[CLSA-2026:1792753135] dovecot: Fix of CVE-2026-42007
Type:
security
Severity:
Critical
Release date:
2026-10-23 10:59:05 UTC
Description:
- CVE-2026-42007: fix use-after-free and NUL-truncated header info leak in bundled pigeonhole edit-mail
CVEs fixed:
Updated packages:
  • dovecot-2.2.36-8.0.3.el7.tuxcare.els2.i686.rpm
    sha:838be9b34d786e61f716b88b212a4e05f7e9865b3c8106b83137c08a6d849e28
  • dovecot-2.2.36-8.0.3.el7.tuxcare.els2.x86_64.rpm
    sha:aaf96be2c7c055680b458391ca4a0fd3607ede2425fdb4eccf4700707d4bdebd
  • dovecot-devel-2.2.36-8.0.3.el7.tuxcare.els2.i686.rpm
    sha:2ed419928e5d268378f37275f1f405bc9b3de9e1a64331024129fb5bfb57fcfc
  • dovecot-devel-2.2.36-8.0.3.el7.tuxcare.els2.x86_64.rpm
    sha:2c62a51f3f1cc94b979ac857b0ba8385fc366c42f539d753bf6b4d093f9e8c17
  • dovecot-mysql-2.2.36-8.0.3.el7.tuxcare.els2.i686.rpm
    sha:53716acdc9eca6633fb56ae7ccb61effb5bfe281870d6bb3f89b3b513faa77bd
  • dovecot-mysql-2.2.36-8.0.3.el7.tuxcare.els2.x86_64.rpm
    sha:88e1234908cf7182298110758a67b686b886ada2f9fee8cada1b6bef5ca0d0d8
  • dovecot-pgsql-2.2.36-8.0.3.el7.tuxcare.els2.i686.rpm
    sha:ce1c7f529e9d5486d58b0a8c1b27200b09862dd213d432325d3877e98c7f1cb1
  • dovecot-pgsql-2.2.36-8.0.3.el7.tuxcare.els2.x86_64.rpm
    sha:8c2d64fb4b23076d1e7e4e9b1c83c3fff7726aeb1c1c89f1ad8648a542fb5b92
  • dovecot-pigeonhole-2.2.36-8.0.3.el7.tuxcare.els2.i686.rpm
    sha:8463dab0ad996cd612351a26e5af66f87cb9d70229e1193fe16b595a1dade205
  • dovecot-pigeonhole-2.2.36-8.0.3.el7.tuxcare.els2.x86_64.rpm
    sha:a991e3c5f1c0159397d926d81b24c5355f1a71a8152c4790dea6e39cfc494391
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.