[CLSA-2026:1786675596] Fix CVE(s): CVE-2026-27858
Type:
security
Severity:
Important
Release date:
2026-08-14 02:46:47 UTC
Description:
* SECURITY UPDATE: managesieve-login pre-auth excessive memory usage DoS via oversized AUTHENTICATE initial response (ELSCVE-158960) - debian/patches/CVE-2026-27858.patch: verify the AUTHENTICATE initial response size is not too large before allocating in pigeonhole/src/managesieve-login/client-authenticate.c. Backport of upstream pigeonhole commit 54f645225a8a; hunk context is this tree's pre-cc1b8988 (unreformatted) layout. - CVE-2026-27858
CVEs fixed:
Updated packages:
  • dovecot-core_2.2.22-1ubuntu2.14+tuxcare.els1_amd64.deb
    sha:5c01837bdac014018ab2acb120e7678e7912c1ca
  • dovecot-dev_2.2.22-1ubuntu2.14+tuxcare.els1_amd64.deb
    sha:4b9d3b97809f273743c22ba9fdce280f9aed9f65
  • dovecot-gssapi_2.2.22-1ubuntu2.14+tuxcare.els1_amd64.deb
    sha:74254a34430d6c3e2360dd54755eaffe38a0c2ee
  • dovecot-imapd_2.2.22-1ubuntu2.14+tuxcare.els1_amd64.deb
    sha:8ea62494c25dd393c8177b48d216f0005190c5ba
  • dovecot-ldap_2.2.22-1ubuntu2.14+tuxcare.els1_amd64.deb
    sha:a03057956ed1011f54f8127a774df0492b7f90d0
  • dovecot-lmtpd_2.2.22-1ubuntu2.14+tuxcare.els1_amd64.deb
    sha:e6725c8fddc93915225599395c90fc8380341d59
  • dovecot-lucene_2.2.22-1ubuntu2.14+tuxcare.els1_amd64.deb
    sha:d82983a3256d6fae7e5d64b8b9ce76aea61fa1fa
  • dovecot-managesieved_2.2.22-1ubuntu2.14+tuxcare.els1_amd64.deb
    sha:34d50fc3da4c0bc2ab357d943e0cfe37f3a37460
  • dovecot-mysql_2.2.22-1ubuntu2.14+tuxcare.els1_amd64.deb
    sha:e8edcf22f3fe875f925d13c1437c648ed21e3218
  • dovecot-pgsql_2.2.22-1ubuntu2.14+tuxcare.els1_amd64.deb
    sha:7e7287936215c7479449472c24d19aab34228fd4
  • dovecot-pop3d_2.2.22-1ubuntu2.14+tuxcare.els1_amd64.deb
    sha:a4468ca3326ac246de7224b5ca1d5cbe906a3827
  • dovecot-sieve_2.2.22-1ubuntu2.14+tuxcare.els1_amd64.deb
    sha:98641485cf8e7f1846c34b2cdbbd82f9ee2ee178
  • dovecot-solr_2.2.22-1ubuntu2.14+tuxcare.els1_amd64.deb
    sha:60a052020238a5b59c5b2f402f9f39d5f0aa4cd6
  • dovecot-sqlite_2.2.22-1ubuntu2.14+tuxcare.els1_amd64.deb
    sha:971da6b98b10599f4ba799ce7222bdf97bc00d9f
  • mail-stack-delivery_2.2.22-1ubuntu2.14+tuxcare.els1_all.deb
    sha:fa9d4efc0e5bf528c7c87149411fbf03b9cc649a
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.