[CLSA-2026:1792764393] dovecot: Fix of CVE-2026-42007
Type:
security
Severity:
Critical
Release date:
2026-10-23 15:24:48 UTC
Description:
- CVE-2026-42007: deliver the bundled pigeonhole edit-mail fix with direct regressions for no-snapshot deletion and header replacement
CVEs fixed:
Updated packages:
  • dovecot-2.2.36-8.0.3.el7.tuxcare.els3.i686.rpm
    sha:d71cf03b5bec775b3365ea574ee46c01283e4e16f9c9458c94374a81606cab20
  • dovecot-2.2.36-8.0.3.el7.tuxcare.els3.x86_64.rpm
    sha:34d0067ac156f81948f5042b83feb97488a15c4a44c917647244314dcdad9309
  • dovecot-devel-2.2.36-8.0.3.el7.tuxcare.els3.i686.rpm
    sha:177b22cb1b7d8b70ba4546951f0fe2c58a0f8cf104552f30031fb38ead2097ae
  • dovecot-devel-2.2.36-8.0.3.el7.tuxcare.els3.x86_64.rpm
    sha:16219efaa79200fec2e6a04eac22dbfa9134704a2337e66afe35198ffadcae08
  • dovecot-mysql-2.2.36-8.0.3.el7.tuxcare.els3.i686.rpm
    sha:4cf791d7683fda598b7f659623efc3b2270c6a0d33e9867d72b9567b4bf19531
  • dovecot-mysql-2.2.36-8.0.3.el7.tuxcare.els3.x86_64.rpm
    sha:15b2f337b9e1d5ee0ead95f0b2d2748ff1e0211ac4aa7fb2016c3f7fd07f85b1
  • dovecot-pgsql-2.2.36-8.0.3.el7.tuxcare.els3.i686.rpm
    sha:2f9d8e222ef473ad4748aee69082850e5d1c7146534cf2ee29a0b683908bc774
  • dovecot-pgsql-2.2.36-8.0.3.el7.tuxcare.els3.x86_64.rpm
    sha:7148fab19e688b06cd7987d692d6d49d7d685fce182d1aa1f99a6a1a35ac012b
  • dovecot-pigeonhole-2.2.36-8.0.3.el7.tuxcare.els3.i686.rpm
    sha:ab42c5119038c49f76ef06da6edd211a77c43dbbbe96dcaa4b00405e9afd2114
  • dovecot-pigeonhole-2.2.36-8.0.3.el7.tuxcare.els3.x86_64.rpm
    sha:da7a989f6c5af7c6c7f2892f9b1265fe3e876969ca2929c0693da063901dff17
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.