Debian/nix: medium 5.9
Nix is a package manager for Linux and other Unix systems. Starting in version 1.11 and prior to versions 2.18.8 and 2.24.8, `<nix/fetchurl.nix>` did not verify TLS certificates on HTTPS connections.
Action: Upgrade nix to 2.24.8+dfsg-1 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 2.24.8+dfsg-1 | - |
Fixed versions
| 2.24.8+dfsg-1 |
Sources
published · modified · JSON