Описание
ELSA-2026-79371: dovecot security update (IMPORTANT)
[1:2.3.21-19.8]
- fix CVE-2026-33605: ManageSieve: denial of service via lone CR character causing protocol deadlock (RHEL-251984)
[1:2.3.21-19.7]
- fix CVE-2026-42007: fix use-after-free and info leak in sieve editheader extension (RHEL-251945)
[1:2.3.21-19.6]
- fix CVE-2026-40018: incorrect escaping of multi-byte strings in SQL commands (RHEL-252058)
[1:2.3.21-19.5]
- fix CVE-2026-42391: fix excessive memory growth with pre-login ID command (RHEL-252072)
[1:2.3.21-19.4]
- fix CVE-2026-73208: OAuth2 scope check requires all configured scopes, add oauth2_audience setting (RHEL-251900)
[1:2.3.21-19.3]
- fix CVE-2026-27852: limit parsed message data to prevent memory exhaustion (RHEL-251564)
[1:2.3.21-19.2]
- fix CVE-2026-33263: submission-login epoll panic at mail_max_userip_connections limit (RHEL-251917)
Обновленные пакеты
Oracle Linux 10
Oracle Linux aarch64
dovecot
2.3.21-19.el10_2.8
dovecot-devel
2.3.21-19.el10_2.8
dovecot-mysql
2.3.21-19.el10_2.8
dovecot-pgsql
2.3.21-19.el10_2.8
dovecot-pigeonhole
2.3.21-19.el10_2.8
Oracle Linux x86_64
dovecot
2.3.21-19.el10_2.8
dovecot-devel
2.3.21-19.el10_2.8
dovecot-mysql
2.3.21-19.el10_2.8
dovecot-pgsql
2.3.21-19.el10_2.8
dovecot-pigeonhole
2.3.21-19.el10_2.8
