Nixpkgs security tracker

Try the new UI
Login with GitHub

Suggestions search

All statuses
Filter by:
With package: perl5Packages.ChipcardPCSC

Found 2 matching suggestions

View:
Compact
Detailed
Untriaged
Permalink CVE-2026-84828
6.5 MEDIUM
  • CVSS version (CVSS): 3.1
  • Attack Vector (AV): Local (L)
  • Attack Complexity (AC): Low (L)
  • Privileges Required (PR): Low (L)
  • User Interaction (UI): None (N)
  • Scope (S): Changed (C)
  • Confidentiality (C): High (H)
  • Integrity (I): None (N)
  • Availability (A): None (N)
  • Modified Attack Vector (MAV): Local (L)
  • Modified Attack Complexity (MAC): Low (L)
  • Modified Privileges Required (MPR): Low (L)
  • Modified User Interaction (MUI): None (N)
  • Modified Confidentiality (MC): High (H)
  • Modified Scope (MS): Changed (C)
  • Modified Integrity (MI): None (N)
  • Modified Availability (MA): None (N)
created 1 week, 4 days ago Activity log
  • Created suggestion 1 week, 4 days ago
Pcs: pcs: non-root haclient users can read arbitrary files via pcs host auth --token

A flaw was found in PCS (Pacemaker Configuration System). A local attacker with membership in the 'haclient' group can exploit the 'pcs host auth --token' command to read the contents of arbitrary files on the filesystem, provided the files are shorter than 256 bytes. The file contents are read with root privileges by the pcsd daemon and can be exfiltrated by the attacker through subsequent cluster node communication. This allows disclosure of sensitive data such as API keys, tokens, or configuration secrets that would otherwise be inaccessible to the attacker.

Affected products

pcs
rhosp-rhel9/openstack-frr
rhosp-rhel8/openstack-base
openshift/ose-rhel-coreos-9

Matching in nixpkgs

pkgs.vpcs

Simple virtual PC simulator

  • nixos-unstable -
    • nixos-unstable-small 0.8.4
  • nixos-26.05 -
    • nixos-26.05-small 0.8.3

pkgs.pcsx2

Playstation 2 emulator

  • nixos-unstable -
    • nixos-unstable-small 2.8.2
  • nixos-26.05 -
    • nixos-26.05-small 2.6.3

pkgs.pcstat

Page Cache stat: get page cache stats for files on Linux

  • nixos-unstable -
    • nixos-unstable-small 0.0.2
  • nixos-26.05 -
    • nixos-26.05-small 0.0.2

pkgs.pcsclite

Middleware to access a smart card using SCard API (PC/SC)

  • nixos-unstable -
    • nixos-unstable-small 2.4.1
  • nixos-26.05 -
    • nixos-26.05-small 2.4.1

pkgs.appcsxcad

Minimal Application using the QCSXCAD library

  • nixos-unstable -
    • nixos-unstable-small 0.2.3
  • nixos-26.05 -
    • nixos-26.05-small 0.2.3

pkgs.pcsc-tools

Tools used to test a PC/SC driver, card or reader

  • nixos-unstable -
    • nixos-unstable-small 1.7.5
  • nixos-26.05 -
    • nixos-26.05-small 1.7.4

pkgs.baidupcs-go

Baidu Netdisk commandline client, mimicking Linux shell file handling commands

  • nixos-unstable -
    • nixos-unstable-small 4.0.2
  • nixos-26.05 -
    • nixos-26.05-small 4.0.1

pkgs.rpcsvc-proto

This package contains rpcsvc proto.x files from glibc, which are missing in libtirpc

  • nixos-unstable -
    • nixos-unstable-small 1.4.4
  • nixos-26.05 -
    • nixos-26.05-small 1.4.4

pkgs.pcsc-cyberjack

REINER SCT cyberJack USB chipcard reader user space driver

  • nixos-unstable -
  • nixos-26.05 -

pkgs.pcsc-scm-scl011

SCM Microsystems SCL011 chipcard reader user space driver

  • nixos-unstable -
    • nixos-unstable-small 2.09
  • nixos-26.05 -
    • nixos-26.05-small 2.09

pkgs.pcscliteWithPolkit

Middleware to access a smart card using SCard API (PC/SC)

  • nixos-unstable -
    • nixos-unstable-small 2.4.1
  • nixos-26.05 -
    • nixos-26.05-small 2.4.1

pkgs.pkgsRocm.appcsxcad

Minimal Application using the QCSXCAD library

  • nixos-unstable -
    • nixos-unstable-small 0.2.3
  • nixos-26.05 -
    • nixos-26.05-small 0.2.3

pkgs.vsmartcard-pcsc-relay

Relays a smart card using an contact-less interface

  • nixos-unstable -
    • nixos-unstable-small 0.10
  • nixos-26.05 -
    • nixos-26.05-small 0.10
Untriaged
Permalink CVE-2026-29114
2.3 LOW
  • CVSS version (CVSS): 4.0
  • Attack Vector (AV): Network (N)
  • Attack Complexity (AC): Low (L)
  • Attack Requirement (AT): Present (P)
  • Privileges Required (PR): None (N)
  • User Interaction (UI): Passive (P)
  • Vulnerable System Impact Confidentiality (VC): Low (L)
  • Vulnerable System Impact Integrity (VI): Low (L)
  • Vulnerable System Impact Availability (VA): None (N)
  • Subsequent System Impact Confidentiality (SC): None (N)
  • Subsequent System Impact Integrity (SI): None (N)
  • Subsequent System Impact Availability (SA): None (N)
  • Modified Attack Vector (MAV): Network (N)
  • Modified Attack Complexity (MAC): Low (L)
  • Modified Attack Requirement (MAT): Present (P)
  • Modified Privileges Required (MPR): None (N)
  • Modified User Interaction (MUI): Passive (P)
  • Modified Vulnerable System Impact Confidentiality (MVC): Low (L)
  • Modified Vulnerable System Impact Integrity (MVI): Low (L)
  • Modified Vulnerable System Impact Availability (MVA): None (N)
  • Modified Subsequent System Impact Confidentiality (MSC): Negligible (N)
  • Modified Subsequent System Impact Integrity (MSI): Negligible (N)
  • Modified Subsequent System Impact Availability (MSA): Negligible (N)
  • Safety (S): Not Defined (X)
  • Automatable (AU): Not Defined (X)
  • Recovery (R): Not Defined (X)
  • Value Density (V): Not Defined (X)
  • Vulnerability Response Effort (RE): Not Defined (X)
  • Provider Urgency (U): Not Defined (X)
  • Confidentiality Req. (CR): Not Defined (X)
  • Integrity Req. (IR): Not Defined (X)
  • Availability Req. (AR): Not Defined (X)
  • Exploit Maturity (E): Not Defined (X)
created 3 months, 1 week ago Activity log
  • Created suggestion 3 months, 1 week ago
A vulnerability has been found in some Dahua products. An …

A vulnerability has been found in some Dahua products. An attacker may obtain the device’s CA root certificate. If that CA is installed and trusted on client systems, the attacker could issue fraudulent certificates trusted by those clients and undermine the certificate trust chain.

Affected products

IPC
  • ==Some IPC models are affected, specifically those with a build date before April 15, 2026.

Matching in nixpkgs

pkgs.dipc

Convert your favorite images and wallpapers with your favorite color palettes/themes

  • nixos-unstable -
    • nixos-unstable-small 1.2.0
  • nixos-26.05 -
    • nixos-26.05-small 1.1.0

pkgs.ipcalc

Simple IP network calculator

  • nixos-unstable -
    • nixos-unstable-small 1.0.3
  • nixos-26.05 -
    • nixos-26.05-small 1.0.3

pkgs.clipcat

Clipboard Manager written in Rust Programming Language

  • nixos-unstable -
  • nixos-26.05 -

pkgs.dfl-ipc

Very simple set of IPC classes for inter-process communication

  • nixos-unstable -
    • nixos-unstable-small 0.3.0
  • nixos-26.05 -
    • nixos-26.05-small 0.3.0

pkgs.ripcord

Desktop chat client for Slack and Discord

  • nixos-unstable -
  • nixos-26.05 -

pkgs.sipcalc

Advanced console ip subnet calculator

  • nixos-unstable -
    • nixos-unstable-small 1.1.6
  • nixos-26.05 -
    • nixos-26.05-small 1.1.6

pkgs.i3ipc-glib

C interface library to i3wm

  • nixos-unstable -
    • nixos-unstable-small 1.0.1
  • nixos-26.05 -
    • nixos-26.05-small 1.0.1

pkgs.libchipcard

Library for access to chipcards

  • nixos-unstable -
    • nixos-unstable-small 5.1.6
  • nixos-26.05 -
    • nixos-26.05-small 5.1.6

pkgs.ocamlPackages.zipc

ZIP archive and deflate codec for OCaml

  • nixos-unstable -
    • nixos-unstable-small 0.2.0
  • nixos-26.05 -
    • nixos-26.05-small 0.2.0

pkgs.rocmPackages.hipcub

Thin wrapper library on top of rocPRIM or CUB

  • nixos-unstable -
    • nixos-unstable-small 7.2.3
  • nixos-26.05 -
    • nixos-26.05-small 7.2.3

pkgs.perlPackages.IPCRun3

Run a subprocess with input/output redirection

  • nixos-unstable -
    • nixos-unstable-small 0.048
  • nixos-26.05 -
    • nixos-26.05-small 0.048

pkgs.perlPackages.IPCSysV

System V IPC constants and system calls

  • nixos-unstable -
    • nixos-unstable-small 2.09
  • nixos-26.05 -
    • nixos-26.05-small 2.09

pkgs.perl5Packages.IPCRun3

Run a subprocess with input/output redirection

  • nixos-unstable -
    • nixos-unstable-small 0.048
  • nixos-26.05 -
    • nixos-26.05-small 0.048

pkgs.perl5Packages.IPCSysV

System V IPC constants and system calls

  • nixos-unstable -
    • nixos-unstable-small 2.09
  • nixos-26.05 -
    • nixos-26.05-small 2.09

pkgs.python313Packages.pipcl

Python packaging operations for use by setup.py

  • nixos-unstable -
    • nixos-unstable-small 12
  • nixos-26.05 -
    • nixos-26.05-small 4

pkgs.python314Packages.pipcl

Python packaging operations for use by setup.py

  • nixos-unstable -
    • nixos-unstable-small 12
  • nixos-26.05 -
    • nixos-26.05-small 4

pkgs.python313Packages.sysv-ipc

SysV IPC primitives (semaphores, shared memory and message queues)

  • nixos-unstable -
    • nixos-unstable-small 1.2.0
  • nixos-26.05 -
    • nixos-26.05-small 1.2.0

pkgs.python314Packages.sysv-ipc

SysV IPC primitives (semaphores, shared memory and message queues)

  • nixos-unstable -
    • nixos-unstable-small 1.2.0
  • nixos-26.05 -
    • nixos-26.05-small 1.2.0

Package maintainers