[CLSA-2026:1792238249] dovecot: Fix of 5 CVEs
Type:
security
Severity:
Critical
Release date:
2026-10-17 11:57:41 UTC
Description:
- CVE-2026-40018: fail MySQL string escaping and SQL passdb lookups while not connected instead of escaping without the connection charset; SQL userdb lookups and dict-sql updates also fail temporarily while not connected
Updated packages:
  • dovecot-2.3.8-9.el8.tuxcare.els8.i686.rpm
    sha:48536dff825204775fed2648f5cf567375a3e5fbf915297b74d7703b6c225c3a
  • dovecot-2.3.8-9.el8.tuxcare.els8.x86_64.rpm
    sha:d8e7705e47efcb6b2ebb15515d328cb915c5cfa12d2f55b828a046e42b8cb7ae
  • dovecot-devel-2.3.8-9.el8.tuxcare.els8.i686.rpm
    sha:32844f222b497ecd4c0226c167970cf7a7b22e9117e649be5fba7f54f7206549
  • dovecot-devel-2.3.8-9.el8.tuxcare.els8.x86_64.rpm
    sha:d9b080415b80f57ebbbf7b29e9939997127f1e9c96412335f9f5b3bca78081f2
  • dovecot-mysql-2.3.8-9.el8.tuxcare.els8.i686.rpm
    sha:1dead3019fddac9ba655d51d69e09c6790828a5f5cd682c8a5b1bff958a7e135
  • dovecot-mysql-2.3.8-9.el8.tuxcare.els8.x86_64.rpm
    sha:5b39d3759de01a6d5891403b5f6d9f59ab79cdd9d28cdecd00dd5e7c6b2dce1e
  • dovecot-pgsql-2.3.8-9.el8.tuxcare.els8.i686.rpm
    sha:81dedee486830265c069dea524770e1c289c04b8a6707608c9c514c2ce3fb6a9
  • dovecot-pgsql-2.3.8-9.el8.tuxcare.els8.x86_64.rpm
    sha:29980124d6e5e08dc742dfaa3f28e84338bf8aaea8785302f6605d1fdee657f0
  • dovecot-pigeonhole-2.3.8-9.el8.tuxcare.els8.i686.rpm
    sha:9eca5efb15a669e583a1dba5dc4fbab75754a159a9b6ea631520ea71e9d45ccf
  • dovecot-pigeonhole-2.3.8-9.el8.tuxcare.els8.x86_64.rpm
    sha:2f82195fabd661690044566a2cdef51c8a4ad53bfea4ea6e3265c7208f5f9843
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.