Azure Linux 3.0 Security Update: rpm-ostree (CVE-2021-45707)

The version of rpm-ostree installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2021-45707 advisory. - An issue was discovered in the nix crate 0.16.0 and later before 0.20.2, 0.21.x before 0.21.2, and 0.22....

Linux Distros Unpatched Vulnerability : CVE-2021-45707

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue was discovered in the nix crate 0.16.0 and later before 0.20.2, 0.21.x before 0.21.2, and 0.22.x before 0.22.2 for Rust. unistd::getgrouplist has an...

CVE-2021-45707 affecting package rpm-ostree for versions less than 2024.4-1

CVE-2021-45707 affecting package rpm-ostree for versions less than 2024.4-1. An upgraded version of the package is available that resolves this issue...

acidalia (>=0.1.0, <=0.1.3), acl-rs (0.1.0) +863 more potentially affected by CVE-2021-45707 via nix (>=0.16.1, <=0.20.0)

nix CARGO version =0.16.1, =0.1.0, =0.1.0, =0.0.2, =0.0.9, =0.1.0, =0.5.0, =0.10.0, =0.4.4, =0.3.0, =0.3.1 - annotate-output 0.1.0 and more Source cves: CVE-2021-45707 Source advisory: OSV:GHSA-WGRG-5H56-JG27...

acidalia (>=0.1.0, <=0.1.3), acl-rs (0.1.0) +863 more potentially affected by CVE-2021-45707 via nix (>=0.16.1, <=0.20.0)

nix CARGO version =0.16.1, =0.1.0, =0.1.0, =0.0.2, =0.0.9, =0.1.0, =0.5.0, =0.10.0, =0.4.4, =0.3.0, =0.3.1 - annotate-output 0.1.0 and more Source cves: CVE-2021-45707 Source advisory: OSV:GHSA-76W9-P8MG-J927...

alsa (0.5.1), ceph-async (>=4.0.0, <=4.0.5) +3 more potentially affected by CVE-2021-45707 via nix (0.21.0)

nix CARGO version 0.21.0 is affected by a known vulnerability. The following packages have a transitive dependency on nix and may be impacted: - alsa 0.5.1 - ceph-async =4.0.0, =1.4.10, =0.0.8, =0.0.13 Source cves: CVE-2021-45707 Source advisory: OSV:GHSA-76W9-P8MG-J927...

CVE-2021-45707

An issue was discovered in the nix crate 0.16.0 and later before 0.20.2, 0.21.x before 0.21.2, and 0.22.x before 0.22.2 for Rust. unistd::getgrouplist has an out-of-bounds write if a user is in more than 16 /etc/groups groups...

CVE-2021-45707

An issue was discovered in the nix crate 0.16.0 and later before 0.20.2, 0.21.x before 0.21.2, and 0.22.x before 0.22.2 for Rust. unistd::getgrouplist has an out-of-bounds write if a user is in more than 16 /etc/groups groups...

CVE-2021-45707

An issue was discovered in the nix crate 0.16.0 and later before 0.20.2, 0.21.x before 0.21.2, and 0.22.x before 0.22.2 for Rust. unistd::getgrouplist has an out-of-bounds write if a user is in more than 16 /etc/groups groups...

CVE-2021-45707

CVE-2021-45707 affects the nix crate (Rust) versions 0.16.0 and later, with fixes in 0.20.2, 0.21.2, and 0.22.2 or later. The vulnerability is an out-of-bounds write in unistd::getgrouplist when a user belongs to more than 16 /etc/groups groups, which can lead to memory corruption. The issue stem...

CVE-2021-45707

An issue was discovered in the nix crate 0.16.0 and later before 0.20.2, 0.21.x before 0.21.2, and 0.22.x before 0.22.2 for Rust. unistd::getgrouplist has an out-of-bounds write if a user is in more than 16 /etc/groups groups...

alsa (0.5.1), ceph-async (>=4.0.0, <=4.0.5) +3 more potentially affected by CVE-2021-45707 via nix (0.21.0)

nix CARGO version 0.21.0 is affected by a known vulnerability. The following packages have a transitive dependency on nix and may be impacted: - alsa 0.5.1 - ceph-async =4.0.0, =1.4.10, =0.0.8, =0.0.13 Source cves: CVE-2021-45707 Source advisory: OSV:RUSTSEC-2021-0119...

acidalia (>=0.1.0, <=0.1.3), acl-rs (0.1.0) +863 more potentially affected by CVE-2021-45707 via nix (>=0.16.1, <=0.20.0)

nix CARGO version =0.16.1, =0.1.0, =0.1.0, =0.0.2, =0.0.9, =0.1.0, =0.5.0, =0.10.0, =0.4.4, =0.3.0, =0.3.1 - annotate-output 0.1.0 and more Source cves: CVE-2021-45707 Source advisory: OSV:RUSTSEC-2021-0119...