{"id":"SUSE-SU-2026:1641-1","summary":"Security update for dovecot22","details":"This update for dovecot22 fixes the following issues:\n\n- CVE-2025-59031: decode2text.sh OOXML extraction may follow symlinks and read unintended files during indexing (bsc#1260895).\n- CVE-2025-59032: pigeonhole: ManageSieve panic occurs with sieve-connect as a client (bsc#1260902).\n- CVE-2026-27855: OTP driver vulnerable to replay attack (bsc#1260900).\n- CVE-2026-27856: Doveadm credentials were not checked using timing-safe checking function (bsc#1260899).\n- CVE-2026-27857: sending excessive parenthesis causes imap-login to use excessive memory (bsc#1260898).\n- CVE-2026-27858: pigeonhole: managesieve-login can allocate large amount of memory during authentication (bsc#1260901).\n- CVE-2026-27859: excessive RFC 2231 MIME parameters in email would can excessive CPU usage (bsc#1260897).\n","modified":"2026-04-29T08:00:56.758683Z","published":"2026-04-28T11:53:47Z","related":["CVE-2025-59031","CVE-2025-59032","CVE-2026-27855","CVE-2026-27856","CVE-2026-27857","CVE-2026-27858","CVE-2026-27859"],"upstream":["CVE-2025-59031","CVE-2025-59032","CVE-2026-27855","CVE-2026-27856","CVE-2026-27857","CVE-2026-27858","CVE-2026-27859"],"references":[{"type":"ADVISORY","url":"https://www.suse.com/support/update/announcement/2026/suse-su-20261641-1/"},{"type":"REPORT","url":"https://bugzilla.suse.com/1260895"},{"type":"REPORT","url":"https://bugzilla.suse.com/1260897"},{"type":"REPORT","url":"https://bugzilla.suse.com/1260898"},{"type":"REPORT","url":"https://bugzilla.suse.com/1260899"},{"type":"REPORT","url":"https://bugzilla.suse.com/1260900"},{"type":"REPORT","url":"https://bugzilla.suse.com/1260901"},{"type":"REPORT","url":"https://bugzilla.suse.com/1260902"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2025-59031"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2025-59032"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2026-27855"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2026-27856"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2026-27857"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2026-27858"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2026-27859"}],"schema_version":"1.7.5"}