{"id":"CLSA-2026-1785836865","summary":"Fix CVE(s): CVE-2026-27858","details":"   * SECURITY UPDATE: managesieve-login pre-auth excessive memory usage\n     DoS via oversized AUTHENTICATE initial response (ELSCVE-158963)\n     - debian/patches/CVE-2026-27858.patch: verify the AUTHENTICATE\n       initial response size is not too large before allocating in\n       pigeonhole/src/managesieve-login/client-authenticate.c. Backport\n       of upstream pigeonhole commit 54f645225a8a: the five added lines are\n       byte-identical to upstream, while the hunk context is this tree's\n       pre-cc1b8988 (unreformatted) layout, which is why the blob index\n       differs from upstream's.\n     - CVE-2026-27858","modified":"2026-10-26T09:31:40.147008151Z","published":"2026-08-04T09:48:01Z","upstream":["CVE-2026-27858"],"references":[{"type":"ADVISORY","url":"https://errata.tuxcare.com/els_os/ubuntu20.04els/CLSA-2026-1785836865.html"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-27858"}],"affected":[{"package":{"name":"dovecot-auth-lua","ecosystem":"TuxCare:Ubuntu:20.04","purl":"pkg:deb/tuxcare/dovecot-auth-lua?distro=ubuntu-20.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.3.7.2-1ubuntu3.7+tuxcare.els3"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu20.04els/CLSA-2026-1785836865.json"}},{"package":{"name":"dovecot-core","ecosystem":"TuxCare:Ubuntu:20.04","purl":"pkg:deb/tuxcare/dovecot-core?distro=ubuntu-20.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.3.7.2-1ubuntu3.7+tuxcare.els3"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu20.04els/CLSA-2026-1785836865.json"}},{"package":{"name":"dovecot-dev","ecosystem":"TuxCare:Ubuntu:20.04","purl":"pkg:deb/tuxcare/dovecot-dev?distro=ubuntu-20.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.3.7.2-1ubuntu3.7+tuxcare.els3"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu20.04els/CLSA-2026-1785836865.json"}},{"package":{"name":"dovecot-gssapi","ecosystem":"TuxCare:Ubuntu:20.04","purl":"pkg:deb/tuxcare/dovecot-gssapi?distro=ubuntu-20.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.3.7.2-1ubuntu3.7+tuxcare.els3"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu20.04els/CLSA-2026-1785836865.json"}},{"package":{"name":"dovecot-imapd","ecosystem":"TuxCare:Ubuntu:20.04","purl":"pkg:deb/tuxcare/dovecot-imapd?distro=ubuntu-20.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.3.7.2-1ubuntu3.7+tuxcare.els3"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu20.04els/CLSA-2026-1785836865.json"}},{"package":{"name":"dovecot-ldap","ecosystem":"TuxCare:Ubuntu:20.04","purl":"pkg:deb/tuxcare/dovecot-ldap?distro=ubuntu-20.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.3.7.2-1ubuntu3.7+tuxcare.els3"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu20.04els/CLSA-2026-1785836865.json"}},{"package":{"name":"dovecot-lmtpd","ecosystem":"TuxCare:Ubuntu:20.04","purl":"pkg:deb/tuxcare/dovecot-lmtpd?distro=ubuntu-20.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.3.7.2-1ubuntu3.7+tuxcare.els3"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu20.04els/CLSA-2026-1785836865.json"}},{"package":{"name":"dovecot-lucene","ecosystem":"TuxCare:Ubuntu:20.04","purl":"pkg:deb/tuxcare/dovecot-lucene?distro=ubuntu-20.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.3.7.2-1ubuntu3.7+tuxcare.els3"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu20.04els/CLSA-2026-1785836865.json"}},{"package":{"name":"dovecot-managesieved","ecosystem":"TuxCare:Ubuntu:20.04","purl":"pkg:deb/tuxcare/dovecot-managesieved?distro=ubuntu-20.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.3.7.2-1ubuntu3.7+tuxcare.els3"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu20.04els/CLSA-2026-1785836865.json"}},{"package":{"name":"dovecot-mysql","ecosystem":"TuxCare:Ubuntu:20.04","purl":"pkg:deb/tuxcare/dovecot-mysql?distro=ubuntu-20.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.3.7.2-1ubuntu3.7+tuxcare.els3"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu20.04els/CLSA-2026-1785836865.json"}},{"package":{"name":"dovecot-pgsql","ecosystem":"TuxCare:Ubuntu:20.04","purl":"pkg:deb/tuxcare/dovecot-pgsql?distro=ubuntu-20.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.3.7.2-1ubuntu3.7+tuxcare.els3"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu20.04els/CLSA-2026-1785836865.json"}},{"package":{"name":"dovecot-pop3d","ecosystem":"TuxCare:Ubuntu:20.04","purl":"pkg:deb/tuxcare/dovecot-pop3d?distro=ubuntu-20.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.3.7.2-1ubuntu3.7+tuxcare.els3"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu20.04els/CLSA-2026-1785836865.json"}},{"package":{"name":"dovecot-sieve","ecosystem":"TuxCare:Ubuntu:20.04","purl":"pkg:deb/tuxcare/dovecot-sieve?distro=ubuntu-20.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.3.7.2-1ubuntu3.7+tuxcare.els3"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu20.04els/CLSA-2026-1785836865.json"}},{"package":{"name":"dovecot-solr","ecosystem":"TuxCare:Ubuntu:20.04","purl":"pkg:deb/tuxcare/dovecot-solr?distro=ubuntu-20.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.3.7.2-1ubuntu3.7+tuxcare.els3"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu20.04els/CLSA-2026-1785836865.json"}},{"package":{"name":"dovecot-sqlite","ecosystem":"TuxCare:Ubuntu:20.04","purl":"pkg:deb/tuxcare/dovecot-sqlite?distro=ubuntu-20.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.3.7.2-1ubuntu3.7+tuxcare.els3"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu20.04els/CLSA-2026-1785836865.json"}},{"package":{"name":"dovecot-submissiond","ecosystem":"TuxCare:Ubuntu:20.04","purl":"pkg:deb/tuxcare/dovecot-submissiond?distro=ubuntu-20.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.3.7.2-1ubuntu3.7+tuxcare.els3"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu20.04els/CLSA-2026-1785836865.json"}},{"package":{"name":"mail-stack-delivery","ecosystem":"TuxCare:Ubuntu:20.04","purl":"pkg:deb/tuxcare/mail-stack-delivery?distro=ubuntu-20.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.3.7.2-1ubuntu3.7+tuxcare.els3"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu20.04els/CLSA-2026-1785836865.json"}}],"schema_version":"1.9.0"}