RHBA-2020:0582 Red Hat Bug Fix Advisory: OpenShift Container Platform 4.4 RPM release advisory

Bulletin has no description...

CVE-2026-61907

A flaw was found in cyrus-imapd. An authenticated user with insert permissions on another user's snoozed mailbox could bypass access controls. This allows the user to insert mail into the target user's inbox or other known mailboxes, even without explicit insert permissions for those mailboxes...

CVE-2026-87736

creationtimestamp| type| source ---|---|--- 2026-09-09 05:40:49+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/hgk3ckrmgguh6...

CVE-2026-87657

creationtimestamp| type| source ---|---|--- 2026-09-09 01:52:51+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/356y2aim7dvwv 2026-09-10 04:46:05+00:00| seen| https://www.hkcert.org/security-bulletin/google-chrome-multiple-vulnerabilities20260910 2026-09-16 04:46:27+00:00| seen|...

CVE-2026-81387

creationtimestamp| type| source ---|---|--- 2026-09-08 22:02:10+00:00| seen| https://www.thezdi.com/blog/2026/9/8/the-september-2026-security-update-review 2026-09-09 04:02:01+00:00| seen| https://www.thezdi.com/blog/2026/9/8/the-september-2026-security-update-review 2026-09-09 10:46:24+00:00|...

CVE-2026-70296

creationtimestamp| type| source ---|---|--- 2026-09-08 20:12:19+00:00| seen| https://bsky.app/profile/stemshop.bsky.social/post/3muzth2jf7k22 2026-09-08 20:19:41+00:00| seen| https://advisories.ncsc.nl/advisory?id=NCSC-2026-0353 2026-09-08 22:01:41+00:00| seen|...

CVE-2026-86804

creationtimestamp| type| source ---|---|--- 2026-09-08 19:46:46+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/gf7suhoeueisi...

CVE-2026-69325

creationtimestamp| type| source ---|---|--- 2026-09-08 18:53:50+00:00| seen| https://infosec.exchange/users/vuldb/statuses/117236932927667923 2026-09-08 22:02:24+00:00| seen| https://www.thezdi.com/blog/2026/9/8/the-september-2026-security-update-review 2026-09-09 04:02:17+00:00| seen|...

CVE-2026-68828

creationtimestamp| type| source ---|---|--- 2026-09-08 18:13:33+00:00| seen| https://infosec.exchange/users/vuldb/statuses/117236774537838387 2026-09-08 22:03:47+00:00| seen| https://www.thezdi.com/blog/2026/9/8/the-september-2026-security-update-review 2026-09-09 04:03:39+00:00| seen|...

CVE-2026-78131

creationtimestamp| type| source ---|---|--- 2026-09-08 13:35:07+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3muz5arz6362i...

CVE-2026-71644

creationtimestamp| type| source ---|---|--- 2026-09-08 08:18:15+00:00| seen| https://gist.github.com/DongJiaxin0422/6c39c3c59236bc2c8ec4b4182284fa7e 2026-09-11 17:20:07+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mvb37uwjyp2f 2026-09-11 18:07:45+00:00| seen|...

CVE-2026-86505

creationtimestamp| type| source ---|---|--- 2026-09-07 17:55:38+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/gwizb77gbqoeq...

CVE-2026-86506

creationtimestamp| type| source ---|---|--- 2026-09-07 17:53:38+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/32vak5f4bwndz...

CVE-2026-86504

creationtimestamp| type| source ---|---|--- 2026-09-07 17:35:38+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/dui3apemglix2 2026-09-07 18:00:45+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mux3mtjx4a2m 2026-09-08 11:06:12+00:00| seen|...

CVE-2026-79645

creationtimestamp| type| source ---|---|--- 2026-09-07 15:06:37+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/7t3ksy4aolicx 2026-09-14 11:07:07+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mvhxrnyisq2j...

DEBIAN-CVE-2026-84732

Retransmissions of ACK packet ID in OpenVPN through 2.6.22 and 2.7.6 allow remote unauthenticated attackers to cause a denial of service via crafted inputs that trigger a timeout integer overflow...

DEBIAN-CVE-2026-86219

Authen::SASL::Perl::DIGESTMD5 versions before 2.2100 for Perl accept replayed authentication responses via unverified nonce in serverstep. serverstart generates a fresh nonce and sends it in the challenge, and nothing later compares that value against the nonce the client returns. serverstep...

DEBIAN-CVE-2026-82208

With the wolfSSL backend, when CA caching is enabled and an CURLOPTSSLCTXFUNCTION callback replaces the trust store, libcurl can silently reinstall the cached store after the callback returns. A certificate trusted by the cached store but rejected by the callback-selected store is then incorrectl...

DEBIAN-CVE-2026-80230

When CURLOPTPINNEDPUBLICKEY is configured alongside options that disable standard peer verification CURLOPTSSLVERIFYPEER = 0 and CURLOPTSSLVERIFYHOST = 0, libcurl fails to enforce public key pinning on connections established without a presented server certificate. Bypassing the pinning check und...

DEBIAN-CVE-2026-80229

When performing transfers via libcurl’s multi interface, pooled TLS connections can outlive their originating easy handles. In OpenSSL 3 provider configurations, libcurl attaches an allocated library context to the easy handle's state and passes it to OpenSSL without acquiring an ownership...