[ALSA-2026:41988] Important: dovecot security update
Type:
security
Severity:
important
Release date:
2026-07-21
Description:
Dovecot is an IMAP server for Linux and other UNIX-like systems, written primarily with security in mind. It also contains a small POP3 server, and supports e-mail in either the maildir or mbox format. The SQL drivers and authentication plug-ins are provided as subpackages. Security Fix(es): * dovecot: Dovecot: Denial of Service via excessive IMAP bracing (CVE-2026-42006) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
References:
Updated packages listed below:
Architecture Package Checksum
aarch64 dovecot-mysql-2.3.21-19.el10_2.1.aarch64.rpm 0cc4e82701328867ae5dcb30576004e3d0774b9e57304ffba3af60f269aceccd
aarch64 dovecot-pigeonhole-2.3.21-19.el10_2.1.aarch64.rpm 1244e628fdd7b954d6cc961cb88115ce509e8c894a7af3d27332bb819b8f6885
aarch64 dovecot-pgsql-2.3.21-19.el10_2.1.aarch64.rpm 58925838e6b2133845eea141d82a3739423e297b8cb19365cfad7d9456e2235b
aarch64 dovecot-2.3.21-19.el10_2.1.aarch64.rpm d3fd560d9cc1c11a4fac3b5b5bd64adc43ec44e1a7769d27efdab64bfd3030bc
aarch64 dovecot-devel-2.3.21-19.el10_2.1.aarch64.rpm fcf793f83cc82107a60082de67713d100e24058c69116bb0ac32e1dfdc84f98a
ppc64le dovecot-2.3.21-19.el10_2.1.ppc64le.rpm 1540914ea650ff12aaf4c8769a543cafc46e53b8965aad71b6e6415c60e870c8
ppc64le dovecot-devel-2.3.21-19.el10_2.1.ppc64le.rpm 3943f6fe5fd10ebc1d297f537d61e70fa2bd065fc457c9e494d9a835bf75ce13
ppc64le dovecot-mysql-2.3.21-19.el10_2.1.ppc64le.rpm 7c2e9561aa41fdb1a3093858f9d1939f8d332cce45dd164ef87037cbc4b7472b
ppc64le dovecot-pigeonhole-2.3.21-19.el10_2.1.ppc64le.rpm aed222dd13417461ac4f2c4f65a68a76480c6e5ef9c7f2bd8462cf8723c2c5b2
ppc64le dovecot-pgsql-2.3.21-19.el10_2.1.ppc64le.rpm fb014b3016020548cc29d2d88fd631d87d36f5de5a1e93de269644e8eb3c6cf3
s390x dovecot-mysql-2.3.21-19.el10_2.1.s390x.rpm 041ff952f1d5a37e0d613661a830731e9006d2a118def53eef37edaa9545a3bd
s390x dovecot-pgsql-2.3.21-19.el10_2.1.s390x.rpm 1120234b76200e8201dbdef3cc68825c2a15be48e304dc81bc3b538492fc7a07
s390x dovecot-2.3.21-19.el10_2.1.s390x.rpm 974ea14fcefebf150d1e64d28f2118f4a6060bc6b8ab2011e4232dd0c464da7d
s390x dovecot-pigeonhole-2.3.21-19.el10_2.1.s390x.rpm af45812115eac7c02af1f5ca71eff4e66b2a43efc3dd0f754d45c1618a4a2a2b
s390x dovecot-devel-2.3.21-19.el10_2.1.s390x.rpm c0e9bae7a51ad554ddb2e71265bf749a2d8ed93b8c26e0a4422cca15c5807d85
x86_64 dovecot-devel-2.3.21-19.el10_2.1.x86_64.rpm 0f5b984bd780f03bae74ae53b21549f96bab0ce3edc64b38a57af2b40e3e5351
x86_64 dovecot-2.3.21-19.el10_2.1.x86_64.rpm 4824e508650503be534ae89b6fb06330c93733800a3e67a37f08f6a2d3b72aaf
x86_64 dovecot-pgsql-2.3.21-19.el10_2.1.x86_64.rpm 68cada4f35da914cad80aaeb910923ef3b1e32bfb184475d1480305b8824236f
x86_64 dovecot-mysql-2.3.21-19.el10_2.1.x86_64.rpm 83f3a80520deddb30284930d57cd6b25105908d6a5799ed620e0b7f99c9786db
x86_64 dovecot-pigeonhole-2.3.21-19.el10_2.1.x86_64.rpm cc1ba16d1cce6b975b0a1628f444b509a937f052711e6ea0a2aa1ed22e567b01
x86_64_v2 dovecot-devel-2.3.21-19.el10_2.1.x86_64_v2.rpm 51fdbcd2d4d51ba532df306c058208cc2709eb9535af877de2a299a02ed3c9d9
x86_64_v2 dovecot-2.3.21-19.el10_2.1.x86_64_v2.rpm 7b5acf171b3c43c8de8fafb9a136e28b9b72aaa602ed703d3c5acd3bd89d3528
x86_64_v2 dovecot-mysql-2.3.21-19.el10_2.1.x86_64_v2.rpm 99d43321e8cb84b4c06d2d1a9cb4deb1192e0356d32c7ed15b04221a6c2d094c
x86_64_v2 dovecot-pigeonhole-2.3.21-19.el10_2.1.x86_64_v2.rpm b9b3c6713abda18d9a888ed048ed35f164dda7108c0be701efde378cba325b89
x86_64_v2 dovecot-pgsql-2.3.21-19.el10_2.1.x86_64_v2.rpm cdc546a2e3fb28025497fed9daa51035b2961f33a1d35622f238c3ff8106a2c4
Notes:
This page is generated automatically from Red Hat security data and has not been checked for errors. For clarification or corrections please contact the AlmaLinux Packaging Team.