Fixed packages 18
| Release | Package | Fixed in |
|---|---|---|
| Red Hat · RHEL 8.4 AUS rhel_aus:8.4::appstream | dovecot | 1:2.3.8-9.el8_4.1 |
| Red Hat · RHEL 8.4 AUS rhel_aus:8.4::appstream | dovecot-debuginfo | 1:2.3.8-9.el8_4.1 |
| Red Hat · RHEL 8.4 AUS rhel_aus:8.4::appstream | dovecot-debugsource | 1:2.3.8-9.el8_4.1 |
| Red Hat · RHEL 8.4 AUS rhel_aus:8.4::appstream | dovecot-mysql | 1:2.3.8-9.el8_4.1 |
| Red Hat · RHEL 8.4 AUS rhel_aus:8.4::appstream | dovecot-mysql-debuginfo | 1:2.3.8-9.el8_4.1 |
| Red Hat · RHEL 8.4 AUS rhel_aus:8.4::appstream | dovecot-pgsql | 1:2.3.8-9.el8_4.1 |
| Red Hat · RHEL 8.4 AUS rhel_aus:8.4::appstream | dovecot-pgsql-debuginfo | 1:2.3.8-9.el8_4.1 |
| Red Hat · RHEL 8.4 AUS rhel_aus:8.4::appstream | dovecot-pigeonhole | 1:2.3.8-9.el8_4.1 |
| Red Hat · RHEL 8.4 AUS rhel_aus:8.4::appstream | dovecot-pigeonhole-debuginfo | 1:2.3.8-9.el8_4.1 |
| Red Hat · RHEL 8.4 EUS Long Life rhel_eus_long_life:8.4::appstream | dovecot | 1:2.3.8-9.el8_4.1 |
| Red Hat · RHEL 8.4 EUS Long Life rhel_eus_long_life:8.4::appstream | dovecot-debuginfo | 1:2.3.8-9.el8_4.1 |
| Red Hat · RHEL 8.4 EUS Long Life rhel_eus_long_life:8.4::appstream | dovecot-debugsource | 1:2.3.8-9.el8_4.1 |
| Red Hat · RHEL 8.4 EUS Long Life rhel_eus_long_life:8.4::appstream | dovecot-mysql | 1:2.3.8-9.el8_4.1 |
| Red Hat · RHEL 8.4 EUS Long Life rhel_eus_long_life:8.4::appstream | dovecot-mysql-debuginfo | 1:2.3.8-9.el8_4.1 |
| Red Hat · RHEL 8.4 EUS Long Life rhel_eus_long_life:8.4::appstream | dovecot-pgsql | 1:2.3.8-9.el8_4.1 |
| Red Hat · RHEL 8.4 EUS Long Life rhel_eus_long_life:8.4::appstream | dovecot-pgsql-debuginfo | 1:2.3.8-9.el8_4.1 |
| Red Hat · RHEL 8.4 EUS Long Life rhel_eus_long_life:8.4::appstream | dovecot-pigeonhole | 1:2.3.8-9.el8_4.1 |
| Red Hat · RHEL 8.4 EUS Long Life rhel_eus_long_life:8.4::appstream | dovecot-pigeonhole-debuginfo | 1:2.3.8-9.el8_4.1 |
Vulnerabilities 3
-
High 7.5
ManageSieve AUTHENTICATE command crashes when using literal as SASL initial response. This can be used to crash ManageS…
-
High 7.5
Attacker can send a specifically crafted message before authentication that causes managesieve to allocate large amount…
-
Medium 4.3
Sending "NOOP (((...)))" command with 4000 parenthesis open+close results in ~1MB extra memory usage. Longer commands w…
References
-
article
https://access.redhat.com/security/updates/classification/#important
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=2452172
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=2452175
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=2452179
-
advisory
https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_19455.json
-
report
https://access.redhat.com/security/cve/CVE-2025-59032
-
advisory
https://www.cve.org/CVERecord?id=CVE-2025-59032
-
advisory
https://nvd.nist.gov/vuln/detail/CVE-2025-59032
-
article
https://documentation.open-xchange.com/dovecot/security/advisories/csaf/2026/oxdc-adv-2026-0001.json
-
report
https://access.redhat.com/security/cve/CVE-2026-27857
-
advisory
https://www.cve.org/CVERecord?id=CVE-2026-27857
-
advisory
https://nvd.nist.gov/vuln/detail/CVE-2026-27857
-
report
https://access.redhat.com/security/cve/CVE-2026-27858
-
advisory
https://www.cve.org/CVERecord?id=CVE-2026-27858
-
advisory
https://nvd.nist.gov/vuln/detail/CVE-2026-27858