CVE-2026-107584

Progressive Robot hMailServer 6.0.0 through 6.3.5 fails open when applying DANE RFC 7672 to outbound SMTP delivery. The server's validating DNSSEC resolver treated a TLSA or MX lookup that did not complete no answer, SERVFAIL, a malformed reply, an answer without the requested records and without...

EUVD-2026-94867

Progressive Robot hMailServer 6.0.0 through 6.3.5 fails open when applying DANE RFC 7672 to outbound SMTP delivery. The server's validating DNSSEC resolver treated a TLSA or MX lookup that did not complete no answer, SERVFAIL, a malformed reply, an answer without the requested records and without...

CVE-2026-107584

Progressive Robot hMailServer versions 6.0.0 through 6.3.5 are vulnerable to a fail-open condition when applying DANE (RFC 7672) to outbound SMTP delivery. The root cause is that the server's validating DNSSEC resolver treats incomplete lookups (no answer, SERVFAIL, or malformed replies), records...

CVE-2026-107584 Not Failing Securely ('Failing Open') in hMailServer

Progressive Robot hMailServer 6.0.0 through 6.3.5 fails open when applying DANE RFC 7672 to outbound SMTP delivery. The server's validating DNSSEC resolver treated a TLSA or MX lookup that did not complete no answer, SERVFAIL, a malformed reply, an answer without the requested records and without...

CVE-2026-107584 Not Failing Securely ('Failing Open') in hMailServer

Progressive Robot hMailServer 6.0.0 through 6.3.5 fails open when applying DANE RFC 7672 to outbound SMTP delivery. The server's validating DNSSEC resolver treated a TLSA or MX lookup that did not complete no answer, SERVFAIL, a malformed reply, an answer without the requested records and without...

CVE-2026-104704

Progressive Robot hMailServer 6.0.0 through 6.3.5 does not enforce TLS for outbound SMTP delivery to a mail exchanger whose DNSSEC-validated TLSA records contain no DANE-EE usage 3 record, contrary to RFC 7672 section 2.2. The server used only DANE-EE records and treated a validated TLSA record s...

CVE-2026-103649

Missing network timeouts in the Linux builds of Progressive Robot hMailServer 6.3.0 through 6.3.5 allow a remote attacker to hold server threads indefinitely and so stop outbound mail delivery denial of service. The server set its socket timeouts in the form Windows takes, which Linux refuses, an...

EUVD-2026-94835

Missing network timeouts in the Linux builds of Progressive Robot hMailServer 6.3.0 through 6.3.5 allow a remote attacker to hold server threads indefinitely and so stop outbound mail delivery denial of service. The server set its socket timeouts in the form Windows takes, which Linux refuses, an...

CVE-2026-103649

Linux builds of Progressive Robot hMailServer versions 6.3.0 through 6.3.5 are vulnerable to a denial of service (DoS) due to missing network timeouts. The root cause is that the server sets socket timeouts in a Windows-specific format which Linux rejects, causing HTTPS clients to read without a ...

CVE-2026-103649 Synchronous Access of Remote Resource without Timeout in hMailServer

Missing network timeouts in the Linux builds of Progressive Robot hMailServer 6.3.0 through 6.3.5 allow a remote attacker to hold server threads indefinitely and so stop outbound mail delivery denial of service. The server set its socket timeouts in the form Windows takes, which Linux refuses, an...

CVE-2026-103649 Synchronous Access of Remote Resource without Timeout in hMailServer

Missing network timeouts in the Linux builds of Progressive Robot hMailServer 6.3.0 through 6.3.5 allow a remote attacker to hold server threads indefinitely and so stop outbound mail delivery denial of service. The server set its socket timeouts in the form Windows takes, which Linux refuses, an...

CVE-2026-104704 Cleartext Transmission of Sensitive Information in hMailServer

Progressive Robot hMailServer 6.0.0 through 6.3.5 does not enforce TLS for outbound SMTP delivery to a mail exchanger whose DNSSEC-validated TLSA records contain no DANE-EE usage 3 record, contrary to RFC 7672 section 2.2. The server used only DANE-EE records and treated a validated TLSA record s...

EUVD-2026-94831

Progressive Robot hMailServer 6.0.0 through 6.3.5 does not enforce TLS for outbound SMTP delivery to a mail exchanger whose DNSSEC-validated TLSA records contain no DANE-EE usage 3 record, contrary to RFC 7672 section 2.2. The server used only DANE-EE records and treated a validated TLSA record s...

CVE-2026-104704

Progressive Robot hMailServer versions 6.0.0 through 6.3.5 are vulnerable to a flaw where the server fails to enforce TLS for outbound SMTP delivery when DNSSEC-validated TLSA records lack a DANE-EE (usage 3) record. Instead of strictly adhering to RFC 7672, the server treats certain unusable rec...

CVE-2026-104704 Cleartext Transmission of Sensitive Information in hMailServer

Progressive Robot hMailServer 6.0.0 through 6.3.5 does not enforce TLS for outbound SMTP delivery to a mail exchanger whose DNSSEC-validated TLSA records contain no DANE-EE usage 3 record, contrary to RFC 7672 section 2.2. The server used only DANE-EE records and treated a validated TLSA record s...

Rocky Linux 8.10 [CIQ] Security Update: gnutls / gnutls-c++ / gnutls-c++-debuginfo / gnutls-dane / etc Multiple Vulnerabilities (ciqsa-2026_0602)

The Rocky Linux 8.10 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ ciqsa-20260602 advisory. This advisory aggregates security fixes for the gnutls SRPM in CIQ FIPS 8.10 Compliant. It addresses 11 CVEs: CVE-2020-24659, CVE-2020-11501,...

Rocky Linux 8.10 [CIQ] Security Update: gnutls / gnutls-c++ / gnutls-c++-debuginfo / gnutls-dane / etc Multiple Vulnerabilities (ciqsa-2026_0746)

The Rocky Linux 8.10 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ ciqsa-20260746 advisory. This advisory aggregates security fixes for the gnutls SRPM in CIQ FIPS 8.10 Certified. It addresses 11 CVEs: CVE-2020-24659, CVE-2020-11501,...

Rocky Linux 8.6 [CIQ] Security Update: gnutls / gnutls-c++ / gnutls-c++-debuginfo / gnutls-dane / etc Multiple Vulnerabilities (ciqsa-2026_0055)

The Rocky Linux 8.6 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ ciqsa-20260055 advisory. This advisory aggregates security fixes for the gnutls SRPM in CIQ LTS 8.6. It addresses 14 CVEs: CVE-2020-24659, CVE-2023-5981, CVE-2018-16868,...

Rocky Linux 8.6 [CIQ] Security Update: gnutls / gnutls-c++ / gnutls-c++-debuginfo / gnutls-dane / etc Multiple Vulnerabilities (ciqsa-2026_0747)

The Rocky Linux 8.6 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ ciqsa-20260747 advisory. This advisory aggregates security fixes for the gnutls SRPM in CIQ FIPS 8.6 Certified. It addresses 11 CVEs: CVE-2020-24659, CVE-2020-11501, CVE-2019-382...

Rocky Linux 8 [CIQ] Security Update: gnutls / gnutls-c++ / gnutls-c++-debuginfo / gnutls-dane / etc Multiple Vulnerabilities (ciqsa-2026_0638)

The Rocky Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ ciqsa-20260638 advisory. This advisory aggregates security fixes for the gnutls SRPM in CIQ FIPS 8 Compliant. It addresses 9 CVEs: CVE-2020-24659, CVE-2020-11501, CVE-2019-3829,...