Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: dovecot (UTSA-2026-130075)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-130075 advisory. An attacker that has valid credentials can use a Sieve script with the editheader extension to trigger a use-after-free in the mail editing code, and to write memory...

dovecot security update

1:2.3.21-19.8 - fix CVE-2026-33605: ManageSieve: denial of service via lone CR character causing protocol deadlock RHEL-251984 1:2.3.21-19.7 - fix CVE-2026-42007: fix use-after-free and info leak in sieve editheader extension RHEL-251945 1:2.3.21-19.6 - fix CVE-2026-40018: incorrect escaping of...

CVE-2026-42007

An attacker that has valid credentials can use a Sieve script with the editheader extension to trigger a use-after-free in the mail editing code, and to write memory contents beyond the intended buffer into the delivered mail. This causes memory leak and opportunity to do memory corruption during...