Skip to content

Choose a tag to compare

@sandydoo sandydoo released this 04 May 22:31
· 13 commits to master since this release
8aa0397

What's Changed

  • nix: 2.34.6 -> 2.34.7 by @github-actions[bot] in #275
    GHSA-vh5x-56v6-4368: Fixes a coroutine stack-to-heap overflow via unbounded recursion in the NAR directory parser. Severity: High.
    GHSA-gr92-w2r5-qw5p: Fixes an absolute path traversal vulnerability when unpacking archives to disk. Severity: Moderate.

Full Changelog: v31...v31.10.6