2528 matches found
CLSA-2026-1778255734 dovecot: Fix of 2 CVEs
CVE-2026-27858: bound managesieve-login AUTHENTICATE initial response size to prevent memory exhaustion DoS before authentication - CVE-2025-59032: fix managesieve-login crash when AUTHENTICATE command did not finish on the first call due to literal SASL initial response...
CLSA-2026-1778250885 dovecot: Fix of CVE-2026-27857
CVE-2026-27857: imap-login: limit IMAP parser open lists to prevent excessive memory usage...
CLSA-2026-1778238067 dovecot: Fix of CVE-2026-27857
CVE-2026-27857: fix excessive memory usage from many '' in IMAP commands...
CLSA-2026-1778220630 dovecot: Fix of 3 CVEs
CVE-2026-27855: fix OTP authentication replay attack via auth cache - CVE-2026-27856: fix doveadm credential timing oracle - CVE-2026-27857: fix excessive memory usage from deeply nested IMAP command lists pre-auth ID command...
MiracleLinux 9 : dovecot-2.3.16-15.el9_7.1 (AXSA:2026-567:01)
The remote MiracleLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2026-567:01 advisory. dovecot: ManageSieve: Denial of Service via crafted SASL initial response in AUTHENTICATE command CVE-2025-59032 dovecot: denial of service via craft...
CLSA-2026-1778173027 dovecot: Fix of CVE-2026-27858
CVE-2026-27858: fix unbounded memory allocation in managesieve-login when AUTHENTICATE initial response literal size is excessively large...
CLSA-2026-1778172123 dovecot: Fix of CVE-2026-27858
CVE-2026-27858: fix unbounded memory allocation in managesieve-login when AUTHENTICATE initial response literal size is excessively large...
dovecot security update
An update is available for dovecot. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list Dovecot is an IMAP server for Linux and other UNIX-like systems, written...
RLSA-2026:13857 Important: dovecot security update
Dovecot is an IMAP server for Linux and other UNIX-like systems, written primarily with security in mind. It also contains a small POP3 server, and supports e-mail in either the maildir or mbox format. The SQL drivers and authentication plug-ins are provided as subpackages. Security Fixes: doveco...
dovecot security update
An update is available for dovecot. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list Dovecot is an IMAP server for Linux and other UNIX-like systems, written...
RLSA-2026:13830 Important: dovecot security update
Dovecot is an IMAP server for Linux and other UNIX-like systems, written primarily with security in mind. It also contains a small POP3 server, and supports e-mail in either the maildir or mbox format. The SQL drivers and authentication plug-ins are provided as subpackages. Security Fixes: doveco...
[SECURITY] Fedora 43 Update: dovecot-2.4.3-2.fc43
Dovecot is an IMAP server for Linux/UNIX-like systems, written with security primarily in mind. It also contains a small POP3 server. It supports mail in either of maildir or mbox formats. The SQL drivers and authentication plug-ins are in their subpackages...
[SECURITY] Fedora 44 Update: dovecot-2.4.3-2.fc44
Dovecot is an IMAP server for Linux/UNIX-like systems, written with security primarily in mind. It also contains a small POP3 server. It supports mail in either of maildir or mbox formats. The SQL drivers and authentication plug-ins are in their subpackages...
Fedora 44 : dovecot (2026-4349d04c20)
The remote Fedora 44 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-4349d04c20 advisory. updated to 2.4.3 which includes several security fixes Tenable has extracted the preceding description block directly from the Fedora security...
RockyLinux 8 : dovecot (RLSA-2026:13830)
The remote RockyLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2026:13830 advisory. dovecot: ManageSieve: Denial of Service via crafted SASL initial response in AUTHENTICATE command CVE-2025-59032 dovecot: denial of service via crafted...
Fedora 43 : dovecot (2026-51dba40a65)
The remote Fedora 43 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-51dba40a65 advisory. updated to 2.4.3 which includes several security fixes Tenable has extracted the preceding description block directly from the Fedora security...
RockyLinux 9 : dovecot (RLSA-2026:13857)
The remote RockyLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2026:13857 advisory. dovecot: ManageSieve: Denial of Service via crafted SASL initial response in AUTHENTICATE command CVE-2025-59032 dovecot: denial of service via crafted...
dovecot security update
An update is available for dovecot. This update affects Rocky Linux 10. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list Dovecot is an IMAP server for Linux and other UNIX-like systems, written...