CLSA-2026-1785836865

See a problem?
Import Source
https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu20.04els/CLSA-2026-1785836865.json
JSON Data
https://api.osv.dev/v1/vulns/CLSA-2026-1785836865
Upstream
Published
2026-08-04T09:48:01Z
Modified
2026-10-26T09:31:40Z
Summary
Fix CVE(s): CVE-2026-27858
Details
  • SECURITY UPDATE: managesieve-login pre-auth excessive memory usage DoS via oversized AUTHENTICATE initial response (ELSCVE-158963)
    • debian/patches/CVE-2026-27858.patch: verify the AUTHENTICATE initial response size is not too large before allocating in pigeonhole/src/managesieve-login/client-authenticate.c. Backport of upstream pigeonhole commit 54f645225a8a: the five added lines are byte-identical to upstream, while the hunk context is this tree's pre-cc1b8988 (unreformatted) layout, which is why the blob index differs from upstream's.
    • CVE-2026-27858
References

Affected packages

TuxCare:Ubuntu:20.04
dovecot-auth-lua

Package

Name
dovecot-auth-lua
Purl
pkg:deb/tuxcare/dovecot-auth-lua?distro=ubuntu-20.04

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
1:2.3.7.2-1ubuntu3.7+tuxcare.els3

Database specific

source 
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu20.04els/CLSA-2026-1785836865.json"
dovecot-core

Package

Name
dovecot-core
Purl
pkg:deb/tuxcare/dovecot-core?distro=ubuntu-20.04

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
1:2.3.7.2-1ubuntu3.7+tuxcare.els3

Database specific

source 
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu20.04els/CLSA-2026-1785836865.json"
dovecot-dev

Package

Name
dovecot-dev
Purl
pkg:deb/tuxcare/dovecot-dev?distro=ubuntu-20.04

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
1:2.3.7.2-1ubuntu3.7+tuxcare.els3

Database specific

source 
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu20.04els/CLSA-2026-1785836865.json"
dovecot-gssapi

Package

Name
dovecot-gssapi
Purl
pkg:deb/tuxcare/dovecot-gssapi?distro=ubuntu-20.04

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
1:2.3.7.2-1ubuntu3.7+tuxcare.els3

Database specific

source 
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu20.04els/CLSA-2026-1785836865.json"
dovecot-imapd

Package

Name
dovecot-imapd
Purl
pkg:deb/tuxcare/dovecot-imapd?distro=ubuntu-20.04

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
1:2.3.7.2-1ubuntu3.7+tuxcare.els3

Database specific

source 
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu20.04els/CLSA-2026-1785836865.json"
dovecot-ldap

Package

Name
dovecot-ldap
Purl
pkg:deb/tuxcare/dovecot-ldap?distro=ubuntu-20.04

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
1:2.3.7.2-1ubuntu3.7+tuxcare.els3

Database specific

source 
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu20.04els/CLSA-2026-1785836865.json"
dovecot-lmtpd

Package

Name
dovecot-lmtpd
Purl
pkg:deb/tuxcare/dovecot-lmtpd?distro=ubuntu-20.04

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
1:2.3.7.2-1ubuntu3.7+tuxcare.els3

Database specific

source 
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu20.04els/CLSA-2026-1785836865.json"
dovecot-lucene

Package

Name
dovecot-lucene
Purl
pkg:deb/tuxcare/dovecot-lucene?distro=ubuntu-20.04

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
1:2.3.7.2-1ubuntu3.7+tuxcare.els3

Database specific

source 
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu20.04els/CLSA-2026-1785836865.json"
dovecot-managesieved

Package

Name
dovecot-managesieved
Purl
pkg:deb/tuxcare/dovecot-managesieved?distro=ubuntu-20.04

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
1:2.3.7.2-1ubuntu3.7+tuxcare.els3

Database specific

source 
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu20.04els/CLSA-2026-1785836865.json"
dovecot-mysql

Package

Name
dovecot-mysql
Purl
pkg:deb/tuxcare/dovecot-mysql?distro=ubuntu-20.04

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
1:2.3.7.2-1ubuntu3.7+tuxcare.els3

Database specific

source 
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu20.04els/CLSA-2026-1785836865.json"
dovecot-pgsql

Package

Name
dovecot-pgsql
Purl
pkg:deb/tuxcare/dovecot-pgsql?distro=ubuntu-20.04

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
1:2.3.7.2-1ubuntu3.7+tuxcare.els3

Database specific

source 
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu20.04els/CLSA-2026-1785836865.json"
dovecot-pop3d

Package

Name
dovecot-pop3d
Purl
pkg:deb/tuxcare/dovecot-pop3d?distro=ubuntu-20.04

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
1:2.3.7.2-1ubuntu3.7+tuxcare.els3

Database specific

source 
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu20.04els/CLSA-2026-1785836865.json"
dovecot-sieve

Package

Name
dovecot-sieve
Purl
pkg:deb/tuxcare/dovecot-sieve?distro=ubuntu-20.04

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
1:2.3.7.2-1ubuntu3.7+tuxcare.els3

Database specific

source 
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu20.04els/CLSA-2026-1785836865.json"
dovecot-solr

Package

Name
dovecot-solr
Purl
pkg:deb/tuxcare/dovecot-solr?distro=ubuntu-20.04

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
1:2.3.7.2-1ubuntu3.7+tuxcare.els3

Database specific

source 
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu20.04els/CLSA-2026-1785836865.json"
dovecot-sqlite

Package

Name
dovecot-sqlite
Purl
pkg:deb/tuxcare/dovecot-sqlite?distro=ubuntu-20.04

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
1:2.3.7.2-1ubuntu3.7+tuxcare.els3

Database specific

source 
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu20.04els/CLSA-2026-1785836865.json"
dovecot-submissiond

Package

Name
dovecot-submissiond
Purl
pkg:deb/tuxcare/dovecot-submissiond?distro=ubuntu-20.04

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
1:2.3.7.2-1ubuntu3.7+tuxcare.els3

Database specific

source 
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu20.04els/CLSA-2026-1785836865.json"
mail-stack-delivery

Package

Name
mail-stack-delivery
Purl
pkg:deb/tuxcare/mail-stack-delivery?distro=ubuntu-20.04

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
1:2.3.7.2-1ubuntu3.7+tuxcare.els3

Database specific

source 
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu20.04els/CLSA-2026-1785836865.json"