853    9.8'
'https://nvd.nist.gov/vuln/detail/CVE-2023-6992     5.5'
''
'------------------------------------------------------------------------'
'zlib-1.3.1'
''
'/nix/store/3iwp0i2j6dpmkx2l0cxqcknmn3v3iw1a-zlib-1.3.1.drv'
'CVE                                                CVSSv3'
'https://nvd.nist.gov/vuln/detail/CVE-2023-6992     5.5'
''
'use --show-whitelisted to see derivations with only whitelisted CVEs

github-actions · 2024-12-16T01:50:48Z

Report for `marlon`

Version changes:

Version 1 -> 2:
  aa: ∅ → ε
  abstractions: ∅ → ε, +10.3 KiB
  abstractions-X: ∅ → ε
  abstractions-cups: ∅ → ε
  abstractions-dbus-session: ∅ → ε
  abstractions-dri: ∅ → ε
  abstractions-nss: ∅ → ε
  abstractions-opencl: ∅ → ε
  abstractions-p11: ∅ → ε
  abstractions-postfix: ∅ → ε
  abstractions-qt5: ∅ → ε
  abstractions-ssl_certs: ∅ → ε
  abstractions-ssl_keys: ∅ → ε
  abstractions-tunables: ∅ → ε
  apparmor: ∅ → ε
  apparmor-bin-utils: ∅ → 4.0.3, +262.0 KiB
  apparmor-closure-rules-mallocLib: ∅ → ε
  apparmor-closure-rules-security.wrappers.dbus-daemon-launch: ∅ → ε, +27.8 KiB
  apparmor-closure-rules-security.wrappers.fusermount: ∅ → ε, +16.0 KiB
  apparmor-closure-rules-security.wrappers.fusermount3: ∅ → ε, +16.0 KiB
  apparmor-closure-rules-security.wrappers.mount: ∅ → ε, +59.0 KiB
  apparmor-closure-rules-security.wrappers.newgidmap: ∅ → ε, +10.4 KiB
  apparmor-closure-rules-security.wrappers.newgrp: ∅ → ε, +10.4 KiB
  apparmor-closure-rules-security.wrappers.newuidmap: ∅ → ε, +10.4 KiB
  apparmor-closure-rules-security.wrappers.pkexec: ∅ → ε, +28.6 KiB
  apparmor-closure-rules-security.wrappers.polkit-agent-helper: ∅ → 1, +28.1 KiB
  apparmor-closure-rules-security.wrappers.sg: ∅ → ε, +10.3 KiB
  apparmor-closure-rules-security.wrappers.su: ∅ → ε, +10.9 KiB
  apparmor-closure-rules-security.wrappers.sudo: ∅ → ε, +10.4 KiB
  apparmor-closure-rules-security.wrappers.sudoedit: ∅ → ε, +10.4 KiB
  apparmor-closure-rules-security.wrappers.umount: ∅ → ε, +59.0 KiB
  apparmor-closure-rules-security.wrappers.unix_chkpwd: ∅ → ε
  apparmor-parser: ∅ → 4.0.3, +2033.0 KiB
  apparmor-profiles: ∅ → 4.0.3, +531.2 KiB
  apparmor-utils: ∅ → 4.0.3, +1152.5 KiB
  apparmor.d: ∅ → ε, +13.9 KiB
  etc-apparmor-apparmor.conf: ∅ → ε
  etc-apparmor-parser.conf: ∅ → ε
  etc-ld-nix.so.preload: ∅ → ε
  fix-rc.apparmor.functions.sh: ∅ → ε
  glib: +15310.5 KiB
  glibc-iconv: ∅ → 2.40
  gobject-introspection: +1492.3 KiB
  gobject-introspection-wrapped: ∅ → 1.82.0, +61.9 KiB
  initrd-linux: 6.6.63 → ∅, -17481.2 KiB
  initrd-linux-hardened: ∅ → 6.6.63, +17412.1 KiB
  libapparmor: +156.6 KiB
  libffi: +20.5 KiB
  linux: 6.6.63, 6.6.63-modules → ∅, -144746.9 KiB
  linux-hardened: ∅ → 6.6.63, 6.6.63-modules, +125742.4 KiB
  logprof.conf: ∅ → ε
  malloc-provider: ∅ → ε, +387.6 KiB
  nixos-security.wrappers: ∅ → ε
  nixos-security.wrappers-dbus-daemon-launch: ∅ → ε
  nixos-security.wrappers-fusermount3: ∅ → ε
  nixos-security.wrappers-polkit-agent-helper: ∅ → 1
  nixos-security.wrappers-unix_chkpwd: ∅ → ε
  python3: +593.0 KiB
  python3.12-dbus-python: ∅ → 1.3.2, +689.0 KiB
  python3.12-mako: ∅ → 1.3.5, +1003.8 KiB
  python3.12-markupsafe: ∅ → 3.0.2, +85.6 KiB
  python3.12-notify2: ∅ → 0.3.1, +53.2 KiB
  python3.12-pycairo: ∅ → 1.27.0, +500.8 KiB
  python3.12-pygobject: ∅ → 3.50.0, +1245.0 KiB
  python3.12-setuptools: ∅ → 75.1.1, +13312.8 KiB
  system: +12.7 KiB
  unit-apparmor.service: ∅ → ε
  unit-disable-kernel-module-loading.service: ∅ → ε
  unit-script-disable-kernel-module-loading: ∅ → ε
  zfs-kernel: +29.9 KiB

Security vulnerability report

69 derivations with active advisories 3 derivations left out due to whitelisting

audiofile-0.3.6

/nix/store/33f9bfl4x6qn8jr49j52f0pryrnw5dmi-audiofile-0.3.6.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2020-18781 5.5

avahi-0.8

/nix/store/g7rr3grck9v6hgalwv3v407i6jb0c2nw-avahi-0.8.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2021-26720 7.8

bind-9.18.28

/nix/store/xh5rmqfsmg9f814wpi8n7x205sciiqkb-bind-9.18.28.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2019-6470 7.5

cereal-0.5.8.3

/nix/store/vz1xdxi8zx5wa87zsaf7lqxxxa6raj36-cereal-0.5.8.3.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2020-11105 9.8
https://nvd.nist.gov/vuln/detail/CVE-2020-11104 5.3

commonmark-0.2.6.1

/nix/store/gh1sy55vdhh0x7qwzr6r179l3ya8xd3q-commonmark-0.2.6.1.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2019-10010 6.1

cups-2.4.11

/nix/store/vhwfpl5nz8lj8n4p29ifv2l8ya11q5ii-cups-2.4.11.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2022-26691 6.7

dash-0.5.12

/nix/store/6sdcssnc6gwpynp5i4yyl26cfaq1m44r-dash-0.5.12.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2024-21485 5.4

dbus-0.9.7

/nix/store/y9xm0bjcc1hja0zwmj6zln28h1859qld-dbus-0.9.7.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2019-12749 7.1
https://nvd.nist.gov/vuln/detail/CVE-2022-42010 6.5
https://nvd.nist.gov/vuln/detail/CVE-2022-42011 6.5
https://nvd.nist.gov/vuln/detail/CVE-2022-42012 6.5

dbus-1

/nix/store/rplch011glz8157z7xbrpqp5sj63gabf-dbus-1.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2019-12749 7.1
https://nvd.nist.gov/vuln/detail/CVE-2022-42010 6.5
https://nvd.nist.gov/vuln/detail/CVE-2022-42011 6.5
https://nvd.nist.gov/vuln/detail/CVE-2022-42012 6.5

ecdsa-0.14.8

/nix/store/mrjr2hkn329ahjhxblfjm0mpdcpxb0mc-ecdsa-0.14.8.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2024-23342 7.4

flex-2.6.4

/nix/store/jaj0k6xr2yg2kbfq87vk59gkdrbf0qp4-flex-2.6.4.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2019-6293 5.5

foundation-0.0.30

/nix/store/0b0m3xdsbar42w75ll3d1d2clj83q9sc-foundation-0.0.30.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2020-26304 7.5

fuse-2.9.9

/nix/store/3dzmyy01h2nc7zbbqrh3s06v6qfrbc4w-fuse-2.9.9.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2019-14860 6.5
https://nvd.nist.gov/vuln/detail/CVE-2019-14900 6.5

fuse-2.9.9-closefrom-glibc-2-34.patch?id=8a970396fca7aca2d5a761b8e7a8242f1eef14c9

/nix/store/bq5w9cmpsj8wnkbbxqhfa4dc8yi9lwzs-fuse-2.9.9-closefrom-glibc-2-34.patch?id=8a970396fca7aca2d5a761b8e7a8242f1eef14c9.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2019-14860 6.5
https://nvd.nist.gov/vuln/detail/CVE-2019-14900 6.5

fuse-3.16.2

/nix/store/wxjd9jq04vxwrfvmlk922yk1kqn3m2gi-fuse-3.16.2.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2019-14860 6.5
https://nvd.nist.gov/vuln/detail/CVE-2019-14900 6.5

gcc-13.3.0

/nix/store/nrvcrj7crcvwr3hc4mf1jx68kihnnzhk-gcc-13.3.0.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2023-4039 4.8

git-2.47.0

/nix/store/n3lfnnsxaw96pgfjsjzmybn8p96paccb-git-2.47.0.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2022-36882 8.8
https://nvd.nist.gov/vuln/detail/CVE-2022-30947 7.5
https://nvd.nist.gov/vuln/detail/CVE-2022-36883 7.5
https://nvd.nist.gov/vuln/detail/CVE-2022-38663 6.5
https://nvd.nist.gov/vuln/detail/CVE-2021-21684 6.1
https://nvd.nist.gov/vuln/detail/CVE-2020-2136 5.4
https://nvd.nist.gov/vuln/detail/CVE-2022-36884 5.3
https://nvd.nist.gov/vuln/detail/CVE-2019-1003010 4.3

go-1.21.0-linux-amd64-bootstrap

go-1.23.3

/nix/store/k427v9wgcg9ify27mcqxrkpw5fd16xmg-go-1.23.3.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2023-49292 4.8

gstreamer-1.24.7

/nix/store/6fq0lgmpwg56pyy7am9g6i3wd4qg1dw1-gstreamer-1.24.7.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2024-47541 7.5
https://nvd.nist.gov/vuln/detail/CVE-2024-47542 7.5

h2-0.3.26

/nix/store/la8c8hy05cwxs9f086plk7l4z88fd3sq-h2-0.3.26.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2022-45868 7.8

h2-0.4.6

/nix/store/n8m0szx8rydnlsw05qq2gmk21n4iy9rx-h2-0.4.6.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2022-45868 7.8

hedgehog-1.4

/nix/store/xh621jbc0n9kh9b073wc5rqzxr0332im-hedgehog-1.4.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2021-4276 8.8

hedgehog-1.4-r8.cabal

/nix/store/5gvv44apmf9l53735nh1ib822m5spmhy-hedgehog-1.4-r8.cabal.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2021-4276 8.8

home-0.5.9

/nix/store/bd7f3qsl19gbvbb55r0c8q6jqm5w3p8d-home-0.5.9.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2023-3612 8.8
https://nvd.nist.gov/vuln/detail/CVE-2021-25264 6.7

http-0.2.12

/nix/store/hrz7drnfvc91q04ralsgir75vrwnjlkr-http-0.2.12.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2020-35669 6.1

http-1.1.0

/nix/store/glamhy314lmaad4fwh3pbxlf3k6spafw-http-1.1.0.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2022-36032 5.3
https://nvd.nist.gov/vuln/detail/CVE-2023-26044 5.3

http-client-0.7.17

/nix/store/cqb89h1rr7gr59dvmh99z85m68q45c04-http-client-0.7.17.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2020-11021 7.5

hyper-0.14.30

/nix/store/bms54yvx38ivslv2ahc062r4h6r2h7xj-hyper-0.14.30.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2024-23741 9.8

hyper-1.4.1

/nix/store/l4ahpf8vwi7x3wk1px9p8gk428b6qq1k-hyper-1.4.1.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2024-23741 9.8

jbig2dec-0.20

/nix/store/pr1r7cdzm4laidhprixqyi5wz0sx15gj-jbig2dec-0.20.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2023-46361 6.5

lapack-3

/nix/store/dpy88j0j0c9dcb999vsp3jx3ca1qbw31-lapack-3.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2021-4048 9.1

libmemcached-1.0.18

/nix/store/fx9747kdbz0viharnphbf6hra15zg111-libmemcached-1.0.18.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2023-27478 6.5

libmpeg2-0.5.1

/nix/store/6vfab32frsmailcdd0vi0r32m7iy970n-libmpeg2-0.5.1.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2022-37416 6.5

libsndfile-1.2.2

/nix/store/vz6q5vicj8c3k80972cm9ymraa9pryvg-libsndfile-1.2.2.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2024-50613 6.5
https://nvd.nist.gov/vuln/detail/CVE-2024-50612 5.5

lodepng-3.10.1

/nix/store/5nhrpz5qkiqps4lk5f30pqvdldx67rjl-lodepng-3.10.1.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2019-17178 7.5

mercurial-6.8.2

/nix/store/mfaw2drvnhjm2w44gjrb0670rqrmybi4-mercurial-6.8.2.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2022-43410 5.3

network-3.1.4.0

network-3.1.4.0-r1.cabal

ninja-1.12.1

/nix/store/pz7202j72vpa53gsndnr5lbmnry83dxk-ninja-1.12.1.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2021-4336 9.8

numpy-0.21.0

/nix/store/gxp5455v13birp3m0ysq394hlgzzx2jf-numpy-0.21.0.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2019-6446 9.8
https://nvd.nist.gov/vuln/detail/CVE-2021-41496 5.5
https://nvd.nist.gov/vuln/detail/CVE-2021-34141 5.3
https://nvd.nist.gov/vuln/detail/CVE-2021-41495 5.3

oh-my-zsh-2024-10-01

/nix/store/62h1d1wfphcjisphklngqp99wv4zf5zk-oh-my-zsh-2024-10-01.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2021-3727 9.8

openvpn-2.6.12

/nix/store/pacyl2g4nsgbqws18i04yr1kpc9viynw-openvpn-2.6.12.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2020-27569 7.5

patch-2.7.6

/nix/store/q1lc7fcv1y4b80hhgch0nr6kraanhlm8-patch-2.7.6.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2019-20633 5.5

pip-20.3.4-source

/nix/store/5q6hvac0xdr3yv98fs0f71k8xwpbf601-pip-20.3.4-source.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2021-3572 5.7
https://nvd.nist.gov/vuln/detail/CVE-2023-5752 3.3

polkit-1.pam

/nix/store/nljyrqyg5adz7xa3i8g3ks06yr6x4fi3-polkit-1.pam.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2021-4034 7.8

python-2.7.18.8

quote-1.0.36

/nix/store/l7vf84jx0qkgygbf74qlywsyb95xi6pi-quote-1.0.36.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2020-16194 5.3

quote-1.0.37

/nix/store/hi6v9jf3k8qxhl7abxdagsl8ika8frpi-quote-1.0.37.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2020-16194 5.3

rubygems-3.5.22

/nix/store/v77a7dw77ihbzx4r1xambbsv5b0mj9p0-rubygems-3.5.22.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2022-36073 8.8

safe-0.3.21

safe-0.3.21-r1.cabal

samba-4.20.4

/nix/store/g2ir1yxzm805ynxp07lhrshq1s2q2all-samba-4.20.4.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2022-37966 8.1
https://nvd.nist.gov/vuln/detail/CVE-2022-38023 8.1
https://nvd.nist.gov/vuln/detail/CVE-2022-32743 7.5
https://nvd.nist.gov/vuln/detail/CVE-2022-37967 7.2
https://nvd.nist.gov/vuln/detail/CVE-2021-3670 6.5
https://nvd.nist.gov/vuln/detail/CVE-2022-1615 5.5

sassc-3.6.2

/nix/store/bcza9qr27p4jm48sqbqsxlcjxyk1lxfg-sassc-3.6.2.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2022-43357 7.5

semver-1.0.23

/nix/store/rsziza4ljh27xn10j8bxi50nybg2g69g-semver-1.0.23.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2022-25883 7.5

setuptools-44.0.0-source

/nix/store/5jksm485yv19fb868gl9rx77zk9qczxq-setuptools-44.0.0-source.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2022-40897 5.9

stringbuilder-0.5.1

/nix/store/94gawjfylw1kw5yf8fp82av7cackfbyv-stringbuilder-0.5.1.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2024-21524 9.1

vault-0.3.1.5

vault-0.3.1.5-r8.cabal

warp-3.3.31

wheel-0.37.1-source

/nix/store/mwlwr419l571yw7ijphq2mlrzi0l2rhp-wheel-0.37.1-source.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2022-40898 7.5

xdg-utils-1.2.1

/nix/store/pasfw3hhxwff3j49ml4a1s1zsx647c69-xdg-utils-1.2.1.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2020-27748 6.5

yaml-0.11.11.2

/nix/store/2z7iwngbwgzdyrgpnkyac2h0ki3g6dcn-yaml-0.11.11.2.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2022-3064 7.5
https://nvd.nist.gov/vuln/detail/CVE-2021-4235 5.5

yaml-0.11.11.2-r2.cabal

/nix/store/yzv0ggapmjwr6428sjw50xlqxqxynwlv-yaml-0.11.11.2-r2.cabal.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2022-3064 7.5
https://nvd.nist.gov/vuln/detail/CVE-2021-4235 5.5

yara-4.5.0

/nix/store/h0fir8drk530vpj40jmc0vv4188ai96n-yara-4.5.0.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2021-45429 5.5

yasm-1.3.0

zlib-0.6.3.0

/nix/store/gxs4459akwd2akban6lw7cw9vwl1mjgi-zlib-0.6.3.0.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2022-37434 9.8
https://nvd.nist.gov/vuln/detail/CVE-2023-45853 9.8
https://nvd.nist.gov/vuln/detail/CVE-2023-6992 5.5

zlib-0.6.3.0-r5.cabal

/nix/store/0gcka4h1y9ah9h7jkpam6glw9jgm4zaj-zlib-0.6.3.0-r5.cabal.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2022-37434 9.8
https://nvd.nist.gov/vuln/detail/CVE-2023-45853 9.8
https://nvd.nist.gov/vuln/detail/CVE-2023-6992 5.5

zlib-1.3.1

/nix/store/6nvdzyjrhc9h84y2iqby9qpzw0v7gz4d-zlib-1.3.1.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2023-6992 5.5

use --show-whitelisted to see derivations with only whitelisted CVEs

github-actions · 2024-12-16T01:51:35Z

Report for `vic`

Version changes:

Version 1 -> 2:
  aa: ∅ → ε
  abstractions: ∅ → ε, +10.8 KiB
  abstractions-X: ∅ → ε
  abstractions-cups: ∅ → ε
  abstractions-dbus-session: ∅ → ε
  abstractions-dri: ∅ → ε
  abstractions-nss: ∅ → ε
  abstractions-opencl: ∅ → ε
  abstractions-p11: ∅ → ε
  abstractions-postfix: ∅ → ε
  abstractions-qt5: ∅ → ε
  abstractions-ssl_certs: ∅ → ε
  abstractions-ssl_keys: ∅ → ε
  abstractions-tunables: ∅ → ε
  apparmor: ∅ → ε
  apparmor-bin-utils: ∅ → 4.0.3, +262.0 KiB
  apparmor-closure-rules-mallocLib: ∅ → ε
  apparmor-closure-rules-security.wrappers.chsh: ∅ → ε, +10.3 KiB
  apparmor-closure-rules-security.wrappers.dbus-daemon-launch: ∅ → ε, +27.8 KiB
  apparmor-closure-rules-security.wrappers.fusermount: ∅ → ε, +16.0 KiB
  apparmor-closure-rules-security.wrappers.fusermount3: ∅ → ε, +16.0 KiB
  apparmor-closure-rules-security.wrappers.kwin_wayland: ∅ → ε, +232.7 KiB
  apparmor-closure-rules-security.wrappers.mount: ∅ → ε, +59.0 KiB
  apparmor-closure-rules-security.wrappers.newgidmap: ∅ → ε, +10.4 KiB
  apparmor-closure-rules-security.wrappers.newgrp: ∅ → ε, +10.4 KiB
  apparmor-closure-rules-security.wrappers.newuidmap: ∅ → ε, +10.4 KiB
  apparmor-closure-rules-security.wrappers.passwd: ∅ → ε, +10.4 KiB
  apparmor-closure-rules-security.wrappers.pkexec: ∅ → ε, +28.6 KiB
  apparmor-closure-rules-security.wrappers.polkit-agent-helper: ∅ → 1, +28.1 KiB
  apparmor-closure-rules-security.wrappers.sg: ∅ → ε, +10.3 KiB
  apparmor-closure-rules-security.wrappers.su: ∅ → ε, +10.9 KiB
  apparmor-closure-rules-security.wrappers.sudo: ∅ → ε, +10.4 KiB
  apparmor-closure-rules-security.wrappers.sudoedit: ∅ → ε, +10.4 KiB
  apparmor-closure-rules-security.wrappers.umount: ∅ → ε, +59.0 KiB
  apparmor-closure-rules-security.wrappers.unix_chkpwd: ∅ → ε
  apparmor-parser: ∅ → 4.0.3, +2033.0 KiB
  apparmor-profiles: ∅ → 4.0.3, +531.2 KiB
  apparmor-utils: ∅ → 4.0.3, +1152.5 KiB
  apparmor.d: ∅ → ε, +14.7 KiB
  etc-apparmor-apparmor.conf: ∅ → ε
  etc-apparmor-parser.conf: ∅ → ε
  etc-ld-nix.so.preload: ∅ → ε
  fix-rc.apparmor.functions.sh: ∅ → ε
  gobject-introspection: +1492.3 KiB
  gobject-introspection-wrapped: +24.5 KiB
  initrd-linux: 6.6.63 → ∅, -18811.4 KiB
  initrd-linux-hardened: ∅ → 6.6.63, +18704.9 KiB
  libapparmor: +156.6 KiB
  linux: 6.6.63, 6.6.63-modules → ∅, -135784.9 KiB
  linux-hardened: ∅ → 6.6.63, 6.6.63-modules, +116768.7 KiB
  logprof.conf: ∅ → ε
  malloc-provider: ∅ → ε, +387.6 KiB
  nixos-security.wrappers: ∅ → ε
  nixos-security.wrappers-dbus-daemon-launch: ∅ → ε
  nixos-security.wrappers-fusermount3: ∅ → ε
  nixos-security.wrappers-kwin_wayland: ∅ → ε
  nixos-security.wrappers-polkit-agent-helper: ∅ → 1
  nixos-security.wrappers-unix_chkpwd: ∅ → ε
  python3: +593.0 KiB
  python3.12-mako: ∅ → 1.3.5, +1003.8 KiB
  python3.12-markupsafe: ∅ → 3.0.2, +85.6 KiB
  python3.12-notify2: ∅ → 0.3.1, +53.2 KiB
  python3.12-pygobject: +26.6 KiB
  python3.12-setuptools: ∅ → 75.1.1, +13312.8 KiB
  system: +13.4 KiB
  unit-apparmor.service: ∅ → ε
  unit-disable-kernel-module-loading.service: ∅ → ε
  unit-script-disable-kernel-module-loading: ∅ → ε

Security vulnerability report

80 derivations with active advisories 3 derivations left out due to whitelisting

accountsservice-23.13.9

/nix/store/yd0g35djfr6gnmf67mw5anxzrzpwzxdd-accountsservice-23.13.9.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2023-3297 7.8

audiofile-0.3.6

/nix/store/33f9bfl4x6qn8jr49j52f0pryrnw5dmi-audiofile-0.3.6.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2020-18781 5.5

avahi-0.8

/nix/store/g7rr3grck9v6hgalwv3v407i6jb0c2nw-avahi-0.8.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2021-26720 7.8

bind-9.18.28

/nix/store/xh5rmqfsmg9f814wpi8n7x205sciiqkb-bind-9.18.28.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2019-6470 7.5

cereal-0.5.8.3

/nix/store/vz1xdxi8zx5wa87zsaf7lqxxxa6raj36-cereal-0.5.8.3.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2020-11105 9.8
https://nvd.nist.gov/vuln/detail/CVE-2020-11104 5.3

commonmark-0.2.6.1

/nix/store/gh1sy55vdhh0x7qwzr6r179l3ya8xd3q-commonmark-0.2.6.1.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2019-10010 6.1

console-0.15.8

/nix/store/b0663h39pq4ak57njwjc39nk05qsn12b-console-0.15.8.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2023-33955 5.3

cups-2.4.11

/nix/store/vhwfpl5nz8lj8n4p29ifv2l8ya11q5ii-cups-2.4.11.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2022-26691 6.7

dash-0.5.12

/nix/store/6sdcssnc6gwpynp5i4yyl26cfaq1m44r-dash-0.5.12.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2024-21485 5.4

dbus-0.9.7

/nix/store/y9xm0bjcc1hja0zwmj6zln28h1859qld-dbus-0.9.7.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2019-12749 7.1
https://nvd.nist.gov/vuln/detail/CVE-2022-42010 6.5
https://nvd.nist.gov/vuln/detail/CVE-2022-42011 6.5
https://nvd.nist.gov/vuln/detail/CVE-2022-42012 6.5

dbus-1

/nix/store/97amr3q3k26x2s6k05ppkrca2wcqk7aj-dbus-1.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2019-12749 7.1
https://nvd.nist.gov/vuln/detail/CVE-2022-42010 6.5
https://nvd.nist.gov/vuln/detail/CVE-2022-42011 6.5
https://nvd.nist.gov/vuln/detail/CVE-2022-42012 6.5

djvulibre-3.5.28

/nix/store/qfn1fqdpr1mgwf4zslhg93a40kf61h34-djvulibre-3.5.28.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2021-46310 6.5
https://nvd.nist.gov/vuln/detail/CVE-2021-46312 6.5

ecdsa-0.14.8

/nix/store/mrjr2hkn329ahjhxblfjm0mpdcpxb0mc-ecdsa-0.14.8.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2024-23342 7.4

flex-2.6.4

/nix/store/jaj0k6xr2yg2kbfq87vk59gkdrbf0qp4-flex-2.6.4.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2019-6293 5.5

foundation-0.0.30

/nix/store/0b0m3xdsbar42w75ll3d1d2clj83q9sc-foundation-0.0.30.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2020-26304 7.5

fuse-2.9.9

/nix/store/3dzmyy01h2nc7zbbqrh3s06v6qfrbc4w-fuse-2.9.9.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2019-14860 6.5
https://nvd.nist.gov/vuln/detail/CVE-2019-14900 6.5

fuse-2.9.9-closefrom-glibc-2-34.patch?id=8a970396fca7aca2d5a761b8e7a8242f1eef14c9

/nix/store/bq5w9cmpsj8wnkbbxqhfa4dc8yi9lwzs-fuse-2.9.9-closefrom-glibc-2-34.patch?id=8a970396fca7aca2d5a761b8e7a8242f1eef14c9.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2019-14860 6.5
https://nvd.nist.gov/vuln/detail/CVE-2019-14900 6.5

fuse-3.16.2

/nix/store/wxjd9jq04vxwrfvmlk922yk1kqn3m2gi-fuse-3.16.2.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2019-14860 6.5
https://nvd.nist.gov/vuln/detail/CVE-2019-14900 6.5

gcc-13.3.0

/nix/store/nrvcrj7crcvwr3hc4mf1jx68kihnnzhk-gcc-13.3.0.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2023-4039 4.8

git-2.47.0

/nix/store/n3lfnnsxaw96pgfjsjzmybn8p96paccb-git-2.47.0.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2022-36882 8.8
https://nvd.nist.gov/vuln/detail/CVE-2022-30947 7.5
https://nvd.nist.gov/vuln/detail/CVE-2022-36883 7.5
https://nvd.nist.gov/vuln/detail/CVE-2022-38663 6.5
https://nvd.nist.gov/vuln/detail/CVE-2021-21684 6.1
https://nvd.nist.gov/vuln/detail/CVE-2020-2136 5.4
https://nvd.nist.gov/vuln/detail/CVE-2022-36884 5.3
https://nvd.nist.gov/vuln/detail/CVE-2019-1003010 4.3

go-1.21.0-linux-amd64-bootstrap

go-1.23.3

/nix/store/k427v9wgcg9ify27mcqxrkpw5fd16xmg-go-1.23.3.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2023-49292 4.8

gstreamer-1.24.7

/nix/store/6fq0lgmpwg56pyy7am9g6i3wd4qg1dw1-gstreamer-1.24.7.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2024-47541 7.5
https://nvd.nist.gov/vuln/detail/CVE-2024-47542 7.5

h2-0.3.26

/nix/store/la8c8hy05cwxs9f086plk7l4z88fd3sq-h2-0.3.26.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2022-45868 7.8

h2-0.4.6

/nix/store/n8m0szx8rydnlsw05qq2gmk21n4iy9rx-h2-0.4.6.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2022-45868 7.8

hedgehog-1.4

/nix/store/xh621jbc0n9kh9b073wc5rqzxr0332im-hedgehog-1.4.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2021-4276 8.8

hedgehog-1.4-r8.cabal

/nix/store/5gvv44apmf9l53735nh1ib822m5spmhy-hedgehog-1.4-r8.cabal.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2021-4276 8.8

home-0.5.9

/nix/store/bd7f3qsl19gbvbb55r0c8q6jqm5w3p8d-home-0.5.9.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2023-3612 8.8
https://nvd.nist.gov/vuln/detail/CVE-2021-25264 6.7

http-0.2.12

/nix/store/hrz7drnfvc91q04ralsgir75vrwnjlkr-http-0.2.12.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2020-35669 6.1

http-1.1.0

/nix/store/glamhy314lmaad4fwh3pbxlf3k6spafw-http-1.1.0.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2022-36032 5.3
https://nvd.nist.gov/vuln/detail/CVE-2023-26044 5.3

http-client-0.7.17

/nix/store/cqb89h1rr7gr59dvmh99z85m68q45c04-http-client-0.7.17.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2020-11021 7.5

hyper-0.14.30

/nix/store/bms54yvx38ivslv2ahc062r4h6r2h7xj-hyper-0.14.30.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2024-23741 9.8

hyper-1.4.1

/nix/store/l4ahpf8vwi7x3wk1px9p8gk428b6qq1k-hyper-1.4.1.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2024-23741 9.8

imagemagick-7.1.1-40

/nix/store/21nqrqdymb6fnczqkra740y26mv69p9z-imagemagick-7.1.1-40.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2023-5341 5.5

jbig2dec-0.20

/nix/store/pr1r7cdzm4laidhprixqyi5wz0sx15gj-jbig2dec-0.20.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2023-46361 6.5

lapack-3

/nix/store/dpy88j0j0c9dcb999vsp3jx3ca1qbw31-lapack-3.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2021-4048 9.1

libmemcached-1.0.18

/nix/store/fx9747kdbz0viharnphbf6hra15zg111-libmemcached-1.0.18.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2023-27478 6.5

libmpeg2-0.5.1

/nix/store/6vfab32frsmailcdd0vi0r32m7iy970n-libmpeg2-0.5.1.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2022-37416 6.5

libsndfile-1.2.2

/nix/store/vz6q5vicj8c3k80972cm9ymraa9pryvg-libsndfile-1.2.2.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2024-50613 6.5
https://nvd.nist.gov/vuln/detail/CVE-2024-50612 5.5

lodepng-3.10.1

/nix/store/5nhrpz5qkiqps4lk5f30pqvdldx67rjl-lodepng-3.10.1.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2019-17178 7.5

lua-5.2.4

/nix/store/bnk0zzw50g1a873mcca8smiaa05pz5qc-lua-5.2.4.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2021-43519 5.5

mercurial-6.8.2

/nix/store/mfaw2drvnhjm2w44gjrb0670rqrmybi4-mercurial-6.8.2.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2022-43410 5.3

network-3.1.4.0

network-3.1.4.0-r1.cabal

ninja-1.12.1

/nix/store/pz7202j72vpa53gsndnr5lbmnry83dxk-ninja-1.12.1.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2021-4336 9.8

numpy-0.21.0

/nix/store/gxp5455v13birp3m0ysq394hlgzzx2jf-numpy-0.21.0.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2019-6446 9.8
https://nvd.nist.gov/vuln/detail/CVE-2021-41496 5.5
https://nvd.nist.gov/vuln/detail/CVE-2021-34141 5.3
https://nvd.nist.gov/vuln/detail/CVE-2021-41495 5.3

oh-my-zsh-2024-10-01

/nix/store/62h1d1wfphcjisphklngqp99wv4zf5zk-oh-my-zsh-2024-10-01.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2021-3727 9.8

openexr-2.5.10

/nix/store/hzn548bvarll82pl56zfczv9nncnwndn-openexr-2.5.10.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2023-5841 9.1
https://nvd.nist.gov/vuln/detail/CVE-2021-23169 8.8
https://nvd.nist.gov/vuln/detail/CVE-2021-3598 5.5
https://nvd.nist.gov/vuln/detail/CVE-2021-3605 5.5
https://nvd.nist.gov/vuln/detail/CVE-2021-23215 5.5
https://nvd.nist.gov/vuln/detail/CVE-2021-26260 5.5
https://nvd.nist.gov/vuln/detail/CVE-2021-26945 5.5

openvpn-2.6.12

/nix/store/pacyl2g4nsgbqws18i04yr1kpc9viynw-openvpn-2.6.12.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2020-27569 7.5

patch-2.7.6

/nix/store/q1lc7fcv1y4b80hhgch0nr6kraanhlm8-patch-2.7.6.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2019-20633 5.5

pip-20.3.4-source

/nix/store/5q6hvac0xdr3yv98fs0f71k8xwpbf601-pip-20.3.4-source.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2021-3572 5.7
https://nvd.nist.gov/vuln/detail/CVE-2023-5752 3.3

plasma-workspace-5.27.11.1

/nix/store/ygihhqsqi6i4ixbjhk5bbrgz90c5v952-plasma-workspace-5.27.11.1.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2024-1433 3.7

polkit-1.pam

/nix/store/x1pqciwhc17v8kn03yz1fhnb20kp1282-polkit-1.pam.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2021-4034 7.8

python-2.7.18.8

quote-1.0.35

/nix/store/zd1idjxd30vqkwgqrpk7qnawlhmfqv1n-quote-1.0.35.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2020-16194 5.3

quote-1.0.36

/nix/store/l7vf84jx0qkgygbf74qlywsyb95xi6pi-quote-1.0.36.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2020-16194 5.3

quote-1.0.37

/nix/store/hi6v9jf3k8qxhl7abxdagsl8ika8frpi-quote-1.0.37.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2020-16194 5.3

rubygems-3.5.22

/nix/store/v77a7dw77ihbzx4r1xambbsv5b0mj9p0-rubygems-3.5.22.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2022-36073 8.8

safe-0.3.21

safe-0.3.21-r1.cabal

samba-4.20.4

/nix/store/g2ir1yxzm805ynxp07lhrshq1s2q2all-samba-4.20.4.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2022-37966 8.1
https://nvd.nist.gov/vuln/detail/CVE-2022-38023 8.1
https://nvd.nist.gov/vuln/detail/CVE-2022-32743 7.5
https://nvd.nist.gov/vuln/detail/CVE-2022-37967 7.2
https://nvd.nist.gov/vuln/detail/CVE-2021-3670 6.5
https://nvd.nist.gov/vuln/detail/CVE-2022-1615 5.5

sassc-3.6.2

/nix/store/bcza9qr27p4jm48sqbqsxlcjxyk1lxfg-sassc-3.6.2.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2022-43357 7.5

semver-1.0.22

/nix/store/7rwmjn0r51pay6wzhlzbgg75cg3msl8j-semver-1.0.22.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2022-25883 7.5

semver-1.0.23

/nix/store/rsziza4ljh27xn10j8bxi50nybg2g69g-semver-1.0.23.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2022-25883 7.5

setuptools-44.0.0-source

/nix/store/5jksm485yv19fb868gl9rx77zk9qczxq-setuptools-44.0.0-source.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2022-40897 5.9

snappy-1.2.1

/nix/store/pcymk1v1hanj89cvsisq5c5cw41ha7k4-snappy-1.2.1.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2023-28115 9.8
https://nvd.nist.gov/vuln/detail/CVE-2023-41330 9.8

stringbuilder-0.5.1

/nix/store/94gawjfylw1kw5yf8fp82av7cackfbyv-stringbuilder-0.5.1.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2024-21524 9.1

tap-1.0.1

/nix/store/4ki4wqyf0wa89p21609z91cph01m85q8-tap-1.0.1.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2023-41940 5.4

vault-0.3.1.5

vault-0.3.1.5-r8.cabal

warp-3.3.31

wheel-0.37.1-source

/nix/store/mwlwr419l571yw7ijphq2mlrzi0l2rhp-wheel-0.37.1-source.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2022-40898 7.5

xdg-utils-1.2.1

/nix/store/pasfw3hhxwff3j49ml4a1s1zsx647c69-xdg-utils-1.2.1.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2020-27748 6.5

yaml-0.11.11.2

/nix/store/2z7iwngbwgzdyrgpnkyac2h0ki3g6dcn-yaml-0.11.11.2.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2022-3064 7.5
https://nvd.nist.gov/vuln/detail/CVE-2021-4235 5.5

yaml-0.11.11.2-r2.cabal

/nix/store/yzv0ggapmjwr6428sjw50xlqxqxynwlv-yaml-0.11.11.2-r2.cabal.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2022-3064 7.5
https://nvd.nist.gov/vuln/detail/CVE-2021-4235 5.5

yara-4.5.0

/nix/store/h0fir8drk530vpj40jmc0vv4188ai96n-yara-4.5.0.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2021-45429 5.5

yasm-1.3.0

zlib-0.6.3.0

/nix/store/gxs4459akwd2akban6lw7cw9vwl1mjgi-zlib-0.6.3.0.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2022-37434 9.8
https://nvd.nist.gov/vuln/detail/CVE-2023-45853 9.8
https://nvd.nist.gov/vuln/detail/CVE-2023-6992 5.5

zlib-0.6.3.0-r5.cabal

/nix/store/0gcka4h1y9ah9h7jkpam6glw9jgm4zaj-zlib-0.6.3.0-r5.cabal.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2022-37434 9.8
https://nvd.nist.gov/vuln/detail/CVE-2023-45853 9.8
https://nvd.nist.gov/vuln/detail/CVE-2023-6992 5.5

zlib-1.3.1

/nix/store/6nvdzyjrhc9h84y2iqby9qpzw0v7gz4d-zlib-1.3.1.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2023-6992 5.5

use --show-whitelisted to see derivations with only whitelisted CVEs

fix: Adhere to CIS Independent 1.1.* benchmarks

a9946e0

Apply hardening changes by default to NixOS systems to comply with CIS Independent benchmarks. This batch of changes ensures compliance with most of the 1.1.* series.

NoRePercussions enabled auto-merge (squash) December 16, 2024 01:46

fix: parse

e837324

NoRePercussions merged commit 7e7addc into main Dec 16, 2024
4 checks passed

NoRePercussions deleted the fix/cis-1.x branch December 16, 2024 01:51

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

fix: Adhere to CIS Independent 1.1.* benchmarks #146

fix: Adhere to CIS Independent 1.1.* benchmarks #146

NoRePercussions commented Dec 16, 2024

github-actions bot commented Dec 16, 2024

github-actions bot commented Dec 16, 2024

github-actions bot commented Dec 16, 2024

github-actions bot commented Dec 16, 2024

fix: Adhere to CIS Independent 1.1.* benchmarks #146

fix: Adhere to CIS Independent 1.1.* benchmarks #146

Conversation

NoRePercussions commented Dec 16, 2024

github-actions bot commented Dec 16, 2024

Report for roland

github-actions bot commented Dec 16, 2024

Report for elmira

github-actions bot commented Dec 16, 2024

Report for marlon

github-actions bot commented Dec 16, 2024

Report for vic

Report for `roland`

Report for `elmira`

Report for `marlon`

Report for `vic`