NIXPKGS-2025-0005

published 7 months ago

Permalink CVE-2025-9959

7.6 HIGH

• CVSS version (CVSS): 3.1
• Attack Vector (AV): Network (N)
• Attack Complexity (AC): Low (L)
• Privileges Required (PR): None (N)
• User Interaction (UI): Required (R)
• Scope (S): Unchanged (U)
• Confidentiality (C): Low (L)
• Integrity (I): High (H)
• Availability (A): Low (L)
• Modified Attack Vector (MAV): Network (N)
• Modified Attack Complexity (MAC): Low (L)
• Modified Privileges Required (MPR): None (N)
• Modified User Interaction (MUI): Required (R)
• Modified Confidentiality (MC): Low (L)
• Modified Scope (MS): Unchanged (U)
• Modified Integrity (MI): High (H)
• Modified Availability (MA): Low (L)

updated 7 months ago by @LeSuisse Activity log

• Created suggestion 8 months, 2 weeks ago
• @LeSuisse accepted 7 months ago
• @LeSuisse published on GitHub 7 months ago

Sandbox escape in smolagents Local Python execution environment via dunder attributes

• https://research.jfrog.com/vulnerabilities/smolagents-local-python-sandbox-esca… third-party-advisory
• https://github.com/huggingface/smolagents/pull/1551 patch

---

smolagents

• <1.21.0

NIXPKGS-2025-0010

published 7 months ago

Permalink CVE-2025-40920

8.6 HIGH

• CVSS version (CVSS): 3.1
• Attack Vector (AV): Network (N)
• Attack Complexity (AC): Low (L)
• Privileges Required (PR): None (N)
• User Interaction (UI): None (N)
• Scope (S): Unchanged (U)
• Confidentiality (C): High (H)
• Integrity (I): Low (L)
• Availability (A): Low (L)
• Modified Attack Vector (MAV): Network (N)
• Modified Attack Complexity (MAC): Low (L)
• Modified Privileges Required (MPR): None (N)
• Modified User Interaction (MUI): None (N)
• Modified Confidentiality (MC): High (H)
• Modified Scope (MS): Unchanged (U)
• Modified Integrity (MI): Low (L)
• Modified Availability (MA): Low (L)

updated 7 months ago by @LeSuisse Activity log

• Created suggestion 8 months, 2 weeks ago
• @LeSuisse accepted 7 months ago
• @LeSuisse published on GitHub 7 months ago

Catalyst::Authentication::Credential::HTTP versions 1.018 and earlier for Perl use insecurely generated nonces

• https://github.com/perl-catalyst/Catalyst-Authentication-Credential-HTTP/commit… patch
• https://github.com/perl-catalyst/Catalyst-Authentication-Credential-HTTP/pull/1 issue-tracking
• https://metacpan.org/release/ETHER/Catalyst-Authentication-Credential-HTTP-1.01…
• https://datatracker.ietf.org/doc/html/rfc9562#name-security-considerations
• https://datatracker.ietf.org/doc/html/rfc7616#section-5.12
• https://security.metacpan.org/patches/C/Catalyst-Authentication-Credential-HTTP… patch
• http://www.openwall.com/lists/oss-security/2025/08/12/1
• https://github.com/perl-catalyst/Catalyst-Authentication-Credential-HTTP/commit… patch

---

Catalyst-Authentication-Credential-HTTP

• =<1.018

NIXPKGS-2025-0008

published 7 months ago

Permalink CVE-2025-7039

3.7 LOW

• CVSS version (CVSS): 3.1
• Attack Vector (AV): Network (N)
• Attack Complexity (AC): High (H)
• Privileges Required (PR): None (N)
• User Interaction (UI): None (N)
• Scope (S): Unchanged (U)
• Confidentiality (C): None (N)
• Integrity (I): Low (L)
• Availability (A): None (N)
• Modified Attack Vector (MAV): Network (N)
• Modified Attack Complexity (MAC): High (H)
• Modified Privileges Required (MPR): None (N)
• Modified User Interaction (MUI): None (N)
• Modified Confidentiality (MC): None (N)
• Modified Scope (MS): Unchanged (U)
• Modified Integrity (MI): Low (L)
• Modified Availability (MA): None (N)

updated 7 months ago by @LeSuisse Activity log

• Created suggestion 8 months, 2 weeks ago
• @LeSuisse accepted 7 months ago
• @LeSuisse ignored
  12 packages

  • bootc
  • loupe
  • rpm-ostree
  • podman-bootc
  • mlxbf-bootctl
  • glycin-loaders
  • systemd-bootchart
  • rubyPackages.glib2
  • rubyPackages_3_1.glib2
  • rubyPackages_3_2.glib2
  • rubyPackages_3_3.glib2
  • rubyPackages_3_4.glib2
  7 months ago
• @LeSuisse published on GitHub 7 months ago

Glib: buffer under-read on glib through glib/gfileutils.c via get_tmp_file()

• https://access.redhat.com/security/cve/CVE-2025-7039 x_refsource_REDHATvdb-entry
• RHBZ#2392423 issue-trackingx_refsource_REDHAT

---

bootc

glib2

loupe

librsvg2

rpm-ostree

mingw-glib2

glycin-loaders

NIXPKGS-2025-0006

published 7 months ago

Permalink CVE-2025-40928

7.5 HIGH

• CVSS version (CVSS): 3.1
• Attack Vector (AV): Network (N)
• Attack Complexity (AC): Low (L)
• Privileges Required (PR): None (N)
• User Interaction (UI): None (N)
• Scope (S): Unchanged (U)
• Confidentiality (C): None (N)
• Integrity (I): None (N)
• Availability (A): High (H)
• Modified Attack Vector (MAV): Network (N)
• Modified Attack Complexity (MAC): Low (L)
• Modified Privileges Required (MPR): None (N)
• Modified User Interaction (MUI): None (N)
• Modified Confidentiality (MC): None (N)
• Modified Scope (MS): Unchanged (U)
• Modified Integrity (MI): None (N)
• Modified Availability (MA): High (H)

updated 7 months ago by @LeSuisse Activity log

• Created suggestion 8 months, 2 weeks ago
• @LeSuisse ignored
  6 packages

  • perlPackages.CpanelJSONXS
  • perl538Packages.CpanelJSONXS
  • perl540Packages.CpanelJSONXS
  • perlPackages.JSONXSVersionOneAndTwo
  • perl538Packages.JSONXSVersionOneAndTwo
  • perl540Packages.JSONXSVersionOneAndTwo
  7 months ago
• @LeSuisse accepted 7 months ago
• @LeSuisse published on GitHub 7 months ago

JSON::XS before version 4.04 for Perl has an integer buffer overflow causing a segfault when parsing crafted JSON, enabling denial-of-service attacks or other unspecified impact

• https://metacpan.org/release/MLEHMANN/JSON-XS-4.03/source/XS.xs#L256 related
• https://security.metacpan.org/patches/J/JSON-XS/4.03/CVE-2025-40928-r1.patch patch
• https://lists.debian.org/debian-lts-announce/2025/09/msg00033.html
• http://www.openwall.com/lists/oss-security/2025/09/08/2

---

JSON-XS

• <4.04

NIXPKGS-2025-0007

published 7 months ago

Permalink CVE-2025-40929

5.6 MEDIUM

• CVSS version (CVSS): 3.1
• Attack Vector (AV): Network (N)
• Attack Complexity (AC): High (H)
• Privileges Required (PR): None (N)
• User Interaction (UI): None (N)
• Scope (S): Unchanged (U)
• Confidentiality (C): Low (L)
• Integrity (I): Low (L)
• Availability (A): Low (L)
• Modified Attack Vector (MAV): Network (N)
• Modified Attack Complexity (MAC): High (H)
• Modified Privileges Required (MPR): None (N)
• Modified User Interaction (MUI): None (N)
• Modified Confidentiality (MC): Low (L)
• Modified Scope (MS): Unchanged (U)
• Modified Integrity (MI): Low (L)
• Modified Availability (MA): Low (L)

updated 7 months ago by @LeSuisse Activity log

• Created suggestion 8 months, 2 weeks ago
• @LeSuisse accepted 7 months ago
• @LeSuisse published on GitHub 7 months ago

Cpanel::JSON::XS before version 4.40 for Perl has an integer buffer overflow causing a segfault when parsing crafted JSON, enabling denial-of-service attacks or other unspecified impact

• https://metacpan.org/release/RURBAN/Cpanel-JSON-XS-4.39/source/XS.xs#L713 related
• https://metacpan.org/release/RURBAN/Cpanel-JSON-XS-4.40/changes release-notes
• https://github.com/rurban/Cpanel-JSON-XS/commit/378236219eaa35742c3962ecbdee364… patch
• https://lists.debian.org/debian-lts-announce/2025/09/msg00034.html
• http://www.openwall.com/lists/oss-security/2025/09/08/1

---

Cpanel-JSON-XS

• <4.40

NIXPKGS-2025-0004

published 7 months ago

Permalink CVE-2025-10854

8.1 HIGH

• CVSS version (CVSS): 3.1
• Attack Vector (AV): Network (N)
• Attack Complexity (AC): High (H)
• Privileges Required (PR): None (N)
• User Interaction (UI): None (N)
• Scope (S): Unchanged (U)
• Confidentiality (C): High (H)
• Integrity (I): High (H)
• Availability (A): High (H)
• Modified Attack Vector (MAV): Network (N)
• Modified Attack Complexity (MAC): High (H)
• Modified Privileges Required (MPR): None (N)
• Modified User Interaction (MUI): None (N)
• Modified Confidentiality (MC): High (H)
• Modified Scope (MS): Unchanged (U)
• Modified Integrity (MI): High (H)
• Modified Availability (MA): High (H)

updated 7 months ago by @LeSuisse Activity log

• Created suggestion 8 months, 1 week ago
• @LeSuisse ignored
  2 packages

  • python312Packages.llama-index-readers-txtai
  • python313Packages.llama-index-readers-txtai
  7 months ago
• @LeSuisse accepted 7 months ago
• @LeSuisse published on GitHub 7 months ago

Symlink Following in txtai leads to arbitrary file write when loading untrusted embedding indices

• https://github.com/neuml/txtai/issues/965 patch
• https://research.jfrog.com/vulnerabilities/txtai-arbitrary-file-write-jfsa-2025… third-party-advisory

---

txtai

• =<9.0.0

NIXPKGS-2025-0003

published 7 months ago

Permalink CVE-2025-9905

updated 7 months ago by @LeSuisse Activity log

• Created suggestion 8 months, 1 week ago
• @Erethon dismissed 7 months, 1 week ago
• @Erethon marked as untriaged 7 months, 1 week ago
• @LeSuisse ignored package python312Packages.tf-keras 7 months ago
• @balsoft restored package python312Packages.tf-keras 7 months ago
• @balsoft dismissed 7 months ago
• @LeSuisse accepted 7 months ago
• @LeSuisse ignored package python312Packages.tf-keras 7 months ago
• @LeSuisse published on GitHub 7 months ago

Arbitary Code execution in Keras load_model()

• https://github.com/keras-team/keras/pull/21602 patch
• https://github.com/keras-team/keras/security/advisories/GHSA-36rr-ww3j-vrjv

---

keras

• =<3.11.2

NIXPKGS-2025-0002

published 7 months ago

Permalink CVE-2025-9900

8.8 HIGH

• CVSS version (CVSS): 3.1
• Attack Vector (AV): Network (N)
• Attack Complexity (AC): Low (L)
• Privileges Required (PR): None (N)
• User Interaction (UI): Required (R)
• Scope (S): Unchanged (U)
• Confidentiality (C): High (H)
• Integrity (I): High (H)
• Availability (A): High (H)
• Modified Attack Vector (MAV): Network (N)
• Modified Attack Complexity (MAC): Low (L)
• Modified Privileges Required (MPR): None (N)
• Modified User Interaction (MUI): Required (R)
• Modified Confidentiality (MC): High (H)
• Modified Scope (MS): Unchanged (U)
• Modified Integrity (MI): High (H)
• Modified Availability (MA): High (H)

updated 7 months ago by @balsoft Activity log

• Created suggestion 8 months, 1 week ago
• @balsoft accepted 7 months ago
• @balsoft deleted
  3 maintainers

  • @sikmir
  • @imincik
  • @nialov
  7 months ago maintainer.delete
• @balsoft added maintainer @balsoft 7 months ago maintainer.add
• @balsoft published on GitHub 7 months ago

Libtiff: libtiff write-what-where

• https://access.redhat.com/security/cve/CVE-2025-9900 x_refsource_REDHATvdb-entry
• RHBZ#2392784 issue-trackingx_refsource_REDHAT
• https://github.com/SexyShoelessGodofWar/LibTiff-4.7.0-Write-What-Where?tab=read… exploit
• RHSA-2025:17651 x_refsource_REDHATvendor-advisory
• RHSA-2025:17675 x_refsource_REDHATvendor-advisory
• RHSA-2025:17710 x_refsource_REDHATvendor-advisory
• RHSA-2025:17738 x_refsource_REDHATvendor-advisory
• RHSA-2025:17739 x_refsource_REDHATvendor-advisory
• RHSA-2025:17740 x_refsource_REDHATvendor-advisory
• RHSA-2025:19113 x_refsource_REDHATvendor-advisory
• RHSA-2025:19156 x_refsource_REDHATvendor-advisory
• RHSA-2025:19276 x_refsource_REDHATvendor-advisory
• https://lists.debian.org/debian-lts-announce/2025/09/msg00031.html
• http://www.openwall.com/lists/oss-security/2025/09/26/3
• RHSA-2025:19906 x_refsource_REDHATvendor-advisory
• https://gitlab.com/libtiff/libtiff/-/issues/704
• https://gitlab.com/libtiff/libtiff/-/merge_requests/732
• https://libtiff.gitlab.io/libtiff/releases/v4.7.1.html
• RHSA-2025:19947 x_refsource_REDHATvendor-advisory
• RHSA-2025:20956 x_refsource_REDHATvendor-advisory
• RHSA-2025:20998 x_refsource_REDHATvendor-advisory
• RHSA-2025:21060 x_refsource_REDHATvendor-advisory
• RHSA-2025:21061 x_refsource_REDHATvendor-advisory
• RHSA-2025:21062 x_refsource_REDHATvendor-advisory
• RHSA-2025:21407 x_refsource_REDHATvendor-advisory
• RHSA-2025:21506 x_refsource_REDHATvendor-advisory
• RHSA-2025:21507 x_refsource_REDHATvendor-advisory
• RHSA-2025:21508 x_refsource_REDHATvendor-advisory
• RHSA-2025:21994 x_refsource_REDHATvendor-advisory
• RHSA-2025:23078 x_refsource_REDHATvendor-advisory
• RHSA-2025:23079 x_refsource_REDHATvendor-advisory
• RHSA-2025:23080 x_refsource_REDHATvendor-advisory
• RHSA-2026:0001 x_refsource_REDHATvendor-advisory
• RHSA-2026:0078 x_refsource_REDHATvendor-advisory
• RHSA-2026:0076 x_refsource_REDHATvendor-advisory
• RHSA-2026:0077 x_refsource_REDHATvendor-advisory

---

libtiff

• *
• <4.7.1

mingw-libtiff

• *

compat-libtiff3

• *

spice-client-win

• *

rhaiis/vllm-cuda-rhel9

• *

rhaiis/vllm-rocm-rhel9

• *

rhaiis/model-opt-cuda-rhel9

• *

discovery/discovery-ui-rhel9

• *

NIXPKGS-2025-0001

published 7 months, 1 week ago

Permalink CVE-2025-8067

8.5 HIGH

• CVSS version (CVSS): 3.1
• Attack Vector (AV): Local (L)
• Attack Complexity (AC): Low (L)
• Privileges Required (PR): None (N)
• User Interaction (UI): None (N)
• Scope (S): Changed (C)
• Confidentiality (C): Low (L)
• Integrity (I): Low (L)
• Availability (A): High (H)
• Modified Attack Vector (MAV): Local (L)
• Modified Attack Complexity (MAC): Low (L)
• Modified Privileges Required (MPR): None (N)
• Modified User Interaction (MUI): None (N)
• Modified Confidentiality (MC): Low (L)
• Modified Scope (MS): Changed (C)
• Modified Integrity (MI): Low (L)
• Modified Availability (MA): High (H)

updated 7 months, 1 week ago by @balsoft Activity log

• Created suggestion 8 months, 2 weeks ago
• @balsoft added maintainer @balsoft 7 months, 1 week ago maintainer.add
• @balsoft accepted 7 months, 1 week ago
• @balsoft published on GitHub 7 months, 1 week ago

Udisks: out-of-bounds read in udisks daemon

• https://access.redhat.com/security/cve/CVE-2025-8067 x_refsource_REDHATvdb-entry
• RHBZ#2388623 issue-trackingx_refsource_REDHAT
• RHSA-2025:15017 x_refsource_REDHATvendor-advisory
• RHSA-2025:15018 x_refsource_REDHATvendor-advisory
• RHSA-2025:15020 x_refsource_REDHATvendor-advisory
• RHSA-2025:15956 x_refsource_REDHATvendor-advisory
• RHSA-2025:16021 x_refsource_REDHATvendor-advisory
• RHSA-2025:16090 x_refsource_REDHATvendor-advisory
• RHSA-2025:16106 x_refsource_REDHATvendor-advisory
• RHSA-2025:16121 x_refsource_REDHATvendor-advisory
• RHSA-2025:16122 x_refsource_REDHATvendor-advisory
• RHSA-2025:16125 x_refsource_REDHATvendor-advisory
• RHSA-2025:16130 x_refsource_REDHATvendor-advisory
• https://lists.debian.org/debian-lts-announce/2025/08/msg00023.html
• http://www.openwall.com/lists/oss-security/2025/08/28/1

---

udisks

udisks2

• *
• <2.10.2
• <2.10.91