High ELSA-2026-46532 1 CVE

Important: dovecot security update (Oracle Linux 8)

Published Jul 28, 2026 · Updated Jul 28, 2026

Ecosystem: Oracle Linux

Summary

[1:2.3.16-8]
- fix CVE-2026-42006: fix IMAP parser list_count_limit to correctly
limit open braces instead of close braces (RHEL-188480)

Fixed packages 5

Release	Package	Fixed in
Oracle Linux · 8	dovecot	1:2.3.16-8.el8_10
Oracle Linux · 8	dovecot-devel	1:2.3.16-8.el8_10
Oracle Linux · 8	dovecot-mysql	1:2.3.16-8.el8_10
Oracle Linux · 8	dovecot-pgsql	1:2.3.16-8.el8_10
Oracle Linux · 8	dovecot-pigeonhole	1:2.3.16-8.el8_10

Vulnerabilities 1

Medium 4.3

CVE-2026-42006

An attacker can cause uncontrolled memory usage with excessive bracing over IMAP. The fix in CVE-2026-27857 was incompl…

Open-Xchange OX Dovecot Pro dovecot dovecot Debian Ubuntu Azure Linux Alpine

May 12, 2026