{"id":"CLSA-2026-1778750122","summary":"Fix CVE(s): CVE-2026-27857","details":"   * SECURITY UPDATE: imap-login excessive memory usage DoS (ELSCVE-123445)\n     - debian/patches/CVE-2026-27857.patch: limit IMAP parser open list\n       count via new imap_parser_params struct; cap pre-auth\n       IMAP_LOGIN_LIST_COUNT_LIMIT to 1. Squashes upstream commits\n       825bc297, d0f67b52, af1fb4da, 3435e0d44.\n     - CVE-2026-27857","modified":"2026-06-04T09:47:21.922297966Z","published":"2026-05-14T09:15:27Z","upstream":["CVE-2026-27857"],"references":[{"type":"ADVISORY","url":"https://errata.tuxcare.com/els_os/ubuntu20.04els/CLSA-2026-1778750122.html"}],"affected":[{"package":{"name":"dovecot-auth-lua","ecosystem":"TuxCare:Ubuntu:20.04","purl":"pkg:deb/tuxcare/dovecot-auth-lua?distro=ubuntu-20.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.3.7.2-1ubuntu3.7+tuxcare.els1"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu20.04els/CLSA-2026-1778750122.json"}},{"package":{"name":"dovecot-core","ecosystem":"TuxCare:Ubuntu:20.04","purl":"pkg:deb/tuxcare/dovecot-core?distro=ubuntu-20.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.3.7.2-1ubuntu3.7+tuxcare.els1"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu20.04els/CLSA-2026-1778750122.json"}},{"package":{"name":"dovecot-dev","ecosystem":"TuxCare:Ubuntu:20.04","purl":"pkg:deb/tuxcare/dovecot-dev?distro=ubuntu-20.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.3.7.2-1ubuntu3.7+tuxcare.els1"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu20.04els/CLSA-2026-1778750122.json"}},{"package":{"name":"dovecot-gssapi","ecosystem":"TuxCare:Ubuntu:20.04","purl":"pkg:deb/tuxcare/dovecot-gssapi?distro=ubuntu-20.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.3.7.2-1ubuntu3.7+tuxcare.els1"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu20.04els/CLSA-2026-1778750122.json"}},{"package":{"name":"dovecot-imapd","ecosystem":"TuxCare:Ubuntu:20.04","purl":"pkg:deb/tuxcare/dovecot-imapd?distro=ubuntu-20.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.3.7.2-1ubuntu3.7+tuxcare.els1"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu20.04els/CLSA-2026-1778750122.json"}},{"package":{"name":"dovecot-ldap","ecosystem":"TuxCare:Ubuntu:20.04","purl":"pkg:deb/tuxcare/dovecot-ldap?distro=ubuntu-20.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.3.7.2-1ubuntu3.7+tuxcare.els1"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu20.04els/CLSA-2026-1778750122.json"}},{"package":{"name":"dovecot-lmtpd","ecosystem":"TuxCare:Ubuntu:20.04","purl":"pkg:deb/tuxcare/dovecot-lmtpd?distro=ubuntu-20.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.3.7.2-1ubuntu3.7+tuxcare.els1"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu20.04els/CLSA-2026-1778750122.json"}},{"package":{"name":"dovecot-lucene","ecosystem":"TuxCare:Ubuntu:20.04","purl":"pkg:deb/tuxcare/dovecot-lucene?distro=ubuntu-20.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.3.7.2-1ubuntu3.7+tuxcare.els1"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu20.04els/CLSA-2026-1778750122.json"}},{"package":{"name":"dovecot-managesieved","ecosystem":"TuxCare:Ubuntu:20.04","purl":"pkg:deb/tuxcare/dovecot-managesieved?distro=ubuntu-20.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.3.7.2-1ubuntu3.7+tuxcare.els1"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu20.04els/CLSA-2026-1778750122.json"}},{"package":{"name":"dovecot-mysql","ecosystem":"TuxCare:Ubuntu:20.04","purl":"pkg:deb/tuxcare/dovecot-mysql?distro=ubuntu-20.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.3.7.2-1ubuntu3.7+tuxcare.els1"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu20.04els/CLSA-2026-1778750122.json"}},{"package":{"name":"dovecot-pgsql","ecosystem":"TuxCare:Ubuntu:20.04","purl":"pkg:deb/tuxcare/dovecot-pgsql?distro=ubuntu-20.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.3.7.2-1ubuntu3.7+tuxcare.els1"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu20.04els/CLSA-2026-1778750122.json"}},{"package":{"name":"dovecot-pop3d","ecosystem":"TuxCare:Ubuntu:20.04","purl":"pkg:deb/tuxcare/dovecot-pop3d?distro=ubuntu-20.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.3.7.2-1ubuntu3.7+tuxcare.els1"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu20.04els/CLSA-2026-1778750122.json"}},{"package":{"name":"dovecot-sieve","ecosystem":"TuxCare:Ubuntu:20.04","purl":"pkg:deb/tuxcare/dovecot-sieve?distro=ubuntu-20.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.3.7.2-1ubuntu3.7+tuxcare.els1"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu20.04els/CLSA-2026-1778750122.json"}},{"package":{"name":"dovecot-solr","ecosystem":"TuxCare:Ubuntu:20.04","purl":"pkg:deb/tuxcare/dovecot-solr?distro=ubuntu-20.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.3.7.2-1ubuntu3.7+tuxcare.els1"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu20.04els/CLSA-2026-1778750122.json"}},{"package":{"name":"dovecot-sqlite","ecosystem":"TuxCare:Ubuntu:20.04","purl":"pkg:deb/tuxcare/dovecot-sqlite?distro=ubuntu-20.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.3.7.2-1ubuntu3.7+tuxcare.els1"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu20.04els/CLSA-2026-1778750122.json"}},{"package":{"name":"dovecot-submissiond","ecosystem":"TuxCare:Ubuntu:20.04","purl":"pkg:deb/tuxcare/dovecot-submissiond?distro=ubuntu-20.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.3.7.2-1ubuntu3.7+tuxcare.els1"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu20.04els/CLSA-2026-1778750122.json"}},{"package":{"name":"mail-stack-delivery","ecosystem":"TuxCare:Ubuntu:20.04","purl":"pkg:deb/tuxcare/mail-stack-delivery?distro=ubuntu-20.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.3.7.2-1ubuntu3.7+tuxcare.els1"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu20.04els/CLSA-2026-1778750122.json"}}],"schema_version":"1.7.5"}