RHSA-2026:49513: Important: dovecot security update
Dovecot is an IMAP server for Linux and other UNIX-like systems, written primarily with security in mind. It also contains a small POP3 server, and supports e-mail in either the maildir or mbox format. The SQL drivers and authentication plug-ins are provided as subpackages. Security Fix(es): dovecot: Dovecot: Denial of Service via excessive IMAP bracing (CVE-2026-42006) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
redhat/dovecotto a version that resolves this vulnerability.Fixed in 2.2.36-8.el7_9.2 - Upgrade
Upgrade
redhat/dovecot-debuginfoto a version that resolves this vulnerability.Fixed in 2.2.36-8.el7_9.2 - Upgrade
Upgrade
redhat/dovecot-develto a version that resolves this vulnerability.Fixed in 2.2.36-8.el7_9.2 - Upgrade
Upgrade
redhat/dovecot-mysqlto a version that resolves this vulnerability.Fixed in 2.2.36-8.el7_9.2 - Upgrade
Upgrade
redhat/dovecot-pgsqlto a version that resolves this vulnerability.Fixed in 2.2.36-8.el7_9.2 - Upgrade
Upgrade
redhat/dovecot-pigeonholeto a version that resolves this vulnerability.Fixed in 2.2.36-8.el7_9.2 - Upgrade
Upgrade
dovecotto a version that resolves this vulnerability.Patch CVE-2026-42006
Event History
Frequently Asked Questions
What is the severity of RHSA-2026:49513?
The severity of RHSA-2026:49513 is classified as high, with a score of 7.
How do I fix RHSA-2026:49513?
To fix RHSA-2026:49513, you need to apply the security update for Dovecot provided by Red Hat.
What are the affected packages in RHSA-2026:49513?
The affected packages include redhat/dovecot, redhat/dovecot-debuginfo, redhat/dovecot-devel, redhat/dovecot-mysql, redhat/dovecot-pgsql, and redhat/dovecot-pigeonhole.
What does the Dovecot security update (RHSA-2026:49513) address?
The Dovecot security update (RHSA-2026:49513) addresses known vulnerabilities that could compromise the security of the IMAP server.
Is Dovecot only for Linux systems according to RHSA-2026:49513?
Yes, Dovecot is primarily an IMAP server designed for Linux and other UNIX-like systems.