41 matches found
[SECURITY] Fedora 45 Update: nicotine+-3.3.11-1.fc45
Nicotine+ is a graphical client for the Soulseek peer-to-peer file sharing network. It is an attempt to keep Nicotine working with the latest libraries, kill bugs, keep current with the Soulseek protocol, and add some new features that users want and/or need...
Fedora 45 : nicotine+ (2026-4b6e8bed0f)
The remote Fedora 45 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-4b6e8bed0f advisory. Version 3.3.11 September 16, 2026 Changes Added menu items for moving column headers due to broken drag-and-drop in GTK Enabled fixed number of upload slots ...
[SECURITY] Fedora 43 Update: nicotine+-3.3.11-1.fc43
Nicotine+ is a graphical client for the Soulseek peer-to-peer file sharing network. It is an attempt to keep Nicotine working with the latest libraries, kill bugs, keep current with the Soulseek protocol, and add some new features that users want and/or need...
Fedora 43 : nicotine+ (2026-843c104a8c)
The remote Fedora 43 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-843c104a8c advisory. Version 3.3.11 September 16, 2026 Changes Added menu items for moving column headers due to broken drag-and-drop in GTK Enabled fixed number of upload slots ...
[SECURITY] Fedora 44 Update: nicotine+-3.3.11-1.fc44
Nicotine+ is a graphical client for the Soulseek peer-to-peer file sharing network. It is an attempt to keep Nicotine working with the latest libraries, kill bugs, keep current with the Soulseek protocol, and add some new features that users want and/or need...
Fedora 44 : nicotine+ (2026-5524bd90b2)
The remote Fedora 44 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-5524bd90b2 advisory. Version 3.3.11 September 16, 2026 Changes Added menu items for moving column headers due to broken drag-and-drop in GTK Enabled fixed number of upload slots ...
CVE-2026-68911
A flaw was found in nicotine-plus. A remote attacker can trigger a Denial of Service DoS by sending specially crafted, zlib-compressed peer messages containing a decompression bomb. When the recipient client decompresses the message, it exhausts available operating system memory, causing the...
CVE-2026-68911
Nicotine+ is a graphical client for the Soulseek peer-to-peer network. Prior to version 3.3.11, a modified remote client can send zlib-compressed peer messages containing a decompression bomb, exhausting available memory of the recipient's operating system. This issue has been patched in version...
EUVD-2026-88978
Nicotine+ is a graphical client for the Soulseek peer-to-peer network. Prior to version 3.3.11, a modified remote client can send zlib-compressed peer messages containing a decompression bomb, exhausting available memory of the recipient's operating system. This issue has been patched in version...
CVE-2026-68911 Nicotine+: Decompression of peer messages can exhaust available memory
Nicotine+ is a graphical client for the Soulseek peer-to-peer network. Prior to version 3.3.11, a modified remote client can send zlib-compressed peer messages containing a decompression bomb, exhausting available memory of the recipient's operating system. This issue has been patched in version...
CVE-2026-68911 Nicotine+: Decompression of peer messages can exhaust available memory
Nicotine+ is a graphical client for the Soulseek peer-to-peer network. Prior to version 3.3.11, a modified remote client can send zlib-compressed peer messages containing a decompression bomb, exhausting available memory of the recipient's operating system. This issue has been patched in version...
CVE-2026-68911
Nicotine+ is a graphical client for the Soulseek peer-to-peer network. Prior to version 3.3.11, a modified remote client can send zlib-compressed peer messages containing a decompression bomb, exhausting available memory of the recipient's operating system. This issue has been patched in version...
CVE-2026-68911
The Nicotine+ graphical client for the Soulseek peer-to-peer network is vulnerable to a decompression bomb in versions prior to 3.3.11 . A modified remote client can send zlib-compressed peer messages that, when processed, exhaust the recipient's operating system memory. This issue has been addre...
CVE-2026-68911 Nicotine+: Decompression of peer messages can exhaust available memory
Nicotine+ is a graphical client for the Soulseek peer-to-peer network. Prior to version 3.3.11, a modified remote client can send zlib-compressed peer messages containing a decompression bomb, exhausting available memory of the recipient's operating system. This issue has been patched in version...
PT-2026-102638
Name of the Vulnerable Software and Affected Versions Nicotine+ versions prior to 3.3.11 Description A modified remote client can send zlib-compressed peer messages containing a decompression bomb, which is a malicious archive designed to crash a system by consuming excessive resources during...
CVE-2026-68911: Improper Handling of Highly Compressed Data (Data Amplification)
Nicotine+ is a graphical client for the Soulseek peer-to-peer network. Prior to version 3.3.11, a modified remote client can send zlib-compressed peer messages containing a decompression bomb, exhausting available memory of the recipient's operating system. This issue has been patched in version...
PYSEC-2026-687 Nicotine+ DoS on Null Character in Download Request
Denial of service DoS vulnerability in Nicotine+ starting with version 3.0.3 and prior to version 3.2.1 allows a user with a modified Soulseek client to crash Nicotine+ by sending a file download request with a file path containing a null character...
Nicotine+ DoS on Null Character in Download Request
Denial of service DoS vulnerability in Nicotine+ starting with version 3.0.3 and prior to version 3.2.1 allows a user with a modified Soulseek client to crash Nicotine+ by sending a file download request with a file path containing a null character...
Vaping Is ‘Everywhere’ in Schools—Sparking a Bathroom Surveillance Boom
Schools in the US are installing vape-detection tech in bathrooms to thwart student nicotine and cannabis use. A new investigation reveals the impact of using spying to solve a problem...