[CLSA-2026:1792764227] dovecot: Fix of CVE-2026-42007
Type:
security
Severity:
Critical
Release date:
2026-10-23 14:03:58 UTC
Description:
- CVE-2026-42007: deliver the bundled pigeonhole edit-mail fix with direct regressions for no-snapshot deletion and header replacement
CVEs fixed:
Updated packages:
  • dovecot-2.2.36-8.0.3.el7.tuxcare.els3.i686.rpm
    sha:89ce6a0c491b8f7633cf2a071d73cec24f98f462d06cff65f5c0f06fbb124876
  • dovecot-2.2.36-8.0.3.el7.tuxcare.els3.x86_64.rpm
    sha:8c1458c9f3fa94ec65f4d5fc98aeb95169d3f6790a3ecc9fd21b594b6b015f70
  • dovecot-devel-2.2.36-8.0.3.el7.tuxcare.els3.i686.rpm
    sha:e02728cfa2431316d34b91a399b65494fa1b2e85b7f5669534b4cc8e308b50e2
  • dovecot-devel-2.2.36-8.0.3.el7.tuxcare.els3.x86_64.rpm
    sha:2074179109a3fe6970c9ae4d6a25cdf63c5c29d2d01d87c054951814c82ca3a3
  • dovecot-mysql-2.2.36-8.0.3.el7.tuxcare.els3.i686.rpm
    sha:5f81365f0aee672250ef9c46e43c86735cb338861791894bb43d67f0453e8050
  • dovecot-mysql-2.2.36-8.0.3.el7.tuxcare.els3.x86_64.rpm
    sha:f2e689c9bd122d065dca7ea4d525dc0be804dad912d960d22631761c109fcb12
  • dovecot-pgsql-2.2.36-8.0.3.el7.tuxcare.els3.i686.rpm
    sha:3988a53b2e02edcd0d8e66bfb6e40981bf3acb47aaa18223188cae1c8e176578
  • dovecot-pgsql-2.2.36-8.0.3.el7.tuxcare.els3.x86_64.rpm
    sha:1032b13f7c48858632f5cb0a6f01f8b406b0fa1271b85b6bd5ab94471dfce6fc
  • dovecot-pigeonhole-2.2.36-8.0.3.el7.tuxcare.els3.i686.rpm
    sha:15b12edf9668a3f3d5d9ae3243b2eaafd5cdc821cf19eed1f422755820150fc1
  • dovecot-pigeonhole-2.2.36-8.0.3.el7.tuxcare.els3.x86_64.rpm
    sha:1f1753f6dd52ba6b349a9b2f8cbf94c262f0f9e0952b23005c145eaa6075868b
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.