Issues

• Update Request: djv 3.1.1 → 3.7.5

  0.kind: enhancement9.needs: package (update)
  NixOS/nixpkgs#576046 · Filter by author bryab opened on Oct 19, 2026

• azure-cli: evaluation fails because Fabric is marked broken with Invoke >=3

  0.kind: bug
  NixOS/nixpkgs#575989 · Filter by author TyceHerrman opened on Oct 19, 2026

• Build failure: onetbb

  0.kind: build failure
  NixOS/nixpkgs#575963 · Filter by author n0099 opened on Oct 19, 2026
  1

• kontact: cant find qtwebengine

  0.kind: bug
  NixOS/nixpkgs#575945 · Filter by author ninelore opened on Oct 19, 2026
  1

• smpeg through 2.0.0 Heap Out-of-Bounds Read via MPEGsystem::FillBuffer

  1.severity: security
  NixOS/nixpkgs#575939 · Filter by author nixpkgs-security-tracker opened on Oct 19, 2026

• Schroedinger libschroedinger through 1.0.11 Out-of-Bounds Read via schro_params_set_default_quant_matrix

  1.severity: security
  NixOS/nixpkgs#575938 · Filter by author nixpkgs-security-tracker opened on Oct 19, 2026

• libdvdnav before 7.0.0 Out-of-Bounds Read in dvdnav_describe_title_chapters

  1.severity: security
  NixOS/nixpkgs#575937 · Filter by author nixpkgs-security-tracker opened on Oct 19, 2026

• libspatialite through 5.1.0 Integer Overflow in WKB Geometry Parsing

  1.severity: security
  NixOS/nixpkgs#575936 · Filter by author nixpkgs-security-tracker opened on Oct 19, 2026

• Gitify before 7.10.0 Login CSRF via Missing OAuth State Validation

  1.severity: security
  NixOS/nixpkgs#575935 · Filter by author nixpkgs-security-tracker opened on Oct 19, 2026

• OpenTelemetry opentelemetry-exporter-otlp-proto-http 1.5.0 before 1.45.0 Improper Certificate Validation

  1.severity: security
  NixOS/nixpkgs#575934 · Filter by author nixpkgs-security-tracker opened on Oct 19, 2026

• libLAS through 1.8.1 Heap Out-of-Bounds Write via LASSchema VLR

  1.severity: security
  NixOS/nixpkgs#575933 · Filter by author nixpkgs-security-tracker opened on Oct 19, 2026

• Schroedinger libschroedinger through 1.0.11 Divide by Zero in Low-Delay Transform Parsing

  1.severity: security
  NixOS/nixpkgs#575931 · Filter by author nixpkgs-security-tracker opened on Oct 19, 2026

• libspatialite through 5.1.0 Uncontrolled Memory Allocation via ParseWkbPolygon Ring Count

  1.severity: security
  NixOS/nixpkgs#575930 · Filter by author nixpkgs-security-tracker opened on Oct 19, 2026

• libmng through 2.0.3 Heap Buffer Overflow via ORDR Chunk Reader mng_read_ordr

  1.severity: security
  NixOS/nixpkgs#575929 · Filter by author nixpkgs-security-tracker opened on Oct 19, 2026

• Safing Portmaster before 2.2.5 Unauthenticated Forced Downgrade via /api/v1/updates/from-url

  1.severity: security
  NixOS/nixpkgs#575928 · Filter by author nixpkgs-security-tracker opened on Oct 19, 2026

• Text::CSV_XS versions before 1.65 for Perl allow memory exhaustion by allocating one entry per index of an RFC 7111 selector in fragment

  1.severity: security
  NixOS/nixpkgs#575927 · Filter by author nixpkgs-security-tracker opened on Oct 19, 2026

• ssldump Heap Buffer Overflow in FAN/1 X.509 Fingerprint Formatting

  1.severity: security
  NixOS/nixpkgs#575926 · Filter by author nixpkgs-security-tracker opened on Oct 19, 2026

• Nautilus: nautilus: arbitrary file deletion via trash symlink

  1.severity: security
  NixOS/nixpkgs#575925 · Filter by author nixpkgs-security-tracker opened on Oct 19, 2026

• coder: security issues < 2.34.8 (backport needed)

  1.severity: security
  NixOS/nixpkgs#575924 · Filter by author nixpkgs-security-tracker opened on Oct 19, 2026

• LibRaw through 0.22.2 Heap Out-of-Bounds Read via parseNikonMakernote ShotInfo

  1.severity: security
  NixOS/nixpkgs#575917 · Filter by author nixpkgs-security-tracker opened on Oct 19, 2026

• GNU LibreDWG through 0.14.8612 Out-of-Bounds Read in acds_private AcDs Decoder

  1.severity: security
  NixOS/nixpkgs#575916 · Filter by author nixpkgs-security-tracker opened on Oct 19, 2026

• libical through 4.0.6 Heap Out-of-Bounds Read via icalvalue_decode_ical_string

  1.severity: security
  NixOS/nixpkgs#575915 · Filter by author nixpkgs-security-tracker opened on Oct 19, 2026

• tinytag: Infinite loop when parsing certain M4A files containing invalid atoms

  1.severity: security
  NixOS/nixpkgs#575914 · Filter by author nixpkgs-security-tracker opened on Oct 19, 2026

• FluidSynth through 2.6.1 Out-of-Bounds Write via SoundFont Modulator Destination

  1.severity: security
  NixOS/nixpkgs#575913 · Filter by author nixpkgs-security-tracker opened on Oct 19, 2026

• Dragonfly through 2.0.2 Unbounded Memory Allocation via Negative COUNT in HRANDFIELD, ZRANDMEMBER and SRANDMEMBER

  1.severity: security
  NixOS/nixpkgs#575912 · Filter by author nixpkgs-security-tracker opened on Oct 19, 2026