[ol8_codeready_builder] dovecot-devel-1:2.3.16-16.el8_10.aarch64

Name:	dovecot-devel
Epoch:	1
Version:	2.3.16
Release:	16.el8_10
Architecture:	aarch64
Group:	Development/Libraries
Size:	1889715
License:	MIT and LGPLv2
RPM:	dovecot-devel-2.3.16-16.el8_10.aarch64.rpm
Source RPM:	dovecot-2.3.16-16.el8_10.src.rpm
Build Date:	Tue Oct 06 2026
Build Host:	build-ol8-aarch64.oracle.com
Vendor:	Oracle America
URL:	http://www.dovecot.org/
Summary:	Development files for dovecot
Description:	This package provides the development files for dovecot.

Changelog (Show File list) (Show related packages)

Tue Sep 29 2026 RHEL Packaging Agent <redhat-ymir-agent@redhat.com> - 1:2.3.16-15

- fix CVE-2026-33605: ManageSieve login deadlock caused by lone CR
  protocol violation (RHEL-251995)

Tue Sep 29 2026 RHEL Packaging Agent <redhat-ymir-agent@redhat.com> - 1:2.3.16-14

- fix CVE-2026-42007: heap use-after-free in pigeonhole edit_mail_snapshot
  after deleteheader operation (RHEL-251946)

Mon Sep 28 2026 Michal Hlavinka <mhlavink@redhat.com> - 1:2.3.16-13

- fix CVE-2026-40018: incorrect escaping of multi-byte strings in SQL commands (RHEL-252064)

Mon Sep 28 2026 RHEL Packaging Agent <redhat-ymir-agent@redhat.com> - 1:2.3.16-13

- fix CVE-2026-42391: pre-auth CPU/memory amplification via
  excessive ID command key/value pairs (RHEL-252056)

Wed Sep 23 2026 Michal Hlavinka <mhlavink@redhat.com> - 1:2.3.16-12

- fix CVE-2026-73208: OAuth2 scope check requires all configured scopes, add oauth2_audience setting (RHEL-251905)

Mon Sep 21 2026 RHEL Packaging Agent <redhat-ymir-agent@redhat.com> - 1:2.3.16-11

- fix CVE-2026-27852: denial of service via memory exhaustion from
  crafted message headers (RHEL-251573)

Tue Sep 01 2026 RHEL Packaging Agent <redhat-ymir-agent@redhat.com> - 1:2.3.16-10

- fix CVE-2026-33263: submission-login panic at
  mail_max_userip_connections limit (RHEL-251922)

Sat Jul 25 2026 Michal Hlavinka <mhlavink@redhat.com> - 1:2.3.16-9
```
- fix mailbox leak causing assert crash (RHEL-176273)
```

Fri Jun 26 2026 RHEL Packaging Agent <redhat-ymir-agent@redhat.com> - 1:2.3.16-8

- fix CVE-2026-42006: fix IMAP parser list_count_limit to correctly
  limit open braces instead of close braces (RHEL-188480)

Mon Apr 13 2026 Michal Hlavinka <mhlavink@redhat.com> - 1:2.3.16-7

- fix CVE-2026-27858: denial of service via crafted message before authentication (RHEL-161630)
- fix CVE-2025-59032: ManageSieve: Denial of Service via crafted SASL initial response in AUTHENTICATE command (RHEL-162282)
- fix CVE-2026-27857: denial of service via specially crafted NOOP command (RHEL-161669)