Declaring tweet bankruptcy: this account summarized almost every topic from the oss-security mailing list until July 22, 2026 inclusive, but not anymore. The manual tweets became more numerous lately and so negatively impacted other efforts. Further tweets will be very selective.

PHP: 2 remote code execution issues CVE-2026-109618: via OOM corruption openwall.com/lists/oss-secur… CVE-2026-109619: via stale global state openwall.com/lists/oss-secur… xitter.cf/calif_io/status/211290…

Linux kernel Infinity Core: 6 LPE CVEs openwall.com/lists/oss-secur… CVE-2026-74580: vhost stale IOTLB cache LPE, VM escape openwall.com/lists/oss-secur… CVE-2026-99999,PwnEscape: KVM escape openwall.com/lists/oss-secur… KVM/x86: stale SMM MMIO cache bypasses write tracking openwall.com/lists/oss-secur…

A quartet of Linux local root vulns: DirtyAH6, PPPoEject, TUNderflow, and DiagSpill openwall.com/lists/oss-secur… bugs have been around for 10-21 years DirtyAH6 theoretically (unlikely/with difficulty) remote-groomable to remote root

22 recent Linux kernel CVEs with exploits brought to our attention by @nebusecurity openwall.com/lists/oss-secur…

OpenRGB: Remote System Compromise via Custom Network Protocol openwall.com/lists/oss-secur… Suite for controlling RGB LED lighting devices on Linux, MacOS, Windows. The daemon runs as root and implements a TCP networking protocol listening on wildcard IP 0.0.0.0 port 6742 by default.

Emacs arbitrary code execution upon opening a file openwall.com/lists/oss-secur… a related older finding and "a workaround patch" and "bigger rework" in upstream repo are referenced Emacs zero-click local command execution via TRAMP openwall.com/lists/oss-secur… fix by maintainer attached

rsync 3.5.0 released with fixes for 33 CVEs openwall.com/lists/oss-secur…

CVE-2026-61899: Apache Tapestry: Possible classpath file download through URL manipulation openwall.com/lists/oss-secur… Severity: critical Tapestry is a component-oriented framework for creating highly scalable web applications in Java

CVE-2026-64561,Zapscape: Linux kernel: Guest-to-Host Escape in KVM/x86 openwall.com/lists/oss-secur… UAF in the shadow MMU emulation, specifically in the recursive "zap" path that runs when shadow pages are reclaimed. Exploit included.

CVE-2026-64564: Linux kernel: SCTP ASCONF transport UAF leading to local privilege escalation and container escape openwall.com/lists/oss-secur… Enterprise Linux distros blacklist the SCTP module by default by now

rust-in-peace: results from agent-assisted Rust OSS vulnerability research openwall.com/lists/oss-secur… by @scadasl - 63 findings independently confirmed with a dynamic proof-of-concept - 71 reports sent to maintainers - 33 fixes merged or otherwise resolved ...

CVE-2026-61484: Apache Lucy: LucyX::Remote::SearchServer unauthenticated remote Storable::thaw -> RCE/DoS openwall.com/lists/oss-secur… Severity: critical Lucy search engine library provides full-text search for dynamic programming languages. It is a "loose C" port of Apache Lucene.

iwd <= 3.12: Stack buffer overflow and more openwall.com/lists/oss-secur… An adjacent attacker can overflow iwd's stack with a spoofed 802.11k request once 17 BSS entries are cached. Hardened builds abort; a representative unhardened ARM32 layout permits saved-LR control.

CVE-2026-66066: Rails: Arbitrary file read and remote code execution in Active Storage variant processing openwall.com/lists/oss-secur… read arbitrary files from the server, including the process environment. That environment typically holds secret_key_base and often credentials

13 Xen Security Advisories posted on July 28, 2026 openwall.com/lists/oss-secur… Exposure and impact varies, including "unprivileged guest may be able to elevate its privileges to that of the host."

CVE-2026-64531,OVSwrap: Linux kernel: Local root vuln in Open vSwitch datapath openwall.com/lists/oss-secur… where: - OVS kernel datapath and conntrack/FTP-helper support are present, and - unprivileged user/network namespaces are enabled, or the attacker otherwise has CAP_NET_ADMIN

Knot Resolver 6.3.0 DNS-over-QUIC heap buffer overflow (RCE) openwall.com/lists/oss-secur… reported to CZ.NIC on 2026-06-08 and fixed in Knot Resolver 6.4.1, released on 2026-07-22