Release date:
2026-10-27 07:10:05 UTC
Description:
- CVE-2026-33605: fix pre-auth managesieve-login DoS on a lone CR and
unterminated lines
- CVE-2026-42391: limit the ID key/value pairs accounted before login
- CVE-2026-40018: fail MySQL escaping instead of falling back to
charset-unaware escaping
Updated packages:
-
dovecot-2.2.36-8.0.3.el7.tuxcare.els4.i686.rpm
sha:8907c75d46dd12c2ab49af9ca9f6aeb46e432b56d4e34a4c0c0903c28fce62d8
-
dovecot-2.2.36-8.0.3.el7.tuxcare.els4.x86_64.rpm
sha:42bd43badc17eb6f5601f78fde55024f415a1587ba9517c923b29989aaa5bbbf
-
dovecot-devel-2.2.36-8.0.3.el7.tuxcare.els4.i686.rpm
sha:7ec593a547598daeb2abe3fc5eb95d57ae3c4514a01763171bfbc66e49630fe0
-
dovecot-devel-2.2.36-8.0.3.el7.tuxcare.els4.x86_64.rpm
sha:2fb400c190d4d0983c511e32887f387a91825ee392d227c25aa767ca59aadeed
-
dovecot-mysql-2.2.36-8.0.3.el7.tuxcare.els4.i686.rpm
sha:ae574300f3db1a34c1e4d8c0d8384a670682f9bbd3ba157c2bb6ff2f01ac79d7
-
dovecot-mysql-2.2.36-8.0.3.el7.tuxcare.els4.x86_64.rpm
sha:c9bc001db3f1f0f11a93c86efcc9691e814628ad341a36f380d471dbbce87ea5
-
dovecot-pgsql-2.2.36-8.0.3.el7.tuxcare.els4.i686.rpm
sha:6877ea0594407ee4aeb85bbeed942307308b4ce77d6a405d80de0ced8073577a
-
dovecot-pgsql-2.2.36-8.0.3.el7.tuxcare.els4.x86_64.rpm
sha:1935e07de032ad3156b83a7b997fadbbaf472e249d77025516ff2b2f710dec7d
-
dovecot-pigeonhole-2.2.36-8.0.3.el7.tuxcare.els4.i686.rpm
sha:aa46e9690b1c31e5d4c2a5c55f8252ce61b924592955afd62273e66e968a7355
-
dovecot-pigeonhole-2.2.36-8.0.3.el7.tuxcare.els4.x86_64.rpm
sha:7569a291baefef650738da0f78ff517abaa44ad232fcaa0f621438839dc131b7
Notes:
This page is generated automatically and has not been checked for errors. For clarification or
corrections please contact the
CloudLinux Packaging Team.
