[CLSA-2026:1792753238] dovecot: Fix of CVE-2026-42007
Type:
security
Severity:
Critical
Release date:
2026-10-23 23:40:23 UTC
Description:
- CVE-2026-42007: fix use-after-free and NUL-truncated header info leak in bundled pigeonhole edit-mail
CVEs fixed:
Updated packages:
  • dovecot-2.2.36-8.0.3.el7.tuxcare.els2.i686.rpm
    sha:51046697a85e4f4ec1ce927530cf393ec5ea5d7ec0f40c18cb5d2b579728bdfd
  • dovecot-2.2.36-8.0.3.el7.tuxcare.els2.x86_64.rpm
    sha:83baa53a76c3e13da8fe11ce85d2b23fecbf496bb68ca9f7501d73cc966f382b
  • dovecot-devel-2.2.36-8.0.3.el7.tuxcare.els2.i686.rpm
    sha:40a5f0d650d29766325788c5205fcfd13503467d2d878bede50f9321cc0b14a0
  • dovecot-devel-2.2.36-8.0.3.el7.tuxcare.els2.x86_64.rpm
    sha:2e1f18c259d6b5ccc5cc6da166edf2862c8ab739a8b053e5df5ec6ddc3f4e45a
  • dovecot-mysql-2.2.36-8.0.3.el7.tuxcare.els2.i686.rpm
    sha:5dc4142fe767e3e880c2a119d26c0e59c624ceb5676f3f320f93f4b0a0f3f35a
  • dovecot-mysql-2.2.36-8.0.3.el7.tuxcare.els2.x86_64.rpm
    sha:76ab486f6d00bec85efc5ea0c2d155ec00500396e6b529bacf63fedc0b6c961d
  • dovecot-pgsql-2.2.36-8.0.3.el7.tuxcare.els2.i686.rpm
    sha:744e5025015d04ffebcfbc48ec37c1ca0715f61d58b412452ce30501805817a5
  • dovecot-pgsql-2.2.36-8.0.3.el7.tuxcare.els2.x86_64.rpm
    sha:6a5b2d9a5b444f0e2b0f1e42ed8b65228145d44eb51071cf9c0927f0dd155177
  • dovecot-pigeonhole-2.2.36-8.0.3.el7.tuxcare.els2.i686.rpm
    sha:1ad204b28cccdab4f5e0d3563806778c0943921e07eb55211193c69b5c62048a
  • dovecot-pigeonhole-2.2.36-8.0.3.el7.tuxcare.els2.x86_64.rpm
    sha:6a17945a5150058a5ff27c1890e139c00c3f04696a4515bf19c1c89808f521e1
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.