proj: curl
subj: [vs-plain] : curl: CVE-2024-6197: freeing stack buffer in utf8asn1str
trep: Mon Jul 15 21:37:52 2024
cves: CVE-2024-6197
tcrd: July 24
tpub: Fri Jun 28 12:45:00 2024
lpub: https://github.com/curl/curl/commit/3a537a4db9e65e545
toss: Wed Jul 24 06:34:48 2024
soss: [oss-security] [SECURITY ADVISORY] curl: CVE-2024-6197: freeing stack buffer in utf8asn1str
loss: https://www.openwall.com/lists/oss-security/2024/07/24/1

proj: BIND 9
subj: [vs] Four BIND 9 vulnerabilities will be announced on 17 July 2024
trep: Tue Jul 16 11:25:45 2024
cves: CVE-2024-0760, CVE-2024-1737, CVE-2024-1975, CVE-2024-4076
tcrd: 17 July 2024 \\ 2024-07-23 (next Tuesday)
toss: Tue Jul 23 14:56:25 2024
soss: [oss-security] ISC has disclosed four vulnerabilities in BIND 9 (CVE-2024-0760, CVE-2024-1737, CVE-2024-1975, CVE-2024-4076)
loss: https://www.openwall.com/lists/oss-security/2024/07/23/1

proj: OpenStack Nova
subj: [vs] Vulnerability in OpenStack Nova (CVE-2024-40767)
trep: Tue Jul 16 18:46:20 2024
cves: CVE-2024-40767
tcrd: 2024-07-23, 1500UTC
toss: Tue Jul 23 15:00:30 2024
soss: [oss-security] [OSSA-2024-002] OpenStack Nova: Incomplete file access fix and regression for QCOW2 backing files and VMDK flat descriptors (CVE-2024-40767)
loss: https://www.openwall.com/lists/oss-security/2024/07/23/2

proj: Linux
subj: [vs] linux kernel: virtio-net host dos
trep: Mon Jul 22 13:35:56 2024
cves: CVE-2024-41090, CVE-2024-41091
tcrd: 2024-07-24 17:00 UTC
toss: Wed Jul 24 17:24:03 2024
soss: [oss-security] inux kernel: virtio-net host dos
loss: https://www.openwall.com/lists/oss-security/2024/07/24/4

proj: curl
subj: [vs-plain] : curl: CVE-2024-7264: ASN.1 date parser overread
trep: Tue Jul 30 09:41:07 2024
cves: CVE-2024-7264
tcrd: July 31st
toss: Wed Jul 31 07:19:57 2024
soss: [oss-security] [SECURITY ADVISORY] curl: CVE-2024-7264 ASN.1 date parser overread
loss: https://www.openwall.com/lists/oss-security/2024/07/31/1