Описание
ELSA-2026-19364: dovecot security update (IMPORTANT)
[1:2.3.16-18]
- rebuild
[1:2.3.16-17]
- fix CVE-2026-27858: denial of service via crafted message before authentication (RHEL-161640)
- fix CVE-2025-59032: ManageSieve: Denial of Service via crafted SASL initial response in AUTHENTICATE command (RHEL-162288)
- fix CVE-2026-27857: denial of service via specially crafted NOOP command (RHEL-161679)
Обновленные пакеты
Oracle Linux 9
Oracle Linux aarch64
dovecot
2.3.16-18.el9_8
dovecot-devel
2.3.16-18.el9_8
dovecot-mysql
2.3.16-18.el9_8
dovecot-pgsql
2.3.16-18.el9_8
dovecot-pigeonhole
2.3.16-18.el9_8
Oracle Linux x86_64
dovecot
2.3.16-18.el9_8
dovecot-devel
2.3.16-18.el9_8
dovecot-mysql
2.3.16-18.el9_8
dovecot-pgsql
2.3.16-18.el9_8
dovecot-pigeonhole
2.3.16-18.el9_8