tocsin

crates.io/nix CVE-2021-45707: high, EPSS 1.69%

Out-of-bounds write in nix::unistd::getgrouplist

Action: Upgrade nix to 0.20.2 or later.

cargo update -p nix --precise 0.20.2
cargo update -p nix --precise 0.21.2
cargo update -p nix --precise 0.22.2

Affected

introducedfixedlast affected
0.16.00.20.2-
0.21.00.21.2-
0.22.00.22.2-

Fixed versions

0.20.20.21.20.22.2

Sources

CVE-2021-45707 · published · modified · JSON