[ol10_appstream] dovecot-1:2.3.21-19.el10_2.8.aarch64

Name:	dovecot
Epoch:	1
Version:	2.3.21
Release:	19.el10_2.8
Architecture:	aarch64
Group:	Unspecified
Size:	21973077
License:	MIT AND LGPL-2.1-only
RPM:	dovecot-2.3.21-19.el10_2.8.aarch64.rpm
Source RPM:	dovecot-2.3.21-19.el10_2.8.src.rpm
Build Date:	Thu Oct 08 2026
Build Host:	build-ol10-aarch64.oracle.com
Vendor:	Oracle America
URL:	https://www.dovecot.org/
Summary:	Secure imap and pop3 server
Description:	Dovecot is an IMAP server for Linux/UNIX-like systems, written with security primarily in mind. It also contains a small POP3 server. It supports mail in either of maildir or mbox formats. The SQL drivers and authentication plug-ins are in their subpackages.

Changelog (Show File list) (Show related packages)

Tue Sep 29 2026 RHEL Packaging Agent <redhat-ymir-agent@redhat.com> - 1:2.3.21-19.8

- fix CVE-2026-33605: ManageSieve: denial of service via lone CR
  character causing protocol deadlock (RHEL-251984)

Tue Sep 29 2026 RHEL Packaging Agent <redhat-ymir-agent@redhat.com> - 1:2.3.21-19.7

- fix CVE-2026-42007: fix use-after-free and info leak in sieve
  editheader extension (RHEL-251945)

Mon Sep 28 2026 Michal Hlavinka <mhlavink@redhat.com> - 1:2.3.21-19.6

- fix CVE-2026-40018: incorrect escaping of multi-byte strings in SQL commands (RHEL-252058)

Mon Sep 28 2026 RHEL Packaging Agent <redhat-ymir-agent@redhat.com> - 1:2.3.21-19.5

- fix CVE-2026-42391: fix excessive memory growth with pre-login ID
  command (RHEL-252072)

Tue Sep 22 2026 Michal Hlavinka <mhlavink@redhat.com> - 1:2.3.21-19.4

- fix CVE-2026-73208: OAuth2 scope check requires all configured scopes, add oauth2_audience setting (RHEL-251900)

Mon Sep 21 2026 Michal Hlavinka <mhlavink@redhat.com> - 1:2.3.21-19.3

- fix CVE-2026-27852: limit parsed message data to prevent memory exhaustion (RHEL-251564)

Tue Sep 01 2026 RHEL Packaging Agent <redhat-ymir-agent@redhat.com> - 1:2.3.21-19.2

- fix CVE-2026-33263: submission-login epoll panic at
  mail_max_userip_connections limit (RHEL-251917)

Fri Jun 26 2026 RHEL Packaging Agent <redhat-ymir-agent@redhat.com> - 1:2.3.21-19.1

- fix CVE-2026-42006: fix imap_parser list_count_limit to actually
  work (RHEL-188477)

Mon May 11 2026 Michal Hlavinka <mhlavink@redhat.com> - 1:2.3.21-19
```
- update release for rebuild
```

Thu Apr 30 2026 Michal Hlavinka <mhlavink@redhat.com> - 1:2.3.21-18

- fix CVE-2026-27858: denial of service via crafted message before authentication (RHEL-161626)
- fix CVE-2025-59032: ManageSieve: Denial of Service via crafted SASL initial response in AUTHENTICATE command (RHEL-162274)
- fix CVE-2026-27857: denial of service via specially crafted NOOP command (RHEL-161665)