Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
7.5
Dovecot Email Server Security Update Needed
published 3 months ago
Summary
A security update is available for Dovecot, a popular email server software. This update fixes a vulnerability that could allow an attacker to gain unauthorized access to email accounts. We recommend that you apply this update as soon as possible to ensure the security of your email system.
What to do
- Update redhat dovecot to version 1:2.3.16-11.el9_4.3.
Affected software
| Ecosystem | Vendor | Product | Affected versions |
|---|---|---|---|
| Red Hat:rhel_e4s:9.4::appstream | redhat | dovecot |
< 1:2.3.16-11.el9_4.3 Fix: upgrade to 1:2.3.16-11.el9_4.3
|
Original advisory text
Red Hat Security Advisory: dovecot security update
References
- https://access.redhat.com/errata/RHSA-2026:44357 Vendor Advisory
- https://access.redhat.com/security/updates/classification/#important Third Party Advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=2476476 Third Party Advisory
- https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_44357.... Vendor Advisory
- https://access.redhat.com/security/cve/CVE-2026-42006 Third Party Advisory
- https://www.cve.org/CVERecord?id=CVE-2026-42006 Vendor Advisory
- https://nvd.nist.gov/vuln/detail/CVE-2026-42006 Vendor Advisory
- https://documentation.open-xchange.com/dovecot/security/advisories/csaf/2026/oxd... Third Party Advisory
Internet-facing
14 days
Internal
60 days
- Not known to be exploited
- Can be exploited automatically (estimated)
- Gives an attacker partial control (estimated)
Timeline
Published24 Jul 2026
Updated24 Jul 2026
First seen24 Jul 2026
Sources
RHSA-2026:44357 · OSV
Track software like this
Free during beta