[ol9_appstream] dovecot-pigeonhole-1:2.3.16-18.el9_8.8.aarch64

Name:	dovecot-pigeonhole
Epoch:	1
Version:	2.3.16
Release:	18.el9_8.8
Architecture:	aarch64
Group:	Unspecified
Size:	2571447
License:	MIT and LGPLv2
RPM:	dovecot-pigeonhole-2.3.16-18.el9_8.8.aarch64.rpm
Source RPM:	dovecot-2.3.16-18.el9_8.8.src.rpm
Build Date:	Mon Oct 12 2026
Build Host:	build-ol9-aarch64.oracle.com
Vendor:	Oracle America
URL:	https://www.dovecot.org/
Summary:	Sieve and managesieve plug-in for dovecot
Description:	This package provides sieve and managesieve plug-in for dovecot LDA.

Changelog (Show File list) (Show related packages)

Tue Sep 29 2026 RHEL Packaging Agent <redhat-ymir-agent@redhat.com> - 1:2.3.16-18.8

- fix CVE-2026-33605: ManageSieve protocol denial of service via
  lone CR character (RHEL-251989)

Tue Sep 29 2026 RHEL Packaging Agent <redhat-ymir-agent@redhat.com> - 1:2.3.16-18.7
```
- fix CVE-2026-42007: use-after-free in pigeonhole editheader
  (RHEL-251952)
```

Mon Sep 28 2026 Michal Hlavinka <mhlavink@redhat.com> - 1:2.3.16-18.6

- fix CVE-2026-40018: incorrect escaping of multi-byte strings in SQL commands (RHEL-252068)

Mon Sep 28 2026 RHEL Packaging Agent <redhat-ymir-agent@redhat.com> - 1:2.3.16-18.5

- fix CVE-2026-42391: excessive memory growth with pre-login IMAP ID
  command (RHEL-251936)

Tue Sep 22 2026 Michal Hlavinka <mhlavink@redhat.com> - 1:2.3.16-18.4

- fix CVE-2026-73208: OAuth2 scope check requires all configured scopes, add oauth2_audience setting (RHEL-251911)

Mon Sep 21 2026 RHEL Packaging Agent <redhat-ymir-agent@redhat.com> - 1:2.3.16-18.3

- fix CVE-2026-27852: limit parsed message data to prevent memory
  exhaustion (RHEL-251575)

Tue Sep 01 2026 RHEL Packaging Agent <redhat-ymir-agent@redhat.com> - 1:2.3.16-18.2

- fix CVE-2026-33263: epoll_ctl panic at
  mail_max_userip_connections limit (RHEL-251929)

Fri Jun 26 2026 RHEL Packaging Agent <redhat-ymir-agent@redhat.com> - 1:2.3.16-18.1

- fix CVE-2026-42006: IMAP parser list_count_limit bypass via open
  parentheses (RHEL-188468)

Mon May 11 2026 Michal Hlavinka <mhlavink@redhat.com> - 1:2.3.16-18
```
- rebuild
```

Mon May 04 2026 Michal Hlavinka <mhlavink@redhat.com> - 1:2.3.16-17

- fix CVE-2026-27858: denial of service via crafted message before authentication (RHEL-161640)
- fix CVE-2025-59032: ManageSieve: Denial of Service via crafted SASL initial response in AUTHENTICATE command (RHEL-162288)
- fix CVE-2026-27857: denial of service via specially crafted NOOP command (RHEL-161679)