[CLSA-2026:1792596933] dovecot: Fix of CVE-2026-42007
Type:
security
Severity:
Critical
Release date:
2026-10-21 15:35:44 UTC
Description:
- CVE-2026-42007: pigeonhole: sieve editheader: reset header-index first pointers before rebuilding the index and copy raw header data with memcpy instead of i_strndup
CVEs fixed:
Updated packages:
  • dovecot-2.3.16-15.el9.tuxcare.els5.aarch64.rpm
    sha:b539c7a569bf139e814b6962aa8d7a555486362b7976dc21562079b5624c06b5
  • dovecot-2.3.16-15.el9.tuxcare.els5.i686.rpm
    sha:6d67046e946a89ff50ba5c6326cb555f01cbc3fbcbecb74582fbfc8b8219fc4d
  • dovecot-2.3.16-15.el9.tuxcare.els5.x86_64.rpm
    sha:fa6a4eab8a839c78025392e9e34580771efb189ab2ce23aa74534523516f60be
  • dovecot-devel-2.3.16-15.el9.tuxcare.els5.aarch64.rpm
    sha:cc6d79a8d0e875594ed0f36da4b9e5981fa7290d906e6616f3585068b855f480
  • dovecot-devel-2.3.16-15.el9.tuxcare.els5.i686.rpm
    sha:344751c097a02c7b771a80917ffd3b729ffe005b8e8230f93ec90d186d5fa15e
  • dovecot-devel-2.3.16-15.el9.tuxcare.els5.x86_64.rpm
    sha:811e27d40813ad5ffbd9f7339e7e486aeea58f828e1445aefa5e7e9028f6d5b1
  • dovecot-mysql-2.3.16-15.el9.tuxcare.els5.aarch64.rpm
    sha:c6a09603a50db1903408a31f073243095c2be190a57fc73311f771de6ce68495
  • dovecot-mysql-2.3.16-15.el9.tuxcare.els5.i686.rpm
    sha:dcefb8ba4348c28d509425a74bc56e30ecabafde590d265e5c60a26a7b6619cb
  • dovecot-mysql-2.3.16-15.el9.tuxcare.els5.x86_64.rpm
    sha:c851e6c414743a6af36b19430d57deb3dee3153cac2e3ab909effa25c8858194
  • dovecot-pgsql-2.3.16-15.el9.tuxcare.els5.aarch64.rpm
    sha:780144c3e0c0089bb5b1935b1580b2cd6b1f6ead5de6a8f221e1a50659cf7430
  • dovecot-pgsql-2.3.16-15.el9.tuxcare.els5.i686.rpm
    sha:d43f39626fc1b4f8954440a995065ecd474f4c5af9fb22e70b78d42234515cca
  • dovecot-pgsql-2.3.16-15.el9.tuxcare.els5.x86_64.rpm
    sha:bfaf1870f6ae6a9dd6895992e1d17e23d2ffbfc6d735211ba28953a46940d242
  • dovecot-pigeonhole-2.3.16-15.el9.tuxcare.els5.aarch64.rpm
    sha:f67b0ae46eb76bd89ea7b24c13c9018a6a4cf24f3c9432cda83226d4bd428619
  • dovecot-pigeonhole-2.3.16-15.el9.tuxcare.els5.i686.rpm
    sha:61f50f5ccb16538274cb381a00f9994ddfddd73343d6700012437ff87bd94b4a
  • dovecot-pigeonhole-2.3.16-15.el9.tuxcare.els5.x86_64.rpm
    sha:9164c150c1e1b0a5e53a57098a2e22f22ed5d293ae06dd72cce04d3fea65b862
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.