CVE-2024-36050

Publication date 18 May 2024

Last updated 24 July 2024

Ubuntu priority

Medium

Why this priority?

Nix through 2.22.1 mishandles certain usage of hash caches, which makes it easier for attackers to replace current source code with attacker-controlled source code by luring a maintainer into accepting a malicious pull request.

Status

Package Ubuntu Release Status
nix 24.10 oracular
Needs evaluation
24.04 LTS noble
Needs evaluation
23.10 mantic Ignored end of life, was needs-triage
22.04 LTS jammy
Needs evaluation
20.04 LTS focal Not in release