[CLSA-2026:1779360319] dovecot: Fix of CVE-2026-42006
Type:
security
Severity:
Low
Release date:
2026-05-21 10:45:23 UTC
Description:
- CVE-2026-42006: fix imap-login list_count_limit to actually limit open '(' characters; the previous fix limited closing ')' instead, leaving the bracing memory exhaustion vector open
Updated packages:
  • dovecot-2.3.8-9.el8.tuxcare.els5.i686.rpm
    sha:e1f5d97ca430cceffcf703b0a3d51730aa2f3ce60c07b19abdad2c80a6ae7db8
  • dovecot-2.3.8-9.el8.tuxcare.els5.x86_64.rpm
    sha:1b3c8e16fbb50799452c38713f07b25c7d4bdf0a1a4fab24ab65771ba4df64dd
  • dovecot-devel-2.3.8-9.el8.tuxcare.els5.i686.rpm
    sha:fe9944e920a172db4b28e2dc2bf319da25aed80a47441e591ed155abcba38e63
  • dovecot-devel-2.3.8-9.el8.tuxcare.els5.x86_64.rpm
    sha:0101c9f3e3901e2ecfae113c241769024b838de491818528a8feff1dadb03662
  • dovecot-mysql-2.3.8-9.el8.tuxcare.els5.x86_64.rpm
    sha:eee21f18fe3bcb2bfa393b3f6edfb7f7bb73b7186b240164294a2f7802ee7a61
  • dovecot-pgsql-2.3.8-9.el8.tuxcare.els5.x86_64.rpm
    sha:ba5a9f4eb9b132d2e351e6189b704e9c5ae1be7195eef064546b428ad66c1f8c
  • dovecot-pigeonhole-2.3.8-9.el8.tuxcare.els5.x86_64.rpm
    sha:2620b164cdb3732922ca1ed289885d95b82a31f01f488590e9170462ef1a5653
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.