NIXPKGS-2026-2254

GitHub issue published 12 hours ago

Rpcbind: rpcbind: stack buffer overflow in rpcinfo rpcbdump() short-mode version-list formatting

          Permalink
          
            CVE-2026-16461
          
        6.5 MEDIUM
      
        CVSS version (CVSS): 3.1
      
          Attack Vector (AV): Network (N)
        
          Attack Complexity (AC): Low (L)
        
          Privileges Required (PR): None (N)
        
          User Interaction (UI): Required (R)
        
          Scope (S): Unchanged (U)
        
          Confidentiality (C): None (N)
        
          Integrity (I): None (N)
        
          Availability (A): High (H)
        
          Modified Attack Vector (MAV): Network (N)
        
          Modified Attack Complexity (MAC): Low (L)
        
          Modified Privileges Required (MPR): None (N)
        
          Modified User Interaction (MUI): Required (R)
        
          Modified Confidentiality (MC): None (N)
        
          Modified Scope (MS): Unchanged (U)
        
          Modified Integrity (MI): None (N)
        
          Modified Availability (MA): High (H)
        
              updated
            
          12 hours ago
          by @LeSuisse
        
      Activity log
    
              Created suggestion
            
          1 day, 15 hours ago
          
          @LeSuisse
          
              accepted
            
          1 day, 13 hours ago
          
          @LeSuisse
          
              published on GitHub
            
          12 hours ago
          
            Rpcbind: rpcbind: stack buffer overflow in rpcinfo rpcbdump() short-mode version-list formatting
          
      https://access.redhat.com/security/cve/CVE-2026-16461
    
    x_refsource_REDHATvdb-entry
  
      RHBZ#2502719
    
    issue-trackingx_refsource_REDHAT
  
    rpcbind

NIXPKGS-2026-2253

GitHub issue published 12 hours ago

Dracut: dracut: root code execution via dhcp options command injection in networkmanager initrd module

          Permalink
          
            CVE-2026-16445
          
        7.5 HIGH
      
        CVSS version (CVSS): 3.1
      
          Attack Vector (AV): Adjacent (A)
        
          Attack Complexity (AC): High (H)
        
          Privileges Required (PR): None (N)
        
          User Interaction (UI): None (N)
        
          Scope (S): Unchanged (U)
        
          Confidentiality (C): High (H)
        
          Integrity (I): High (H)
        
          Availability (A): High (H)
        
          Modified Attack Vector (MAV): Adjacent (A)
        
          Modified Attack Complexity (MAC): High (H)
        
          Modified Privileges Required (MPR): None (N)
        
          Modified User Interaction (MUI): None (N)
        
          Modified Confidentiality (MC): High (H)
        
          Modified Scope (MS): Unchanged (U)
        
          Modified Integrity (MI): High (H)
        
          Modified Availability (MA): High (H)
        
              updated
            
          12 hours ago
          by @LeSuisse
        
      Activity log
    
              Created suggestion
            
          1 day, 15 hours ago
          
          @LeSuisse
          
              accepted
            
          1 day, 13 hours ago
          
          @LeSuisse
          
              published on GitHub
            
          12 hours ago
          
            Dracut: dracut: root code execution via dhcp options command injection in networkmanager initrd module
          
      RHSA-2026:26534
    
    x_refsource_REDHATvendor-advisory
  
      https://access.redhat.com/security/cve/CVE-2026-16445
    
    x_refsource_REDHATvdb-entry
  
      https://bugzilla.redhat.com/show_bug.cgi?id=2459963
    
      RHBZ#2503147
    
    issue-trackingx_refsource_REDHAT
  
      https://github.com/dracutdevs/dracut/commit/e509c638e6
    
    dracut

            *

NIXPKGS-2026-2252

GitHub issue published 12 hours ago

Ollama Remote Denial of Service via Attacker-Controlled Allocation in GGUF Metadata Parser

Permalink CVE-2026-65315

8.7 HIGH

CVSS version (CVSS): 4.0
Attack Vector (AV): Network (N)
Attack Complexity (AC): Low (L)
Attack Requirement (AT): None (N)
Privileges Required (PR): None (N)
User Interaction (UI): None (N)
Vulnerable System Impact Confidentiality (VC): None (N)
Vulnerable System Impact Integrity (VI): None (N)
Vulnerable System Impact Availability (VA): High (H)
Subsequent System Impact Confidentiality (SC): None (N)
Subsequent System Impact Integrity (SI): None (N)
Subsequent System Impact Availability (SA): None (N)
Modified Attack Vector (MAV): Network (N)
Modified Attack Complexity (MAC): Low (L)
Modified Attack Requirement (MAT): None (N)
Modified Privileges Required (MPR): None (N)
Modified User Interaction (MUI): None (N)
Modified Vulnerable System Impact Confidentiality (MVC): None (N)
Modified Vulnerable System Impact Integrity (MVI): None (N)
Modified Vulnerable System Impact Availability (MVA): High (H)
Modified Subsequent System Impact Confidentiality (MSC): Negligible (N)
Modified Subsequent System Impact Integrity (MSI): Negligible (N)
Modified Subsequent System Impact Availability (MSA): Negligible (N)
Safety (S): Not Defined (X)
Automatable (AU): Not Defined (X)
Recovery (R): Not Defined (X)
Value Density (V): Not Defined (X)
Vulnerability Response Effort (RE): Not Defined (X)
Provider Urgency (U): Not Defined (X)
Confidentiality Req. (CR): Not Defined (X)
Integrity Req. (IR): Not Defined (X)
Availability Req. (AR): Not Defined (X)
Exploit Maturity (E): Not Defined (X)

updated 12 hours ago by @LeSuisse Activity log

Created suggestion 1 day, 15 hours ago
@LeSuisse ignored
16 packages
- gollama
- nextjs-ollama-llm-ui
- python313Packages.ollama
- python314Packages.ollama
- python313Packages.llm-ollama
- python314Packages.llm-ollama
- haskellPackages.ollama-haskell
- gnomeExtensions.ollama-indicator
- python313Packages.langchain-ollama
- python314Packages.langchain-ollama
- python313Packages.llama-index-llms-ollama
- python314Packages.llama-index-llms-ollama
- python313Packages.llama-index-embeddings-ollama
- python314Packages.llama-index-embeddings-ollama
- pkgsRocm.python3Packages.llama-index-llms-ollama
- pkgsRocm.python3Packages.llama-index-embeddings-ollama
1 day, 13 hours ago
@LeSuisse accepted 1 day, 13 hours ago
@LeSuisse published on GitHub 12 hours ago

Ollama Remote Denial of Service via Attacker-Controlled Allocation in GGUF Metadata Parser

GitHub Issue
Product patch
https://www.vulncheck.com/advisories/ollama-remote-denial-of-service-via-attack… third-party-advisory

Ollama

=<f0078ae

Fixed by https://github.com/ollama/ollama/commit/67b6a1c2d45321e0cb3c04a18073f9818de7724b
26.05 needs a backport.

NIXPKGS-2026-2251

GitHub issue published 12 hours ago

Capstone has a NULL Pointer Dereference with 3DNow! opcodes

          Permalink
          
            CVE-2026-47143
          
        5.1 MEDIUM
      
        CVSS version (CVSS): 3.1
      
          Attack Vector (AV): Local (L)
        
          Attack Complexity (AC): High (H)
        
          Privileges Required (PR): None (N)
        
          User Interaction (UI): None (N)
        
          Scope (S): Unchanged (U)
        
          Confidentiality (C): None (N)
        
          Integrity (I): None (N)
        
          Availability (A): High (H)
        
          Modified Attack Vector (MAV): Local (L)
        
          Modified Attack Complexity (MAC): High (H)
        
          Modified Privileges Required (MPR): None (N)
        
          Modified User Interaction (MUI): None (N)
        
          Modified Confidentiality (MC): None (N)
        
          Modified Scope (MS): Unchanged (U)
        
          Modified Integrity (MI): None (N)
        
          Modified Availability (MA): High (H)
        
              updated
            
          12 hours ago
          by @LeSuisse
        
      Activity log
    
              Created suggestion
            
          1 day, 15 hours ago
          
          @LeSuisse
          
              ignored
            
                4 packages
                python314Packages.capstone_4
python313Packages.capstone_4
python314Packages.capstone
python313Packages.capstone

          1 day, 13 hours ago
          
          @LeSuisse
          
              accepted
            
          1 day, 13 hours ago
          
          @LeSuisse
          
              published on GitHub
            
          12 hours ago
          
            Capstone has a NULL Pointer Dereference with 3DNow! opcodes
          
      https://github.com/capstone-engine/capstone/security/advisories/GHSA-289w-cm54-fgrm
    
    x_refsource_CONFIRM
  
      https://github.com/capstone-engine/capstone/pull/2924
    
    x_refsource_MISC
  
      https://github.com/capstone-engine/capstone/commit/a0201371719b5aaa91d318ab2898843718f92d1f
    
    x_refsource_MISC
  
      https://github.com/capstone-engine/capstone/commit/fab595205fee206f5c21be6ed8ad2eaf9225f1c7
    
    x_refsource_MISC
  
    capstone

            ==< 6.0.0-Alpha8
          
            ==< 5.0.8

NIXPKGS-2026-2250

GitHub issue published 12 hours ago

trinodb trino OAuth2/OIDC ExternalUriInfo.java redirect

          Permalink
          
            CVE-2026-16336
          
        5.3 MEDIUM
      
        CVSS version (CVSS): 4.0
      
          Attack Vector (AV): Network (N)
        
          Attack Complexity (AC): Low (L)
        
          Attack Requirement (AT): None (N)
        
          Privileges Required (PR): None (N)
        
          User Interaction (UI): Passive (P)
        
          Vulnerable System Impact Confidentiality (VC): None (N)
        
          Vulnerable System Impact Integrity (VI): Low (L)
        
          Vulnerable System Impact Availability (VA): None (N)
        
          Subsequent System Impact Confidentiality (SC): None (N)
        
          Subsequent System Impact Integrity (SI): None (N)
        
          Subsequent System Impact Availability (SA): None (N)
        
          Exploit Maturity (E): Not Defined (X)
        
          Modified Attack Vector (MAV): Network (N)
        
          Modified Attack Complexity (MAC): Low (L)
        
          Modified Attack Requirement (MAT): None (N)
        
          Modified Privileges Required (MPR): None (N)
        
          Modified User Interaction (MUI): Passive (P)
        
          Modified Vulnerable System Impact Confidentiality (MVC): None (N)
        
          Modified Vulnerable System Impact Integrity (MVI): Low (L)
        
          Modified Vulnerable System Impact Availability (MVA): None (N)
        
          Modified Subsequent System Impact Confidentiality (MSC): Negligible (N)
        
          Modified Subsequent System Impact Integrity (MSI): Negligible (N)
        
          Modified Subsequent System Impact Availability (MSA): Negligible (N)
        
          Safety (S): Not Defined (X)
        
          Automatable (AU): Not Defined (X)
        
          Recovery (R): Not Defined (X)
        
          Value Density (V): Not Defined (X)
        
          Vulnerability Response Effort (RE): Not Defined (X)
        
          Provider Urgency (U): Not Defined (X)
        
          Confidentiality Req. (CR): Not Defined (X)
        
          Integrity Req. (IR): Not Defined (X)
        
          Availability Req. (AR): Not Defined (X)
        
              updated
            
          12 hours ago
          by @LeSuisse
        
      Activity log
    
              Created suggestion
            
          1 day, 15 hours ago
          
          @LeSuisse
          
              ignored
            
                2 packages
                python313Packages.trino-python-client
python314Packages.trino-python-client

          1 day, 13 hours ago
          
          @LeSuisse
          
              ignored
            
                4 references
                
                      https://github.com/trinodb/trino/
                    
                      Submit #858687 | GitHub trino 481 Open …
                    
                      CVE-2026-16336 | CVE Analysis and Report
                    
                      VDB-380710 | CTI Indicators (IOB, IOC, …
                    
          1 day, 13 hours ago
          
          @LeSuisse
          
              accepted
            
          1 day, 13 hours ago
          
          @LeSuisse
          
              published on GitHub
            
          12 hours ago
          
            trinodb trino OAuth2/OIDC ExternalUriInfo.java redirect
          
      VDB-380710 | trinodb trino OAuth2/OIDC ExternalUriInfo.java redirect
    
    technical-descriptionvdb-entry
  
      https://github.com/trinodb/trino/issues/29754
    
    issue-tracking
  
          Ignored references (4)
        
      https://github.com/trinodb/trino/
    
    product
  
      Submit #858687 | GitHub trino 481 Open Redirect
    
    third-party-advisory
  
      CVE-2026-16336 | CVE Analysis and Report
    
    third-party-advisory
  
      VDB-380710 | CTI Indicators (IOB, IOC, TTP, IOA)
    
    signaturepermissions-required
  
    trino

            ==481

NIXPKGS-2026-2249

GitHub issue published 12 hours ago

CImg Library: Uncontrolled Memory Allocation and Memory Leak in `_load_analyze()` via Crafted NIfTI/Analyze Header

          Permalink
          
            CVE-2026-47667
          
        7.5 HIGH
      
        CVSS version (CVSS): 3.1
      
          Attack Vector (AV): Network (N)
        
          Attack Complexity (AC): Low (L)
        
          Privileges Required (PR): None (N)
        
          User Interaction (UI): None (N)
        
          Scope (S): Unchanged (U)
        
          Confidentiality (C): None (N)
        
          Integrity (I): None (N)
        
          Availability (A): High (H)
        
          Modified Attack Vector (MAV): Network (N)
        
          Modified Attack Complexity (MAC): Low (L)
        
          Modified Privileges Required (MPR): None (N)
        
          Modified User Interaction (MUI): None (N)
        
          Modified Confidentiality (MC): None (N)
        
          Modified Scope (MS): Unchanged (U)
        
          Modified Integrity (MI): None (N)
        
          Modified Availability (MA): High (H)
        
              updated
            
          12 hours ago
          by @LeSuisse
        
      Activity log
    
              Created suggestion
            
          1 day, 15 hours ago
          
          @LeSuisse
          
              accepted
            
          1 day, 13 hours ago
          
          @LeSuisse
          
              published on GitHub
            
          12 hours ago
          
            CImg Library: Uncontrolled Memory Allocation and Memory Leak in `_load_analyze()` via Crafted NIfTI/Analyze Header
          
      https://github.com/GreycLab/CImg/security/advisories/GHSA-rmfc-grgj-qwhv
    
    x_refsource_CONFIRM
  
      https://github.com/GreycLab/CImg/issues/480
    
    x_refsource_MISC
  
      https://github.com/GreycLab/CImg/commit/6a69bf725ffd111a4c7dc61cc15e3661abd158ee
    
    x_refsource_MISC
  
    CImg

            ==< 4.0.0

NIXPKGS-2026-2248

GitHub issue published 12 hours ago

Ansible-core: argument injection in ansible-galaxy collection install via git clone (incomplete fix for cve-2026-11332)

          Permalink
          
            CVE-2026-16493
          
        7.8 HIGH
      
        CVSS version (CVSS): 3.1
      
          Attack Vector (AV): Local (L)
        
          Attack Complexity (AC): Low (L)
        
          Privileges Required (PR): None (N)
        
          User Interaction (UI): Required (R)
        
          Scope (S): Unchanged (U)
        
          Confidentiality (C): High (H)
        
          Integrity (I): High (H)
        
          Availability (A): High (H)
        
          Modified Attack Vector (MAV): Local (L)
        
          Modified Attack Complexity (MAC): Low (L)
        
          Modified Privileges Required (MPR): None (N)
        
          Modified User Interaction (MUI): Required (R)
        
          Modified Confidentiality (MC): High (H)
        
          Modified Scope (MS): Unchanged (U)
        
          Modified Integrity (MI): High (H)
        
          Modified Availability (MA): High (H)
        
              updated
            
          12 hours ago
          by @LeSuisse
        
      Activity log
    
              Created suggestion
            
          1 day, 15 hours ago
          
          @LeSuisse
          
              accepted
            
          1 day, 13 hours ago
          
          @LeSuisse
          
              published on GitHub
            
          12 hours ago
          
            Ansible-core: argument injection in ansible-galaxy collection install via git clone (incomplete fix for cve-2026-11332)
          
      https://access.redhat.com/security/cve/CVE-2026-16493
    
    x_refsource_REDHATvdb-entry
  
      RHBZ#2503724
    
    issue-trackingx_refsource_REDHAT
  
    ansible-core

NIXPKGS-2026-2247

GitHub issue published 12 hours ago

Duplicati backup software v2.3.0.1 is vulnerable to an incorrect permission assignment vulnerability

Permalink CVE-2026-16157

updated 12 hours ago by @LeSuisse Activity log

Created suggestion 1 day, 4 hours ago
@LeSuisse accepted 12 hours ago
@LeSuisse published on GitHub 12 hours ago

Duplicati backup software v2.3.0.1 is vulnerable to an incorrect permission assignment vulnerability

Duplicati

==2.3.0.1

Needs some backports to stable

NIXPKGS-2026-2246

GitHub issue published 12 hours ago

Heap-based Buffer Overflow in GNU diffutils

          Permalink
          
            CVE-2026-53910
          
        2.1 LOW
      
        CVSS version (CVSS): 4.0
      
          Attack Vector (AV): Local (L)
        
          Attack Complexity (AC): Low (L)
        
          Attack Requirement (AT): Present (P)
        
          Privileges Required (PR): None (N)
        
          User Interaction (UI): None (N)
        
          Vulnerable System Impact Confidentiality (VC): None (N)
        
          Vulnerable System Impact Integrity (VI): Low (L)
        
          Vulnerable System Impact Availability (VA): Low (L)
        
          Subsequent System Impact Confidentiality (SC): Low (L)
        
          Subsequent System Impact Integrity (SI): Low (L)
        
          Subsequent System Impact Availability (SA): Low (L)
        
          Modified Attack Vector (MAV): Local (L)
        
          Modified Attack Complexity (MAC): Low (L)
        
          Modified Attack Requirement (MAT): Present (P)
        
          Modified Privileges Required (MPR): None (N)
        
          Modified User Interaction (MUI): None (N)
        
          Modified Vulnerable System Impact Confidentiality (MVC): None (N)
        
          Modified Vulnerable System Impact Integrity (MVI): Low (L)
        
          Modified Vulnerable System Impact Availability (MVA): Low (L)
        
          Modified Subsequent System Impact Confidentiality (MSC): Low (L)
        
          Modified Subsequent System Impact Integrity (MSI): Low (L)
        
          Modified Subsequent System Impact Availability (MSA): Low (L)
        
          Safety (S): Not Defined (X)
        
          Automatable (AU): Not Defined (X)
        
          Recovery (R): Not Defined (X)
        
          Value Density (V): Not Defined (X)
        
          Vulnerability Response Effort (RE): Not Defined (X)
        
          Provider Urgency (U): Not Defined (X)
        
          Confidentiality Req. (CR): Not Defined (X)
        
          Integrity Req. (IR): Not Defined (X)
        
          Availability Req. (AR): Not Defined (X)
        
          Exploit Maturity (E): Not Defined (X)
        
              updated
            
          12 hours ago
          by @LeSuisse
        
      Activity log
    
              Created suggestion
            
          1 day, 4 hours ago
          
          @LeSuisse
          
              ignored
            
              reference https://g…
            
          12 hours ago
          
          @LeSuisse
          
              ignored
            
                2 packages
                uutils-diffutils
minimal-bootstrap.diffutils

          12 hours ago
          
          @LeSuisse
          
              accepted
            
          12 hours ago
          
          @LeSuisse
          
              restored
            
              package minimal-bootstrap.diffutils
            
          12 hours ago
          
          @LeSuisse
          
              published on GitHub
            
          12 hours ago
          
            Heap-based Buffer Overflow in GNU diffutils
          
      https://cert.pl/en/posts/2026/07/CVE-2026-53910
    
    third-party-advisory
  
      https://cgit.git.savannah.gnu.org/cgit/diffutils.git/commit/?id=73ed7ce85cc78ef…
    
    patch
  
      https://cgit.git.savannah.gnu.org/cgit/diffutils.git/commit/?id=9ff04d5b84743e3…
    
    patch
  
          Ignored references (1)
        
      https://git.savannah.gnu.org/cgit/diffutils.git/
    
    product
  
    diffutils

            =<3.12

NIXPKGS-2026-2245

GitHub issue published 12 hours ago

Systemd: systemd-tmpfiles symlink-redirected arbitrary file overwrite via a chase_safe root-to-unprivileged ownership transition bypass

          Permalink
          
            CVE-2026-16552
          
        6.3 MEDIUM
      
        CVSS version (CVSS): 3.1
      
          Attack Vector (AV): Local (L)
        
          Attack Complexity (AC): High (H)
        
          Privileges Required (PR): Low (L)
        
          User Interaction (UI): None (N)
        
          Scope (S): Unchanged (U)
        
          Confidentiality (C): None (N)
        
          Integrity (I): High (H)
        
          Availability (A): High (H)
        
          Modified Attack Vector (MAV): Local (L)
        
          Modified Attack Complexity (MAC): High (H)
        
          Modified Privileges Required (MPR): Low (L)
        
          Modified User Interaction (MUI): None (N)
        
          Modified Confidentiality (MC): None (N)
        
          Modified Scope (MS): Unchanged (U)
        
          Modified Integrity (MI): High (H)
        
          Modified Availability (MA): High (H)
        
              updated
            
          12 hours ago
          by @LeSuisse
        
      Activity log
    
              Created suggestion
            
          1 day, 4 hours ago
          
          @symphorien
          
              ignored
            
              package nagiosPlugins.check_systemd
            
          22 hours ago
          
          @LeSuisse
          
              ignored
            
              reference https://g…
            
          12 hours ago
          
          @LeSuisse
          
              ignored
            
                39 packages
                udev
systemd-lsp
systemdLibs
rofi-systemd
systemd-wait
systemdUkify
systemdgenie
systemdMinimal
systemd-netlogd
systemd-bootchart
systemd-credsubst
systemd-manager-tui
systemd-journal2gelf
systemd-lock-handler
ocamlPackages.systemd
phpExtensions.systemd
haskellPackages.systemd
php82Extensions.systemd
php83Extensions.systemd
php84Extensions.systemd
php85Extensions.systemd
systemd-language-server
update-systemd-resolved
haskellPackages.systemd-api
prometheus-systemd-exporter
haskellPackages.warp-systemd
ocamlPackages_latest.systemd
gnomeExtensions.systemd-status
gnomeExtensions.systemd-manager
python313Packages.systemd-python
python314Packages.systemd-python
haskellPackages.libsystemd-journal
gnomeExtensions.systemd-manager-neo
python313Packages.systemdunitparser
python314Packages.systemdunitparser
python313Packages.jupyterhub-systemdspawner
python314Packages.jupyterhub-systemdspawner
vscode-extensions.coolbear.systemd-unit-file
gnomeExtensions.systemd-offline-update-indicator

          12 hours ago
          
          @LeSuisse
          
              accepted
            
          12 hours ago
          
          @LeSuisse
          
              published on GitHub
            
          12 hours ago
          
            Systemd: systemd-tmpfiles symlink-redirected arbitrary file overwrite via a chase_safe root-to-unprivileged ownership transition bypass
          
      https://access.redhat.com/security/cve/CVE-2026-16552
    
    x_refsource_REDHATvdb-entry
  
      RHBZ#2506073
    
    issue-trackingx_refsource_REDHAT
  
      https://github.com/systemd/systemd/blob/b9ef5951f8f9e156479494fdb9ca6274cb3d3c5…
    
          Ignored references (1)
        
      https://github.com/systemd/systemd/blob/b9ef5951f8f9e156479494fdb9ca6274cb3d3c5…
    
    systemd

Nixpkgs security tracker

Published issues

Rpcbind: rpcbind: stack buffer overflow in rpcinfo rpcbdump() short-mode version-list formatting

Dracut: dracut: root code execution via dhcp options command injection in networkmanager initrd module

Ollama Remote Denial of Service via Attacker-Controlled Allocation in GGUF Metadata Parser

Capstone has a NULL Pointer Dereference with 3DNow! opcodes

trinodb trino OAuth2/OIDC ExternalUriInfo.java redirect

CImg Library: Uncontrolled Memory Allocation and Memory Leak in `_load_analyze()` via Crafted NIfTI/Analyze Header

Ansible-core: argument injection in ansible-galaxy collection install via git clone (incomplete fix for cve-2026-11332)

Duplicati backup software v2.3.0.1 is vulnerable to an incorrect permission assignment vulnerability

Heap-based Buffer Overflow in GNU diffutils

Systemd: systemd-tmpfiles symlink-redirected arbitrary file overwrite via a chase_safe root-to-unprivileged ownership transition bypass