This release fixes issues for SREs watching stability and regressions.
✓ No known CVEs patched in this version
Affected surfaces
Summary
AI summaryFix seccomp SIGSEGV by using SECCOMP_MODE_FILTER instead of SECCOMP_SET_MODE_FILTER for prctl
Changes in this release
| Type | Severity | Summary | CVE |
|---|---|---|---|
| Bugfix | Medium |
Fix netlink batch mode, privilege drop, and seccomp for runtime TOTP flow Fix netlink batch mode, privilege drop, and seccomp for runtime TOTP flow Source: llm_adapter@2026-06-02 Confidence: high |
— |
| Bugfix | Medium |
Fix seccomp SIGSEGV by using SECCOMP_MODE_FILTER instead of SECCOMP_SET_MODE_FILTER for prctl Fix seccomp SIGSEGV by using SECCOMP_MODE_FILTER instead of SECCOMP_SET_MODE_FILTER for prctl Source: llm_adapter@2026-06-02 Confidence: high |
— |
| Bugfix | Medium |
Fix NLM_F_ECHO hang and remove uid gate in privdrop for capability-based execution Fix NLM_F_ECHO hang and remove uid gate in privdrop for capability-based execution Source: llm_adapter@2026-06-02 Confidence: high |
— |
| Bugfix | Low |
Print strerror to stderr on fatal startup errors Print strerror to stderr on fatal startup errors Source: llm_adapter@2026-06-02 Confidence: high |
— |
| Refactor | Low |
Install cppcheck in CI and update AGENTS.md tool list Install cppcheck in CI and update AGENTS.md tool list Source: llm_adapter@2026-06-02 Confidence: high |
— |
| Refactor | Low |
Add cppcheck static analysis target to Makefile and CI Add cppcheck static analysis target to Makefile and CI Source: llm_adapter@2026-06-02 Confidence: high |
— |
Full changelog
Changelog
a51e24d Fix netlink batch mode, privilege drop, and seccomp for runtime TOTP flow
b29aca7 Rewrite TODO.md: remove completed sections, add robustness tasks, format with checkboxes
7d0b2e2 Add seccomp mode constant mixup to BUG_PREVENTION.md checklist
30bd5a3 Fix seccomp SIGSEGV by using SECCOMP_MODE_FILTER instead of SECCOMP_SET_MODE_FILTER for prctl
bd4c717 Fix NLM_F_ECHO hang and remove uid gate in privdrop for capability-based execution
5551328 Add capability-based execution plan to TODO.md
9736ac7 Print strerror to stderr on fatal startup errors
541e108 Install cppcheck in CI and update AGENTS.md tool list
4b3b3d7 Add cppcheck static analysis target to Makefile and CI
Weekly OSS security release digest.
The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.
No spam, unsubscribe anytime.
Share this release
About Totpgate
All releases →Related context
Related tools
Beta — feedback welcome: [email protected]