Описание
ELSA-2026-13498: dovecot security update (IMPORTANT)
[1:2.3.21-16.1]
- fix CVE-2026-27858: denial of service via crafted message before authentication (RHEL-161625)
- fix CVE-2025-59032: ManageSieve: Denial of Service via crafted SASL initial response in AUTHENTICATE command (RHEL-162273)
- fix CVE-2026-27857: denial of service via specially crafted NOOP command (RHEL-161664)
Обновленные пакеты
Oracle Linux 10
Oracle Linux aarch64
dovecot
2.3.21-16.el10_1.1
dovecot-devel
2.3.21-16.el10_1.1
dovecot-mysql
2.3.21-16.el10_1.1
dovecot-pgsql
2.3.21-16.el10_1.1
dovecot-pigeonhole
2.3.21-16.el10_1.1
Oracle Linux x86_64
dovecot
2.3.21-16.el10_1.1
dovecot-devel
2.3.21-16.el10_1.1
dovecot-mysql
2.3.21-16.el10_1.1
dovecot-pgsql
2.3.21-16.el10_1.1
dovecot-pigeonhole
2.3.21-16.el10_1.1