Summary
[1:2.2.36-8.0.3]
- Backport fix for CVE-2026-42006 [Orabug: 39820967]
[1:2.2.36-8.0.1]
- Backport fix for CVE-2025-59032 [Orabug: 39573795]
- Backport fix for CVE-2026-27856 [Orabug: 39573795]
- Backport fix for CVE-2026-27857 [Orabug: 39573795]
- Backport fix for CVE-2026-27858 [Orabug: 39573795]
Fixed packages 5
| Release | Package | Fixed in |
|---|---|---|
| Oracle Linux · 7 | dovecot | 1:2.2.36-8.0.3.el7 |
| Oracle Linux · 7 | dovecot-devel | 1:2.2.36-8.0.3.el7 |
| Oracle Linux · 7 | dovecot-mysql | 1:2.2.36-8.0.3.el7 |
| Oracle Linux · 7 | dovecot-pgsql | 1:2.2.36-8.0.3.el7 |
| Oracle Linux · 7 | dovecot-pigeonhole | 1:2.2.36-8.0.3.el7 |
Vulnerabilities 1
-
Medium 4.3
An attacker can cause uncontrolled memory usage with excessive bracing over IMAP. The fix in CVE-2026-27857 was incompl…