[Git][security-tracker-team/security-tracker][master] Add CVE-2024-38531/nix

[Salvatore Bonaccorso (@carnil)]

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
f46a8486 by Salvatore Bonaccorso at 2024-06-29T10:36:15+02:00
Add CVE-2024-38531/nix

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -67,7 +67,9 @@ CVE-2024-3800 (Sites managed in S at M CMS (Concept Intermedia) might be vulnerable
 CVE-2024-39704 (Soft Circle French-Bread Melty Blood: Actress Again: Current Code thro ...)
 	NOT-FOR-US: Soft Circle French-Bread Melty Blood: Actress Again
 CVE-2024-38531 (Nix is a package manager for Linux and other Unix systems that makes p ...)
-	TODO: check
+	- nix <unfixed>
+	NOTE: https://github.com/NixOS/nix/pull/10501
+	NOTE: https://github.com/NixOS/nix/security/advisories/GHSA-q82p-44mg-mgh5
 CVE-2024-38528 (nptd-rs is a tool for synchronizing your computer's clock, implementin ...)
 	TODO: check
 CVE-2024-38522 (Hush Line is a free and open-source, anonymous-tip-line-as-a-service f ...)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/f46a848619b0a93c3ba5db5bf51927245ccb9343

-- 
This project does not include diff previews in email notifications.
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/f46a848619b0a93c3ba5db5bf51927245ccb9343
You're receiving this email because of your account on salsa.debian.org.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20240629/733cf04a/attachment.htm>