CGA-6P85-R9G4-5254

Bulletin has no description...

CGA-CVC7-M2MX-4X3X

Bulletin has no description...

DEBIAN-CVE-2026-52681

Sieve CPU resource usage is tracked in the compiled script, so an attacker that has valid credentials can reset the accounting by repeatedly changing the active script. Compiled script files are also not removed when a script is deleted or renamed. The configured Sieve CPU limit can be bypassed,...

DEBIAN-CVE-2026-42391

An unauthenticated attacker can send an IMAP ID command with a very large number of parameters before logging in, which causes memory and CPU usage to grow disproportionately. The login process can be terminated by the out-of-memory handling, which also terminates all other connections handled by...

AZL-98301 CVE-2026-40204 affecting package dovecot 2.3.20-1

None None None No publicly available exploits are known...

DEBIAN-CVE-2026-33607

An attacker that has valid credentials can use IMAP LIST command to consume CPU. This can cause degradation or denial of service for IMAP. Monitor system for abnormal CPU usage and kill the offending process and lock account. Alternatively install fixed version. No publicly available exploits are...

DEBIAN-CVE-2026-27852

An attacker that can send mail to a user can craft a message whose headers contain a very large number of email addresses or MIME parameters, which causes excessive memory usage when the message is later parsed. The message is still delivered, but reading it over IMAP can exhaust the memory limit...

MINI-H8WR-GQ9Q-CPQR

Bulletin has no description...

RHSA-2026:60486 Red Hat Security Advisory: kernel security update

Bulletin has no description...

DEBIAN-CVE-2026-80716

In the Linux kernel, the following vulnerability has been resolved: ALSA: pcm: wake linked drain waiters on unlink sndpcmdrain on a linked stream parks an on-stack wait entry on the drained peer's runtime-sleep, and after scheduletimeout removes it only if that peer is still found in the caller's...

DEBIAN-CVE-2026-80696

In the Linux kernel, the following vulnerability has been resolved: hwmon: ltc4282 Fix reading the minimum alarm voltage Coverity reports an out-of-bounds access when reading the minimum alarm voltage for the VGPIO channel. Add the missing return statement to fix the problem...

DEBIAN-CVE-2026-80668

In the Linux kernel, the following vulnerability has been resolved: netfilter: nfconntrackexpect: use conntrack GC to reap expectations This patch replaces the timer API by GC worker approach for expectations, as it already happened in many other subsystems. Use the existing conntrack GC worker t...

DEBIAN-CVE-2026-80677

In the Linux kernel, the following vulnerability has been resolved: driver core: use READONCE for dev-driver in devhassyncstate devhassyncstate reads dev-driver twice without holding devicelock -- once for the NULL check and once to dereference -syncstate. Some callers only hold...

DEBIAN-CVE-2026-80658

In the Linux kernel, the following vulnerability has been resolved: drm/rockchip: dwdp: Fix null-ptr-deref in dwdpremove Attempting to access driver data in the platform driver -remove callback may lead to a null pointer dereference since there is no guaranty that the component -bind callback...

DEBIAN-CVE-2026-80645

In the Linux kernel, the following vulnerability has been resolved: rapidio/tsi721: prevent a bad dereference in tsi721dbdpc With a listforeach loop, if we don't find the item we are looking for in the list, then the loop exits with the iterator, which is "dbell" in this loop, pointing to invalid...

DEBIAN-CVE-2026-80607

In the Linux kernel, the following vulnerability has been resolved: tracing/probes: Remove WARNONONCE from parsebtfarg Sashiko found that user can cause this WARNONONCE easily with adding a kprobe event based on a raw address with BTF parameter. Since this is not an unexpected condition, remove t...

MINI-9P2X-XX69-6G86

Bulletin has no description...

CVE-2026-82082

creationtimestamp| type| source ---|---|--- 2026-08-28 04:45:05+00:00| seen| https://www.twcert.org.tw/en/cp-139-11145-5361d-2.html 2026-08-28 06:01:01+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mu4oqmnuez27 2026-08-28 06:08:04+00:00| seen|...

CVE-2026-82072

creationtimestamp| type| source ---|---|--- 2026-08-28 02:15:17+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/bhi3iudprzoxf 2026-08-29 02:07:06+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mu6s5ctlbu2u...

DEBIAN-CVE-2026-50152

Ceph is an open-source distributed storage platform providing object, block, and file storage. In versions prior to 20.2.4 and 19.2.6, the Monitor subscription handler fails to properly authorize access to the configuration-key store, allowing any CephX user with only mon allow r capabilities to...