ELSA-2026-49513

ELSA-2026-49513 - dovecot security update

Type:	SECURITY
Impact:	IMPORTANT
Release Date:	2026-08-10

Description

[1:2.2.36-8.0.3]
- Backport fix for CVE-2026-42006 [Orabug: 39820967]

[1:2.2.36-8.0.1]
- Backport fix for CVE-2025-59032 [Orabug: 39573795]
- Backport fix for CVE-2026-27856 [Orabug: 39573795]
- Backport fix for CVE-2026-27857 [Orabug: 39573795]
- Backport fix for CVE-2026-27858 [Orabug: 39573795]

Related CVEs

CVE-2026-42006

Updated Packages

Release/Architecture	Filename	sha256	Superseded By Advisory	Channel Label
Oracle Linux 7 (x86_64)	dovecot-2.2.36-8.0.3.el7.src.rpm	faec58dcebebbe6b08d98c1833d7dbf154883a14a72e3e8e692b23e43b88059f	-	ol7_x86_64_latest_ELS
	dovecot-2.2.36-8.0.3.el7.i686.rpm	c8fa58cb699c6ed8b1fed7c5dc573054838383efbc944e442bea08d08e7ecd70	-	ol7_x86_64_latest_ELS
	dovecot-2.2.36-8.0.3.el7.x86_64.rpm	afafacd25271a3d2304f77cd3870fb63313ee2403065033c74be6a313cfe9574	-	ol7_x86_64_latest_ELS
	dovecot-devel-2.2.36-8.0.3.el7.x86_64.rpm	f35d29766b7d252b367759ec7e2a85d05e72f9013a0c49ddb2c03694aae79d18	-	ol7_x86_64_latest_ELS
	dovecot-mysql-2.2.36-8.0.3.el7.x86_64.rpm	3261e2bfe924ee31af5de723e58f905872e3163e7d16174613b8c2ba50de4835	-	ol7_x86_64_latest_ELS
	dovecot-pgsql-2.2.36-8.0.3.el7.x86_64.rpm	29cd002d3d844f054177ea1708affad173c700e4dc20692dfb993cc6548a2cde	-	ol7_x86_64_latest_ELS
	dovecot-pigeonhole-2.2.36-8.0.3.el7.x86_64.rpm	700eb905e1bf97deea5f65f4b11d46bb179f432c1e149ae4e699dc60b10437df	-	ol7_x86_64_latest_ELS

This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team