[CLSA-2026:1792753365] dovecot: Fix of CVE-2026-42007
Type:
security
Severity:
Critical
Release date:
2026-10-23 11:02:55 UTC
Description:
- CVE-2026-42007: fix use-after-free and NUL-truncated header info leak in bundled pigeonhole edit-mail
CVEs fixed:
Updated packages:
  • dovecot-2.2.36-8.0.3.el7.tuxcare.els2.i686.rpm
    sha:67c49bea11994acdddcf75e1afaf67a1295ee7ef6826f59b3b79184cc562d169
  • dovecot-2.2.36-8.0.3.el7.tuxcare.els2.x86_64.rpm
    sha:5495addd64ca20aa0f25755525db7ea80e8f4dec1e22a669a250fa730f11f443
  • dovecot-devel-2.2.36-8.0.3.el7.tuxcare.els2.i686.rpm
    sha:9d6b150f61abe7ab00946a60bd599565e4f869883adff58fc6c765bc24c28da5
  • dovecot-devel-2.2.36-8.0.3.el7.tuxcare.els2.x86_64.rpm
    sha:61bd7f79256deec927a750e17e448e9b2740f0f165af0e3cf5015f791126d06d
  • dovecot-mysql-2.2.36-8.0.3.el7.tuxcare.els2.i686.rpm
    sha:19b6db0e32a5d527441583d5c4fa39187606043bbb6b9d500862d8513af6af6c
  • dovecot-mysql-2.2.36-8.0.3.el7.tuxcare.els2.x86_64.rpm
    sha:a3f0a45e49e03fe715717799663c914bd451b2e4a696729381349fceaf97127d
  • dovecot-pgsql-2.2.36-8.0.3.el7.tuxcare.els2.i686.rpm
    sha:05efd97ba039da0f4ffa577a26569bbdd9d288f0cdcfaf9445066086263acb13
  • dovecot-pgsql-2.2.36-8.0.3.el7.tuxcare.els2.x86_64.rpm
    sha:6af5c1a1c94ea247d1588a0a101fda7cc2143c5d43c0ab9f5cd9b2acdc576fad
  • dovecot-pigeonhole-2.2.36-8.0.3.el7.tuxcare.els2.i686.rpm
    sha:8af468a0fed843787d0fd5fc119444ff1321871dbf88491e3e45d55f3cf0a2df
  • dovecot-pigeonhole-2.2.36-8.0.3.el7.tuxcare.els2.x86_64.rpm
    sha:b2c35b7a3838e1d39046786dc956632e2e069c68d0e8d3b7cf1e823a1c11dbb9
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.