-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Fri, 03 Apr 2026 13:58:21 -0400 Source: dovecot Binary: dovecot-auth-lua dovecot-auth-lua-dbgsym dovecot-core dovecot-core-dbgsym dovecot-dev dovecot-gssapi dovecot-gssapi-dbgsym dovecot-imapd dovecot-imapd-dbgsym dovecot-ldap dovecot-ldap-dbgsym dovecot-lmtpd dovecot-lmtpd-dbgsym dovecot-lucene dovecot-lucene-dbgsym dovecot-managesieved dovecot-managesieved-dbgsym dovecot-mysql dovecot-mysql-dbgsym dovecot-pgsql dovecot-pgsql-dbgsym dovecot-pop3d dovecot-pop3d-dbgsym dovecot-sieve dovecot-sieve-dbgsym dovecot-solr dovecot-solr-dbgsym dovecot-sqlite dovecot-sqlite-dbgsym dovecot-submissiond dovecot-submissiond-dbgsym Architecture: mips64el Version: 1:2.3.19.1+dfsg1-2.1+deb12u2 Distribution: bookworm-security Urgency: medium Maintainer: mipsel Build Daemon (mipsel-osuosl-03) Changed-By: Noah Meyerhans Description: dovecot-auth-lua - secure POP3/IMAP server - Lua authentication plugin dovecot-core - secure POP3/IMAP server - core files dovecot-dev - secure POP3/IMAP server - header files dovecot-gssapi - secure POP3/IMAP server - GSSAPI support dovecot-imapd - secure POP3/IMAP server - IMAP daemon dovecot-ldap - secure POP3/IMAP server - LDAP support dovecot-lmtpd - secure POP3/IMAP server - LMTP server dovecot-lucene - secure POP3/IMAP server - Lucene support dovecot-managesieved - secure POP3/IMAP server - ManageSieve server dovecot-mysql - secure POP3/IMAP server - MySQL support dovecot-pgsql - secure POP3/IMAP server - PostgreSQL support dovecot-pop3d - secure POP3/IMAP server - POP3 daemon dovecot-sieve - secure POP3/IMAP server - Sieve filters support dovecot-solr - secure POP3/IMAP server - Solr support dovecot-sqlite - secure POP3/IMAP server - SQLite support dovecot-submissiond - secure POP3/IMAP server - mail submission agent Changes: dovecot (1:2.3.19.1+dfsg1-2.1+deb12u2) bookworm-security; urgency=medium . * [34fb460] import upstream fixes for several CVEs - CVE-2025-59031: Remove unsafe decode2text shell script - CVE-2025-59032: ManageSieve AUTHENTICATE command crashes when using literal as SASL initial response - CVE-2026-0394: potential path traversal when configured to use per-domain passwd - CVE-2026-27855: OTP driver vulnerable to replay attack. - CVE-2026-27856: Doveadm credentials were not checked using timing-safe checking function - CVE-2026-27857: Sending excessive parenthesis causes imap-login to use excessive memory - CVE-2026-27858: managesieve-login can allocate large amount of memory during authentication - CVE-2026-27859: Excessive RFC 2231 MIME parameters in email would cause excessive CPU usage Checksums-Sha1: b97ff775aa02a9e66ca3e4f4cf6db8da3db06003 35292 dovecot-auth-lua-dbgsym_2.3.19.1+dfsg1-2.1+deb12u2_mips64el.deb c7cee8e71125441d5dd681a438bf720d77dbf8ae 1365812 dovecot-auth-lua_2.3.19.1+dfsg1-2.1+deb12u2_mips64el.deb 406d808c0d67599781c8e96a65c13eb028482195 9842452 dovecot-core-dbgsym_2.3.19.1+dfsg1-2.1+deb12u2_mips64el.deb c46e44457c982a82e8e04771942b31c1795d8c24 4188720 dovecot-core_2.3.19.1+dfsg1-2.1+deb12u2_mips64el.deb 7b606bd7fa5c3621150e22881fb82d3ac514e96c 1743516 dovecot-dev_2.3.19.1+dfsg1-2.1+deb12u2_mips64el.deb d84824cfed4d8ccb064ee103ed049d5eb5c57c1e 22220 dovecot-gssapi-dbgsym_2.3.19.1+dfsg1-2.1+deb12u2_mips64el.deb 9ea47bcf1459c59e13ca7ab5acb92952451f1880 1362568 dovecot-gssapi_2.3.19.1+dfsg1-2.1+deb12u2_mips64el.deb 98e421b413dc55ee5cc7b3c438ee2cf24f3412e1 704988 dovecot-imapd-dbgsym_2.3.19.1+dfsg1-2.1+deb12u2_mips64el.deb cd15ae4619fc9934678b157e4acb66549d2c3548 1521812 dovecot-imapd_2.3.19.1+dfsg1-2.1+deb12u2_mips64el.deb 1e478ee785fb17f9929fa1b967e3ba0a8c2ff9e4 124908 dovecot-ldap-dbgsym_2.3.19.1+dfsg1-2.1+deb12u2_mips64el.deb 1188c562d8de705388eaf56abed92d76f2c1a863 1389792 dovecot-ldap_2.3.19.1+dfsg1-2.1+deb12u2_mips64el.deb 3e2fa720961cd56e32bd17d4bcddb16dd8c91e85 93956 dovecot-lmtpd-dbgsym_2.3.19.1+dfsg1-2.1+deb12u2_mips64el.deb 73850c5f13632d6e9c7a61b44df184e6888bfcfd 1378320 dovecot-lmtpd_2.3.19.1+dfsg1-2.1+deb12u2_mips64el.deb a0bfe85fd68427c47bd877cc20fd260ea5185333 152660 dovecot-lucene-dbgsym_2.3.19.1+dfsg1-2.1+deb12u2_mips64el.deb 348c1a08967cebbbf8a49af91c47fa3ec95bb13f 1381448 dovecot-lucene_2.3.19.1+dfsg1-2.1+deb12u2_mips64el.deb ea82afd37ccecbedf26eeb6602f4624b88c62bb2 152164 dovecot-managesieved-dbgsym_2.3.19.1+dfsg1-2.1+deb12u2_mips64el.deb 55cf689951a0c664aaa49d0e8b03bc7d7cc98e87 1398516 dovecot-managesieved_2.3.19.1+dfsg1-2.1+deb12u2_mips64el.deb 26fb9e80b655e94b04c65f78402967dce0b5c2df 33216 dovecot-mysql-dbgsym_2.3.19.1+dfsg1-2.1+deb12u2_mips64el.deb 4a5b87dbbf1a09cdc5946a63faf3818716317626 1364052 dovecot-mysql_2.3.19.1+dfsg1-2.1+deb12u2_mips64el.deb 4bf1d1f8d1fe1fc4c91a852a8c24f17574a7c0a0 35432 dovecot-pgsql-dbgsym_2.3.19.1+dfsg1-2.1+deb12u2_mips64el.deb d1cd193ff7423bbe33cc134f507b3c4d1aa8a9fc 1366860 dovecot-pgsql_2.3.19.1+dfsg1-2.1+deb12u2_mips64el.deb 911b6cd59159194dfef720a3526c6dccfe21ac89 93608 dovecot-pop3d-dbgsym_2.3.19.1+dfsg1-2.1+deb12u2_mips64el.deb d9c513da386bb247c7987eabf6b665c07a18e453 1385972 dovecot-pop3d_2.3.19.1+dfsg1-2.1+deb12u2_mips64el.deb c74f749403cd547143d99fd82ffcd280c2f6da60 1581120 dovecot-sieve-dbgsym_2.3.19.1+dfsg1-2.1+deb12u2_mips64el.deb 2fe2bd2a5900029556955bdcb0fe557336d1793e 1646068 dovecot-sieve_2.3.19.1+dfsg1-2.1+deb12u2_mips64el.deb 0f001d0c7112ab5bcdbfa3784b6955e75cb43faf 91988 dovecot-solr-dbgsym_2.3.19.1+dfsg1-2.1+deb12u2_mips64el.deb e1213a881bcaf4a1bb7b965a372ffa822587ef5d 1373960 dovecot-solr_2.3.19.1+dfsg1-2.1+deb12u2_mips64el.deb 9e4f918604afaeb7fb8444ddc0d758c2eae8a01f 19556 dovecot-sqlite-dbgsym_2.3.19.1+dfsg1-2.1+deb12u2_mips64el.deb 40f7841ffb8426bf4559c073353bfc62e9ca5eaa 1362300 dovecot-sqlite_2.3.19.1+dfsg1-2.1+deb12u2_mips64el.deb a0d5eb7743038fe6cd69418ed442576a1582bb74 182632 dovecot-submissiond-dbgsym_2.3.19.1+dfsg1-2.1+deb12u2_mips64el.deb 8d37c2003fa993a31ce0e6e229a6f344be21e459 1401968 dovecot-submissiond_2.3.19.1+dfsg1-2.1+deb12u2_mips64el.deb c1c7dadb3d01983a24c15c16c15e00d30dd4aaee 18902 dovecot_2.3.19.1+dfsg1-2.1+deb12u2_mips64el-buildd.buildinfo Checksums-Sha256: b94aa7df75c68b4c6cb21daaba395072056eb84cab1d58be9b84681023706fc7 35292 dovecot-auth-lua-dbgsym_2.3.19.1+dfsg1-2.1+deb12u2_mips64el.deb 366ca72ffb8eb41c94a1a6f402cbab2c3d0f4dd988e61003f1fabb722f0affcb 1365812 dovecot-auth-lua_2.3.19.1+dfsg1-2.1+deb12u2_mips64el.deb cde00c9b0373fc4058583aeb7d5f1a3ac5832347439b3d13398844b109e2ad64 9842452 dovecot-core-dbgsym_2.3.19.1+dfsg1-2.1+deb12u2_mips64el.deb f5040f21fdf2d03252e002b8ee1d2f8b99b66bd2fbb97a2523b89f03959d68d9 4188720 dovecot-core_2.3.19.1+dfsg1-2.1+deb12u2_mips64el.deb 3bcb6da92f5eaaca177113ed7f6546c0a67fef05f55b2a86d4e8028a723cf565 1743516 dovecot-dev_2.3.19.1+dfsg1-2.1+deb12u2_mips64el.deb 6b4e2e222bcf363349d4175c41795d5d53b343bc97ba1b88baa15649debc46e8 22220 dovecot-gssapi-dbgsym_2.3.19.1+dfsg1-2.1+deb12u2_mips64el.deb 8807aab56afa0e37d6bc2c532607bbb8a3a081fba1d8c69c2b7e44d967b3a59f 1362568 dovecot-gssapi_2.3.19.1+dfsg1-2.1+deb12u2_mips64el.deb 12ed24f53bb0b364d9edcab36cb8609b4b81b6061cb86ad55a9d23091432b970 704988 dovecot-imapd-dbgsym_2.3.19.1+dfsg1-2.1+deb12u2_mips64el.deb 0cce9409ef5c3fcf830ec3aa23d0b226bf33dca1aa4f88d9852c0a97c0be41f3 1521812 dovecot-imapd_2.3.19.1+dfsg1-2.1+deb12u2_mips64el.deb dfc640cdca9dea2d6ae04b0834fdda96b4ddd40812d799726fa1af2c53550c18 124908 dovecot-ldap-dbgsym_2.3.19.1+dfsg1-2.1+deb12u2_mips64el.deb 8c8f15ae83b741913f364f3ffc449fed00ba2b1c664caf2fcddecddf66c2fad7 1389792 dovecot-ldap_2.3.19.1+dfsg1-2.1+deb12u2_mips64el.deb df7eea02bfa0e6be8e4ddf9f8984eacd972d8e11027762a090d7ca67659b576e 93956 dovecot-lmtpd-dbgsym_2.3.19.1+dfsg1-2.1+deb12u2_mips64el.deb f14d14f838b464237164b583db0b672b3992a4dd5180cd73ae7c0ef98b65b22c 1378320 dovecot-lmtpd_2.3.19.1+dfsg1-2.1+deb12u2_mips64el.deb cacfec1903021c25701812c29e7e25c467e3135451a4f589f8df8fdf2e3318f3 152660 dovecot-lucene-dbgsym_2.3.19.1+dfsg1-2.1+deb12u2_mips64el.deb 0d1e083469193cf25d2d55c26fe24ffb5f4d2861e8f738d53009f527f7d9a96e 1381448 dovecot-lucene_2.3.19.1+dfsg1-2.1+deb12u2_mips64el.deb 39a578d7b62b6853247db082729a51c2948c77cd904c80b0bb77b1b0d68338be 152164 dovecot-managesieved-dbgsym_2.3.19.1+dfsg1-2.1+deb12u2_mips64el.deb 7abfde119f460c9dc4c1c154066d45881eae13bd34b885c5e0b50ef2ed4cd516 1398516 dovecot-managesieved_2.3.19.1+dfsg1-2.1+deb12u2_mips64el.deb aeeec4ae16aed2179e0189435d1dcbceb26863cc6bbc883e373b0f22d9a19042 33216 dovecot-mysql-dbgsym_2.3.19.1+dfsg1-2.1+deb12u2_mips64el.deb 420f40328117144f6fd8f207218332a40765e838ba167348109974fc4d7d6ce2 1364052 dovecot-mysql_2.3.19.1+dfsg1-2.1+deb12u2_mips64el.deb fc72c022f55e8ff2574eb3688aa3a0286e023611a6a056c3e79d156ccdf21244 35432 dovecot-pgsql-dbgsym_2.3.19.1+dfsg1-2.1+deb12u2_mips64el.deb 02514f0a5fa1cf22783cf5b5a5ae5eed3339d96a56329d5ab23fb5f70adaf487 1366860 dovecot-pgsql_2.3.19.1+dfsg1-2.1+deb12u2_mips64el.deb f4dd6abc6d04ee282e1b839ff5d7503cec727739632139b67a18bdea88579cc4 93608 dovecot-pop3d-dbgsym_2.3.19.1+dfsg1-2.1+deb12u2_mips64el.deb abdd37d9ffb2505ef6e1a39864d53c744cb9860845331c74e24cb55991c30859 1385972 dovecot-pop3d_2.3.19.1+dfsg1-2.1+deb12u2_mips64el.deb 2d18f2666d223e06f84ad7163fff21fe1d6b78016104ed4b15d56e646481b879 1581120 dovecot-sieve-dbgsym_2.3.19.1+dfsg1-2.1+deb12u2_mips64el.deb dba79d459b157f1b8bd45a082331eb0ff9c6eda1ffae00fedbca7ea7f5de37bf 1646068 dovecot-sieve_2.3.19.1+dfsg1-2.1+deb12u2_mips64el.deb 1391555a4065f38e2d50e0992a19c82c72f780c00d521cf1bff340ce1e9a68db 91988 dovecot-solr-dbgsym_2.3.19.1+dfsg1-2.1+deb12u2_mips64el.deb 6fc6e87c6278da90060b3cbed9ce649cb1cdbf939871afe0a579d0f78c164b3c 1373960 dovecot-solr_2.3.19.1+dfsg1-2.1+deb12u2_mips64el.deb a879180b3532fe587aa2c44b074e065dbc4c4688b15c5fe97ad53a9151441480 19556 dovecot-sqlite-dbgsym_2.3.19.1+dfsg1-2.1+deb12u2_mips64el.deb 4e72f7691c14390822484b97163c7f2c33d32ff7f7fed8e1bb7404066b1aee30 1362300 dovecot-sqlite_2.3.19.1+dfsg1-2.1+deb12u2_mips64el.deb c374eae9dcfbea3a2c0e22bdb62410905d271f32147d037936f4cb7fd0419451 182632 dovecot-submissiond-dbgsym_2.3.19.1+dfsg1-2.1+deb12u2_mips64el.deb 7bea4bd919d00de0344a7b47b085db83a27d9d20a5cad9448a93b21947def5fa 1401968 dovecot-submissiond_2.3.19.1+dfsg1-2.1+deb12u2_mips64el.deb 9f8c214cdc31604b6288cf0982cf7ffad50ee0f356143abf1bc0ad80b91ea562 18902 dovecot_2.3.19.1+dfsg1-2.1+deb12u2_mips64el-buildd.buildinfo Files: f9f683609182e2445342df45701426f0 35292 debug optional dovecot-auth-lua-dbgsym_2.3.19.1+dfsg1-2.1+deb12u2_mips64el.deb aa32eab748115b68679d259dfa34518a 1365812 mail optional dovecot-auth-lua_2.3.19.1+dfsg1-2.1+deb12u2_mips64el.deb 44e6f8b217aa6bf5c77adaa76e12549c 9842452 debug optional dovecot-core-dbgsym_2.3.19.1+dfsg1-2.1+deb12u2_mips64el.deb 34ed988d364245cb8c867954e10ecd5a 4188720 mail optional dovecot-core_2.3.19.1+dfsg1-2.1+deb12u2_mips64el.deb 45d7eec21e0781da4840266246c1c112 1743516 mail optional dovecot-dev_2.3.19.1+dfsg1-2.1+deb12u2_mips64el.deb dd2ef32e69fde6bc9ffbbce8bf288711 22220 debug optional dovecot-gssapi-dbgsym_2.3.19.1+dfsg1-2.1+deb12u2_mips64el.deb 6031251e3704d20560cd871dd2c802bc 1362568 mail optional dovecot-gssapi_2.3.19.1+dfsg1-2.1+deb12u2_mips64el.deb 0f5715701d5b67d875fd407f663b041c 704988 debug optional dovecot-imapd-dbgsym_2.3.19.1+dfsg1-2.1+deb12u2_mips64el.deb 5b479cd232c1ed19a4f1a6840c979d25 1521812 mail optional dovecot-imapd_2.3.19.1+dfsg1-2.1+deb12u2_mips64el.deb 42c8c9f7f81125bdcbf9f8811a76dda9 124908 debug optional dovecot-ldap-dbgsym_2.3.19.1+dfsg1-2.1+deb12u2_mips64el.deb 5531863949954f9afac2a5dbd383c1d3 1389792 mail optional dovecot-ldap_2.3.19.1+dfsg1-2.1+deb12u2_mips64el.deb e3c01e2aa6162e2df09dc16dda4f958b 93956 debug optional dovecot-lmtpd-dbgsym_2.3.19.1+dfsg1-2.1+deb12u2_mips64el.deb 0c2d6785435b5eb66a77d32561b53631 1378320 mail optional dovecot-lmtpd_2.3.19.1+dfsg1-2.1+deb12u2_mips64el.deb 4b1e70677907d218f92a7816edee9d2e 152660 debug optional dovecot-lucene-dbgsym_2.3.19.1+dfsg1-2.1+deb12u2_mips64el.deb 0fa6ac82b8cd3bf8cff045bf47d365e2 1381448 mail optional dovecot-lucene_2.3.19.1+dfsg1-2.1+deb12u2_mips64el.deb 9ff2d5a915c4b252cebae33349ed28f4 152164 debug optional dovecot-managesieved-dbgsym_2.3.19.1+dfsg1-2.1+deb12u2_mips64el.deb 69ce9fcd3cb135a600e7a6e19aa74d26 1398516 mail optional dovecot-managesieved_2.3.19.1+dfsg1-2.1+deb12u2_mips64el.deb b9476745952896506fd1463470b651d0 33216 debug optional dovecot-mysql-dbgsym_2.3.19.1+dfsg1-2.1+deb12u2_mips64el.deb e075f5af8b013572bef72761c27fe928 1364052 mail optional dovecot-mysql_2.3.19.1+dfsg1-2.1+deb12u2_mips64el.deb 907134934f6dd9c9b2b2073ad92a62e0 35432 debug optional dovecot-pgsql-dbgsym_2.3.19.1+dfsg1-2.1+deb12u2_mips64el.deb c564662f92f6bb94437b18886b40874c 1366860 mail optional dovecot-pgsql_2.3.19.1+dfsg1-2.1+deb12u2_mips64el.deb ed7803ead49161ca52999c42852c3c1a 93608 debug optional dovecot-pop3d-dbgsym_2.3.19.1+dfsg1-2.1+deb12u2_mips64el.deb 4c8a4512e3e656337d300aaa42895f5b 1385972 mail optional dovecot-pop3d_2.3.19.1+dfsg1-2.1+deb12u2_mips64el.deb 6ff3ac98e245ce0bdd3bdea24a6829bc 1581120 debug optional dovecot-sieve-dbgsym_2.3.19.1+dfsg1-2.1+deb12u2_mips64el.deb 9a08ca71372a17023a9af9ffa78b3530 1646068 mail optional dovecot-sieve_2.3.19.1+dfsg1-2.1+deb12u2_mips64el.deb eca5dff3fc50d95bcc17d6b9d0b8a691 91988 debug optional dovecot-solr-dbgsym_2.3.19.1+dfsg1-2.1+deb12u2_mips64el.deb 226238aa56a0478f6d231ac9115f5d40 1373960 mail optional dovecot-solr_2.3.19.1+dfsg1-2.1+deb12u2_mips64el.deb 679e86cdc6870eab9b422e850149124d 19556 debug optional dovecot-sqlite-dbgsym_2.3.19.1+dfsg1-2.1+deb12u2_mips64el.deb cc916b9d421624448ad935f5ba4751b2 1362300 mail optional dovecot-sqlite_2.3.19.1+dfsg1-2.1+deb12u2_mips64el.deb b95cbbc538847cbd06fec76687542334 182632 debug optional dovecot-submissiond-dbgsym_2.3.19.1+dfsg1-2.1+deb12u2_mips64el.deb f036928ff8e6935cbca0208600ad1657 1401968 mail optional dovecot-submissiond_2.3.19.1+dfsg1-2.1+deb12u2_mips64el.deb d7658c650fa0559fdbbb8a38490dac93 18902 mail optional dovecot_2.3.19.1+dfsg1-2.1+deb12u2_mips64el-buildd.buildinfo -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEE7sd7jtCtE5bBJ1Hx/qmHKZssfSAFAmnQP2cACgkQ/qmHKZss fSDptxAAx9VPrs2H/V+jL5516bVvMO7Cr7EiDEQ9QKuwfQ+9qw/mmHYHSC5bYLZ8 jjw82k0w7G0rrAU8mTRFPnK/b6BogBdI6iMul55TwCseY53mZ5o/anJDrZC3P6JA YcI860xgp2vvfCob5V7HPUnkss4PFBJVjWnYH8LKvBVvMO/wdqTY3ftaaN26el5/ Yi26srUNzhNWYRsEZpL3u4Me3F/AyTVbUvvJ8fwdbWYP9t1XgHY4UBCokxmhEF23 tkiSJE9p6j6hSAl49i0auN6rdmAe0egHvmoinWUULzVhxdEv+yuCi5ov4R6zbnse dDkIGO0g7hIp4kHrLdCsudmfX42ODE5UDFse6ii+GuxoB3zkn4U0GfC6DjTMVT4j Cv5n6kWlwwYsjMxAcTvvhoyd3TinzdUiyqD1t2L39HtIWF9zlQgkgAEvIKRux3b/ KNXkqZq6imyNlNNiWE5d5h42sFRggEy2hFH4BY8lcR/mviDh2aqdYQ+OdY/OUBiC M8L3A56zTnO529sY+fd/tRObK3RksuPZqbhkr41UpazRN2CpKcTV35zow3ADir/S m59tW739cXdqdOjv92BLy1dbxMMDcTyXFC1mc2Pa2TmPoSo6R8YMNRmmRhmtqqPa 2wboaFVpYVTVJPxlmwZljU4xPm3XHeMAgul+DcRPP3+1W0jX17I= =O1xE -----END PGP SIGNATURE-----