RLSA-2026:13857 Important: dovecot security update

Dovecot is an IMAP server for Linux and other UNIX-like systems, written primarily with security in mind. It also contains a small POP3 server, and supports e-mail in either the maildir or mbox format. The SQL drivers and authentication plug-ins are provided as subpackages. Security Fixes: doveco...

The vulnerability of the Keycloak identity and access management software lies in improper behavior patterns, allowing unauthorized users to gain unauthorized access to confidential information.

The vulnerability of the Keycloak identity and access management software is related to an incorrect sequence of actions: authentication occurs before syntactic analysis and canonization. Exploiting this vulnerability can allow a malicious actor, operating remotely, to gain unauthorized access to...