Release date:
2026-10-27 12:28:45 UTC
Description:
- CVE-2026-33605: fix pre-auth managesieve-login DoS on a lone CR and
unterminated lines
- CVE-2026-42391: limit the ID key/value pairs accounted before login
- CVE-2026-40018: fail MySQL escaping instead of falling back to
charset-unaware escaping
Updated packages:
-
dovecot-2.2.36-8.0.3.el7.tuxcare.els4.i686.rpm
sha:f69eba33af8ac37f335fccc330fdab22df15db2f0004de54c457d731e0b17a25
-
dovecot-2.2.36-8.0.3.el7.tuxcare.els4.x86_64.rpm
sha:bf3a6d0bb86f3f478c8551757edcd23000789b83fdaf22b85e6fb0be161b17c3
-
dovecot-devel-2.2.36-8.0.3.el7.tuxcare.els4.i686.rpm
sha:d1a28245a5b6c866b64f103b9c987c13ced6f277bd024d1493dbc221210cf024
-
dovecot-devel-2.2.36-8.0.3.el7.tuxcare.els4.x86_64.rpm
sha:d121f9878115b9994e494768c1fedb4426e7745fbaa3e4e96de9ae966b3ec043
-
dovecot-mysql-2.2.36-8.0.3.el7.tuxcare.els4.i686.rpm
sha:85ebed68916d68e734f8af7c21638383262f213b85e7c1304787e8cdd9842533
-
dovecot-mysql-2.2.36-8.0.3.el7.tuxcare.els4.x86_64.rpm
sha:927f48c8a87c0ecee289e6ebde346d998701050385ca905608bdd1ba265c97d2
-
dovecot-pgsql-2.2.36-8.0.3.el7.tuxcare.els4.i686.rpm
sha:21e9394dc96532b6f32592035821416ae4e07029fe8c1ddb333d32a18dcbc897
-
dovecot-pgsql-2.2.36-8.0.3.el7.tuxcare.els4.x86_64.rpm
sha:c36654e1c985594d8f3944327b122c7492751174d17672e81bd2de172a69b39c
-
dovecot-pigeonhole-2.2.36-8.0.3.el7.tuxcare.els4.i686.rpm
sha:c0560cff3559f74c9e873da66f70d46f99db9b2a2c361f6a48dc05c14587c81c
-
dovecot-pigeonhole-2.2.36-8.0.3.el7.tuxcare.els4.x86_64.rpm
sha:73c687d6285e696dbff96ef93f16e22b737dac34f05a9fec0dc1cb650e71fbd0
Notes:
This page is generated automatically and has not been checked for errors. For clarification or
corrections please contact the
CloudLinux Packaging Team.
