proj: ldns
subj: [vs] ...
trep: Thu Jun 04 12:23:28 2026
cves: CVE-2026-10846
tcrd: Tuesday the 9th of June 2026
toss: Wed Jun 10 08:59:45 2026
soss: [oss-security] ldns insufficiently verifies that responses belong to a query
loss: https://www.openwall.com/lists/oss-security/2026/06/10/2

proj: OpenStack Nova
subj: [vs] ...
trep: Thu Jun 04 17:53:31 2026
cves: CVE-2026-46448
tcrd: 2026-06-16 15:00 UTC
toss: Tue Jun 16 15:18:02 2026
soss: [oss-security] [OSSA-2026-022] OpenStack Nova: Nova scheduler hint injection bypasses Placement resource claims and scheduling constraints (CVE-2026-46448)
loss: https://www.openwall.com/lists/oss-security/2026/06/16/5

proj: Linux
subj: [vs-plain] ITScape: Guest-to-Host Escape in KVM/arm64
trep: Fri Jun 05 23:06:10 2026
cves: ITScape, CVE-2026-46316, CVE-2026-46317
tcrd: a 5 day embargo
toss: Wed Jun 10 18:24:31 2026
soss: [oss-security] ITScape: Guest-to-Host Escape in KVM/arm64 (CVE-2026-46316)
loss: https://www.openwall.com/lists/oss-security/2026/06/10/16

proj: rsync
subj: [vs-plain] rsync 3.4.4 released, regression fixes
trep: Mon Jun 08 04:42:43 2026
toss: Mon Jun 08 06:26:24 2026
soss: [oss-security] rsync 3.4.4 released, regression fixes
loss: https://www.openwall.com/lists/oss-security/2026/06/08/1

proj: libxml2
subj: [vs] ...
trep: Mon Jun 08 12:02:00 2026
cves: CVE-2026-6653
tcrd: 14 days \\ 22 June 2026
toss: Mon Jun 22 16:05:48 2026
soss: [oss-security] CVE-2026-6653: libxml2: use after free in xmlParseInternalSubset (>=2.9.11, <2.11.0)
loss: https://www.openwall.com/lists/oss-security/2026/06/22/3

proj: OpenStack Swift
subj: [vs] ...
trep: Wed Jun 10 03:40:37 2026
cves: CVE-2026-50221
tcrd: 2026-06-18 15:00 UTC \\ 2026-06-23 15:00 UTC
toss: Tue Jun 23 15:37:18 2026
soss: [oss-security] [OSSA-2026-024] OpenStack Swift: Swift proxy-server SSRF via header injection (CVE-2026-50221)
loss: https://www.openwall.com/lists/oss-security/2026/06/23/5

proj: Pacemaker
subj: [vs-plain] Pacemaker: Denial of Service via integer overflow in remote message decompression (CVE-2026-10649)
trep: Thu Jun 11 22:49:27 2026
cves: CVE-2026-10649
tcrd: Jun 16th 2026
toss: Tue Jun 16 15:46:20 2026
soss: [oss-security] Pacemaker: Denial of Service via integer overflow in remote message decompression (CVE-2026-10649)
loss: https://www.openwall.com/lists/oss-security/2026/06/16/6

proj: containerd
subj: [vs-plain] [Embargoed] containerd patches for CVE-2026-50195, CVE-2026-53488, CVE-2026-53492, CVE-2026-53489, and CVE-2026-47262
trep: Tue Jun 16 17:51:02 2026
cves: CVE-2026-50195, CVE-2026-53488, CVE-2026-53492, CVE-2026-53489, CVE-2026-47262
tcrd: Thursday, June 18, 2026 between 1pm and 5pm Pacific (20:00 to 00:00 UTC)
toss: Fri Jun 19 01:02:16 2026
soss: [oss-security] [containerd] Patch releases addressing CVE-2026-50195, CVE-2026-53488, CVE-2026-53492, CVE-2026-53489, and CVE-2026-47262
loss: https://www.openwall.com/lists/oss-security/2026/06/19/2

proj: curl
subj: [vs-plain] : curl pre-notification of 18 security advisories
trep: Wed Jun 17 06:08:02 2026
cves: CVE-2026-8286, CVE-2026-8458, CVE-2026-8924, CVE-2026-8925, CVE-2026-8926, CVE-2026-8927, CVE-2026-8932, CVE-2026-9079, CVE-2026-9080, CVE-2026-9545, CVE-2026-9546, CVE-2026-9547, CVE-2026-10536, CVE-2026-11352, CVE-2026-11564, CVE-2026-11586, CVE-2026-11856, CVE-2026-12064
tcrd: June 24
toss: Wed Jun 24 16:37:41 2026
soss: [oss-security] [SECURITY ADVISORIES] for curl 8.21.0
loss: https://www.openwall.com/lists/oss-security/2026/06/24/1

proj: shim, GRUB2
subj: [vs-plain] Combined chain advisory — fallback.efi/SBAT/memdisk bypass (shim + GRUB2)
trep: Sun Jun 21 13:42:20 2026
tcrd: 90-day embargo \\ Wednesday, July 1st, 2026
toss: Tue Aug 18 05:20:12 2026
soss: [oss-security] AI slop "Combined chain advisory — fallback.efi/SBAT/memdisk bypass"
loss: https://www.openwall.com/lists/oss-security/2026/08/18/1

proj: NLnet Labs NSD
subj: [vs] ...
trep: Mon Jun 22 06:48:25 2026
cves: CVE-2026-12244, CVE-2026-12245, CVE-2026-12246, CVE-2026-12490
tcrd: Thursday 25 June
toss: Thu Jun 25 17:30:12 2026
soss: [oss-security] Several vulnerabilities were found in NLnet Labs NSD
loss: https://www.openwall.com/lists/oss-security/2026/06/25/9

proj: acl, attr
subj: [vs] Symlink Traversal Privilege Escalation via getfattr/setfattr, getfacl/setfacl/chacl, libacl
trep: Mon Jun 22 21:56:42 2026
cves: CVE-2026-54369, CVE-2026-54370, CVE-2026-54371
tcrd: 2026-06-29T13:00:00.000Z
toss: Mon Jun 29 15:26:07 2026
soss: [oss-security] Symlink Traversal Privilege Escalation via getfattr/setfattr, getfacl/setfacl/chacl, libacl
loss: https://www.openwall.com/lists/oss-security/2026/06/29/1

proj: OpenStack Ironic
subj: [vs] ...
trep: Thu Jun 25 19:40:31 2026
cves: CVE-2026-44918
tcrd: 2026-07-08, 1500UTC
toss: Wed Jul 08 15:29:45 2026
soss: [oss-security] [OSSA-2026-026] Ironic: Insufficient Access Controls regarding parent/child nodes
loss: https://www.openwall.com/lists/oss-security/2026/07/08/4

proj: OpenStack Ironic
subj: [vs] ...
trep: Thu Jun 25 19:48:33 2026
cves: CVE-2026-54423
tcrd: 2026-07-08, 1500UTC
toss: Wed Jul 08 15:05:10 2026
soss: [oss-security] [OSSA-2026-025] Ironic: RBAC Bypass in IPMI Raw Command Execution (CVE-2026-54423)
loss: https://www.openwall.com/lists/oss-security/2026/07/08/3