NIXPKGS-2026-1176

GitHub issue published 2 months, 1 week ago

Permalink CVE-2026-32624

updated 2 months, 1 week ago by @LeSuisse Activity log

Created suggestion 2 months, 1 week ago
@LeSuisse ignored package pulseaudio-module-xrdp 2 months, 1 week ago
@LeSuisse accepted 2 months, 1 week ago
@LeSuisse published on GitHub 2 months, 1 week ago

xrdp: Heap buffer overflow in xrdp_sec_process_logon_info() via incorrect g_strncat length calculation

https://github.com/neutrinolabs/xrdp/security/advisories/GHSA-7q2g-6fjr-h6pp x_refsource_CONFIRM

Ignored references (1)

https://github.com/neutrinolabs/xrdp/releases/tag/v0.10.6 x_refsource_MISC

xrdp

==< 0.10.6

NIXPKGS-2026-1175

GitHub issue published 2 months, 1 week ago

Permalink CVE-2026-33689

updated 2 months, 1 week ago by @LeSuisse Activity log

Created suggestion 2 months, 1 week ago
@LeSuisse ignored package pulseaudio-module-xrdp 2 months, 1 week ago
@LeSuisse accepted 2 months, 1 week ago
@LeSuisse published on GitHub 2 months, 1 week ago

xrdp: Pre-authentication out-of-bounds reads in channel parsers

https://github.com/neutrinolabs/xrdp/security/advisories/GHSA-92mr-6wpp-27jj x_refsource_CONFIRM

Ignored references (1)

https://github.com/neutrinolabs/xrdp/releases/tag/v0.10.6 x_refsource_MISC

xrdp

==< 0.10.6

NIXPKGS-2026-1174

GitHub issue published 2 months, 1 week ago

Permalink CVE-2026-40333

6.1 MEDIUM

CVSS version (CVSS): 3.1
Attack Vector (AV): Physical (P)
Attack Complexity (AC): Low (L)
Privileges Required (PR): None (N)
User Interaction (UI): None (N)
Scope (S): Unchanged (U)
Confidentiality (C): High (H)
Integrity (I): None (N)
Availability (A): High (H)
Modified Attack Vector (MAV): Physical (P)
Modified Attack Complexity (MAC): Low (L)
Modified Privileges Required (MPR): None (N)
Modified User Interaction (MUI): None (N)
Modified Confidentiality (MC): High (H)
Modified Scope (MS): Unchanged (U)
Modified Integrity (MI): None (N)
Modified Availability (MA): High (H)

updated 2 months, 1 week ago by @LeSuisse Activity log

Created suggestion 2 months, 1 week ago
@LeSuisse accepted 2 months, 1 week ago
@LeSuisse published on GitHub 2 months, 1 week ago

libgphoto2 has OOB read in ptp_unpack_EOS_ImageFormat() and ptp_unpack_EOS_CustomFuncEx() due to missing length parameter in ptp-pack.c

https://github.com/gphoto/libgphoto2/security/advisories/GHSA-hq94-cp6h-3gjp x_refsource_CONFIRM
https://github.com/gphoto/libgphoto2/commit/1817ecead20c2aafa7549dac9619fe38f47b2f53 x_refsource_MISC

libgphoto2

==<= 2.5.33

NIXPKGS-2026-1173

GitHub issue published 2 months, 1 week ago

          Permalink
          
            CVE-2026-28212
          
        7.5 HIGH
      
        CVSS version (CVSS): 3.1
      
          Attack Vector (AV): Network (N)
        
          Attack Complexity (AC): Low (L)
        
          Privileges Required (PR): None (N)
        
          User Interaction (UI): None (N)
        
          Scope (S): Unchanged (U)
        
          Confidentiality (C): None (N)
        
          Integrity (I): None (N)
        
          Availability (A): High (H)
        
          Modified Attack Vector (MAV): Network (N)
        
          Modified Attack Complexity (MAC): Low (L)
        
          Modified Privileges Required (MPR): None (N)
        
          Modified User Interaction (MUI): None (N)
        
          Modified Confidentiality (MC): None (N)
        
          Modified Scope (MS): Unchanged (U)
        
          Modified Integrity (MI): None (N)
        
          Modified Availability (MA): High (H)
        
              updated
            
          2 months, 1 week ago
          by @LeSuisse
        
      Activity log
    
              Created suggestion
            
          2 months, 1 week ago
          
          @LeSuisse
          
              ignored
            
              package firebird-emu
            
          2 months, 1 week ago
          
          @LeSuisse
          
              accepted
            
          2 months, 1 week ago
          
          @LeSuisse
          
              published on GitHub
            
          2 months, 1 week ago
          
            Firebird has potential server crash via null pointer dereference when processing op_slice packet
          
      https://github.com/FirebirdSQL/firebird/security/advisories/GHSA-9884-9qm3-hqch
    
    x_refsource_CONFIRM
  
          Ignored references (3)
        
      https://github.com/FirebirdSQL/firebird/releases/tag/v3.0.14
    
    x_refsource_MISC
  
      https://github.com/FirebirdSQL/firebird/releases/tag/v4.0.7
    
    x_refsource_MISC
  
      https://github.com/FirebirdSQL/firebird/releases/tag/v5.0.4
    
    x_refsource_MISC
  
    firebird

            ==< 3.0.14
          
            ==>= 4.0.0, < 4.0.7
          
            ==>= 5.0.0, < 5.0.4

NIXPKGS-2026-1172

GitHub issue published 2 months, 1 week ago

Permalink CVE-2026-5720

updated 2 months, 1 week ago by @LeSuisse Activity log

Created suggestion 2 months, 1 week ago
@LeSuisse ignored package miniupnpd-nftables 2 months, 1 week ago
@LeSuisse accepted 2 months, 1 week ago
@LeSuisse published on GitHub 2 months, 1 week ago

miniupnpd Integer Underflow SOAPAction Header Parsing

https://github.com/miniupnp/miniupnp/commit/a0ee71e9fa66b60052bb3d2cf84380b79db…

Ignored references (2)

https://github.com/miniupnp/miniupnp/ product
https://www.vulncheck.com/advisories/miniupnpd-integer-underflow-soapaction-hea… third-party-advisory

miniupnpd

<2.3.10

NIXPKGS-2026-1171

GitHub issue published 2 months, 1 week ago

Permalink CVE-2026-32623

updated 2 months, 1 week ago by @LeSuisse Activity log

Created suggestion 2 months, 1 week ago
@LeSuisse ignored package pulseaudio-module-xrdp 2 months, 1 week ago
@LeSuisse accepted 2 months, 1 week ago
@LeSuisse published on GitHub 2 months, 1 week ago

xrdp: Heap buffer overflow in NeutrinoRDP channel reassembly

https://github.com/neutrinolabs/xrdp/security/advisories/GHSA-phw3-qp59-x2v4 x_refsource_CONFIRM

Ignored references (1)

https://github.com/neutrinolabs/xrdp/releases/tag/v0.10.6 x_refsource_MISC

xrdp

==< 0.10.6

NIXPKGS-2026-1170

GitHub issue published 2 months, 1 week ago

          Permalink
          
            CVE-2026-6507
          
        7.5 HIGH
      
        CVSS version (CVSS): 3.1
      
          Attack Vector (AV): Network (N)
        
          Attack Complexity (AC): Low (L)
        
          Privileges Required (PR): None (N)
        
          User Interaction (UI): None (N)
        
          Scope (S): Unchanged (U)
        
          Confidentiality (C): None (N)
        
          Integrity (I): None (N)
        
          Availability (A): High (H)
        
          Modified Attack Vector (MAV): Network (N)
        
          Modified Attack Complexity (MAC): Low (L)
        
          Modified Privileges Required (MPR): None (N)
        
          Modified User Interaction (MUI): None (N)
        
          Modified Confidentiality (MC): None (N)
        
          Modified Scope (MS): Unchanged (U)
        
          Modified Integrity (MI): None (N)
        
          Modified Availability (MA): High (H)
        
              updated
            
          2 months, 1 week ago
          by @LeSuisse
        
      Activity log
    
              Created suggestion
            
          2 months, 1 week ago
          
          @LeSuisse
          
              ignored
            
              package prometheus-dnsmasq-exporter
            
          2 months, 1 week ago
          
          @LeSuisse
          
              accepted
            
          2 months, 1 week ago
          
          @LeSuisse
          
              published on GitHub
            
          2 months, 1 week ago
          
            Dnsmasq: dnsmasq: denial of service due to out-of-bounds write in dhcp bootreply processing
          
      https://access.redhat.com/security/cve/CVE-2026-6507
    
    x_refsource_REDHATvdb-entry
  
      RHBZ#2459181
    
    issue-trackingx_refsource_REDHAT
  
    rhcos

    dnsmasq

NIXPKGS-2026-1169

GitHub issue published 2 months, 1 week ago

Permalink CVE-2026-40293

6.5 MEDIUM

CVSS version (CVSS): 3.1
Attack Vector (AV): Network (N)
Attack Complexity (AC): Low (L)
Privileges Required (PR): None (N)
User Interaction (UI): None (N)
Scope (S): Unchanged (U)
Confidentiality (C): Low (L)
Integrity (I): Low (L)
Availability (A): None (N)
Modified Attack Vector (MAV): Network (N)
Modified Attack Complexity (MAC): Low (L)
Modified Privileges Required (MPR): None (N)
Modified User Interaction (MUI): None (N)
Modified Confidentiality (MC): Low (L)
Modified Scope (MS): Unchanged (U)
Modified Integrity (MI): Low (L)
Modified Availability (MA): None (N)

updated 2 months, 1 week ago by @LeSuisse Activity log

Created suggestion 2 months, 1 week ago
@LeSuisse ignored
4 packages
- openfga-cli
- python312Packages.openfga-sdk
- python313Packages.openfga-sdk
- python314Packages.openfga-sdk
2 months, 1 week ago
@LeSuisse accepted 2 months, 1 week ago
@LeSuisse published on GitHub 2 months, 1 week ago