[Git][security-tracker-team/security-tracker][master] Add new nix issues

[Salvatore Bonaccorso (@carnil)]

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
8934d63a by Salvatore Bonaccorso at 2026-10-14T16:43:32+02:00
Add new nix issues

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -2821,13 +2821,16 @@ CVE-2026-110454 (A malicious actor with access to the network could exploit an I
 CVE-2026-110453 (Nix before 2.35.3, when unsandboxed on macOS or FreeBSD, incorrectly a ...)
 	TODO: check
 CVE-2026-110452 (The multi-user installer in Nix before 2.35.3 sets the ownership of st ...)
-	TODO: check
+	- nix <unfixed>
+	NOTE: https://discourse.nixos.org/t/security-advisory-for-nix-and-lix-october-2026/80547
 CVE-2026-110451 (Nix before 2.35.3 and Lix before 2.95.4 on macOS allow a Seatbelt sand ...)
 	TODO: check
 CVE-2026-110450 (Nix before 2.35.3 and Lix before 2.95.4 allow privilege escalation via ...)
-	TODO: check
+	- nix <unfixed>
+	NOTE: https://discourse.nixos.org/t/security-advisory-for-nix-and-lix-october-2026/80547
 CVE-2026-110449 (Nix before 2.35.3 and Lix before 2.95.4 have an integer overflow and r ...)
-	TODO: check
+	- nix <unfixed>
+	NOTE: https://discourse.nixos.org/t/security-advisory-for-nix-and-lix-october-2026/80547
 CVE-2026-110447 (Collabora Online Built-in CODE Server before 26.4.303 (richdocumentsco ...)
 	NOT-FOR-US: Collabora Online Built-in CODE Serve
 CVE-2026-110445 (TeamPlus Messenger developed by Teamplus Technology has a Code Injecti ...)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/8934d63a5c2cb648f3fa57ccca606677cfba9c83

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/8934d63a5c2cb648f3fa57ccca606677cfba9c83
You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20261014/462b2627/attachment-0001.htm>