Release date:
2026-10-30 08:50:23 UTC
Description:
- CVE-2026-33605: fix pre-auth managesieve-login DoS on a lone CR and
unterminated lines
- CVE-2026-42391: limit the ID key/value pairs accounted before login
- CVE-2026-40018: fail MySQL escaping instead of falling back to
charset-unaware escaping
Updated packages:
-
dovecot-2.2.36-8.0.3.el7.tuxcare.els4.i686.rpm
sha:de106954cf60e03256d2509ad1415d8f8b931c4db25519ac817fc2a77efff61f
-
dovecot-2.2.36-8.0.3.el7.tuxcare.els4.x86_64.rpm
sha:55cff63d6213653347bcbc08138128ba035248ecdfdd1bbe4b10e2481f9757d6
-
dovecot-devel-2.2.36-8.0.3.el7.tuxcare.els4.i686.rpm
sha:5ccf15f9496f478092aa9e8a3626f4466d715d807cb9a30c88289b21fd3723f9
-
dovecot-devel-2.2.36-8.0.3.el7.tuxcare.els4.x86_64.rpm
sha:f8f78a186d2ad4d025055378c3c3cda8dc48085a609c4951021456cec68fbccb
-
dovecot-mysql-2.2.36-8.0.3.el7.tuxcare.els4.i686.rpm
sha:b85e2eaf049c70186b1ad8620ed783bf77c8d2e33a256f948ae89555bf7cb8a5
-
dovecot-mysql-2.2.36-8.0.3.el7.tuxcare.els4.x86_64.rpm
sha:4fb240b1a5cee821d9c85b228373f4c487fdab2bd003a702279752c564f839b3
-
dovecot-pgsql-2.2.36-8.0.3.el7.tuxcare.els4.i686.rpm
sha:c6389d9c78eb9cf687940e2afce8ca76cd5844dbb4550eb4c03d936b09d55a20
-
dovecot-pgsql-2.2.36-8.0.3.el7.tuxcare.els4.x86_64.rpm
sha:67cd7d0ae9e27ddd07e40e052809b54478c4ecfdc3edd198681d24ff33c32c8e
-
dovecot-pigeonhole-2.2.36-8.0.3.el7.tuxcare.els4.i686.rpm
sha:818255c04b5ef1a8dac8f54023b93dec9f68e4748ccb49e16aff9aa47acadf90
-
dovecot-pigeonhole-2.2.36-8.0.3.el7.tuxcare.els4.x86_64.rpm
sha:831591a404fd3bd91bb7d1109d686dce2e846b662b3fd6e5ea6e06aa412f000e
Notes:
This page is generated automatically and has not been checked for errors. For clarification or
corrections please contact the
CloudLinux Packaging Team.
