Back to Security Advisories
High 2026-07-28

Dovecot Security Update — AlmaLinux 8 (ALSA-2026:46532)

AlmaLinux 8

Dovecot is an IMAP server for Linux and other UNIX-like systems, written primarily with security in mind. It also contains a small POP3 server, and supports e-mail in either the maildir or mbox format. The SQL drivers and authentication plug-ins are provided as subpackages. Security Fix(es): * dovecot: Dove…

Dovecot is an IMAP server for Linux and other UNIX-like systems, written primarily with security in mind. It also contains a small POP3 server, and supports e-mail in either the maildir or mbox format. The SQL drivers and authentication plug-ins are provided as subpackages.

Security Fix(es):

* dovecot: Dove…

Type:
security

Severity:
important

Release date:
2026-07-28

Description:
Dovecot is an IMAP server for Linux and other UNIX-like systems, written primarily with security in mind. It also contains a small POP3 server, and supports e-mail in either the maildir or mbox format. The SQL drivers and authentication plug-ins are provided as subpackages.

Security Fix(es):

* dovecot: Dovecot: Denial of Service via excessive IMAP bracing (CVE-2026-42006)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Updated packages listed below:

Architecture Package Checksum
aarch64 dovecot-2.3.16-8.el8_10.aarch64.rpm 04ef73ed6c7145e27e7c117d25ff9a41e9f2415e9852584896fd9ef545355f59
aarch64 dovecot-mysql-2.3.16-8.el8_10.aarch64.rpm 05468fc38fb36b2e6a2b5e562852b35a840c6bd3272c64647980db9ba34894b3
aarch64 dovecot-pgsql-2.3.16-8.el8_10.aarch64.rpm 6f0f6d6b2b22de068b4a4c9ee3171b75178f7fe9a5dfbe4dbf8011144390cec6
aarch64 dovecot-devel-2.3.16-8.el8_10.aarch64.rpm 89856e598dd59ce242f85ac4faa5fbb61891cc80d20025a0c571f4fc5e000283
aarch64 dovecot-pigeonhole-2.3.16-8.el8_10.aarch64.rpm df8207c81553c958f24668cfc62fb0dae74218515a396c21902d40c0d2c7bf37
i686 dovecot-devel-2.3.16-8.el8_10.i686.rpm 26da4e50a3f757ea5d6e90c11749b5b61ec197a80f38cfbac44cc1d1f261f0ed
i686 dovecot-2.3.16-8.el8_10.i686.rpm 5edf2f7fe3eb1e105dbbe8bb0fd7019590725266a6bebf6cc6e5b02f83fe1008
ppc64le dovecot-pgsql-2.3.16-8.el8_10.ppc64le.rpm 877f83170944dd5477cec0ef92aab7ef615cdc3592432289987a5bcf4c3be7c5
ppc64le dovecot-devel-2.3.16-8.el8_10.ppc64le.rpm bd5642093eee8a2dac3bb69439eae826244eef44c7d8d01cb53c696a9c729ace
ppc64le dovecot-mysql-2.3.16-8.el8_10.ppc64le.rpm c3484e71ca2aebc14319f70c082f7120e522b8064b57164236f6e75074222e75
ppc64le dovecot-pigeonhole-2.3.16-8.el8_10.ppc64le.rpm c8cd5a01b24dfac709899915a4f76e99c0406bf76e439c7cd9897a712b317708
ppc64le dovecot-2.3.16-8.el8_10.ppc64le.rpm f375ea8657fb30e121068959fc35913333d66f09c5b1421128f33f81ee1c9614
s390x dovecot-devel-2.3.16-8.el8_10.s390x.rpm 18db5eab5d06ee20739275347002da2505ac6cc588c7a036e34d91b0d7e9ba80
s390x dovecot-2.3.16-8.el8_10.s390x.rpm 4cc9dbd669cc10fd8c5e36cdebce872e60261161b1f5448e9f4c360713e34e0b
s390x dovecot-pigeonhole-2.3.16-8.el8_10.s390x.rpm 8e8e32ecdfb642e9e07fb7c51923cd75e980ab56f3111e19da5ef371bf0ba4d7
s390x dovecot-mysql-2.3.16-8.el8_10.s390x.rpm d454e80681db90df098e504290a787636557188a4aba9265f54410e23f3b1ad7
s390x dovecot-pgsql-2.3.16-8.el8_10.s390x.rpm ef3960e5bc8a609574b3d8b9ac91357f904797f2ad1dae5da0ad922802f93280
x86_64 dovecot-pgsql-2.3.16-8.el8_10.x86_64.rpm 20f1319f72bd287d13a4aad6f212db168fb73075a89745b11096dce0e62aab3d
x86_64 dovecot-pigeonhole-2.3.16-8.el8_10.x86_64.rpm 9e455ae2e2450aa356212a9de5ff0d135ef681837764d61b1aa2636d41a98e21
x86_64 dovecot-mysql-2.3.16-8.el8_10.x86_64.rpm c9f6a69e07d6b97678a82d217c9a7042607423ba2488ef1498b0ed73deae5d83
x86_64 dovecot-devel-2.3.16-8.el8_10.x86_64.rpm e458aef528bb068e8e9178611e0ab0afe1707d68b59b5522a95c2aa8a1b59c86
x86_64 dovecot-2.3.16-8.el8_10.x86_64.rpm fdf8eeadbdbc98feda43866245b062a0bf12db37b41f03ef7af7040ce1e27b8d

Notes:
This page is generated automatically from Red Hat security data and has not been checked for errors. For clarification or corrections please contact the AlmaLinux Packaging Team.

More Information

Check your system for vulnerabilities

Select your product and operating system to see the exact fix commands that apply to you.

Check Your System