-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Fri, 03 Apr 2026 13:58:21 -0400
Source: dovecot
Binary: dovecot-auth-lua dovecot-auth-lua-dbgsym dovecot-core dovecot-core-dbgsym dovecot-dev dovecot-gssapi dovecot-gssapi-dbgsym dovecot-imapd dovecot-imapd-dbgsym dovecot-ldap dovecot-ldap-dbgsym dovecot-lmtpd dovecot-lmtpd-dbgsym dovecot-lucene dovecot-lucene-dbgsym dovecot-managesieved dovecot-managesieved-dbgsym dovecot-mysql dovecot-mysql-dbgsym dovecot-pgsql dovecot-pgsql-dbgsym dovecot-pop3d dovecot-pop3d-dbgsym dovecot-sieve dovecot-sieve-dbgsym dovecot-solr dovecot-solr-dbgsym dovecot-sqlite dovecot-sqlite-dbgsym dovecot-submissiond dovecot-submissiond-dbgsym
Architecture: amd64
Version: 1:2.3.19.1+dfsg1-2.1+deb12u2
Distribution: bookworm-security
Urgency: medium
Maintainer: amd64 / i386 Build Daemon (x86-ubc-01) <buildd_amd64-x86-ubc-01@buildd.debian.org>
Changed-By: Noah Meyerhans <noahm@debian.org>
Description:
 dovecot-auth-lua - secure POP3/IMAP server - Lua authentication plugin
 dovecot-core - secure POP3/IMAP server - core files
 dovecot-dev - secure POP3/IMAP server - header files
 dovecot-gssapi - secure POP3/IMAP server - GSSAPI support
 dovecot-imapd - secure POP3/IMAP server - IMAP daemon
 dovecot-ldap - secure POP3/IMAP server - LDAP support
 dovecot-lmtpd - secure POP3/IMAP server - LMTP server
 dovecot-lucene - secure POP3/IMAP server - Lucene support
 dovecot-managesieved - secure POP3/IMAP server - ManageSieve server
 dovecot-mysql - secure POP3/IMAP server - MySQL support
 dovecot-pgsql - secure POP3/IMAP server - PostgreSQL support
 dovecot-pop3d - secure POP3/IMAP server - POP3 daemon
 dovecot-sieve - secure POP3/IMAP server - Sieve filters support
 dovecot-solr - secure POP3/IMAP server - Solr support
 dovecot-sqlite - secure POP3/IMAP server - SQLite support
 dovecot-submissiond - secure POP3/IMAP server - mail submission agent
Changes:
 dovecot (1:2.3.19.1+dfsg1-2.1+deb12u2) bookworm-security; urgency=medium
 .
   * [34fb460] import upstream fixes for several CVEs
     - CVE-2025-59031: Remove unsafe decode2text shell script
     - CVE-2025-59032: ManageSieve AUTHENTICATE command crashes when using
       literal as SASL initial response
     - CVE-2026-0394: potential path traversal when configured to use
       per-domain passwd
     - CVE-2026-27855: OTP driver vulnerable to replay attack.
     - CVE-2026-27856: Doveadm credentials were not checked using
       timing-safe checking function
     - CVE-2026-27857: Sending excessive parenthesis causes imap-login to
       use excessive memory
     - CVE-2026-27858: managesieve-login can allocate large amount of
       memory during authentication
     - CVE-2026-27859: Excessive RFC 2231 MIME parameters in email would
       cause excessive CPU usage
Checksums-Sha1:
 a2e6fdf01d76fb1aa5467c2929687079ebe73990 33684 dovecot-auth-lua-dbgsym_2.3.19.1+dfsg1-2.1+deb12u2_amd64.deb
 7320e094148be968e881d8b61a3565013ca20286 1367024 dovecot-auth-lua_2.3.19.1+dfsg1-2.1+deb12u2_amd64.deb
 dfb609ecc75f5d6f9f0b7d3c6b7bc92bdff8cdcf 10569128 dovecot-core-dbgsym_2.3.19.1+dfsg1-2.1+deb12u2_amd64.deb
 d365290945f893d98e53931a47c36efb9446573f 4487988 dovecot-core_2.3.19.1+dfsg1-2.1+deb12u2_amd64.deb
 ae01f477b08291321254f83e5f77661dfff64a51 1743468 dovecot-dev_2.3.19.1+dfsg1-2.1+deb12u2_amd64.deb
 02d1ed42913ae21a7c726e5c90fe28896e3d3e5a 21772 dovecot-gssapi-dbgsym_2.3.19.1+dfsg1-2.1+deb12u2_amd64.deb
 5f5ed262743adc58f22d9ef42a6362083bc59cb9 1363000 dovecot-gssapi_2.3.19.1+dfsg1-2.1+deb12u2_amd64.deb
 75b5ef4c3899b159f1f958f5a392c929cfab9b60 733504 dovecot-imapd-dbgsym_2.3.19.1+dfsg1-2.1+deb12u2_amd64.deb
 78880c8cf623782e5c144a52355748472791ccde 1528216 dovecot-imapd_2.3.19.1+dfsg1-2.1+deb12u2_amd64.deb
 b1c799c602bcd0ee7947ba54ad1c7286150eb6aa 122088 dovecot-ldap-dbgsym_2.3.19.1+dfsg1-2.1+deb12u2_amd64.deb
 b1cc188befeb94eb981e007bc65e8b0e1e082dd4 1393756 dovecot-ldap_2.3.19.1+dfsg1-2.1+deb12u2_amd64.deb
 06c29e0c2f73a5fffb77532fb2b8f0d8679450b7 93128 dovecot-lmtpd-dbgsym_2.3.19.1+dfsg1-2.1+deb12u2_amd64.deb
 3138d9c5e6ac6818190437e5b9624843aa4af7cc 1378488 dovecot-lmtpd_2.3.19.1+dfsg1-2.1+deb12u2_amd64.deb
 cac45b7f670ace4ac8aff20454cdddb45851b0ba 154568 dovecot-lucene-dbgsym_2.3.19.1+dfsg1-2.1+deb12u2_amd64.deb
 34b75f424ce255cded393b201b2ed0a9c1b5f12d 1382444 dovecot-lucene_2.3.19.1+dfsg1-2.1+deb12u2_amd64.deb
 de1c4e88d2ea6d6f29bc969db9e521b0c1dd06f8 164328 dovecot-managesieved-dbgsym_2.3.19.1+dfsg1-2.1+deb12u2_amd64.deb
 9157753c426dd68e101cb4b0cd646078b03c30e5 1399428 dovecot-managesieved_2.3.19.1+dfsg1-2.1+deb12u2_amd64.deb
 6f789e2eb94f465b562485fb32173a1649d3dd12 31648 dovecot-mysql-dbgsym_2.3.19.1+dfsg1-2.1+deb12u2_amd64.deb
 ab76fdcd2c57bc0fac6d072caceddb4a893f1c47 1364832 dovecot-mysql_2.3.19.1+dfsg1-2.1+deb12u2_amd64.deb
 0d4dc3206cc0c7fcd32f02a79ff61adfbbcc1f93 33528 dovecot-pgsql-dbgsym_2.3.19.1+dfsg1-2.1+deb12u2_amd64.deb
 00579716cbda51f2831c734cbfe6f55a30644ca9 1368348 dovecot-pgsql_2.3.19.1+dfsg1-2.1+deb12u2_amd64.deb
 d942d7ef3acbde4610ccc093c1ab5f1293809b81 93628 dovecot-pop3d-dbgsym_2.3.19.1+dfsg1-2.1+deb12u2_amd64.deb
 89c2c279b38536b6a226a9a47d82090cb1bd6bc3 1386184 dovecot-pop3d_2.3.19.1+dfsg1-2.1+deb12u2_amd64.deb
 c47821cb01aa7c6a94ce38fa69424a9919288f76 1586544 dovecot-sieve-dbgsym_2.3.19.1+dfsg1-2.1+deb12u2_amd64.deb
 bfbfeea72e3b93c616f056e0760350d1a2981b32 1703044 dovecot-sieve_2.3.19.1+dfsg1-2.1+deb12u2_amd64.deb
 776932cde480ce32cf45d5320fa637baa471800f 88364 dovecot-solr-dbgsym_2.3.19.1+dfsg1-2.1+deb12u2_amd64.deb
 e410dd2ad0901f6e08649a1dc60808d361394bce 1375792 dovecot-solr_2.3.19.1+dfsg1-2.1+deb12u2_amd64.deb
 9671d1eb3bd895156d2ca019c3792224a594c605 17924 dovecot-sqlite-dbgsym_2.3.19.1+dfsg1-2.1+deb12u2_amd64.deb
 a1c81f86ea51cb6a0bc3ac0d7f62159da8eea035 1362832 dovecot-sqlite_2.3.19.1+dfsg1-2.1+deb12u2_amd64.deb
 b13b0a8b8cd9ffdf6e582c8f07a603a77f125b07 185080 dovecot-submissiond-dbgsym_2.3.19.1+dfsg1-2.1+deb12u2_amd64.deb
 733db4e40a306ce2815db0b0b97e22323a9bfed3 1402508 dovecot-submissiond_2.3.19.1+dfsg1-2.1+deb12u2_amd64.deb
 98e3f71e9cb7424c6fd52b63ef07ec1aa5370cbf 18840 dovecot_2.3.19.1+dfsg1-2.1+deb12u2_amd64-buildd.buildinfo
Checksums-Sha256:
 3ce97b3e30c382b8dce13b3531facff932acddcdec8ebc6c932311fa7efc17dd 33684 dovecot-auth-lua-dbgsym_2.3.19.1+dfsg1-2.1+deb12u2_amd64.deb
 700f26c88f93a0633bacc5f130fa973dd0a422a91da65d15e9ab11e5674b9824 1367024 dovecot-auth-lua_2.3.19.1+dfsg1-2.1+deb12u2_amd64.deb
 487ca8642463155de44d73b2c76eeca67f66adc4a72f5c90d944ee69861eea2b 10569128 dovecot-core-dbgsym_2.3.19.1+dfsg1-2.1+deb12u2_amd64.deb
 0c5e8587798a516d7ace7ad6ab06712a27d596e98b0c560ca454a9c2b3bf9e0e 4487988 dovecot-core_2.3.19.1+dfsg1-2.1+deb12u2_amd64.deb
 f4adf022aa9136c72f5b800c0ec994339b3cd628204a306e76cfc6ddc8cda524 1743468 dovecot-dev_2.3.19.1+dfsg1-2.1+deb12u2_amd64.deb
 ce99ff472042e169865dc747556e526695f216c3fc4980f7026e2d35f76af91b 21772 dovecot-gssapi-dbgsym_2.3.19.1+dfsg1-2.1+deb12u2_amd64.deb
 955acbca76bd08c569ef77db943f9f758f92ff3a735357c27f9a9af06ef86103 1363000 dovecot-gssapi_2.3.19.1+dfsg1-2.1+deb12u2_amd64.deb
 528ee1ad785cbe93063d5ccfffeb728e6f84543a6e89b9950fcceb66c5a8bcaf 733504 dovecot-imapd-dbgsym_2.3.19.1+dfsg1-2.1+deb12u2_amd64.deb
 5fefca2f45643703dd9d55aeefe1f2220204d42cbeb0b096ebbe5e084c3c3e9b 1528216 dovecot-imapd_2.3.19.1+dfsg1-2.1+deb12u2_amd64.deb
 a676db0c8d551e96b253e9b92e3ce6a0db35c677c312ac53402a28beb934ea6f 122088 dovecot-ldap-dbgsym_2.3.19.1+dfsg1-2.1+deb12u2_amd64.deb
 69eef4401c69ecd4a37fb7bb5c23a63ab4068e12a1bd27bb7f90d8f7b24f72f5 1393756 dovecot-ldap_2.3.19.1+dfsg1-2.1+deb12u2_amd64.deb
 99e29446976bb482880918f2cac3f24e79050b84a3682902e2e69c99a50b3ef9 93128 dovecot-lmtpd-dbgsym_2.3.19.1+dfsg1-2.1+deb12u2_amd64.deb
 5d55f0f1f7db033bfed8b3bcc6abafada7defcfdd03f8e9ead126162dcf16b47 1378488 dovecot-lmtpd_2.3.19.1+dfsg1-2.1+deb12u2_amd64.deb
 6e1977616b13c418bf0addd03f89b47c02a34224e8c20752c6896c09b151aa81 154568 dovecot-lucene-dbgsym_2.3.19.1+dfsg1-2.1+deb12u2_amd64.deb
 1208d8e067fc83a18b9ab60fe034cc5300ac8c1c5a5d2e3e2eb67c474ae39f5d 1382444 dovecot-lucene_2.3.19.1+dfsg1-2.1+deb12u2_amd64.deb
 ec8cdf4ce31523832efb4555eb0851c21ba5de930d40bdde93f6c19b257d0f8e 164328 dovecot-managesieved-dbgsym_2.3.19.1+dfsg1-2.1+deb12u2_amd64.deb
 9300cd76bfc4b5e553785a7a398e67fa16b1b0a0f0d0f5dfaa92cad02a5d773a 1399428 dovecot-managesieved_2.3.19.1+dfsg1-2.1+deb12u2_amd64.deb
 df858ce8dfdf4cf68ba75d52974241edb10059af88297435f54b59b104d4d637 31648 dovecot-mysql-dbgsym_2.3.19.1+dfsg1-2.1+deb12u2_amd64.deb
 5b5738255942de84f80aaa36dc7efa6f533d6dc8973e3244adf37fec6df26b03 1364832 dovecot-mysql_2.3.19.1+dfsg1-2.1+deb12u2_amd64.deb
 09bd14505865518ba586273ed58d1e663df80dd2305431b2821e385595edacc9 33528 dovecot-pgsql-dbgsym_2.3.19.1+dfsg1-2.1+deb12u2_amd64.deb
 49bdc3e6c2e4bda7642304efaef4dd6eb5d74d79b7a44f7fd53a6fb45b518f8a 1368348 dovecot-pgsql_2.3.19.1+dfsg1-2.1+deb12u2_amd64.deb
 7cd85cc42fbc2c8bd5959aa4966bcf85b2f0dd1f3d2e76e8247098ef9e282dda 93628 dovecot-pop3d-dbgsym_2.3.19.1+dfsg1-2.1+deb12u2_amd64.deb
 a1d6e098974c47528f0026b1fc20f33e5d2f0d7018204a7c386a14d91b8c7e8c 1386184 dovecot-pop3d_2.3.19.1+dfsg1-2.1+deb12u2_amd64.deb
 b120eb5519a9f0d44c19ba6b6b486dbf03f8251b179af8a6574aaae35198809c 1586544 dovecot-sieve-dbgsym_2.3.19.1+dfsg1-2.1+deb12u2_amd64.deb
 f1bb2459b1eb106e9d102687202fb26da34e63f776a431b666961d7b4a10c399 1703044 dovecot-sieve_2.3.19.1+dfsg1-2.1+deb12u2_amd64.deb
 96be2fa9cedb6f90c080c26eab139fd7c3df93431c233bd69c8d0579fb313f17 88364 dovecot-solr-dbgsym_2.3.19.1+dfsg1-2.1+deb12u2_amd64.deb
 ff63a417db739d08a9a54b2947e8917fa16db54245c8a4f0594efdedb5a692a0 1375792 dovecot-solr_2.3.19.1+dfsg1-2.1+deb12u2_amd64.deb
 7997dbadc784d31974edf36cdcb4a8803173ba3520cc451ca5258abff76c4dab 17924 dovecot-sqlite-dbgsym_2.3.19.1+dfsg1-2.1+deb12u2_amd64.deb
 c1facf9729a16e48db26d28487f29104b3233a345e68cc52ca114f448bbd02a2 1362832 dovecot-sqlite_2.3.19.1+dfsg1-2.1+deb12u2_amd64.deb
 c2a45c885657d2a0dd57719139ebcc7fec2b743c91301373e9b35c4501675135 185080 dovecot-submissiond-dbgsym_2.3.19.1+dfsg1-2.1+deb12u2_amd64.deb
 8806f26d06d8e48ab9528c4f0eb4dbb474f52dd64d7daeb77ce8d6a064c6b503 1402508 dovecot-submissiond_2.3.19.1+dfsg1-2.1+deb12u2_amd64.deb
 3b9748ba95e5b0da53da41b79d2af6574c5d8b66adfa74c8cca4b8d41f5f9c81 18840 dovecot_2.3.19.1+dfsg1-2.1+deb12u2_amd64-buildd.buildinfo
Files:
 6111346459ab0a6193ace3b8ab4874bd 33684 debug optional dovecot-auth-lua-dbgsym_2.3.19.1+dfsg1-2.1+deb12u2_amd64.deb
 68f2a0733d05117572ea164018fc33ab 1367024 mail optional dovecot-auth-lua_2.3.19.1+dfsg1-2.1+deb12u2_amd64.deb
 d184888712044e44d9f825e4b8e5a307 10569128 debug optional dovecot-core-dbgsym_2.3.19.1+dfsg1-2.1+deb12u2_amd64.deb
 00a8d14a8fa08e6f8d6e05c5fbbf668e 4487988 mail optional dovecot-core_2.3.19.1+dfsg1-2.1+deb12u2_amd64.deb
 e26fc4ecdce4aa27e5b279ff71c4a797 1743468 mail optional dovecot-dev_2.3.19.1+dfsg1-2.1+deb12u2_amd64.deb
 eb75f91698a10c18db96b7a6da7d62ea 21772 debug optional dovecot-gssapi-dbgsym_2.3.19.1+dfsg1-2.1+deb12u2_amd64.deb
 4e178addc7037f0f5969e018ef5c2963 1363000 mail optional dovecot-gssapi_2.3.19.1+dfsg1-2.1+deb12u2_amd64.deb
 282dca82e4697c82266d905862060a7f 733504 debug optional dovecot-imapd-dbgsym_2.3.19.1+dfsg1-2.1+deb12u2_amd64.deb
 b7e80017e46a730a6d96765b120a8481 1528216 mail optional dovecot-imapd_2.3.19.1+dfsg1-2.1+deb12u2_amd64.deb
 7500a6196d9c6b24354c69c1688f625a 122088 debug optional dovecot-ldap-dbgsym_2.3.19.1+dfsg1-2.1+deb12u2_amd64.deb
 26eea8a32712b52f39baae950e784257 1393756 mail optional dovecot-ldap_2.3.19.1+dfsg1-2.1+deb12u2_amd64.deb
 def26409731bfa45c6be7b442c9ba218 93128 debug optional dovecot-lmtpd-dbgsym_2.3.19.1+dfsg1-2.1+deb12u2_amd64.deb
 d2a44fce62ca115c8a0b1e6cf7d86f80 1378488 mail optional dovecot-lmtpd_2.3.19.1+dfsg1-2.1+deb12u2_amd64.deb
 29b371ac6013c60ad893a266d5450655 154568 debug optional dovecot-lucene-dbgsym_2.3.19.1+dfsg1-2.1+deb12u2_amd64.deb
 84c05269cfa6754e4caf992995792c87 1382444 mail optional dovecot-lucene_2.3.19.1+dfsg1-2.1+deb12u2_amd64.deb
 1a81742bea113f749d39311e3bceff86 164328 debug optional dovecot-managesieved-dbgsym_2.3.19.1+dfsg1-2.1+deb12u2_amd64.deb
 8852404b1b7ee36a54344b1e692ddc19 1399428 mail optional dovecot-managesieved_2.3.19.1+dfsg1-2.1+deb12u2_amd64.deb
 2b88cab5f3ddbd00fb1257086c2b6794 31648 debug optional dovecot-mysql-dbgsym_2.3.19.1+dfsg1-2.1+deb12u2_amd64.deb
 a67cd76ee6f4f7dbb8d05c96b74812b7 1364832 mail optional dovecot-mysql_2.3.19.1+dfsg1-2.1+deb12u2_amd64.deb
 e28276ab226695cd2eac8fa259beb723 33528 debug optional dovecot-pgsql-dbgsym_2.3.19.1+dfsg1-2.1+deb12u2_amd64.deb
 1e3e304fb244395a202eed8298f1e00a 1368348 mail optional dovecot-pgsql_2.3.19.1+dfsg1-2.1+deb12u2_amd64.deb
 fc8c5ff813c7b5fdd8855df7a8c8e1f9 93628 debug optional dovecot-pop3d-dbgsym_2.3.19.1+dfsg1-2.1+deb12u2_amd64.deb
 5157d4e8b85e573e2e4e5192dec54732 1386184 mail optional dovecot-pop3d_2.3.19.1+dfsg1-2.1+deb12u2_amd64.deb
 2a5a48904577763a3739f1440d732207 1586544 debug optional dovecot-sieve-dbgsym_2.3.19.1+dfsg1-2.1+deb12u2_amd64.deb
 87be25d05feab55f15d974885e075cd0 1703044 mail optional dovecot-sieve_2.3.19.1+dfsg1-2.1+deb12u2_amd64.deb
 7524da4e3a041cb47583bc0c4e61b0c7 88364 debug optional dovecot-solr-dbgsym_2.3.19.1+dfsg1-2.1+deb12u2_amd64.deb
 a8eb061206a77300f9485fadaab21b3e 1375792 mail optional dovecot-solr_2.3.19.1+dfsg1-2.1+deb12u2_amd64.deb
 c7585ab72b0620908f5e04ce6b127918 17924 debug optional dovecot-sqlite-dbgsym_2.3.19.1+dfsg1-2.1+deb12u2_amd64.deb
 4174b9382e3c13e493938c58cb559c85 1362832 mail optional dovecot-sqlite_2.3.19.1+dfsg1-2.1+deb12u2_amd64.deb
 1d4b4fdbefab7d98ea2d0619b9519365 185080 debug optional dovecot-submissiond-dbgsym_2.3.19.1+dfsg1-2.1+deb12u2_amd64.deb
 2c5f9ec8cd3649b5458999322781113b 1402508 mail optional dovecot-submissiond_2.3.19.1+dfsg1-2.1+deb12u2_amd64.deb
 6c78b7f21fe368569f528e6399431060 18840 mail optional dovecot_2.3.19.1+dfsg1-2.1+deb12u2_amd64-buildd.buildinfo

-----BEGIN PGP SIGNATURE-----
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=fjpy
-----END PGP SIGNATURE-----