Red Hat Product Errata RHSA-2026:46532 - Security Advisory Issued: 2026-07-27 Updated: 2026-07-27 RHSA-2026:46532 - Security Advisory Overview Updated Packages Synopsis Important: dovecot security update Type/Severity Security Advisory: Important Red Hat Lightspeed patch analysis Identify and remediate systems affected by this advisory. View affected systems Topic An update for dovecot is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section. Description Dovecot is an IMAP server for Linux and other UNIX-like systems, written primarily with security in mind. It also contains a small POP3 server, and supports e-mail in either the maildir or mbox format. The SQL drivers and authentication plug-ins are provided as subpackages. Security Fix(es): dovecot: Dovecot: Denial of Service via excessive IMAP bracing (CVE-2026-42006) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Solution For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 Affected Products Red Hat Enterprise Linux for x86_64 8 x86_64 Red Hat Enterprise Linux for IBM z Systems 8 s390x Red Hat Enterprise Linux for Power, little endian 8 ppc64le Red Hat Enterprise Linux for ARM 64 8 aarch64 Red Hat CodeReady Linux Builder for x86_64 8 x86_64 Red Hat CodeReady Linux Builder for Power, little endian 8 ppc64le Red Hat CodeReady Linux Builder for ARM 64 8 aarch64 Red Hat CodeReady Linux Builder for IBM z Systems 8 s390x Red Hat Enterprise Linux for x86_64 - Extended Life Cycle 8.10 x86_64 Red Hat Enterprise Linux for ARM 64 - Extended Life Cycle 8.10 aarch64 Red Hat Enterprise Linux for Power, little endian - Extended Life Cycle 8.10 ppc64le Red Hat Enterprise Linux for IBM z Systems - Extended Life Cycle 8.10 s390x Fixes BZ - 2476476 - CVE-2026-42006 dovecot: Dovecot: Denial of Service via excessive IMAP bracing CVEs CVE-2026-42006 References https://access.redhat.com/security/updates/classification/#important Note: More recent versions of these packages may be available. Click a package name for more details. Red Hat Enterprise Linux for x86_64 8 SRPM dovecot-2.3.16-8.el8_10.src.rpm SHA-256: 551e922e0d94d86d3d605b59d7929b1cde3a31dfff4c461c77bbf241321a2869 x86_64 dovecot-2.3.16-8.el8_10.x86_64.rpm SHA-256: e153196a5da984421939e97cf1dc9888a2e534a79774d1ed83e2b5dea36073c6 dovecot-debuginfo-2.3.16-8.el8_10.x86_64.rpm SHA-256: e1347c16d2cc67713c4de0093ca50bca3c826288224f075579eaeadf8f6ab2b0 dovecot-debugsource-2.3.16-8.el8_10.x86_64.rpm SHA-256: 840bd74ac9cf4136f910facd79352aba7ef9fead7550ae6d395a49ed20d4ac17 dovecot-mysql-2.3.16-8.el8_10.x86_64.rpm SHA-256: 3c976537cc73bb24fd4eb7619e959718bcaf28a809c4a26f5106c70ac91dd3c9 dovecot-mysql-debuginfo-2.3.16-8.el8_10.x86_64.rpm SHA-256: 9adef39ab35f9b0a79609011f6bb6094952153490c5df85102a90bc911d086e2 dovecot-pgsql-2.3.16-8.el8_10.x86_64.rpm SHA-256: d2384a3d4d66fb3ca35d5f28092e005420fa623493b10a89ce764d3307fed3e4 dovecot-pgsql-debuginfo-2.3.16-8.el8_10.x86_64.rpm SHA-256: fee370d8822ba5820a66e8d578e5e293794717c6476537fc9c9c2ca87a73c539 dovecot-pigeonhole-2.3.16-8.el8_10.x86_64.rpm SHA-256: 856f5761f5eda50935829c97f333f54810953d31d552134408f3fc2d3a6760c7 dovecot-pigeonhole-debuginfo-2.3.16-8.el8_10.x86_64.rpm SHA-256: 49a79e1a25110c797065b7d58de1f2eea2f9cd3f0f8d8dc40802a2138f64281d Red Hat Enterprise Linux for IBM z Systems 8 SRPM dovecot-2.3.16-8.el8_10.src.rpm SHA-256: 551e922e0d94d86d3d605b59d7929b1cde3a31dfff4c461c77bbf241321a2869 s390x dovecot-2.3.16-8.el8_10.s390x.rpm SHA-256: fe5ac63caebb2b456891950dbb168e30327e02a444825ebe52d8e4ee96dc7ec3 dovecot-debuginfo-2.3.16-8.el8_10.s390x.rpm SHA-256: f912f8da3b9a1df9267a1591bffc27adfd63e4def66931790aa495de810e469b dovecot-debugsource-2.3.16-8.el8_10.s390x.rpm SHA-256: b3206916c589736b6f8cfc0b99e13457b43d234a7013fa19a58a0f66e96b9541 dovecot-mysql-2.3.16-8.el8_10.s390x.rpm SHA-256: 81d38e33d823225c877bd48817c135669a7bb7e6bd56341826e9282f9bb0bb69 dovecot-mysql-debuginfo-2.3.16-8.el8_10.s390x.rpm SHA-256: e1d6510080617f8fc3a6beb3ca1dfa2fe73be000fdc7ee3679d9795e2aed2faa dovecot-pgsql-2.3.16-8.el8_10.s390x.rpm SHA-256: b1c2defb125f6e099a66294cbfc1441d90647e2188b1b17803353fa5537f72b4 dovecot-pgsql-debuginfo-2.3.16-8.el8_10.s390x.rpm SHA-256: b751fac35cad17d122142624b39951f0b545b371a16c1fb43115a7babbfaf9a0 dovecot-pigeonhole-2.3.16-8.el8_10.s390x.rpm SHA-256: 6aa42c863abad36625895a28366f027b482a4eacd236c465c8c4ae62d57a80d5 dovecot-pigeonhole-debuginfo-2.3.16-8.el8_10.s390x.rpm SHA-256: 2bdd1122f06897d0a96df53cb905aa573f187d6da16d8cf03b988e46f0e9b751 Red Hat Enterprise Linux for Power, little endian 8 SRPM dovecot-2.3.16-8.el8_10.src.rpm SHA-256: 551e922e0d94d86d3d605b59d7929b1cde3a31dfff4c461c77bbf241321a2869 ppc64le dovecot-2.3.16-8.el8_10.ppc64le.rpm SHA-256: 882fc2de7f15672d09dadda389e483e9724523441a436743bbff242bc32eb422 dovecot-debuginfo-2.3.16-8.el8_10.ppc64le.rpm SHA-256: 7ebf67fb812eae3a65b62321625d0b05b4b1b3ae95bba39025c8c7f71432c75e dovecot-debugsource-2.3.16-8.el8_10.ppc64le.rpm SHA-256: 06ea7c448520981bc805340868fda56d81b6cf81a042625422a8be747ea641b2 dovecot-mysql-2.3.16-8.el8_10.ppc64le.rpm SHA-256: 7d9e696c9e1cb182c0b61a3ac04d730eac7bc14d170c24459ec85bf9ce46cc63 dovecot-mysql-debuginfo-2.3.16-8.el8_10.ppc64le.rpm SHA-256: f56cc67239bf6e26434b6d50a8703863deeb29e445cd4d76edd75c7d7811f849 dovecot-pgsql-2.3.16-8.el8_10.ppc64le.rpm SHA-256: c48594a5c3578780f79d646b9acf4137700a52bec7ae3ca833cc9b8b318ccb8a dovecot-pgsql-debuginfo-2.3.16-8.el8_10.ppc64le.rpm SHA-256: 8d384455f34eeb86ae4069539a72132292a3e7ec1a7103400e1b8ce04c891a2d dovecot-pigeonhole-2.3.16-8.el8_10.ppc64le.rpm SHA-256: 59329637eb6ddb2d7b9aa3b5ae18f8dff4a363799d114d3734a4948ec682eb6a dovecot-pigeonhole-debuginfo-2.3.16-8.el8_10.ppc64le.rpm SHA-256: a2afc1b4ccc9c3ff3c18f6194254f4c8b5614b14fd6b90e229f958b348463401 Red Hat Enterprise Linux for ARM 64 8 SRPM dovecot-2.3.16-8.el8_10.src.rpm SHA-256: 551e922e0d94d86d3d605b59d7929b1cde3a31dfff4c461c77bbf241321a2869 aarch64 dovecot-2.3.16-8.el8_10.aarch64.rpm SHA-256: 5bcb351e1b59ee0cf8a65ba37a9d3fe6cb78860c898d873b7b09988416c1a624 dovecot-debuginfo-2.3.16-8.el8_10.aarch64.rpm SHA-256: 4e96647ea39f5b9b8581f8a25e5faa645cdabd8dabdda4aaab4b53bbe4569db1 dovecot-debugsource-2.3.16-8.el8_10.aarch64.rpm SHA-256: 2d67f9c71c0f91ced7e81d87a94ec39a0c08d167aaf6990d967ce63eafe2c5a5 dovecot-mysql-2.3.16-8.el8_10.aarch64.rpm SHA-256: f5c375c1e18b030293c47315fbdbb03f2fe3cb4f392e85c51b66372a537e618e dovecot-mysql-debuginfo-2.3.16-8.el8_10.aarch64.rpm SHA-256: 7d6fe7ac425cb2902a1907a1a1a1ec3db80d8053a7a9b778a119f69525f2042d dovecot-pgsql-2.3.16-8.el8_10.aarch64.rpm SHA-256: 42e05e5b0e648deff01ab863679692235c1480117415fc1fd84a7535ff60612b dovecot-pgsql-debuginfo-2.3.16-8.el8_10.aarch64.rpm SHA-256: 188032d6d18cd9fb67a5644ddaf8e0f9194e984c69cee416757d963fead2d33f dovecot-pigeonhole-2.3.16-8.el8_10.aarch64.rpm SHA-256: 4312d0f1a8dac6e201165ce33abb7545220e02e44ccfb4a407bb32f2b39d3ff3 dovecot-pigeonhole-debuginfo-2.3.16-8.el8_10.aarch64.rpm SHA-256: 158d17db7d839a696f65fa40c592d139f5f62ee6b772b8f3b576750b28687a51 Red Hat CodeReady Linux Builder for x86_64 8 SRPM x86_64 dovecot-2.3.16-8.el8_10.i686.rpm SHA-256: de91b34697da16445f5269e846ef739ea3cb93222652d906ebcbd4f234cd12ed dovecot-debuginfo-2.3.16-8.el8_10.i686.rpm SHA-256: ec4491d0b9aeae0a9acedbe880b87859d84fe27e9704883fa45f807ba15051cc dovecot-debuginfo-2.3.16-8.el8_10.x86_64.rpm SHA-256: e1347c16d2cc67713c4de0093ca50bca3c826288224f075579eaeadf8f6ab2b0 dovecot-debugsource-2.3.16-8.el8_10.i686.rpm SHA-256: 88c16df017e432f6ea05bb9e85fb5362e72968fd0f3d202bc71e6a9789490f88 dovecot-debugsource-2.3.16-8.el8_10.x86_64.rpm SHA-256: 840bd74ac9cf4136f910facd79352aba7ef9fead7550ae6d395a49ed20d4ac17 dovecot-devel-2.3.16-8.el8_10.i686.rpm SHA-256: 5fe509c1fa07640d8364cb78552c6d3dafd30d73c6af6d59ddd9aefc7a762a98 dovecot-devel-2.3.16-8.el8_10.x86_64.rpm SHA-256: 8ddddec539c596bd6ced29cb867c6b6932aae6685b7f260d943828fcfd696ca2 dovecot-mysql-debuginfo-2.3.16-8.el8_10.i686.rpm SHA-256: 3166281187d72d72cecffd35210cd5e5b3adff6ae4ac4d95522121571d547eb6 dovecot-mysql-debuginfo-2.3.16-8.el8_10.x86_64.rpm SHA-256: 9adef39ab35f9b0a79609011f6bb6094952153490c5df85102a90bc911d086e2 dovecot-pgsql-debuginfo-2.3.16-8.el8_10.i686.rpm SHA-256: e4f9c2a63fb0bc4d065a8fd16e975bd036bdd36b87c7a99623ff60b9e141fe48 dovecot-pgsql-debuginfo-2.3.16-8.el8_10.x86_64.rpm SHA-256: fee370d8822ba5820a66e8d578e5e293794717c6476537fc9c9c2ca87a73c539 dovecot-pigeonhole-debuginfo-2.3.16-8.el8_10.i686.rpm SHA-256: fece3e1f926419f4410283ca3082a6ce2f0088918772cf1585e8b8963053bd9b dovecot-pigeonhole-debuginfo-2.3.16-8.el8_10.x86_64.rpm SHA-256: 49a79e1a25110c797065b7d58de1f2eea2f9cd3f0f8d8dc40802a2138f64281d Red Hat CodeReady Linux Builder for Power, little endian 8 SRPM ppc64le dovecot-debuginfo-2.3.16-8.el8_10.ppc64le.rpm SHA-256: 7ebf67fb812eae3a65b62321625d0b05b4b1b3ae95bba39025c8c7f71432c75e dovecot-debugsource-2.3.16-8.el8_10.ppc64le.rpm SHA-256: 06ea7c448520981bc805340868fda56d81b6cf81a042625422a8be747ea641b2 dovecot-devel-2.3.16-8.el8_10.ppc64le.rpm SHA-256: 63a97ba9a2151891941f38ae88068cb7dfc601d255bcbfd4e46f25f0f11f6253 dovecot-mysql-debuginfo-2.3.16-8.el8_10.ppc64le.rpm SHA-256: f56cc67239bf6e26434b6d50a8703863deeb29e445cd4d76edd75c7d7811f849 dovecot-pgsql-debuginfo-2.3.16-8.el8_10.ppc64le.rpm SHA-256: 8d384455f34eeb86ae4069539a72132292a3e7ec1a7103400e1b8ce04c891a2d dovecot-pigeonhole-debuginfo-2.3.16-8.el8_10.ppc64le.rpm SHA-256: a2afc1b4ccc9c3ff3c18f6194254f4c8b5614b14fd6b90e229f958b348463401 Red Hat CodeReady Linux Builder for ARM 64 8 SRPM aarch64 dovecot-debuginfo-2.3.16-8.el8_10.aarch64.rpm