NIXPKGS-2026-1186

GitHub issue published 2 months, 1 week ago

Permalink CVE-2026-33392

7.2 HIGH

CVSS version (CVSS): 3.1
Attack Vector (AV): Network (N)
Attack Complexity (AC): Low (L)
Privileges Required (PR): High (H)
User Interaction (UI): None (N)
Scope (S): Unchanged (U)
Confidentiality (C): High (H)
Integrity (I): High (H)
Availability (A): High (H)
Modified Attack Vector (MAV): Network (N)
Modified Attack Complexity (MAC): Low (L)
Modified Privileges Required (MPR): High (H)
Modified User Interaction (MUI): None (N)
Modified Confidentiality (MC): High (H)
Modified Scope (MS): Unchanged (U)
Modified Integrity (MI): High (H)
Modified Availability (MA): High (H)

updated 2 months, 1 week ago by @LeSuisse Activity log

Created suggestion 2 months, 1 week ago
@LeSuisse accepted 2 months, 1 week ago
@LeSuisse published on GitHub 2 months, 1 week ago

In JetBrains YouTrack before 2025.3.131383 high privileged user can achieve …

https://www.jetbrains.com/privacy-security/issues-fixed/

YouTrack

<2025.3.131383

NIXPKGS-2026-1185

GitHub issue published 2 months, 1 week ago

Permalink CVE-2026-32107

8.8 HIGH

CVSS version (CVSS): 3.1
Attack Vector (AV): Local (L)
Attack Complexity (AC): Low (L)
Privileges Required (PR): Low (L)
User Interaction (UI): None (N)
Scope (S): Changed (C)
Confidentiality (C): High (H)
Integrity (I): High (H)
Availability (A): High (H)
Modified Attack Vector (MAV): Local (L)
Modified Attack Complexity (MAC): Low (L)
Modified Privileges Required (MPR): Low (L)
Modified User Interaction (MUI): None (N)
Modified Confidentiality (MC): High (H)
Modified Scope (MS): Changed (C)
Modified Integrity (MI): High (H)
Modified Availability (MA): High (H)

updated 2 months, 1 week ago by @LeSuisse Activity log

Created suggestion 2 months, 1 week ago
@LeSuisse ignored package pulseaudio-module-xrdp 2 months, 1 week ago
@LeSuisse accepted 2 months, 1 week ago
@LeSuisse published on GitHub 2 months, 1 week ago

xrdp: Fail-open privilege drop in sesexec — child processes may execute as root if setuid fails

https://github.com/neutrinolabs/xrdp/security/advisories/GHSA-p5m6-7m43-pjv9 x_refsource_CONFIRM

Ignored references (1)

https://github.com/neutrinolabs/xrdp/releases/tag/v0.10.6 x_refsource_MISC

xrdp

==< 0.10.6

NIXPKGS-2026-1184

GitHub issue published 2 months, 1 week ago

Permalink CVE-2026-40339

5.2 MEDIUM

CVSS version (CVSS): 3.1
Attack Vector (AV): Physical (P)
Attack Complexity (AC): Low (L)
Privileges Required (PR): None (N)
User Interaction (UI): None (N)
Scope (S): Unchanged (U)
Confidentiality (C): High (H)
Integrity (I): None (N)
Availability (A): Low (L)
Modified Attack Vector (MAV): Physical (P)
Modified Attack Complexity (MAC): Low (L)
Modified Privileges Required (MPR): None (N)
Modified User Interaction (MUI): None (N)
Modified Confidentiality (MC): High (H)
Modified Scope (MS): Unchanged (U)
Modified Integrity (MI): None (N)
Modified Availability (MA): Low (L)

updated 2 months, 1 week ago by @LeSuisse Activity log

Created suggestion 2 months, 1 week ago
@LeSuisse accepted 2 months, 1 week ago
@LeSuisse published on GitHub 2 months, 1 week ago

libgphoto2 has OOB read in ptp_unpack_Sony_DPD() FormFlag parsing in ptp-pack.c

https://github.com/gphoto/libgphoto2/security/advisories/GHSA-42cm-m9hc-r7q8 x_refsource_CONFIRM
https://github.com/gphoto/libgphoto2/commit/09f8a940b1e418b5693f5c11e3016a1ad2cea62d x_refsource_MISC

libgphoto2

==<= 2.5.33

NIXPKGS-2026-1183

GitHub issue published 2 months, 1 week ago

Permalink CVE-2026-40336

2.4 LOW

CVSS version (CVSS): 3.1
Attack Vector (AV): Physical (P)
Attack Complexity (AC): Low (L)
Privileges Required (PR): None (N)
User Interaction (UI): None (N)
Scope (S): Unchanged (U)
Confidentiality (C): None (N)
Integrity (I): None (N)
Availability (A): Low (L)
Modified Attack Vector (MAV): Physical (P)
Modified Attack Complexity (MAC): Low (L)
Modified Privileges Required (MPR): None (N)
Modified User Interaction (MUI): None (N)
Modified Confidentiality (MC): None (N)
Modified Scope (MS): Unchanged (U)
Modified Integrity (MI): None (N)
Modified Availability (MA): Low (L)

updated 2 months, 1 week ago by @LeSuisse Activity log

Created suggestion 2 months, 1 week ago
@LeSuisse accepted 2 months, 1 week ago
@LeSuisse published on GitHub 2 months, 1 week ago

libgphoto2 has memory leak in ptp_unpack_Sony_DPD() secondary enumeration list in ptp-pack.c

https://github.com/gphoto/libgphoto2/security/advisories/GHSA-g8xw-p5wj-mrxv x_refsource_CONFIRM
https://github.com/gphoto/libgphoto2/commit/404ff02c75f3cb280196fc260a63c4d26cf1a8f6 x_refsource_MISC

libgphoto2

==<= 2.5.33

NIXPKGS-2026-1182

GitHub issue published 2 months, 1 week ago

Permalink CVE-2026-35512

updated 2 months, 1 week ago by @LeSuisse Activity log

Created suggestion 2 months, 1 week ago
@LeSuisse ignored package pulseaudio-module-xrdp 2 months, 1 week ago
@LeSuisse accepted 2 months, 1 week ago
@LeSuisse published on GitHub 2 months, 1 week ago

xrdp: Heap buffer overflow in EGFX channel

https://github.com/neutrinolabs/xrdp/security/advisories/GHSA-jg6p-7fg8-9hh6 x_refsource_CONFIRM

Ignored references (1)

https://github.com/neutrinolabs/xrdp/releases/tag/v0.10.6 x_refsource_MISC

xrdp

==< 0.10.6

NIXPKGS-2026-1181

GitHub issue published 2 months, 1 week ago

Permalink CVE-2026-40334

3.5 LOW

CVSS version (CVSS): 3.1
Attack Vector (AV): Physical (P)
Attack Complexity (AC): Low (L)
Privileges Required (PR): None (N)
User Interaction (UI): None (N)
Scope (S): Unchanged (U)
Confidentiality (C): Low (L)
Integrity (I): None (N)
Availability (A): Low (L)
Modified Attack Vector (MAV): Physical (P)
Modified Attack Complexity (MAC): Low (L)
Modified Privileges Required (MPR): None (N)
Modified User Interaction (MUI): None (N)
Modified Confidentiality (MC): Low (L)
Modified Scope (MS): Unchanged (U)
Modified Integrity (MI): None (N)
Modified Availability (MA): Low (L)

updated 2 months, 1 week ago by @LeSuisse Activity log

Created suggestion 2 months, 1 week ago
@LeSuisse accepted 2 months, 1 week ago
@LeSuisse published on GitHub 2 months, 1 week ago

libgphoto2 missing null termination in ptp_unpack_Canon_FE() filename buffer in ptp-pack.c

https://github.com/gphoto/libgphoto2/security/advisories/GHSA-ph87-cc3j-c6hm x_refsource_CONFIRM
https://github.com/gphoto/libgphoto2/commit/259fc7d3bfe534ce4b114c464f55b448670ab873 x_refsource_MISC

libgphoto2

==<= 2.5.33

NIXPKGS-2026-1180

GitHub issue published 2 months, 1 week ago

          Permalink
          
            CVE-2026-40527
          
        7.8 HIGH
      
        CVSS version (CVSS): 3.1
      
          Attack Vector (AV): Local (L)
        
          Attack Complexity (AC): Low (L)
        
          Privileges Required (PR): None (N)
        
          User Interaction (UI): Required (R)
        
          Scope (S): Unchanged (U)
        
          Confidentiality (C): High (H)
        
          Integrity (I): High (H)
        
          Availability (A): High (H)
        
          Modified Attack Vector (MAV): Local (L)
        
          Modified Attack Complexity (MAC): Low (L)
        
          Modified Privileges Required (MPR): None (N)
        
          Modified User Interaction (MUI): Required (R)
        
          Modified Confidentiality (MC): High (H)
        
          Modified Scope (MS): Unchanged (U)
        
          Modified Integrity (MI): High (H)
        
          Modified Availability (MA): High (H)
        
              updated
            
          2 months, 1 week ago
          by @LeSuisse
        
      Activity log
    
              Created suggestion
            
          2 months, 1 week ago
          
          @LeSuisse
          
              accepted
            
          2 months, 1 week ago
          
          @LeSuisse
          
              published on GitHub
            
          2 months, 1 week ago
          
            radare2 Command Injection via DWARF Parameter Names
          
      https://github.com/radareorg/radare2/pull/25821
    
    issue-tracking
  
      https://github.com/radareorg/radare2/commit/bc5a89033db3ecb5b1f7bf681fc6ba4dcfc…
    
    patch
  
          Ignored references (1)
        
      https://www.vulncheck.com/advisories/radare2-command-injection-via-dwarf-parame…
    
    third-party-advisory
  
    radare2

            <bc5a89033db3ecb5b1f7bf681fc6ba4dcfc14683

NIXPKGS-2026-1179

GitHub issue published 2 months, 1 week ago

Permalink CVE-2026-40486

4.3 MEDIUM

CVSS version (CVSS): 3.1
Attack Vector (AV): Network (N)
Attack Complexity (AC): Low (L)
Privileges Required (PR): Low (L)
User Interaction (UI): None (N)
Scope (S): Unchanged (U)
Confidentiality (C): None (N)
Integrity (I): Low (L)
Availability (A): None (N)
Modified Attack Vector (MAV): Network (N)
Modified Attack Complexity (MAC): Low (L)
Modified Privileges Required (MPR): Low (L)
Modified User Interaction (MUI): None (N)
Modified Confidentiality (MC): None (N)
Modified Scope (MS): Unchanged (U)
Modified Integrity (MI): Low (L)
Modified Availability (MA): None (N)

updated 2 months, 1 week ago by @LeSuisse Activity log

Created suggestion 2 months, 1 week ago
@LeSuisse accepted 2 months, 1 week ago
@LeSuisse published on GitHub 2 months, 1 week ago

Kimai's User Preferences API allows standard users to modify restricted attributes: hourly_rate, internal_rate

https://github.com/kimai/kimai/security/advisories/GHSA-qh43-xrjm-4ggp x_refsource_CONFIRM

Ignored references (1)

https://github.com/kimai/kimai/releases/tag/2.53.0 x_refsource_MISC

kimai

==< 2.53.0

NIXPKGS-2026-1178

GitHub issue published 2 months, 1 week ago

Permalink CVE-2026-40340

6.1 MEDIUM

CVSS version (CVSS): 3.1
Attack Vector (AV): Physical (P)
Attack Complexity (AC): Low (L)
Privileges Required (PR): None (N)
User Interaction (UI): None (N)
Scope (S): Unchanged (U)
Confidentiality (C): High (H)
Integrity (I): None (N)
Availability (A): High (H)
Modified Attack Vector (MAV): Physical (P)
Modified Attack Complexity (MAC): Low (L)
Modified Privileges Required (MPR): None (N)
Modified User Interaction (MUI): None (N)
Modified Confidentiality (MC): High (H)
Modified Scope (MS): Unchanged (U)
Modified Integrity (MI): None (N)
Modified Availability (MA): High (H)

updated 2 months, 1 week ago by @LeSuisse Activity log

Created suggestion 2 months, 1 week ago
@LeSuisse accepted 2 months, 1 week ago
@LeSuisse published on GitHub 2 months, 1 week ago

libgphoto2 has OOB read in ptp_unpack_OI() in ptp-pack.c via malicious PTP ObjectInfo response

https://github.com/gphoto/libgphoto2/security/advisories/GHSA-xfw3-xvjp-5wcv x_refsource_CONFIRM
https://github.com/gphoto/libgphoto2/commit/7c7f515bc88c3d0c4098ac965d313518e0ccbe33 x_refsource_MISC

libgphoto2

==<= 2.5.33

NIXPKGS-2026-1177

GitHub issue published 2 months, 1 week ago

Permalink CVE-2026-33516

updated 2 months, 1 week ago by @LeSuisse Activity log

Created suggestion 2 months, 1 week ago
@LeSuisse ignored package pulseaudio-module-xrdp 2 months, 1 week ago
@LeSuisse accepted 2 months, 1 week ago
@LeSuisse published on GitHub 2 months, 1 week ago

xrdp: Pre-authentication out-of-bounds reads in RDP capability and channel parsers

https://github.com/neutrinolabs/xrdp/security/advisories/GHSA-rvh9-9wm3-28c7 x_refsource_CONFIRM

Ignored references (1)

https://github.com/neutrinolabs/xrdp/releases/tag/v0.10.6 x_refsource_MISC

xrdp

==< 0.10.6

Nixpkgs security tracker

Published issues

In JetBrains YouTrack before 2025.3.131383 high privileged user can achieve …

xrdp: Fail-open privilege drop in sesexec — child processes may execute as root if setuid fails

libgphoto2 has OOB read in ptp_unpack_Sony_DPD() FormFlag parsing in ptp-pack.c

libgphoto2 has memory leak in ptp_unpack_Sony_DPD() secondary enumeration list in ptp-pack.c

xrdp: Heap buffer overflow in EGFX channel

libgphoto2 missing null termination in ptp_unpack_Canon_FE() filename buffer in ptp-pack.c

radare2 Command Injection via DWARF Parameter Names

Kimai's User Preferences API allows standard users to modify restricted attributes: hourly_rate, internal_rate

libgphoto2 has OOB read in ptp_unpack_OI() in ptp-pack.c via malicious PTP ObjectInfo response

xrdp: Pre-authentication out-of-bounds reads in RDP capability and channel parsers