Red Hat Product Errata RHSA-2026:44357 - Security Advisory Issued: 2026-07-23 Updated: 2026-07-23 RHSA-2026:44357 - Security Advisory Overview Updated Packages Synopsis Important: dovecot security update Type/Severity Security Advisory: Important Red Hat Lightspeed patch analysis Identify and remediate systems affected by this advisory. View affected systems Topic An update for dovecot is now available for Red Hat Enterprise Linux 9.4 Update Services for SAP Solutions. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section. Description Dovecot is an IMAP server for Linux and other UNIX-like systems, written primarily with security in mind. It also contains a small POP3 server, and supports e-mail in either the maildir or mbox format. The SQL drivers and authentication plug-ins are provided as subpackages. Security Fix(es): dovecot: Dovecot: Denial of Service via excessive IMAP bracing (CVE-2026-42006) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Solution For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 Affected Products Red Hat Enterprise Linux Server - AUS 9.4 x86_64 Red Hat Enterprise Linux Server for Power LE - Update Services for SAP Solutions 9.4 ppc64le Red Hat Enterprise Linux for x86_64 - Update Services for SAP Solutions 9.4 x86_64 Red Hat Enterprise Linux for ARM 64 - 4 years of updates 9.4 aarch64 Red Hat Enterprise Linux for IBM z Systems - 4 years of updates 9.4 s390x Red Hat Enterprise Linux for x86_64 - Extended Life Cycle 9.4 x86_64 Red Hat Enterprise Linux for ARM 64 - Extended Life Cycle 9.4 aarch64 Red Hat Enterprise Linux for Power, little endian - Extended Life Cycle 9.4 ppc64le Red Hat Enterprise Linux for IBM z Systems - Extended Life Cycle 9.4 s390x Fixes BZ - 2476476 - CVE-2026-42006 dovecot: Dovecot: Denial of Service via excessive IMAP bracing CVEs CVE-2026-42006 References https://access.redhat.com/security/updates/classification/#important Note: More recent versions of these packages may be available. Click a package name for more details. Red Hat Enterprise Linux Server - AUS 9.4 SRPM dovecot-2.3.16-11.el9_4.3.src.rpm SHA-256: 01e2a3e6e7d704432d2b8d453cad04a022c6bfe3ced7a033ba00e12916af5363 x86_64 dovecot-2.3.16-11.el9_4.3.x86_64.rpm SHA-256: 5599ff2983ccd1a8a5d333dd24aff6757dab36c6be13052455e3b63b6f2b2c06 dovecot-debuginfo-2.3.16-11.el9_4.3.x86_64.rpm SHA-256: f2b9842d6a48d3c4200f7c10a593bccf56d996342664266852923dfbfb213e3c dovecot-debugsource-2.3.16-11.el9_4.3.x86_64.rpm SHA-256: a585a081f72ccf6d28addd8d1a58ae3909ea2d105151f42e42acfb6dd5228a5f dovecot-mysql-2.3.16-11.el9_4.3.x86_64.rpm SHA-256: 5dcefb76162cabbdca277360d3738a0d0682510f9006b4a568f2b015824f3ecc dovecot-mysql-debuginfo-2.3.16-11.el9_4.3.x86_64.rpm SHA-256: 505ee6ba87cca293de4a299799c598a4dc6e771aec873ec339ca9b9370af4ba8 dovecot-pgsql-2.3.16-11.el9_4.3.x86_64.rpm SHA-256: 72c09fb0a3fc689a8ef265e6a68ceee3a9c9c13780fde4cb97857a505ac761c1 dovecot-pgsql-debuginfo-2.3.16-11.el9_4.3.x86_64.rpm SHA-256: 427fe065f56fc4810414e4fe9308f3b95b21f4da1d64c7a941f6d401048f10cc dovecot-pigeonhole-2.3.16-11.el9_4.3.x86_64.rpm SHA-256: a5b26651ed207c41117e79672c80012b4cc9708247c0632c312e773cb43ec672 dovecot-pigeonhole-debuginfo-2.3.16-11.el9_4.3.x86_64.rpm SHA-256: 988b9c333ea0f653111c760588347884d1aa321dbe4d3bc3b1246880290aeb80 Red Hat Enterprise Linux Server for Power LE - Update Services for SAP Solutions 9.4 SRPM dovecot-2.3.16-11.el9_4.3.src.rpm SHA-256: 01e2a3e6e7d704432d2b8d453cad04a022c6bfe3ced7a033ba00e12916af5363 ppc64le dovecot-2.3.16-11.el9_4.3.ppc64le.rpm SHA-256: 4a8ff34f8561d8711aa52e355db0cfaaf20e470ef47f4f64c051d9d92551f3e8 dovecot-debuginfo-2.3.16-11.el9_4.3.ppc64le.rpm SHA-256: 36a8309c390e46d5d57ce95269a20bb6333446c7eeec053b8b7ec56f0c04d18b dovecot-debugsource-2.3.16-11.el9_4.3.ppc64le.rpm SHA-256: c77e6aa5edcce1ae8f41093b586b93b90150e57a73026145f8eeb104fbb0c330 dovecot-mysql-2.3.16-11.el9_4.3.ppc64le.rpm SHA-256: d1f18ddb4dbd4afd43609bb665caac3b80478656c39703238adc787c417ace6f dovecot-mysql-debuginfo-2.3.16-11.el9_4.3.ppc64le.rpm SHA-256: 36f796608237abf39ed8a00aa937bf004e094036c6b6819170e8434c74ccd039 dovecot-pgsql-2.3.16-11.el9_4.3.ppc64le.rpm SHA-256: 1cc2d57876eac68735eba51b243187910e40f986438003406cb648b47a218501 dovecot-pgsql-debuginfo-2.3.16-11.el9_4.3.ppc64le.rpm SHA-256: b0eea5500ff54dd9c46795ccc6f763e382c9df1a6695e71fae62e0955241c036 dovecot-pigeonhole-2.3.16-11.el9_4.3.ppc64le.rpm SHA-256: 50f0573081a7618c9036ebbe401ccb6a30bac11b27804d8341b433c09e52fcc1 dovecot-pigeonhole-debuginfo-2.3.16-11.el9_4.3.ppc64le.rpm SHA-256: 7ff09a08d588b14d9d6b51d135af49f54fe2c47a79f1f3ceb4d73b2fabf511e7 Red Hat Enterprise Linux for x86_64 - Update Services for SAP Solutions 9.4 SRPM dovecot-2.3.16-11.el9_4.3.src.rpm SHA-256: 01e2a3e6e7d704432d2b8d453cad04a022c6bfe3ced7a033ba00e12916af5363 x86_64 dovecot-2.3.16-11.el9_4.3.x86_64.rpm SHA-256: 5599ff2983ccd1a8a5d333dd24aff6757dab36c6be13052455e3b63b6f2b2c06 dovecot-debuginfo-2.3.16-11.el9_4.3.x86_64.rpm SHA-256: f2b9842d6a48d3c4200f7c10a593bccf56d996342664266852923dfbfb213e3c dovecot-debugsource-2.3.16-11.el9_4.3.x86_64.rpm SHA-256: a585a081f72ccf6d28addd8d1a58ae3909ea2d105151f42e42acfb6dd5228a5f dovecot-mysql-2.3.16-11.el9_4.3.x86_64.rpm SHA-256: 5dcefb76162cabbdca277360d3738a0d0682510f9006b4a568f2b015824f3ecc dovecot-mysql-debuginfo-2.3.16-11.el9_4.3.x86_64.rpm SHA-256: 505ee6ba87cca293de4a299799c598a4dc6e771aec873ec339ca9b9370af4ba8 dovecot-pgsql-2.3.16-11.el9_4.3.x86_64.rpm SHA-256: 72c09fb0a3fc689a8ef265e6a68ceee3a9c9c13780fde4cb97857a505ac761c1 dovecot-pgsql-debuginfo-2.3.16-11.el9_4.3.x86_64.rpm SHA-256: 427fe065f56fc4810414e4fe9308f3b95b21f4da1d64c7a941f6d401048f10cc dovecot-pigeonhole-2.3.16-11.el9_4.3.x86_64.rpm SHA-256: a5b26651ed207c41117e79672c80012b4cc9708247c0632c312e773cb43ec672 dovecot-pigeonhole-debuginfo-2.3.16-11.el9_4.3.x86_64.rpm SHA-256: 988b9c333ea0f653111c760588347884d1aa321dbe4d3bc3b1246880290aeb80 Red Hat Enterprise Linux for ARM 64 - 4 years of updates 9.4 SRPM dovecot-2.3.16-11.el9_4.3.src.rpm SHA-256: 01e2a3e6e7d704432d2b8d453cad04a022c6bfe3ced7a033ba00e12916af5363 aarch64 dovecot-2.3.16-11.el9_4.3.aarch64.rpm SHA-256: a44baeb6a9487f50b88983cc3013a29c0f4ab6fccd5a58a0da07cadaad9aed42 dovecot-debuginfo-2.3.16-11.el9_4.3.aarch64.rpm SHA-256: 4a92859f19e8d027e507e91bacfe2d3ce7ddf6b91bd7365d39deb310820a07b7 dovecot-debugsource-2.3.16-11.el9_4.3.aarch64.rpm SHA-256: a76a79301a2546bc48474bac2977a93ac138d3f8b9ef46b60cf84ce584f03467 dovecot-mysql-2.3.16-11.el9_4.3.aarch64.rpm SHA-256: ba9d862c689a1787c16d913ff28c2bdb65d4c8a5334b4887b41cc95c947cb6af dovecot-mysql-debuginfo-2.3.16-11.el9_4.3.aarch64.rpm SHA-256: 83dc4029a83f2d1b8994b99d32e4bdba4b68a4c86fddecde6a8f8cbe9f450b5f dovecot-pgsql-2.3.16-11.el9_4.3.aarch64.rpm SHA-256: 257c6fa1c7d758a71af2c505e13019648d42828a0ab629178b6c81277481503a dovecot-pgsql-debuginfo-2.3.16-11.el9_4.3.aarch64.rpm SHA-256: 573fa10ccf208db9fe014e0644ac8ef316b54d9e65e44186af4f6c94d6464b47 dovecot-pigeonhole-2.3.16-11.el9_4.3.aarch64.rpm SHA-256: 3336eca83857b08bd0da274108f5f193d3acea18b740b0d1e74cc7eb70aefd35 dovecot-pigeonhole-debuginfo-2.3.16-11.el9_4.3.aarch64.rpm SHA-256: 2262e0b48e1f02c598da864bc648a8e520b89ee4fc899c6e9112829334b7689c Red Hat Enterprise Linux for IBM z Systems - 4 years of updates 9.4 SRPM dovecot-2.3.16-11.el9_4.3.src.rpm SHA-256: 01e2a3e6e7d704432d2b8d453cad04a022c6bfe3ced7a033ba00e12916af5363 s390x dovecot-2.3.16-11.el9_4.3.s390x.rpm SHA-256: 445c9c97dd3c480e9c28b882459239fa9077486ee41c1a22179ad8296d15b861 dovecot-debuginfo-2.3.16-11.el9_4.3.s390x.rpm SHA-256: 1dd2dc608fa51c41c092eefef2295fbee137fe041529633b7192dc77758da989 dovecot-debugsource-2.3.16-11.el9_4.3.s390x.rpm SHA-256: 5a260f4d1b450436f6fbe41f787d94647d35fd8bba8adacfc2da58cfd8e2cf4e dovecot-mysql-2.3.16-11.el9_4.3.s390x.rpm SHA-256: e5b05e70c32ff4c5b3645575d5eee80710bdce559e1e6fd7882e80bcb03ee340 dovecot-mysql-debuginfo-2.3.16-11.el9_4.3.s390x.rpm SHA-256: cc264eec9b61e8b4bde2eec9f33c6841c6e3b82077dc3be43628d1fd7b5f7419 dovecot-pgsql-2.3.16-11.el9_4.3.s390x.rpm SHA-256: 9ab59d78a097b93563d8b5348a533a59ad1bc92b41196318305fcefa9dea4ac1 dovecot-pgsql-debuginfo-2.3.16-11.el9_4.3.s390x.rpm SHA-256: 5030598f8bfeff4fedb9d32b7ca74e145487371ff3b1b59df41d10437780fa76 dovecot-pigeonhole-2.3.16-11.el9_4.3.s390x.rpm SHA-256: 70333e06d0b94e6a7436dbacc7f2cc7bd0fe24ecf86f04c6e91500b4c6dcae7f dovecot-pigeonhole-debuginfo-2.3.16-11.el9_4.3.s390x.rpm SHA-256: 8c471ca1cfbf7a53e93cc75426c2bb669340770a238539d6b56f1094495a1bc7 Red Hat Enterprise Linux for x86_64 - Extended Life Cycle 9.4 SRPM dovecot-2.3.16-11.el9_4.3.src.rpm SHA-256: 01e2a3e6e7d704432d2b8d453cad04a022c6bfe3ced7a033ba00e12916af5363 x86_64 dovecot-2.3.16-11.el9_4.3.x86_64.rpm SHA-256: 5599ff2983ccd1a8a5d333dd24aff6757dab36c6be13052455e3b63b6f2b2c06 dovecot-debuginfo-2.3.16-11.el9_4.3.x86_64.rpm SHA-256: f2b9842d6a48d3c4200f7c10a593bccf56d996342664266852923dfbfb213e3c dovecot-debugsource-2.3.16-11.el9_4.3.x86_64.rpm SHA-256: a585a081f72ccf6d28addd8d1a58ae3909ea2d105151f42e42acfb6dd5228a5f dovecot-mysql-2.3.16-11.el9_4.3.x86_64.rpm SHA-256: 5dcefb76162cabbdca277360d3738a0d0682510f9006b4a568f2b015824f3ecc dovecot-mysql-debuginfo-2.3.16-11.el9_4.3.x86_64.rpm SHA-256: 505ee6ba87cca293de4a299799c598a4dc6e771aec873ec339ca9b9370af4ba8 dovecot-pgsql-2.3.16-11.el9_4.3.x86_64.rpm SHA-256: 72c09fb0a3fc689a8ef265e6a68ceee3a9c9c13780fde4cb97857a505ac761c1 dovecot-pgsql-debuginfo-2.3.16-11.el9_4.3.x86_64.rpm SHA-256: 427fe065f56fc4810414e4fe9308f3b95b21f4da1d64c7a941f6d401048f10cc dovecot-pigeonhole-2.3.16-11.el9_4.3.x86_64.rpm SHA-256: a5b26651ed207c41117e79672c80012b