Vulnerability roundup 76: NixOS 19.09 edition

[ckauhaus]

In the latest vulnerability roundup I started to include NixOS 19.09. Initially the whitelist is empty–this means that all advisories reported by vulnix are included (again). Some have already been classified before as false positives. Others may have not been actionable when first reported but things have changed since then.

So I decided to submit all advisories (tickets #70082 till #70135). I need some help triaging all of them. My bet is that 50% can be closed without action…

Ticket list: Issues · NixOS/nixpkgs · GitHub

[delroth]

I’ve done a bit of triaging already, so far way more than 50% need action but maybe I was just unlucky

If you file PRs for any of these please make sure to cross-reference the GitHub issue so we can avoid duplicate work!