[CLSA-2026:1793089374] dovecot: Fix of 3 CVEs
Type:
security
Severity:
Important
Release date:
2026-10-27 14:29:12 UTC
Description:
- CVE-2026-33605: fix pre-auth managesieve-login DoS on a lone CR and unterminated lines - CVE-2026-42391: limit the ID key/value pairs accounted before login - CVE-2026-40018: fail MySQL escaping instead of falling back to charset-unaware escaping
CVEs fixed:
Updated packages:
  • dovecot-2.2.36-8.0.3.el7.tuxcare.els4.aarch64.rpm
    sha:43c0a2dd3e56613a16ddf60cf66f0ab2dac38bd09059e24867734c77d91c04f2
  • dovecot-2.2.36-8.0.3.el7.tuxcare.els4.i686.rpm
    sha:4e8804d07ade683c18c488643d87052beff4c6d10c4c6381b9ef60a64deb255f
  • dovecot-2.2.36-8.0.3.el7.tuxcare.els4.x86_64.rpm
    sha:06d50d1a20d46be0b0fa348ac058e319b87391e009ca0812c00ce1305696f52a
  • dovecot-devel-2.2.36-8.0.3.el7.tuxcare.els4.aarch64.rpm
    sha:3f8f930e45b6d1c062bef856725b063667a34ca3de1daf2cad62bbab91616bc2
  • dovecot-devel-2.2.36-8.0.3.el7.tuxcare.els4.i686.rpm
    sha:9b381c4863209eeb0c5c2dfb65237ad7b7788fea6199d0229cf96d26adf977ab
  • dovecot-devel-2.2.36-8.0.3.el7.tuxcare.els4.x86_64.rpm
    sha:e4bc09f6013d94167bd54feb399ec64e858c560d4d8a1bbe9dbc1759a60ebf83
  • dovecot-mysql-2.2.36-8.0.3.el7.tuxcare.els4.aarch64.rpm
    sha:29a1cfe5b085705449fc9ff97a5fe670439b2e64eaa3e6b8f6153250bfb3e68d
  • dovecot-mysql-2.2.36-8.0.3.el7.tuxcare.els4.i686.rpm
    sha:93b960d4a76e81067fc6d81a25c195726a1ec9fa6c4d472431801e14e6578f96
  • dovecot-mysql-2.2.36-8.0.3.el7.tuxcare.els4.x86_64.rpm
    sha:a0af28a5b78f4a8d4d5e428e9f88e5aeb30850ab8e20f28bcaa5840a39f728ec
  • dovecot-pgsql-2.2.36-8.0.3.el7.tuxcare.els4.aarch64.rpm
    sha:75ac25179c9e752ee7750be5d1fef00a125c227a51e3914fbbc2b47966698ad3
  • dovecot-pgsql-2.2.36-8.0.3.el7.tuxcare.els4.i686.rpm
    sha:c54432d198e2665deb7b03fa727779f198b77e7cc227f6e0a8a6f45f33e1fe79
  • dovecot-pgsql-2.2.36-8.0.3.el7.tuxcare.els4.x86_64.rpm
    sha:c5a8e8cf8d0ef359fce3ed1f97071a50d69784d7d522e826016ee66ee46d87f5
  • dovecot-pigeonhole-2.2.36-8.0.3.el7.tuxcare.els4.aarch64.rpm
    sha:cc5d32350dd4015313dc97a729fb08445a04285003816b1abc6af8ec66315aab
  • dovecot-pigeonhole-2.2.36-8.0.3.el7.tuxcare.els4.i686.rpm
    sha:9eb64ccdf5868ea325579a37e3d7ceb9ebfc583d7df8f405730039b360efdb99
  • dovecot-pigeonhole-2.2.36-8.0.3.el7.tuxcare.els4.x86_64.rpm
    sha:23eac197437f8ef3a567899f5e365ba6814d5fa0e9ba619b185b503ddd27380d
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.