[CLSA-2026:1782386807] Fix CVE(s): CVE-2026-42006
Type:
security
Severity:
Important
Release date:
2026-06-25 11:27:01 UTC
Description:
* SECURITY UPDATE: imap-login excessive memory usage DoS via too many '(' in IMAP list (ELSCVE-127370) - debian/patches/CVE-2026-42006.patch: move list_count_limit check and counter increment into imap_parser_open_list() so '(' is what is actually bounded (the previous CVE-2026-27857 fix only limited ')'). Backport of upstream commit da1438c76b797f. - CVE-2026-42006
CVEs fixed:
Updated packages:
  • dovecot-auth-lua_2.3.7.2-1ubuntu3.7+tuxcare.els2_amd64.deb
    sha:f6ec8f41e5941a12745a718d2c0ee64f991036ca
  • dovecot-core_2.3.7.2-1ubuntu3.7+tuxcare.els2_amd64.deb
    sha:89fc90d910b42e93cf965320f71d17bc62fe65cd
  • dovecot-dev_2.3.7.2-1ubuntu3.7+tuxcare.els2_amd64.deb
    sha:19ddbdca4d047b88e43f7b81175b81b0195d422f
  • dovecot-gssapi_2.3.7.2-1ubuntu3.7+tuxcare.els2_amd64.deb
    sha:11695689e1db33d62e32ae7c12cb4149b2533d24
  • dovecot-imapd_2.3.7.2-1ubuntu3.7+tuxcare.els2_amd64.deb
    sha:0cf89ea3cf5e3d4f450409fc62946d2cc54a9e6d
  • dovecot-ldap_2.3.7.2-1ubuntu3.7+tuxcare.els2_amd64.deb
    sha:dcaff13079cc5787277d6d20e9f62ee3a98bc97c
  • dovecot-lmtpd_2.3.7.2-1ubuntu3.7+tuxcare.els2_amd64.deb
    sha:2af1adae205d655db87b2d71060faba850613366
  • dovecot-lucene_2.3.7.2-1ubuntu3.7+tuxcare.els2_amd64.deb
    sha:ff05ffea74576f9b376b68e6be9637e983cd1cd4
  • dovecot-managesieved_2.3.7.2-1ubuntu3.7+tuxcare.els2_amd64.deb
    sha:138447d0267112e75520266058867675fcdd3a39
  • dovecot-mysql_2.3.7.2-1ubuntu3.7+tuxcare.els2_amd64.deb
    sha:4d99b6ae768974736960e66db36645611b5b86c1
  • dovecot-pgsql_2.3.7.2-1ubuntu3.7+tuxcare.els2_amd64.deb
    sha:176c9bb4bac07fb35cadac32989b34c01bb89e4b
  • dovecot-pop3d_2.3.7.2-1ubuntu3.7+tuxcare.els2_amd64.deb
    sha:f9712d7b00f0460ba5ddd99156f0e95c34479a19
  • dovecot-sieve_2.3.7.2-1ubuntu3.7+tuxcare.els2_amd64.deb
    sha:380685660c1718b25950c419b2872b040afb2d05
  • dovecot-solr_2.3.7.2-1ubuntu3.7+tuxcare.els2_amd64.deb
    sha:7f53c636c2e5f88ad9eb8e17cd2a8977b87e64fe
  • dovecot-sqlite_2.3.7.2-1ubuntu3.7+tuxcare.els2_amd64.deb
    sha:d3a3b39fb89cfdce5f1adfb7985763b50429d18f
  • dovecot-submissiond_2.3.7.2-1ubuntu3.7+tuxcare.els2_amd64.deb
    sha:ba9fd1d7953c05a1e660da0ef5b225d14a57396f
  • mail-stack-delivery_2.3.7.2-1ubuntu3.7+tuxcare.els2_all.deb
    sha:75c7e7c316587d2aa0c42183bd0ab4cff74a26a5
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.