Nixpkgs Security Tracker

Permalink CVE-2024-50422

created 4 months, 3 weeks ago

WordPress Breeze plugin <= 2.1.14 - Broken Access Control vulnerability

Missing Authorization vulnerability in Cloudways Breeze allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Breeze: from n/a through 2.1.14.

Affected products

breeze

=<2.1.14

Matching in nixpkgs

pkgs.kdePackages.breeze

Artwork, styles and assets for the Breeze visual style for the Plasma Desktop

nixos-unstable -
- nixpkgs-unstable 6.4.5

pkgs.kdePackages.breeze-gtk

Breeze widget theme for GTK 2 and 3

nixos-unstable -
- nixpkgs-unstable 6.4.5

pkgs.kdePackages.breeze-grub

GRUB theme for the Breeze visual style for the Plasma Desktop

nixos-unstable -
- nixpkgs-unstable 6.4.5

pkgs.libsForQt5.breeze-icons

None

nixos-unstable -
- nixpkgs-unstable 5.116.0

pkgs.kdePackages.breeze-icons

Breeze icon theme.

nixos-unstable -
- nixpkgs-unstable 6.18.0

pkgs.breeze-hacked-cursor-theme

Breeze Hacked cursor theme

nixos-unstable -
- nixpkgs-unstable 0-unstable-2024-01-28

pkgs.kdePackages.breeze-plymouth

Plymouth theme for the Breeze visual style for the Plasma Desktop

nixos-unstable -
- nixpkgs-unstable 6.4.5

pkgs.python312Packages.seabreeze

Python library to access Ocean Optics spectrometers

nixos-unstable -
- nixpkgs-unstable 2.10.1

pkgs.python313Packages.seabreeze

Python library to access Ocean Optics spectrometers

nixos-unstable -
- nixpkgs-unstable 2.10.1

pkgs.plasma5Packages.breeze-icons

None

nixos-unstable -
- nixpkgs-unstable 5.116.0

pkgs.kdePackages.qqc2-breeze-style

Breeze inspired QQC2 Style

nixos-unstable -
- nixpkgs-unstable 6.4.5

pkgs.wordpressPackages.plugins.breeze

None

nixos-unstable -
- nixpkgs-unstable 2.2.9

pkgs.kdePackages.sierra-breeze-enhanced

OSX-like window decoration for KDE Plasma written in C++

nixos-unstable -
- nixpkgs-unstable 2.1.1

pkgs.qt6Packages.sierra-breeze-enhanced

OSX-like window decoration for KDE Plasma written in C++

nixos-unstable -
- nixpkgs-unstable 2.1.1

Package maintainers

@Anomalocaridid Duncan Russell <duncan@anomalocaris.xyz>
@ilya-fedin Ilya Fedin <fedin-ilja2010@ya.ru>
@ttuegel Thomas Tuegel <ttuegel@mailbox.org>
@SuperSandro2000 Sandro Jäckel <sandro.jaeckel@gmail.com>
@K900 Ilya K. <me@0upti.me>
@mjm Matt Moriarity <matt@mattmoriarity.com>
@LunNova Luna Nova <nixpkgs-maintainer@lunnova.dev>
@NickCao Nick Cao <nickcao@nichi.co>
@A1ca7raz A1ca7raz <aya@wtm.moe>
@nyanloutre Paul Trehiou <paul@nyanlout.re>

Permalink CVE-2024-50431

created 4 months, 3 weeks ago

WordPress Breeze plugin <= 2.1.14 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Cloudways Breeze allows Stored XSS.This issue affects Breeze: from n/a through 2.1.14.

Affected products

breeze

=<2.1.14

Matching in nixpkgs

pkgs.kdePackages.breeze

Artwork, styles and assets for the Breeze visual style for the Plasma Desktop

nixos-unstable -
- nixpkgs-unstable 6.4.5

pkgs.kdePackages.breeze-gtk

Breeze widget theme for GTK 2 and 3

nixos-unstable -
- nixpkgs-unstable 6.4.5

pkgs.kdePackages.breeze-grub

GRUB theme for the Breeze visual style for the Plasma Desktop

nixos-unstable -
- nixpkgs-unstable 6.4.5

pkgs.libsForQt5.breeze-icons

None

nixos-unstable -
- nixpkgs-unstable 5.116.0

pkgs.kdePackages.breeze-icons

Breeze icon theme.

nixos-unstable -
- nixpkgs-unstable 6.18.0

pkgs.breeze-hacked-cursor-theme

Breeze Hacked cursor theme

nixos-unstable -
- nixpkgs-unstable 0-unstable-2024-01-28

pkgs.kdePackages.breeze-plymouth

Plymouth theme for the Breeze visual style for the Plasma Desktop

nixos-unstable -
- nixpkgs-unstable 6.4.5

pkgs.python312Packages.seabreeze

Python library to access Ocean Optics spectrometers

nixos-unstable -
- nixpkgs-unstable 2.10.1

pkgs.python313Packages.seabreeze

Python library to access Ocean Optics spectrometers

nixos-unstable -
- nixpkgs-unstable 2.10.1

pkgs.plasma5Packages.breeze-icons

None

nixos-unstable -
- nixpkgs-unstable 5.116.0

pkgs.kdePackages.qqc2-breeze-style

Breeze inspired QQC2 Style

nixos-unstable -
- nixpkgs-unstable 6.4.5

pkgs.wordpressPackages.plugins.breeze

None

nixos-unstable -
- nixpkgs-unstable 2.2.9

pkgs.kdePackages.sierra-breeze-enhanced

OSX-like window decoration for KDE Plasma written in C++

nixos-unstable -
- nixpkgs-unstable 2.1.1

pkgs.qt6Packages.sierra-breeze-enhanced

OSX-like window decoration for KDE Plasma written in C++

nixos-unstable -
- nixpkgs-unstable 2.1.1

Package maintainers

@Anomalocaridid Duncan Russell <duncan@anomalocaris.xyz>
@ilya-fedin Ilya Fedin <fedin-ilja2010@ya.ru>
@ttuegel Thomas Tuegel <ttuegel@mailbox.org>
@SuperSandro2000 Sandro Jäckel <sandro.jaeckel@gmail.com>
@K900 Ilya K. <me@0upti.me>
@mjm Matt Moriarity <matt@mattmoriarity.com>
@LunNova Luna Nova <nixpkgs-maintainer@lunnova.dev>
@NickCao Nick Cao <nickcao@nichi.co>
@A1ca7raz A1ca7raz <aya@wtm.moe>
@nyanloutre Paul Trehiou <paul@nyanlout.re>

Permalink CVE-2024-27188

created 4 months, 3 weeks ago

WordPress Breeze plugin <= 2.1.3 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Cloudways Breeze allows Stored XSS.This issue affects Breeze: from n/a through 2.1.3.

Affected products

breeze

=<2.1.3

Matching in nixpkgs

pkgs.kdePackages.breeze

Artwork, styles and assets for the Breeze visual style for the Plasma Desktop

nixos-unstable -
- nixpkgs-unstable 6.4.5

pkgs.kdePackages.breeze-gtk

Breeze widget theme for GTK 2 and 3

nixos-unstable -
- nixpkgs-unstable 6.4.5

pkgs.kdePackages.breeze-grub

GRUB theme for the Breeze visual style for the Plasma Desktop

nixos-unstable -
- nixpkgs-unstable 6.4.5

pkgs.libsForQt5.breeze-icons

None

nixos-unstable -
- nixpkgs-unstable 5.116.0

pkgs.kdePackages.breeze-icons

Breeze icon theme.

nixos-unstable -
- nixpkgs-unstable 6.18.0

pkgs.breeze-hacked-cursor-theme

Breeze Hacked cursor theme

nixos-unstable -
- nixpkgs-unstable 0-unstable-2024-01-28

pkgs.kdePackages.breeze-plymouth

Plymouth theme for the Breeze visual style for the Plasma Desktop

nixos-unstable -
- nixpkgs-unstable 6.4.5

pkgs.python312Packages.seabreeze

Python library to access Ocean Optics spectrometers

nixos-unstable -
- nixpkgs-unstable 2.10.1

pkgs.python313Packages.seabreeze

Python library to access Ocean Optics spectrometers

nixos-unstable -
- nixpkgs-unstable 2.10.1

pkgs.plasma5Packages.breeze-icons

None

nixos-unstable -
- nixpkgs-unstable 5.116.0

pkgs.kdePackages.qqc2-breeze-style

Breeze inspired QQC2 Style

nixos-unstable -
- nixpkgs-unstable 6.4.5

pkgs.wordpressPackages.plugins.breeze

None

nixos-unstable -
- nixpkgs-unstable 2.2.9

pkgs.kdePackages.sierra-breeze-enhanced

OSX-like window decoration for KDE Plasma written in C++

nixos-unstable -
- nixpkgs-unstable 2.1.1

pkgs.qt6Packages.sierra-breeze-enhanced

OSX-like window decoration for KDE Plasma written in C++

nixos-unstable -
- nixpkgs-unstable 2.1.1

Package maintainers

@Anomalocaridid Duncan Russell <duncan@anomalocaris.xyz>
@ilya-fedin Ilya Fedin <fedin-ilja2010@ya.ru>
@ttuegel Thomas Tuegel <ttuegel@mailbox.org>
@SuperSandro2000 Sandro Jäckel <sandro.jaeckel@gmail.com>
@K900 Ilya K. <me@0upti.me>
@mjm Matt Moriarity <matt@mattmoriarity.com>
@LunNova Luna Nova <nixpkgs-maintainer@lunnova.dev>
@NickCao Nick Cao <nickcao@nichi.co>
@A1ca7raz A1ca7raz <aya@wtm.moe>
@nyanloutre Paul Trehiou <paul@nyanlout.re>

Permalink CVE-2024-1048

created 4 months, 3 weeks ago

Grub2: grub2-set-bootflag can be abused by local (pseudo-)users

A flaw was found in the grub2-set-bootflag utility of grub2. After the fix of CVE-2019-14865, grub2-set-bootflag will create a temporary file with the new grubenv content and rename it to the original grubenv file. If the program is killed before the rename operation, the temporary file will not be removed and may fill the filesystem when invoked multiple times, resulting in a filesystem out of free inodes or blocks.

Affected products

grub

grub2

*

Matching in nixpkgs

pkgs.grub2_efi

GNU GRUB, the Grand Unified Boot Loader

nixos-unstable -
- nixpkgs-unstable 2.12

pkgs.grub2_xen

GNU GRUB, the Grand Unified Boot Loader

nixos-unstable -
- nixpkgs-unstable 2.12

pkgs.grub2_light

GNU GRUB, the Grand Unified Boot Loader

nixos-unstable -
- nixpkgs-unstable 2.12

pkgs.grub2_xen_pvh

GNU GRUB, the Grand Unified Boot Loader

nixos-unstable -
- nixpkgs-unstable 2.12

pkgs.catppuccin-grub

Soothing pastel theme for GRUB

nixos-unstable -
- nixpkgs-unstable 1.0.0

pkgs.sleek-grub-theme

Grub bootloader themes, contains light/dark/orange/bigSur styles

nixos-unstable -
- nixpkgs-unstable 2024-08-11

pkgs.grub2_pvgrub_image

PvGrub2 image for booting PV Xen guests

nixos-unstable -
- nixpkgs-unstable

pkgs.minimal-grub-theme

Minimalistic GRUB theme insipired by primitivistical and vimix

nixos-unstable -
- nixpkgs-unstable 0.3.0

pkgs.grub2_pvhgrub_image

PvGrub2 image for booting PVH Xen guests

nixos-unstable -
- nixpkgs-unstable

pkgs.kdePackages.breeze-grub

GRUB theme for the Breeze visual style for the Plasma Desktop

nixos-unstable -
- nixpkgs-unstable 6.4.5

Package maintainers

@isabelroses Isabel Roses <isabel@isabelroses.com>
@mimvoid mimvoid <mimvoid@proton.me>
@SigmaSquadron Fernando Rodrigues <alpha@sigmasquadron.net>
@hehongbo Hongbo
@CertainLach Yaroslav Bolyukin <iam@lach.pw>
@digitalrane Rane <rane+git@junkyard.systems>
@SuperSandro2000 Sandro Jäckel <sandro.jaeckel@gmail.com>
@ilya-fedin Ilya Fedin <fedin-ilja2010@ya.ru>
@ttuegel Thomas Tuegel <ttuegel@mailbox.org>
@mjm Matt Moriarity <matt@mattmoriarity.com>
@LunNova Luna Nova <nixpkgs-maintainer@lunnova.dev>
@NickCao Nick Cao <nickcao@nichi.co>
@K900 Ilya K. <me@0upti.me>
@azuwis Zhong Jianxin <azuwis@gmail.com>
@luochen1990 Luo Chen <luochen1990@gmail.com>

Suggestions search

Affected products

Matching in nixpkgs

pkgs.kdePackages.breeze

pkgs.kdePackages.breeze-gtk

pkgs.kdePackages.breeze-grub

pkgs.libsForQt5.breeze-icons

pkgs.kdePackages.breeze-icons

pkgs.breeze-hacked-cursor-theme

pkgs.kdePackages.breeze-plymouth

pkgs.python312Packages.seabreeze

pkgs.python313Packages.seabreeze

pkgs.plasma5Packages.breeze-icons

pkgs.kdePackages.qqc2-breeze-style

pkgs.wordpressPackages.plugins.breeze

pkgs.kdePackages.sierra-breeze-enhanced

pkgs.qt6Packages.sierra-breeze-enhanced

Package maintainers

Affected products

Matching in nixpkgs

pkgs.kdePackages.breeze

pkgs.kdePackages.breeze-gtk

pkgs.kdePackages.breeze-grub

pkgs.libsForQt5.breeze-icons

pkgs.kdePackages.breeze-icons

pkgs.breeze-hacked-cursor-theme

pkgs.kdePackages.breeze-plymouth

pkgs.python312Packages.seabreeze

pkgs.python313Packages.seabreeze

pkgs.plasma5Packages.breeze-icons

pkgs.kdePackages.qqc2-breeze-style

pkgs.wordpressPackages.plugins.breeze

pkgs.kdePackages.sierra-breeze-enhanced

pkgs.qt6Packages.sierra-breeze-enhanced

Package maintainers

Affected products

Matching in nixpkgs

pkgs.kdePackages.breeze

pkgs.kdePackages.breeze-gtk

pkgs.kdePackages.breeze-grub

pkgs.libsForQt5.breeze-icons

pkgs.kdePackages.breeze-icons

pkgs.breeze-hacked-cursor-theme

pkgs.kdePackages.breeze-plymouth

pkgs.python312Packages.seabreeze

pkgs.python313Packages.seabreeze

pkgs.plasma5Packages.breeze-icons

pkgs.kdePackages.qqc2-breeze-style

pkgs.wordpressPackages.plugins.breeze

pkgs.kdePackages.sierra-breeze-enhanced

pkgs.qt6Packages.sierra-breeze-enhanced

Package maintainers

Affected products

Matching in nixpkgs

pkgs.grub2_efi

pkgs.grub2_xen

pkgs.grub2_light

pkgs.grub2_xen_pvh

pkgs.catppuccin-grub

pkgs.sleek-grub-theme

pkgs.grub2_pvgrub_image

pkgs.minimal-grub-theme

pkgs.grub2_pvhgrub_image

pkgs.kdePackages.breeze-grub

Package maintainers