[ALSA-2026:79371] Important: dovecot security update
Type:
security
Severity:
important
Release date:
2026-10-09
Description:
Dovecot is an IMAP server for Linux and other UNIX-like systems, written primarily with security in mind. It also contains a small POP3 server, and supports e-mail in either the maildir or mbox format. The SQL drivers and authentication plug-ins are provided as subpackages. Security Fix(es): * dovecot: Dovecot: Denial of Service via IMAP ID command with excessive parameters (CVE-2026-42391) * dovecot: Dovecot: Authentication bypass via incorrect OAuth2 token validation (CVE-2026-73208) * dovecot: Dovecot: Denial of service via crafted email headers (CVE-2026-27852) * dovecot: Dovecot: Denial of Service via truncated quoted argument in ManageSieve (CVE-2026-40019) * dovecot: Dovecot: Denial of Service and potential message duplication via connection limit exhaustion (CVE-2026-33263) * dovecot: Dovecot: Denial of Service in ManageSieve login process (CVE-2026-33605) * dovecot: Dovecot: Arbitrary Code Execution via Sieve editheader use-after-free (CVE-2026-42007) * dovecot: Dovecot: MySQL multi-byte escaping wrong (CVE-2026-40018) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
References:
Updated packages listed below:
Architecture Package Checksum
aarch64 dovecot-pigeonhole-2.3.21-19.el10_2.8.aarch64.rpm 37b1c7324ce0b120688734871b5fb637975668c290ec2160db0b45082822f856
aarch64 dovecot-pgsql-2.3.21-19.el10_2.8.aarch64.rpm 427ce1ffd2d665200a34a0a33d534e971b81107c900d055141f8fcc648342a82
aarch64 dovecot-mysql-2.3.21-19.el10_2.8.aarch64.rpm 8d16fefee4779dd96f144ccaa6e4dc6ce9a5265be65507699f626a01d0e15ee6
aarch64 dovecot-devel-2.3.21-19.el10_2.8.aarch64.rpm c01aa7b4f691ac62af4c5f1f13a562d06a02748e7c2734ee8d277975ee52a1b2
aarch64 dovecot-2.3.21-19.el10_2.8.aarch64.rpm d668daf1ed181970cf56d6111ba64e13e9250ca39b08e046deaadc789794c5cf
ppc64le dovecot-devel-2.3.21-19.el10_2.8.ppc64le.rpm 1193fdf2859889f229dc3e71e23ec028cb7b49ca7bdaee9b3035026c497fc6f0
ppc64le dovecot-2.3.21-19.el10_2.8.ppc64le.rpm 56b31c9b9f6537c795c3f845ad6b552eb3b11d10a24dd6f3fd92dac00b980262
ppc64le dovecot-mysql-2.3.21-19.el10_2.8.ppc64le.rpm 586255a5cf92c7fcc31d88f76fbe284befcbf7efb6d42df165779f09d88b895c
ppc64le dovecot-pigeonhole-2.3.21-19.el10_2.8.ppc64le.rpm 9b85de391248063893b2391b190bb4d6d2205d0920441f0141753546f2a33599
ppc64le dovecot-pgsql-2.3.21-19.el10_2.8.ppc64le.rpm ef3478f07e0431a0801fc3714c821c59f6de5b8c35aef741d4c13ec6692620ff
s390x dovecot-devel-2.3.21-19.el10_2.8.s390x.rpm 0076e4817817b987e33dc56c432507901d9df088a64a5e3286871da2de6fd73d
s390x dovecot-pgsql-2.3.21-19.el10_2.8.s390x.rpm 03ecd2269af163c906ac0d6b6aeca379b36f82ce1a9cea0bcd3c1635a1231669
s390x dovecot-pigeonhole-2.3.21-19.el10_2.8.s390x.rpm 3a642ce7897a27eef503dfe6822bd7f01aa0d3ee555d463c3c1e74bb54b97f70
s390x dovecot-2.3.21-19.el10_2.8.s390x.rpm 5a19db770673181e0e4dc560c2c5a528508ddd8d409ad8c98f3885513f44341c
s390x dovecot-mysql-2.3.21-19.el10_2.8.s390x.rpm d95b5887172f656cf1c2ec1d6b3beadce6f1aca5eb9a82d10460f61b015f36fe
x86_64 dovecot-mysql-2.3.21-19.el10_2.8.x86_64.rpm 539fc0903595c1ac2908d1b7bc9124c54d3ac6c134fc1b899e72a326af7558af
x86_64 dovecot-devel-2.3.21-19.el10_2.8.x86_64.rpm 5fffe1a0296f1a4b4484c6d3798cedb4fcc02b9099c49436529aa81de44e76a0
x86_64 dovecot-2.3.21-19.el10_2.8.x86_64.rpm a0da375d5feaa8e62fd5caa6c49ff31d8a9ec152014af79e0412913d678dc211
x86_64 dovecot-pigeonhole-2.3.21-19.el10_2.8.x86_64.rpm ad5c2245da1c84fef4a623d2a646adae50ab0bac6fe7e3849993cfa2d5ba67a4
x86_64 dovecot-pgsql-2.3.21-19.el10_2.8.x86_64.rpm d81df5b22a55efb92a71ad03401f3477b2d79f1647faac6a905ade642efa26cb
x86_64_v2 dovecot-mysql-2.3.21-19.el10_2.8.x86_64_v2.rpm 02a2a6c1005a8414673811b62a605b8d1a2e41e434d6f942282c69ca72b0e758
x86_64_v2 dovecot-pgsql-2.3.21-19.el10_2.8.x86_64_v2.rpm 68e1bd593a683e62a61dc0fd7a666b27371d9d3011b7a9d125518c02b8685e18
x86_64_v2 dovecot-2.3.21-19.el10_2.8.x86_64_v2.rpm 761dd2cea433662803f48722f4b9c336698ead57e3b12d7f4bf8d1652f09c7c6
x86_64_v2 dovecot-devel-2.3.21-19.el10_2.8.x86_64_v2.rpm 789e443985b438f50b70390ff6eab3425c604eddb34ef60a4187958b371e3664
x86_64_v2 dovecot-pigeonhole-2.3.21-19.el10_2.8.x86_64_v2.rpm d6c2b5acfd8ce3c1f88f043470e8108699ab2fdb45cc24682ac7d6f185aa4720
Notes:
This page is generated automatically from Red Hat security data and has not been checked for errors. For clarification or corrections please contact the AlmaLinux Packaging Team.