[CLSA-2026:1792237792] dovecot: Fix of 7 CVEs
Type:
security
Severity:
Critical
Release date:
2026-10-17 11:50:09 UTC
Description:
- CVE-2026-40018: fail MySQL string escaping and SQL passdb lookups while not connected instead of escaping without the connection charset; SQL userdb lookups and dict-sql updates also fail temporarily while not connected
Updated packages:
  • dovecot-2.3.16-5.el8.tuxcare.els7.i686.rpm
    sha:85e2a47a7bdf276e0e6c5c5715677fcbe2e64975b485c6fe4b0f1887d1bdd343
  • dovecot-2.3.16-5.el8.tuxcare.els7.x86_64.rpm
    sha:a7de08717ab960c2a6f64273fa65391f506e9ab5dcd9c8b682d4717a8b420f85
  • dovecot-devel-2.3.16-5.el8.tuxcare.els7.i686.rpm
    sha:1ef87c76a969cb426cabeb4d0b29778842e7a7f18a11d662a3f0285bfabdd05a
  • dovecot-devel-2.3.16-5.el8.tuxcare.els7.x86_64.rpm
    sha:a159c07835637c645f31da5eb51f838c29f428440698a4651565462d99b9e82e
  • dovecot-mysql-2.3.16-5.el8.tuxcare.els7.i686.rpm
    sha:f89c13c04e526a2bca9bfb45be7c260e7b6f06f642df00395bd153d6d1f1a2ad
  • dovecot-mysql-2.3.16-5.el8.tuxcare.els7.x86_64.rpm
    sha:b416f8de96d0568a5e6b34283cad725b624a7800049bd309896d67744a299ba9
  • dovecot-pgsql-2.3.16-5.el8.tuxcare.els7.i686.rpm
    sha:a3f96fa4b3c90a8b3b8f6d446c8e38c44e5429b1e6cc25cd096367b33c761d24
  • dovecot-pgsql-2.3.16-5.el8.tuxcare.els7.x86_64.rpm
    sha:92615507e0836116888297d4ce1905b31912b62af33619fd7d1736b92491b92b
  • dovecot-pigeonhole-2.3.16-5.el8.tuxcare.els7.i686.rpm
    sha:0948424c3a3d8c97ee19370d9948af5795c950347026640887ab891c44c27656
  • dovecot-pigeonhole-2.3.16-5.el8.tuxcare.els7.x86_64.rpm
    sha:bbb036af875af3868332b0e45f94287123014401760e643cf4c87621dd6d0cbf
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.