Issues

• Module Request: nixos/glances: add option for password file

  0.kind: enhancement6.topic: nixos9.needs: module (new)
  NixOS/nixpkgs#572524 · Filter by author jungfred opened on Oct 10, 2026

• Build failure: picard

  0.kind: build failure
  NixOS/nixpkgs#572435 · Filter by author cterence opened on Oct 10, 2026

• MIT krb5 through 1.22.2 NULL Pointer Dereference via krb5_rd_cred()

  1.severity: security
  NixOS/nixpkgs#572417 · Filter by author nixpkgs-security-tracker opened on Oct 10, 2026

• Heap out-of-bounds read in DCMTK RLE decodeFrame()

  1.severity: security
  NixOS/nixpkgs#572416 · Filter by author nixpkgs-security-tracker opened on Oct 10, 2026

• Heap corruption via duplicate masterKey fields in MongoDB libmongocrypt

  1.severity: security
  NixOS/nixpkgs#572415 · Filter by author nixpkgs-security-tracker opened on Oct 10, 2026

• Uncontrolled recursion in DCMTK DICOMDIR parsing allows denial of service

  1.severity: security
  NixOS/nixpkgs#572414 · Filter by author nixpkgs-security-tracker opened on Oct 10, 2026

• Eog: eog: arbitrary code execution via heap buffer overflow in png metadata reader

  1.severity: security
  NixOS/nixpkgs#572413 · Filter by author nixpkgs-security-tracker opened on Oct 10, 2026
  1

• Strawberry GraphQL: Synchronous permission checks can treat an awaitable authorization result as truthy

  1.severity: security
  NixOS/nixpkgs#572412 · Filter by author nixpkgs-security-tracker opened on Oct 10, 2026

• Uncontrolled recursion in DCMTK xml2dcm allows denial of service

  1.severity: security
  NixOS/nixpkgs#572411 · Filter by author nixpkgs-security-tracker opened on Oct 10, 2026

• Uncontrolled recursion in the DCMTK DICOM dataset parser allows unauthenticated remote denial of service

  1.severity: security
  NixOS/nixpkgs#572410 · Filter by author nixpkgs-security-tracker opened on Oct 10, 2026

• Uncontrolled recursion in DCMTK JSON reader allows denial of service

  1.severity: security
  NixOS/nixpkgs#572409 · Filter by author nixpkgs-security-tracker opened on Oct 10, 2026

• Global buffer out-of-bounds read in DCMTK JPEG Huffman decoding

  1.severity: security
  NixOS/nixpkgs#572408 · Filter by author nixpkgs-security-tracker opened on Oct 10, 2026

• Use of Out-of-range Pointer Offset in mutt

  1.severity: security
  NixOS/nixpkgs#572407 · Filter by author nixpkgs-security-tracker opened on Oct 10, 2026

• Unrecognized payload acceptance in explicit decryption in MongoDB libmongocrypt

  1.severity: security
  NixOS/nixpkgs#572406 · Filter by author nixpkgs-security-tracker opened on Oct 10, 2026

• Dislocker through 0.7.3 Heap Out-of-Bounds Read via BitLocker Metadata Dataset Size

  1.severity: security
  NixOS/nixpkgs#572405 · Filter by author nixpkgs-security-tracker opened on Oct 10, 2026

• CairoSVG: Quadratic-time DoS parsing a crafted SVG <path>

  1.severity: security
  NixOS/nixpkgs#572404 · Filter by author nixpkgs-security-tracker opened on Oct 10, 2026

• Dislocker through 0.7.3 Out-of-Bounds Heap Read via VMK/FVEK Datum Size Underflow

  1.severity: security
  NixOS/nixpkgs#572403 · Filter by author nixpkgs-security-tracker opened on Oct 10, 2026

• Uncontrolled recursion in the DCMTK bundled XML parser allows denial of service

  1.severity: security
  NixOS/nixpkgs#572402 · Filter by author nixpkgs-security-tracker opened on Oct 10, 2026

• datamodel-code-generator: Protobuf weak-import path traversal allows files to be written outside the temporary directory

  1.severity: security
  NixOS/nixpkgs#572401 · Filter by author nixpkgs-security-tracker opened on Oct 10, 2026

• WordPress Jetpack plugin <= 16.2 - Broken Authentication vulnerability

  1.severity: security
  NixOS/nixpkgs#572400 · Filter by author nixpkgs-security-tracker opened on Oct 10, 2026

• Open5GS through 2.8.0 Heap Out-of-Bounds Read via PFCP Dropped DL Traffic Threshold IE

  1.severity: security
  NixOS/nixpkgs#572399 · Filter by author nixpkgs-security-tracker opened on Oct 10, 2026

• Open5GS through 2.8.0 MME Reachable Assertion via GTPv1 SGSN Context Request

  1.severity: security
  NixOS/nixpkgs#572398 · Filter by author nixpkgs-security-tracker opened on Oct 10, 2026

• Open5GS through 2.8.0 Heap Out-of-Bounds Read via PFCP Volume Measurement IE

  1.severity: security
  NixOS/nixpkgs#572397 · Filter by author nixpkgs-security-tracker opened on Oct 10, 2026

• Code Execution in Host Sentry Process via Double Free in gVisor VFS MemoryFile

  1.severity: security
  NixOS/nixpkgs#572396 · Filter by author nixpkgs-security-tracker opened on Oct 10, 2026

• Libhangul: null pointer dereference in hanja_new() when looking up a malformed hanja dictionary entry

  1.severity: security
  NixOS/nixpkgs#572395 · Filter by author nixpkgs-security-tracker opened on Oct 10, 2026