[CLSA-2026:1779371000] dovecot: Fix of 2 CVEs
Type:
security
Severity:
Low
Release date:
2026-05-21 15:39:15 UTC
Description:
- CVE-2026-42006: lib-imap: fix list_count_limit to actually count open '(' instead of close ')', preventing an imap-login memory-exhaustion DoS that bypassed the CVE-2026-27857 fix
Updated packages:
  • dovecot-2.0.9-23.el6.tuxcare.els5.i686.rpm
    sha:231abad86accc54b56d0bdefaa35927f15235b911322e42e62c1b0c15ccd4378
  • dovecot-2.0.9-23.el6.tuxcare.els5.x86_64.rpm
    sha:0145abd97223ec0bb7b0494865692198d28ac90afb2835104f8d33f4fe90afc1
  • dovecot-devel-2.0.9-23.el6.tuxcare.els5.i686.rpm
    sha:86ecb8714e641fdad78a53dad278918d928abb775aa33b8225de4fb7fb084b04
  • dovecot-devel-2.0.9-23.el6.tuxcare.els5.x86_64.rpm
    sha:24f29540b3ea4ba0d9ec7dae41c42341159f21864260fa0841ad2a2f0f288c58
  • dovecot-mysql-2.0.9-23.el6.tuxcare.els5.x86_64.rpm
    sha:4db5c77900f316ef5c6923ab41f7534ff2caf585accc81b6d53ae101b38b43a6
  • dovecot-pgsql-2.0.9-23.el6.tuxcare.els5.x86_64.rpm
    sha:a98b7621558151a9905a7c4d47bc723ef9adddb44f0796c4a191eb0953de8fb3
  • dovecot-pigeonhole-2.0.9-23.el6.tuxcare.els5.x86_64.rpm
    sha:387e65c6335b63213b4a95b360d7e6f3e209cd27d1c0c13ee7448ac2ba8b5236
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.