CLSA-2026-1792236832
See a problem?- Import Source
- https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/centos8.5els/CLSA-2026-1792236832.json
- JSON Data
- https://api.osv.dev/v1/vulns/CLSA-2026-1792236832
- Upstream
- CVE-2026-40018
- Published
- 2026-10-17T11:34:07Z
- Modified
- 2026-10-26T09:31:51Z
- Summary
- dovecot: Fix of 5 CVEs
- Details
-
- CVE-2026-40018: fail MySQL string escaping and SQL passdb lookups while not connected instead of escaping without the connection charset; SQL userdb lookups and dict-sql updates also fail temporarily while not connected
- References
-
- https://errata.tuxcare.com/els_os/centos8.5els/CLSA-2026-1792236832.html
- https://nvd.nist.gov/vuln/detail/CVE-2026-27852
- https://nvd.nist.gov/vuln/detail/CVE-2026-33605
- https://nvd.nist.gov/vuln/detail/CVE-2026-40018
- https://nvd.nist.gov/vuln/detail/CVE-2026-42007
- https://nvd.nist.gov/vuln/detail/CVE-2026-42391
Affected packages
TuxCare:CentOS:8.5 / dovecot
Package
- Name
- dovecot
- Purl
- pkg:rpm/tuxcare/dovecot?distro=centos-8.5
TuxCare:CentOS:8.5 / dovecot-devel
Package
- Name
- dovecot-devel
- Purl
- pkg:rpm/tuxcare/dovecot-devel?distro=centos-8.5
TuxCare:CentOS:8.5 / dovecot-mysql
Package
- Name
- dovecot-mysql
- Purl
- pkg:rpm/tuxcare/dovecot-mysql?distro=centos-8.5
TuxCare:CentOS:8.5 / dovecot-pgsql
Package
- Name
- dovecot-pgsql
- Purl
- pkg:rpm/tuxcare/dovecot-pgsql?distro=centos-8.5