Nixpkgs security tracker

Published

Permalink CVE-2026-94281

6.5 MEDIUM

CVSS version (CVSS): 3.1
Attack Vector (AV): Network (N)
Attack Complexity (AC): Low (L)
Privileges Required (PR): None (N)
User Interaction (UI): Required (R)
Scope (S): Unchanged (U)
Confidentiality (C): None (N)
Integrity (I): None (N)
Availability (A): High (H)
Modified Attack Vector (MAV): Network (N)
Modified Attack Complexity (MAC): Low (L)
Modified Privileges Required (MPR): None (N)
Modified User Interaction (MUI): Required (R)
Modified Confidentiality (MC): None (N)
Modified Scope (MS): Unchanged (U)
Modified Integrity (MI): None (N)
Modified Availability (MA): High (H)

updated 1 day, 1 hour ago by @LeSuisse Activity log

Created suggestion 1 day, 7 hours ago
@LeSuisse ignored
3 packages
- libxisf
- libXinerama
- libxinerama
1 day, 1 hour ago
@LeSuisse accepted 1 day, 1 hour ago
@LeSuisse published on GitHub 1 day, 1 hour ago

Out-of-bounds read in libXi's XListInputDevices() class parsing

An out-of-bounds read in libXi's XListInputDevices() class parsing in libXi before 1.8.4 could be used by malicious X servers to crash an attached X client.

References

https://gitlab.freedesktop.org/xorg/lib/libxi/-/merge_requests/23/diffs?commit_… patch

Affected products

libXi

<1.8.4

Matching in nixpkgs

pkgs.libXi

library for the X Input Extension

nixos-unstable -
- nixos-unstable-small 1.8.3
nixos-26.05 -
- nixos-26.05-small 1.8.3

pkgs.libxi

library for the X Input Extension

nixos-unstable -
- nixos-unstable-small 1.8.3
nixos-26.05 -
- nixos-26.05-small 1.8.3

Ignored packages (3)

pkgs.libxisf

Library to load and write XISF format from PixInsight

nixos-unstable -
- nixos-unstable-small 0.2.13
nixos-26.05 -
- nixos-26.05-small 0.2.13

pkgs.libXinerama

Library for Xinerama extension to X11 Protocol

nixos-unstable -
- nixos-unstable-small 1.1.6
nixos-26.05 -
- nixos-26.05-small 1.1.6

pkgs.libxinerama

Library for Xinerama extension to X11 Protocol

nixos-unstable -
- nixos-unstable-small 1.1.6
nixos-26.05 -
- nixos-26.05-small 1.1.6

Published

Permalink CVE-2026-93544

6.5 MEDIUM

CVSS version (CVSS): 3.1
Attack Vector (AV): Network (N)
Attack Complexity (AC): Low (L)
Privileges Required (PR): None (N)
User Interaction (UI): Required (R)
Scope (S): Unchanged (U)
Confidentiality (C): None (N)
Integrity (I): None (N)
Availability (A): High (H)
Modified Attack Vector (MAV): Network (N)
Modified Attack Complexity (MAC): Low (L)
Modified Privileges Required (MPR): None (N)
Modified User Interaction (MUI): Required (R)
Modified Confidentiality (MC): None (N)
Modified Scope (MS): Unchanged (U)
Modified Integrity (MI): None (N)
Modified Availability (MA): High (H)

updated 1 day, 1 hour ago by @LeSuisse Activity log

Created suggestion 1 day, 7 hours ago
@LeSuisse ignored
3 packages
- libxisf
- libXinerama
- libxinerama
1 day, 1 hour ago
@LeSuisse accepted 1 day, 1 hour ago
@LeSuisse published on GitHub 1 day, 1 hour ago

Out-of-bounds read in libXi's XI2 XIQueryDevice reply parsing

An out-of-bounds read in libXi's XI2 XIQueryDevice reply parsing in libXi before 1.8.4 can be used by a malicious X server to crash an attached X client.

References

https://gitlab.freedesktop.org/xorg/lib/libxi/-/merge_requests/23/diffs?commit_… patch

Affected products

libXi

<1.8.4

Matching in nixpkgs

pkgs.libXi

library for the X Input Extension

nixos-unstable -
- nixos-unstable-small 1.8.3
nixos-26.05 -
- nixos-26.05-small 1.8.3

pkgs.libxi

library for the X Input Extension

nixos-unstable -
- nixos-unstable-small 1.8.3
nixos-26.05 -
- nixos-26.05-small 1.8.3

Ignored packages (3)

pkgs.libxisf

Library to load and write XISF format from PixInsight

nixos-unstable -
- nixos-unstable-small 0.2.13
nixos-26.05 -
- nixos-26.05-small 0.2.13

pkgs.libXinerama

Library for Xinerama extension to X11 Protocol

nixos-unstable -
- nixos-unstable-small 1.1.6
nixos-26.05 -
- nixos-26.05-small 1.1.6

pkgs.libxinerama

Library for Xinerama extension to X11 Protocol

nixos-unstable -
- nixos-unstable-small 1.1.6
nixos-26.05 -
- nixos-26.05-small 1.1.6

Published

Permalink CVE-2026-93541

6.5 MEDIUM

CVSS version (CVSS): 3.1
Attack Vector (AV): Network (N)
Attack Complexity (AC): Low (L)
Privileges Required (PR): None (N)
User Interaction (UI): Required (R)
Scope (S): Unchanged (U)
Confidentiality (C): None (N)
Integrity (I): None (N)
Availability (A): High (H)
Modified Attack Vector (MAV): Network (N)
Modified Attack Complexity (MAC): Low (L)
Modified Privileges Required (MPR): None (N)
Modified User Interaction (MUI): Required (R)
Modified Confidentiality (MC): None (N)
Modified Scope (MS): Unchanged (U)
Modified Integrity (MI): None (N)
Modified Availability (MA): High (H)

updated 1 day, 1 hour ago by @LeSuisse Activity log

Created suggestion 1 day, 7 hours ago
@LeSuisse ignored
3 packages
- libxisf
- libXinerama
- libxinerama
1 day, 1 hour ago
@LeSuisse accepted 1 day, 1 hour ago
@LeSuisse published on GitHub 1 day, 1 hour ago

Out-of-bounds read in libXi's XQueryDeviceState()

An out-of-bounds read in libXi's XQueryDeviceState() in libXi before 1.8.4 could be used by a

References

https://gitlab.freedesktop.org/xorg/lib/libxi/-/merge_requests/23/diffs?commit_… patch

Affected products

libXi

<1.8.4

Matching in nixpkgs

pkgs.libXi

library for the X Input Extension

nixos-unstable -
- nixos-unstable-small 1.8.3
nixos-26.05 -
- nixos-26.05-small 1.8.3

pkgs.libxi

library for the X Input Extension

nixos-unstable -
- nixos-unstable-small 1.8.3
nixos-26.05 -
- nixos-26.05-small 1.8.3

Ignored packages (3)

pkgs.libxisf

Library to load and write XISF format from PixInsight

nixos-unstable -
- nixos-unstable-small 0.2.13
nixos-26.05 -
- nixos-26.05-small 0.2.13

pkgs.libXinerama

Library for Xinerama extension to X11 Protocol

nixos-unstable -
- nixos-unstable-small 1.1.6
nixos-26.05 -
- nixos-26.05-small 1.1.6

pkgs.libxinerama

Library for Xinerama extension to X11 Protocol

nixos-unstable -
- nixos-unstable-small 1.1.6
nixos-26.05 -
- nixos-26.05-small 1.1.6

Published

Permalink CVE-2026-93543

7.4 HIGH

CVSS version (CVSS): 3.1
Attack Vector (AV): Network (N)
Attack Complexity (AC): Low (L)
Privileges Required (PR): None (N)
User Interaction (UI): Required (R)
Scope (S): Changed (C)
Confidentiality (C): None (N)
Integrity (I): None (N)
Availability (A): High (H)
Modified Attack Vector (MAV): Network (N)
Modified Attack Complexity (MAC): Low (L)
Modified Privileges Required (MPR): None (N)
Modified User Interaction (MUI): Required (R)
Modified Confidentiality (MC): None (N)
Modified Scope (MS): Changed (C)
Modified Integrity (MI): None (N)
Modified Availability (MA): High (H)

updated 1 day, 1 hour ago by @LeSuisse Activity log

Created suggestion 1 day, 7 hours ago
@LeSuisse ignored
3 packages
- libxisf
- libXinerama
- libxinerama
1 day, 1 hour ago
@LeSuisse accepted 1 day, 1 hour ago
@LeSuisse published on GitHub 1 day, 1 hour ago

Out-of-bounds read in libXi's XI2 class parser

An out-of-bounds read in libXi's XI2 class parser in libXi before 1.8.4 could be used by malicious X servers to crash an attached X client.

References

https://gitlab.freedesktop.org/xorg/lib/libxi/-/merge_requests/23/diffs?commit_… patch

Affected products

libXi

<1.8.4

Matching in nixpkgs

pkgs.libXi

library for the X Input Extension

nixos-unstable -
- nixos-unstable-small 1.8.3
nixos-26.05 -
- nixos-26.05-small 1.8.3

pkgs.libxi

library for the X Input Extension

nixos-unstable -
- nixos-unstable-small 1.8.3
nixos-26.05 -
- nixos-26.05-small 1.8.3

Ignored packages (3)

pkgs.libxisf

Library to load and write XISF format from PixInsight

nixos-unstable -
- nixos-unstable-small 0.2.13
nixos-26.05 -
- nixos-26.05-small 0.2.13

pkgs.libXinerama

Library for Xinerama extension to X11 Protocol

nixos-unstable -
- nixos-unstable-small 1.1.6
nixos-26.05 -
- nixos-26.05-small 1.1.6

pkgs.libxinerama

Library for Xinerama extension to X11 Protocol

nixos-unstable -
- nixos-unstable-small 1.1.6
nixos-26.05 -
- nixos-26.05-small 1.1.6

Published

Permalink CVE-2026-93545

6.5 MEDIUM

CVSS version (CVSS): 3.1
Attack Vector (AV): Network (N)
Attack Complexity (AC): Low (L)
Privileges Required (PR): None (N)
User Interaction (UI): Required (R)
Scope (S): Unchanged (U)
Confidentiality (C): None (N)
Integrity (I): None (N)
Availability (A): High (H)
Modified Attack Vector (MAV): Network (N)
Modified Attack Complexity (MAC): Low (L)
Modified Privileges Required (MPR): None (N)
Modified User Interaction (MUI): Required (R)
Modified Confidentiality (MC): None (N)
Modified Scope (MS): Unchanged (U)
Modified Integrity (MI): None (N)
Modified Availability (MA): High (H)

updated 1 day, 1 hour ago by @LeSuisse Activity log

Created suggestion 1 day, 7 hours ago
@LeSuisse ignored
3 packages
- libxisf
- libXinerama
- libxinerama
1 day, 1 hour ago
@LeSuisse accepted 1 day, 1 hour ago
@LeSuisse published on GitHub 1 day, 1 hour ago

Out-of-bounds read in libXi's XListInputDevices()

An out-of-bounds read in libXi's XListInputDevices() in libXi before 1.8.4 could be used by malicious X servers to crash an attached X client.

References

https://gitlab.freedesktop.org/xorg/lib/libxi/-/merge_requests/23/diffs?commit_… patch

Affected products

libXi

<1.8.4

Matching in nixpkgs

pkgs.libXi

library for the X Input Extension

nixos-unstable -
- nixos-unstable-small 1.8.3
nixos-26.05 -
- nixos-26.05-small 1.8.3

pkgs.libxi

library for the X Input Extension

nixos-unstable -
- nixos-unstable-small 1.8.3
nixos-26.05 -
- nixos-26.05-small 1.8.3

Ignored packages (3)

pkgs.libxisf

Library to load and write XISF format from PixInsight

nixos-unstable -
- nixos-unstable-small 0.2.13
nixos-26.05 -
- nixos-26.05-small 0.2.13

pkgs.libXinerama

Library for Xinerama extension to X11 Protocol

nixos-unstable -
- nixos-unstable-small 1.1.6
nixos-26.05 -
- nixos-26.05-small 1.1.6

pkgs.libxinerama

Library for Xinerama extension to X11 Protocol

nixos-unstable -
- nixos-unstable-small 1.1.6
nixos-26.05 -
- nixos-26.05-small 1.1.6

Published

Permalink CVE-2026-93542

6.5 MEDIUM

CVSS version (CVSS): 3.1
Attack Vector (AV): Network (N)
Attack Complexity (AC): Low (L)
Privileges Required (PR): None (N)
User Interaction (UI): Required (R)
Scope (S): Unchanged (U)
Confidentiality (C): None (N)
Integrity (I): None (N)
Availability (A): High (H)
Modified Attack Vector (MAV): Network (N)
Modified Attack Complexity (MAC): Low (L)
Modified Privileges Required (MPR): None (N)
Modified User Interaction (MUI): Required (R)
Modified Confidentiality (MC): None (N)
Modified Scope (MS): Unchanged (U)
Modified Integrity (MI): None (N)
Modified Availability (MA): High (H)

updated 1 day, 1 hour ago by @LeSuisse Activity log

Created suggestion 1 day, 7 hours ago
@LeSuisse ignored
3 packages
- libxisf
- libXinerama
- libxinerama
1 day, 1 hour ago
@LeSuisse accepted 1 day, 1 hour ago
@LeSuisse published on GitHub 1 day, 1 hour ago

Out-of-bounds read in libXi's XI2 class parsing via size_classes() and copy_classes()

An out-of-bounds read in libXi's XI2 class parsing via size_classes() and copy_classes() in libXi before 1.8.4 could be used by malicous servers to crash the X client.

References

https://gitlab.freedesktop.org/xorg/lib/libxi/-/merge_requests/23/diffs?commit_… patch

Affected products

libXi

<1.8.4

Matching in nixpkgs

pkgs.libXi

library for the X Input Extension

nixos-unstable -
- nixos-unstable-small 1.8.3
nixos-26.05 -
- nixos-26.05-small 1.8.3

pkgs.libxi

library for the X Input Extension

nixos-unstable -
- nixos-unstable-small 1.8.3
nixos-26.05 -
- nixos-26.05-small 1.8.3

Ignored packages (3)

pkgs.libxisf

Library to load and write XISF format from PixInsight

nixos-unstable -
- nixos-unstable-small 0.2.13
nixos-26.05 -
- nixos-26.05-small 0.2.13

pkgs.libXinerama

Library for Xinerama extension to X11 Protocol

nixos-unstable -
- nixos-unstable-small 1.1.6
nixos-26.05 -
- nixos-26.05-small 1.1.6

pkgs.libxinerama

Library for Xinerama extension to X11 Protocol

nixos-unstable -
- nixos-unstable-small 1.1.6
nixos-26.05 -
- nixos-26.05-small 1.1.6

Suggestions search

References

Affected products

Matching in nixpkgs

pkgs.libXi

pkgs.libxi

pkgs.libxisf

pkgs.libXinerama

pkgs.libxinerama

References

Affected products

Matching in nixpkgs

pkgs.libXi

pkgs.libxi

pkgs.libxisf

pkgs.libXinerama

pkgs.libxinerama

References

Affected products

Matching in nixpkgs

pkgs.libXi

pkgs.libxi

pkgs.libxisf

pkgs.libXinerama

pkgs.libxinerama

References

Affected products

Matching in nixpkgs

pkgs.libXi

pkgs.libxi

pkgs.libxisf

pkgs.libXinerama

pkgs.libxinerama

References

Affected products

Matching in nixpkgs

pkgs.libXi

pkgs.libxi

pkgs.libxisf

pkgs.libXinerama

pkgs.libxinerama

References

Affected products

Matching in nixpkgs

pkgs.libXi

pkgs.libxi

pkgs.libxisf

pkgs.libXinerama

pkgs.libxinerama