{"id":"CLSA-2026-1782386807","summary":"Fix CVE(s): CVE-2026-42006","details":"   * SECURITY UPDATE: imap-login excessive memory usage DoS via too many\n     '(' in IMAP list (ELSCVE-127370)\n     - debian/patches/CVE-2026-42006.patch: move list_count_limit check\n       and counter increment into imap_parser_open_list() so '(' is what\n       is actually bounded (the previous CVE-2026-27857 fix only limited\n       ')'). Backport of upstream commit da1438c76b797f.\n     - CVE-2026-42006","modified":"2026-10-26T09:43:47.850470365Z","published":"2026-06-25T11:27:01Z","upstream":["CVE-2026-27857","CVE-2026-42006"],"references":[{"type":"ADVISORY","url":"https://errata.tuxcare.com/els_os/ubuntu20.04els/CLSA-2026-1782386807.html"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-42006"}],"affected":[{"package":{"name":"dovecot-auth-lua","ecosystem":"TuxCare:Ubuntu:20.04","purl":"pkg:deb/tuxcare/dovecot-auth-lua?distro=ubuntu-20.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.3.7.2-1ubuntu3.7+tuxcare.els2"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu20.04els/CLSA-2026-1782386807.json"}},{"package":{"name":"dovecot-core","ecosystem":"TuxCare:Ubuntu:20.04","purl":"pkg:deb/tuxcare/dovecot-core?distro=ubuntu-20.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.3.7.2-1ubuntu3.7+tuxcare.els2"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu20.04els/CLSA-2026-1782386807.json"}},{"package":{"name":"dovecot-dev","ecosystem":"TuxCare:Ubuntu:20.04","purl":"pkg:deb/tuxcare/dovecot-dev?distro=ubuntu-20.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.3.7.2-1ubuntu3.7+tuxcare.els2"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu20.04els/CLSA-2026-1782386807.json"}},{"package":{"name":"dovecot-gssapi","ecosystem":"TuxCare:Ubuntu:20.04","purl":"pkg:deb/tuxcare/dovecot-gssapi?distro=ubuntu-20.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.3.7.2-1ubuntu3.7+tuxcare.els2"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu20.04els/CLSA-2026-1782386807.json"}},{"package":{"name":"dovecot-imapd","ecosystem":"TuxCare:Ubuntu:20.04","purl":"pkg:deb/tuxcare/dovecot-imapd?distro=ubuntu-20.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.3.7.2-1ubuntu3.7+tuxcare.els2"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu20.04els/CLSA-2026-1782386807.json"}},{"package":{"name":"dovecot-ldap","ecosystem":"TuxCare:Ubuntu:20.04","purl":"pkg:deb/tuxcare/dovecot-ldap?distro=ubuntu-20.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.3.7.2-1ubuntu3.7+tuxcare.els2"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu20.04els/CLSA-2026-1782386807.json"}},{"package":{"name":"dovecot-lmtpd","ecosystem":"TuxCare:Ubuntu:20.04","purl":"pkg:deb/tuxcare/dovecot-lmtpd?distro=ubuntu-20.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.3.7.2-1ubuntu3.7+tuxcare.els2"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu20.04els/CLSA-2026-1782386807.json"}},{"package":{"name":"dovecot-lucene","ecosystem":"TuxCare:Ubuntu:20.04","purl":"pkg:deb/tuxcare/dovecot-lucene?distro=ubuntu-20.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.3.7.2-1ubuntu3.7+tuxcare.els2"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu20.04els/CLSA-2026-1782386807.json"}},{"package":{"name":"dovecot-managesieved","ecosystem":"TuxCare:Ubuntu:20.04","purl":"pkg:deb/tuxcare/dovecot-managesieved?distro=ubuntu-20.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.3.7.2-1ubuntu3.7+tuxcare.els2"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu20.04els/CLSA-2026-1782386807.json"}},{"package":{"name":"dovecot-mysql","ecosystem":"TuxCare:Ubuntu:20.04","purl":"pkg:deb/tuxcare/dovecot-mysql?distro=ubuntu-20.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.3.7.2-1ubuntu3.7+tuxcare.els2"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu20.04els/CLSA-2026-1782386807.json"}},{"package":{"name":"dovecot-pgsql","ecosystem":"TuxCare:Ubuntu:20.04","purl":"pkg:deb/tuxcare/dovecot-pgsql?distro=ubuntu-20.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.3.7.2-1ubuntu3.7+tuxcare.els2"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu20.04els/CLSA-2026-1782386807.json"}},{"package":{"name":"dovecot-pop3d","ecosystem":"TuxCare:Ubuntu:20.04","purl":"pkg:deb/tuxcare/dovecot-pop3d?distro=ubuntu-20.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.3.7.2-1ubuntu3.7+tuxcare.els2"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu20.04els/CLSA-2026-1782386807.json"}},{"package":{"name":"dovecot-sieve","ecosystem":"TuxCare:Ubuntu:20.04","purl":"pkg:deb/tuxcare/dovecot-sieve?distro=ubuntu-20.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.3.7.2-1ubuntu3.7+tuxcare.els2"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu20.04els/CLSA-2026-1782386807.json"}},{"package":{"name":"dovecot-solr","ecosystem":"TuxCare:Ubuntu:20.04","purl":"pkg:deb/tuxcare/dovecot-solr?distro=ubuntu-20.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.3.7.2-1ubuntu3.7+tuxcare.els2"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu20.04els/CLSA-2026-1782386807.json"}},{"package":{"name":"dovecot-sqlite","ecosystem":"TuxCare:Ubuntu:20.04","purl":"pkg:deb/tuxcare/dovecot-sqlite?distro=ubuntu-20.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.3.7.2-1ubuntu3.7+tuxcare.els2"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu20.04els/CLSA-2026-1782386807.json"}},{"package":{"name":"dovecot-submissiond","ecosystem":"TuxCare:Ubuntu:20.04","purl":"pkg:deb/tuxcare/dovecot-submissiond?distro=ubuntu-20.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.3.7.2-1ubuntu3.7+tuxcare.els2"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu20.04els/CLSA-2026-1782386807.json"}},{"package":{"name":"mail-stack-delivery","ecosystem":"TuxCare:Ubuntu:20.04","purl":"pkg:deb/tuxcare/mail-stack-delivery?distro=ubuntu-20.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.3.7.2-1ubuntu3.7+tuxcare.els2"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu20.04els/CLSA-2026-1782386807.json"}}],"schema_version":"1.9.0"}