{"id":"CLSA-2026-1786675596","summary":"Fix CVE(s): CVE-2026-27858","details":"   * SECURITY UPDATE: managesieve-login pre-auth excessive memory usage\n     DoS via oversized AUTHENTICATE initial response (ELSCVE-158960)\n     - debian/patches/CVE-2026-27858.patch: verify the AUTHENTICATE initial\n       response size is not too large before allocating in\n       pigeonhole/src/managesieve-login/client-authenticate.c. Backport of\n       upstream pigeonhole commit 54f645225a8a; hunk context is this tree's\n       pre-cc1b8988 (unreformatted) layout.\n     - CVE-2026-27858","modified":"2026-10-26T09:32:01.812592934Z","published":"2026-08-14T02:46:47Z","upstream":["CVE-2026-27858"],"references":[{"type":"ADVISORY","url":"https://errata.tuxcare.com/els_os/ubuntu16.04els/CLSA-2026-1786675596.html"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-27858"}],"affected":[{"package":{"name":"dovecot-core","ecosystem":"TuxCare:Ubuntu:16.04","purl":"pkg:deb/tuxcare/dovecot-core?distro=ubuntu-16.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.2.22-1ubuntu2.14+tuxcare.els1"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu16.04els/CLSA-2026-1786675596.json"}},{"package":{"name":"dovecot-dev","ecosystem":"TuxCare:Ubuntu:16.04","purl":"pkg:deb/tuxcare/dovecot-dev?distro=ubuntu-16.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.2.22-1ubuntu2.14+tuxcare.els1"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu16.04els/CLSA-2026-1786675596.json"}},{"package":{"name":"dovecot-gssapi","ecosystem":"TuxCare:Ubuntu:16.04","purl":"pkg:deb/tuxcare/dovecot-gssapi?distro=ubuntu-16.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.2.22-1ubuntu2.14+tuxcare.els1"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu16.04els/CLSA-2026-1786675596.json"}},{"package":{"name":"dovecot-imapd","ecosystem":"TuxCare:Ubuntu:16.04","purl":"pkg:deb/tuxcare/dovecot-imapd?distro=ubuntu-16.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.2.22-1ubuntu2.14+tuxcare.els1"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu16.04els/CLSA-2026-1786675596.json"}},{"package":{"name":"dovecot-ldap","ecosystem":"TuxCare:Ubuntu:16.04","purl":"pkg:deb/tuxcare/dovecot-ldap?distro=ubuntu-16.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.2.22-1ubuntu2.14+tuxcare.els1"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu16.04els/CLSA-2026-1786675596.json"}},{"package":{"name":"dovecot-lmtpd","ecosystem":"TuxCare:Ubuntu:16.04","purl":"pkg:deb/tuxcare/dovecot-lmtpd?distro=ubuntu-16.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.2.22-1ubuntu2.14+tuxcare.els1"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu16.04els/CLSA-2026-1786675596.json"}},{"package":{"name":"dovecot-lucene","ecosystem":"TuxCare:Ubuntu:16.04","purl":"pkg:deb/tuxcare/dovecot-lucene?distro=ubuntu-16.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.2.22-1ubuntu2.14+tuxcare.els1"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu16.04els/CLSA-2026-1786675596.json"}},{"package":{"name":"dovecot-managesieved","ecosystem":"TuxCare:Ubuntu:16.04","purl":"pkg:deb/tuxcare/dovecot-managesieved?distro=ubuntu-16.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.2.22-1ubuntu2.14+tuxcare.els1"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu16.04els/CLSA-2026-1786675596.json"}},{"package":{"name":"dovecot-mysql","ecosystem":"TuxCare:Ubuntu:16.04","purl":"pkg:deb/tuxcare/dovecot-mysql?distro=ubuntu-16.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.2.22-1ubuntu2.14+tuxcare.els1"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu16.04els/CLSA-2026-1786675596.json"}},{"package":{"name":"dovecot-pgsql","ecosystem":"TuxCare:Ubuntu:16.04","purl":"pkg:deb/tuxcare/dovecot-pgsql?distro=ubuntu-16.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.2.22-1ubuntu2.14+tuxcare.els1"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu16.04els/CLSA-2026-1786675596.json"}},{"package":{"name":"dovecot-pop3d","ecosystem":"TuxCare:Ubuntu:16.04","purl":"pkg:deb/tuxcare/dovecot-pop3d?distro=ubuntu-16.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.2.22-1ubuntu2.14+tuxcare.els1"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu16.04els/CLSA-2026-1786675596.json"}},{"package":{"name":"dovecot-sieve","ecosystem":"TuxCare:Ubuntu:16.04","purl":"pkg:deb/tuxcare/dovecot-sieve?distro=ubuntu-16.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.2.22-1ubuntu2.14+tuxcare.els1"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu16.04els/CLSA-2026-1786675596.json"}},{"package":{"name":"dovecot-solr","ecosystem":"TuxCare:Ubuntu:16.04","purl":"pkg:deb/tuxcare/dovecot-solr?distro=ubuntu-16.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.2.22-1ubuntu2.14+tuxcare.els1"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu16.04els/CLSA-2026-1786675596.json"}},{"package":{"name":"dovecot-sqlite","ecosystem":"TuxCare:Ubuntu:16.04","purl":"pkg:deb/tuxcare/dovecot-sqlite?distro=ubuntu-16.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.2.22-1ubuntu2.14+tuxcare.els1"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu16.04els/CLSA-2026-1786675596.json"}},{"package":{"name":"mail-stack-delivery","ecosystem":"TuxCare:Ubuntu:16.04","purl":"pkg:deb/tuxcare/mail-stack-delivery?distro=ubuntu-16.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.2.22-1ubuntu2.14+tuxcare.els1"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu16.04els/CLSA-2026-1786675596.json"}}],"schema_version":"1.9.0"}