Red Hat Product Errata RHSA-2026:41988 - Security Advisory Issued: 2026-07-20 Updated: 2026-07-20 RHSA-2026:41988 - Security Advisory Overview Updated Packages Synopsis Important: dovecot security update Type/Severity Security Advisory: Important Red Hat Lightspeed patch analysis Identify and remediate systems affected by this advisory. View affected systems Topic An update for dovecot is now available for Red Hat Enterprise Linux 10. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section. Description Dovecot is an IMAP server for Linux and other UNIX-like systems, written primarily with security in mind. It also contains a small POP3 server, and supports e-mail in either the maildir or mbox format. The SQL drivers and authentication plug-ins are provided as subpackages. Security Fix(es): dovecot: Dovecot: Denial of Service via excessive IMAP bracing (CVE-2026-42006) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Solution For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 Affected Products Red Hat Enterprise Linux for x86_64 10 x86_64 Red Hat Enterprise Linux for x86_64 - Extended Update Support 10.2 x86_64 Red Hat Enterprise Linux for IBM z Systems 10 s390x Red Hat Enterprise Linux for IBM z Systems - Extended Update Support 10.2 s390x Red Hat Enterprise Linux for Power, little endian 10 ppc64le Red Hat Enterprise Linux for Power, little endian - Extended Update Support 10.2 ppc64le Red Hat Enterprise Linux for ARM 64 10 aarch64 Red Hat Enterprise Linux for ARM 64 - Extended Update Support 10.2 aarch64 Red Hat CodeReady Linux Builder for x86_64 10 x86_64 Red Hat CodeReady Linux Builder for Power, little endian 10 ppc64le Red Hat CodeReady Linux Builder for ARM 64 10 aarch64 Red Hat CodeReady Linux Builder for IBM z Systems 10 s390x Red Hat CodeReady Linux Builder for x86_64 - Extended Update Support 10.2 x86_64 Red Hat CodeReady Linux Builder for Power, little endian - Extended Update Support 10.2 ppc64le Red Hat CodeReady Linux Builder for IBM z Systems - Extended Update Support 10.2 s390x Red Hat CodeReady Linux Builder for ARM 64 - Extended Update Support 10.2 aarch64 Red Hat Enterprise Linux for ARM 64 - 4 years of updates 10.2 aarch64 Red Hat Enterprise Linux for IBM z Systems - 4 years of updates 10.2 s390x Red Hat Enterprise Linux for Power, little endian - 4 years of support 10.2 ppc64le Red Hat Enterprise Linux for x86_64 - 4 years of updates 10.2 x86_64 Red Hat Enterprise Linux for x86_64 - Extended Life Cycle 10.2 x86_64 Red Hat Enterprise Linux for ARM 64 - Extended Life Cycle 10.2 aarch64 Red Hat Enterprise Linux for Power, little endian - Extended Life Cycle 10.2 ppc64le Red Hat Enterprise Linux for IBM z Systems - Extended Life Cycle 10.2 s390x Fixes BZ - 2476476 - CVE-2026-42006 dovecot: Dovecot: Denial of Service via excessive IMAP bracing CVEs CVE-2026-42006 References https://access.redhat.com/security/updates/classification/#important Note: More recent versions of these packages may be available. Click a package name for more details. Red Hat Enterprise Linux for x86_64 10 SRPM dovecot-2.3.21-19.el10_2.1.src.rpm SHA-256: c56a36cf8bd50c1250807d66f02f73e43552970819e928e3d9953a18a5290029 x86_64 dovecot-2.3.21-19.el10_2.1.x86_64.rpm SHA-256: 6972d5cb5fb6e47286b25a6da18e5ea7206172793b96b6dca0121013fcfb7192 dovecot-debuginfo-2.3.21-19.el10_2.1.x86_64.rpm SHA-256: 9fbd34deb74bd6135ef8029a05d97924d784b2e7cac69df58ea17b3eb7fd1834 dovecot-debugsource-2.3.21-19.el10_2.1.x86_64.rpm SHA-256: 74b2ba7d22bf8181633f8ffb0f4b8b71d1ea97bc2229d6313582832d07748fb1 dovecot-mysql-2.3.21-19.el10_2.1.x86_64.rpm SHA-256: b963d7a54bb26deff857d60ed5ffdab2d0ed02f88b6d71ef4f3e9761d24da1bd dovecot-mysql-debuginfo-2.3.21-19.el10_2.1.x86_64.rpm SHA-256: 79e9f5a70ac23b315b1ab03ac693f9399842b8083d7e45bb5265298e0387b8c6 dovecot-pgsql-2.3.21-19.el10_2.1.x86_64.rpm SHA-256: 650146dbafd4968dd4dea1f6711f08fded43d3956d0e1e0fd51d951d4e29fdb4 dovecot-pgsql-debuginfo-2.3.21-19.el10_2.1.x86_64.rpm SHA-256: 0cd2375b7976b319fec360bb5d0bd18666fb35fd5be02dd862d2325fccd435e8 dovecot-pigeonhole-2.3.21-19.el10_2.1.x86_64.rpm SHA-256: 058b039f8554d796197be409c09bf7d286d2c8a6ed93fcf819eb51c1c3fa63db dovecot-pigeonhole-debuginfo-2.3.21-19.el10_2.1.x86_64.rpm SHA-256: 3921272b936198e36fb4ae1d9055af709484bea3300f8d79ef7a7eb331568c4c Red Hat Enterprise Linux for x86_64 - Extended Update Support 10.2 SRPM dovecot-2.3.21-19.el10_2.1.src.rpm SHA-256: c56a36cf8bd50c1250807d66f02f73e43552970819e928e3d9953a18a5290029 x86_64 dovecot-2.3.21-19.el10_2.1.x86_64.rpm SHA-256: 6972d5cb5fb6e47286b25a6da18e5ea7206172793b96b6dca0121013fcfb7192 dovecot-debuginfo-2.3.21-19.el10_2.1.x86_64.rpm SHA-256: 9fbd34deb74bd6135ef8029a05d97924d784b2e7cac69df58ea17b3eb7fd1834 dovecot-debugsource-2.3.21-19.el10_2.1.x86_64.rpm SHA-256: 74b2ba7d22bf8181633f8ffb0f4b8b71d1ea97bc2229d6313582832d07748fb1 dovecot-mysql-2.3.21-19.el10_2.1.x86_64.rpm SHA-256: b963d7a54bb26deff857d60ed5ffdab2d0ed02f88b6d71ef4f3e9761d24da1bd dovecot-mysql-debuginfo-2.3.21-19.el10_2.1.x86_64.rpm SHA-256: 79e9f5a70ac23b315b1ab03ac693f9399842b8083d7e45bb5265298e0387b8c6 dovecot-pgsql-2.3.21-19.el10_2.1.x86_64.rpm SHA-256: 650146dbafd4968dd4dea1f6711f08fded43d3956d0e1e0fd51d951d4e29fdb4 dovecot-pgsql-debuginfo-2.3.21-19.el10_2.1.x86_64.rpm SHA-256: 0cd2375b7976b319fec360bb5d0bd18666fb35fd5be02dd862d2325fccd435e8 dovecot-pigeonhole-2.3.21-19.el10_2.1.x86_64.rpm SHA-256: 058b039f8554d796197be409c09bf7d286d2c8a6ed93fcf819eb51c1c3fa63db dovecot-pigeonhole-debuginfo-2.3.21-19.el10_2.1.x86_64.rpm SHA-256: 3921272b936198e36fb4ae1d9055af709484bea3300f8d79ef7a7eb331568c4c Red Hat Enterprise Linux for IBM z Systems 10 SRPM dovecot-2.3.21-19.el10_2.1.src.rpm SHA-256: c56a36cf8bd50c1250807d66f02f73e43552970819e928e3d9953a18a5290029 s390x dovecot-2.3.21-19.el10_2.1.s390x.rpm SHA-256: f3a72060439435dc3d5a47902e36a4c9943956febe4816614368eb51c578abcd dovecot-debuginfo-2.3.21-19.el10_2.1.s390x.rpm SHA-256: 959184245f262a997b62e7667cc5382786290fe2f3a017b7ad0d049cfca25ddb dovecot-debugsource-2.3.21-19.el10_2.1.s390x.rpm SHA-256: b37fb2f5994a02be4421dea70afbb98c2bdeefffdff4dceaa57ed77d4d94f7c7 dovecot-mysql-2.3.21-19.el10_2.1.s390x.rpm SHA-256: d5e7409c0b92cd918602b39bde65d7705bb5e1ec06ed3e66bc50ef3ba3672b2c dovecot-mysql-debuginfo-2.3.21-19.el10_2.1.s390x.rpm SHA-256: cc978fc2935ac57eef99f0289c47ce3c1cd8aaf684709788fed540f606356dc8 dovecot-pgsql-2.3.21-19.el10_2.1.s390x.rpm SHA-256: 44e4d670beab61dc59b4f3669c6bd07a42dfa159912d50bf273eba1213180eaf dovecot-pgsql-debuginfo-2.3.21-19.el10_2.1.s390x.rpm SHA-256: 1cdd52ec1d4d97266d458f7ba7d33cd99bfd49ff3ade1f2903bf456bd1385d80 dovecot-pigeonhole-2.3.21-19.el10_2.1.s390x.rpm SHA-256: 1a09aab48a9ee32f44a857a097b33ea4e583b5f7a80857e58b07653e2bf88e00 dovecot-pigeonhole-debuginfo-2.3.21-19.el10_2.1.s390x.rpm SHA-256: 085788204dc43d09bb32feed27813159288202affdad52a8e93604506cc5e7a4 Red Hat Enterprise Linux for IBM z Systems - Extended Update Support 10.2 SRPM dovecot-2.3.21-19.el10_2.1.src.rpm SHA-256: c56a36cf8bd50c1250807d66f02f73e43552970819e928e3d9953a18a5290029 s390x dovecot-2.3.21-19.el10_2.1.s390x.rpm SHA-256: f3a72060439435dc3d5a47902e36a4c9943956febe4816614368eb51c578abcd dovecot-debuginfo-2.3.21-19.el10_2.1.s390x.rpm SHA-256: 959184245f262a997b62e7667cc5382786290fe2f3a017b7ad0d049cfca25ddb dovecot-debugsource-2.3.21-19.el10_2.1.s390x.rpm SHA-256: b37fb2f5994a02be4421dea70afbb98c2bdeefffdff4dceaa57ed77d4d94f7c7 dovecot-mysql-2.3.21-19.el10_2.1.s390x.rpm SHA-256: d5e7409c0b92cd918602b39bde65d7705bb5e1ec06ed3e66bc50ef3ba3672b2c dovecot-mysql-debuginfo-2.3.21-19.el10_2.1.s390x.rpm SHA-256: cc978fc2935ac57eef99f0289c47ce3c1cd8aaf684709788fed540f606356dc8 dovecot-pgsql-2.3.21-19.el10_2.1.s390x.rpm SHA-256: 44e4d670beab61dc59b4f3669c6bd07a42dfa159912d50bf273eba1213180eaf dovecot-pgsql-debuginfo-2.3.21-19.el10_2.1.s390x.rpm SHA-256: 1cdd52ec1d4d97266d458f7ba7d33cd99bfd49ff3ade1f2903bf456bd1385d80 dovecot-pigeonhole-2.3.21-19.el10_2.1.s390x.rpm SHA-256: 1a09aab48a9ee32f44a857a097b33ea4e583b5f7a80857e58b07653e2bf88e00 dovecot-pigeonhole-debuginfo-2.3.21-19.el10_2.1.s390x.rpm SHA-256: 085788204dc43d09bb32feed27813159288202affdad52a8e93604506cc5e7a4 Red Hat Enterprise Linux for Power, little endian 10 SRPM dovecot-2.3.21-19.el10_2.1.src.rpm SHA-256: c56a36cf8bd50c1250807d66f02f73e43552970819e928e3d9953a18a5290029 ppc64le dovecot-2.3.21-19.el10_2.1.ppc64le.rpm SHA-256: 0138c2a37ee1ee6c833948a66b37d6bf99d5808e923100ba7ab6522d3a81f1c3 dovecot-debuginfo-2.3.21-19.el10_2.1.ppc64le.rpm SHA-256: 35b9c613ec84bed615ef07eb2cecd8f291964cb2f9a47bd224b8b1a594d244d7 dovecot-debugsource-2.3.21-19.el10_2.1.ppc64le.rpm SHA-256: 6cc1c3dfa0f3174d1c20bce7c93268485b4929bfa8065c20b5f4f3efce76390e dovecot-mysql-2.3.21-19.el10_2.1.ppc64le.rpm SHA-256: f2363b059b8e81e1c8360719428b3dc5d76f2e7f9ff29dbce88057a648c12cb0 dovecot-mysql-debuginfo-2.3.21-19.el10_2.1.ppc64le.rpm SHA-256: d104d3566920b27015a2dbf402a580a0682345debb3b056222988925b7f65cd7 dovecot-pgsql-2.3.21-19.el10_2.1.ppc64le.rpm SHA-256: cf71e39c62207e7a23dd58f90a6db5bf2716b6d58744efcb51ecdee120e609a3 dovecot-pgsql-debuginfo-2.3.21-19.el10_2.1.ppc64le.rpm SHA-256: c9a48e2e233f1b92195b05ce37f75c28cb16046dd8f5194db7d0d4308b6c27c1 dovecot-pigeonhole-2.3.21-19.el10_2.1.ppc64le.rpm SHA-256: 3dd6a73d16f10f07fcb858c535bebf6906f81eb39ed95b93f257b593a2c59817 dovecot-pigeonhole-debuginfo-2.3.21-19.el10_2.1.ppc64le.rpm SHA-256: 9596dc1f110c90b679b38ee530347749248873ad2e90ff6ba71aac0e21b3005b Red Hat Enterprise Linux for Power, little endian - Extended Update Support 10.2 SRPM dovecot-2.3.21-19.el10_2.1.src.rpm SHA-256: c56a