Nixpkgs security tracker

Try the new UI
Login with GitHub

Suggestions search

All statuses
Filter by:
With package: python313Packages.libpulse

Found 1 matching suggestions

View:
Compact
Detailed
Untriaged
Permalink CVE-2026-92860
9.4 CRITICAL
  • CVSS version (CVSS): 4.0
  • Attack Vector (AV): Network (N)
  • Attack Complexity (AC): Low (L)
  • Attack Requirement (AT): None (N)
  • Privileges Required (PR): High (H)
  • User Interaction (UI): None (N)
  • Vulnerable System Impact Confidentiality (VC): High (H)
  • Vulnerable System Impact Integrity (VI): High (H)
  • Vulnerable System Impact Availability (VA): High (H)
  • Subsequent System Impact Confidentiality (SC): High (H)
  • Subsequent System Impact Integrity (SI): High (H)
  • Subsequent System Impact Availability (SA): High (H)
  • Exploit Maturity (E): Not Defined (X)
  • Modified Attack Vector (MAV): Network (N)
  • Modified Attack Complexity (MAC): Low (L)
  • Modified Attack Requirement (MAT): None (N)
  • Modified Privileges Required (MPR): High (H)
  • Modified User Interaction (MUI): None (N)
  • Modified Vulnerable System Impact Confidentiality (MVC): High (H)
  • Modified Vulnerable System Impact Integrity (MVI): High (H)
  • Modified Vulnerable System Impact Availability (MVA): High (H)
  • Modified Subsequent System Impact Confidentiality (MSC): High (H)
  • Modified Subsequent System Impact Integrity (MSI): High (H)
  • Modified Subsequent System Impact Availability (MSA): High (H)
  • Safety (S): Not Defined (X)
  • Automatable (AU): Not Defined (X)
  • Recovery (R): Not Defined (X)
  • Value Density (V): Not Defined (X)
  • Vulnerability Response Effort (RE): Not Defined (X)
  • Provider Urgency (U): Not Defined (X)
  • Confidentiality Req. (CR): Not Defined (X)
  • Integrity Req. (IR): Not Defined (X)
  • Availability Req. (AR): Not Defined (X)
created 3 days, 22 hours ago Activity log
  • Created suggestion 3 days, 22 hours ago
rcourtman Pulse Quick Security Setup quick-setup fmt.Sprintf input validation

A security flaw has been discovered in rcourtman Pulse up to 6.0.4/6.1.0-rc.4. Affected by this issue is the function fmt.Sprintf of the file /api/security/quick-setup of the component Quick Security Setup Handler. The manipulation of the argument Username results in improper input validation. The attack may be performed from remote. Upgrading the affected component is advised.

Affected products

Pulse
  • ==6.1.0-rc.1
  • ==6.1.0-rc.2
  • ==6.1.0-rc.3
  • ==6.0.3
  • ==6.0.0
  • ==6.1.0-rc.4
  • ==6.1.0-rc.0
  • ==6.0.1
  • ==6.0.4
  • ==6.0.2

Matching in nixpkgs

pkgs.apulse

PulseAudio emulation for ALSA

  • nixos-unstable -
  • nixos-26.05 -

pkgs.pulseaudio

Sound server for POSIX and Win32 systems

  • nixos-unstable -
    • nixos-unstable-small 17.0
  • nixos-26.05 -
    • nixos-26.05-small 17.0

pkgs.pulsemixer

Cli and curses mixer for pulseaudio

  • nixos-unstable -
    • nixos-unstable-small 1.5.1
  • nixos-26.05 -
    • nixos-26.05-small 1.5.1

pkgs.pulsemeeter

Pulseaudio and pipewire audio mixer inspired by voicemeeter

  • nixos-unstable -
    • nixos-unstable-small 2.2.0
  • nixos-26.05 -
    • nixos-26.05-small 2.0.0

pkgs.libpulseaudio

Sound server for POSIX and Win32 systems

  • nixos-unstable -
    • nixos-unstable-small 17.0
  • nixos-26.05 -
    • nixos-26.05-small 17.0

pkgs.pulseaudio-ctl

Control pulseaudio volume from the shell or mapped to keyboard shortcuts. No need for alsa-utils

  • nixos-unstable -
    • nixos-unstable-small 1.70
  • nixos-26.05 -
    • nixos-26.05-small 1.70

pkgs.pulseaudioFull

Sound server for POSIX and Win32 systems

  • nixos-unstable -
    • nixos-unstable-small 17.0
  • nixos-26.05 -
    • nixos-26.05-small 17.0

pkgs.pulseaudio-dlna

Lightweight streaming server which brings DLNA / UPNP and Chromecast support to PulseAudio and Linux

pkgs.pulse-visualizer

Real-time audio visualizer inspired by MiniMeters

  • nixos-unstable -
    • nixos-unstable-small 1.3.9
  • nixos-26.05 -
    • nixos-26.05-small 1.3.9

pkgs.rofi-pulse-select

Rofi-based interface to select source/sink (aka input/output) with PulseAudio

  • nixos-unstable -
    • nixos-unstable-small 0.2.0
  • nixos-26.05 -
    • nixos-26.05-small 0.2.0

pkgs.xfce4-volumed-pulse

Volume keys control daemon for Xfce using pulseaudio

  • nixos-unstable -
    • nixos-unstable-small 0.3.0
  • nixos-26.05 -
    • nixos-26.05-small 0.3.0

pkgs.pulseaudio-module-xrdp

xrdp sink/source pulseaudio modules

  • nixos-unstable -
    • nixos-unstable-small 0.8
  • nixos-26.05 -
    • nixos-26.05-small 0.8

pkgs.xfce4-pulseaudio-plugin

Adjust the audio volume of the PulseAudio sound system

  • nixos-unstable -
    • nixos-unstable-small 0.5.1
  • nixos-26.05 -
    • nixos-26.05-small 0.5.1

pkgs.polybar-pulseaudio-control

Polybar module to control PulseAudio devices, also known as Pavolume

  • nixos-unstable -
    • nixos-unstable-small 3.1.1
  • nixos-26.05 -
    • nixos-26.05-small 3.1.1

pkgs.python313Packages.aiopulse

Python Rollease Acmeda Automate Pulse hub protocol implementation

  • nixos-unstable -
    • nixos-unstable-small 0.4.7
  • nixos-26.05 -
    • nixos-26.05-small 0.4.7

pkgs.python313Packages.libpulse

Asyncio interface to the Pulseaudio and Pipewire pulse library

  • nixos-unstable -
    • nixos-unstable-small 0.7
  • nixos-26.05 -
    • nixos-26.05-small 0.7

pkgs.python314Packages.aiopulse

Python Rollease Acmeda Automate Pulse hub protocol implementation

  • nixos-unstable -
    • nixos-unstable-small 0.4.7
  • nixos-26.05 -
    • nixos-26.05-small 0.4.7

pkgs.python314Packages.libpulse

Asyncio interface to the Pulseaudio and Pipewire pulse library

  • nixos-unstable -
    • nixos-unstable-small 0.7
  • nixos-26.05 -
    • nixos-26.05-small 0.7

Package maintainers