-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Fri, 03 Apr 2026 13:58:21 -0400 Source: dovecot Binary: dovecot-auth-lua dovecot-auth-lua-dbgsym dovecot-core dovecot-core-dbgsym dovecot-dev dovecot-gssapi dovecot-gssapi-dbgsym dovecot-imapd dovecot-imapd-dbgsym dovecot-ldap dovecot-ldap-dbgsym dovecot-lmtpd dovecot-lmtpd-dbgsym dovecot-lucene dovecot-lucene-dbgsym dovecot-managesieved dovecot-managesieved-dbgsym dovecot-mysql dovecot-mysql-dbgsym dovecot-pgsql dovecot-pgsql-dbgsym dovecot-pop3d dovecot-pop3d-dbgsym dovecot-sieve dovecot-sieve-dbgsym dovecot-solr dovecot-solr-dbgsym dovecot-sqlite dovecot-sqlite-dbgsym dovecot-submissiond dovecot-submissiond-dbgsym Architecture: mipsel Version: 1:2.3.19.1+dfsg1-2.1+deb12u2 Distribution: bookworm-security Urgency: medium Maintainer: mipsel Build Daemon (mipsel-osuosl-04) Changed-By: Noah Meyerhans Description: dovecot-auth-lua - secure POP3/IMAP server - Lua authentication plugin dovecot-core - secure POP3/IMAP server - core files dovecot-dev - secure POP3/IMAP server - header files dovecot-gssapi - secure POP3/IMAP server - GSSAPI support dovecot-imapd - secure POP3/IMAP server - IMAP daemon dovecot-ldap - secure POP3/IMAP server - LDAP support dovecot-lmtpd - secure POP3/IMAP server - LMTP server dovecot-lucene - secure POP3/IMAP server - Lucene support dovecot-managesieved - secure POP3/IMAP server - ManageSieve server dovecot-mysql - secure POP3/IMAP server - MySQL support dovecot-pgsql - secure POP3/IMAP server - PostgreSQL support dovecot-pop3d - secure POP3/IMAP server - POP3 daemon dovecot-sieve - secure POP3/IMAP server - Sieve filters support dovecot-solr - secure POP3/IMAP server - Solr support dovecot-sqlite - secure POP3/IMAP server - SQLite support dovecot-submissiond - secure POP3/IMAP server - mail submission agent Changes: dovecot (1:2.3.19.1+dfsg1-2.1+deb12u2) bookworm-security; urgency=medium . * [34fb460] import upstream fixes for several CVEs - CVE-2025-59031: Remove unsafe decode2text shell script - CVE-2025-59032: ManageSieve AUTHENTICATE command crashes when using literal as SASL initial response - CVE-2026-0394: potential path traversal when configured to use per-domain passwd - CVE-2026-27855: OTP driver vulnerable to replay attack. - CVE-2026-27856: Doveadm credentials were not checked using timing-safe checking function - CVE-2026-27857: Sending excessive parenthesis causes imap-login to use excessive memory - CVE-2026-27858: managesieve-login can allocate large amount of memory during authentication - CVE-2026-27859: Excessive RFC 2231 MIME parameters in email would cause excessive CPU usage Checksums-Sha1: 4694fd449b034ef2811ae30f56f66b335f1a44ea 34064 dovecot-auth-lua-dbgsym_2.3.19.1+dfsg1-2.1+deb12u2_mipsel.deb 9155543d6a54148c61b5803a5e32a70b1cb8a10a 1365700 dovecot-auth-lua_2.3.19.1+dfsg1-2.1+deb12u2_mipsel.deb 466de685d654fcf28a11d836fa0cb937926d38e6 9607820 dovecot-core-dbgsym_2.3.19.1+dfsg1-2.1+deb12u2_mipsel.deb f6f353385d8cb9bc32acfbb710c3954a63f7a3c9 4216876 dovecot-core_2.3.19.1+dfsg1-2.1+deb12u2_mipsel.deb 269f430904a0ca7382cad24869be55d5f14849b3 1743484 dovecot-dev_2.3.19.1+dfsg1-2.1+deb12u2_mipsel.deb 5c95db769f4fb8eac2eaa8614be88cb0682b0e77 22048 dovecot-gssapi-dbgsym_2.3.19.1+dfsg1-2.1+deb12u2_mipsel.deb 3e3e00e715364e37945501cf196a784bd26d7c24 1362560 dovecot-gssapi_2.3.19.1+dfsg1-2.1+deb12u2_mipsel.deb c3350f604d104674d03764f88cda1d536313afd2 682848 dovecot-imapd-dbgsym_2.3.19.1+dfsg1-2.1+deb12u2_mipsel.deb 7c4ec0aeb916cf91f4e5d3a20b9d26cc28e4d2d3 1523408 dovecot-imapd_2.3.19.1+dfsg1-2.1+deb12u2_mipsel.deb 481e81bd857b067113c39c8b148ceead5ae32edd 120296 dovecot-ldap-dbgsym_2.3.19.1+dfsg1-2.1+deb12u2_mipsel.deb 51f4ab872a5333ced4ec5f551bdee82238e253a1 1389676 dovecot-ldap_2.3.19.1+dfsg1-2.1+deb12u2_mipsel.deb 2b14e31dce237a1f6d9559fc35a409608a45e547 91996 dovecot-lmtpd-dbgsym_2.3.19.1+dfsg1-2.1+deb12u2_mipsel.deb 025216c72c75ba8c10370905126298b683da577f 1378180 dovecot-lmtpd_2.3.19.1+dfsg1-2.1+deb12u2_mipsel.deb aa4250c2ca3f3019537a5c1b02e3c1b34e8c7e7b 150388 dovecot-lucene-dbgsym_2.3.19.1+dfsg1-2.1+deb12u2_mipsel.deb 6168f0a52b8752f4e73ebcff3e3b47a57249ce1e 1381460 dovecot-lucene_2.3.19.1+dfsg1-2.1+deb12u2_mipsel.deb aba89ae3f48b1616f43c23fb531a29d1cef5f133 149012 dovecot-managesieved-dbgsym_2.3.19.1+dfsg1-2.1+deb12u2_mipsel.deb 9a79fb7b3c022b2aadf7e9c515fbc8f707ce1b5b 1398656 dovecot-managesieved_2.3.19.1+dfsg1-2.1+deb12u2_mipsel.deb 36f90f11a5a1e0b6fb03429561b2ec40c3898758 32436 dovecot-mysql-dbgsym_2.3.19.1+dfsg1-2.1+deb12u2_mipsel.deb 5fb6c4b29060b8dfdb43f41172e6ce64e2da0e20 1363916 dovecot-mysql_2.3.19.1+dfsg1-2.1+deb12u2_mipsel.deb f309448ba2380bb68c160d842ef5a651bedac1a9 34816 dovecot-pgsql-dbgsym_2.3.19.1+dfsg1-2.1+deb12u2_mipsel.deb 93d8e7a97dd4713ee719a42ba1d80193eaa1a4ec 1366936 dovecot-pgsql_2.3.19.1+dfsg1-2.1+deb12u2_mipsel.deb f191102e30d7e64771a93a1977b0d429e04b704c 90376 dovecot-pop3d-dbgsym_2.3.19.1+dfsg1-2.1+deb12u2_mipsel.deb 283985ecc306aacdce2e9f6a4d3701ffef2c204b 1385836 dovecot-pop3d_2.3.19.1+dfsg1-2.1+deb12u2_mipsel.deb 6ddcdb7c1b12d45947950a0792e9524eae27b5f6 1543168 dovecot-sieve-dbgsym_2.3.19.1+dfsg1-2.1+deb12u2_mipsel.deb d45590f744837ff65680eb05aa4447c04b9d14c9 1650752 dovecot-sieve_2.3.19.1+dfsg1-2.1+deb12u2_mipsel.deb 66b715561820ac3aeb36b0feb2a54d80d17b00a7 89556 dovecot-solr-dbgsym_2.3.19.1+dfsg1-2.1+deb12u2_mipsel.deb f831c02c85688df9c69dbc47a32209e0970c4e8d 1373776 dovecot-solr_2.3.19.1+dfsg1-2.1+deb12u2_mipsel.deb b76ecc8a30430534b5690fd6d5e25f1330543e1d 18932 dovecot-sqlite-dbgsym_2.3.19.1+dfsg1-2.1+deb12u2_mipsel.deb eb98181a1cd8273a65206be96d12bdb2653f70a3 1362196 dovecot-sqlite_2.3.19.1+dfsg1-2.1+deb12u2_mipsel.deb 2fd5b581e594cb6d40787df762a0f70670bbac7c 178592 dovecot-submissiond-dbgsym_2.3.19.1+dfsg1-2.1+deb12u2_mipsel.deb 05324c6552a8e48084d396428c22e0c25b4d846b 1401964 dovecot-submissiond_2.3.19.1+dfsg1-2.1+deb12u2_mipsel.deb 62b64f31df00bdeb4613a25fc0072cd7099bb589 18705 dovecot_2.3.19.1+dfsg1-2.1+deb12u2_mipsel-buildd.buildinfo Checksums-Sha256: 8cfb8ffc2895a30f4d8ed9236788cc3aaacf4191453f146e5f39765ea639dc6c 34064 dovecot-auth-lua-dbgsym_2.3.19.1+dfsg1-2.1+deb12u2_mipsel.deb b315df72071f8425bd0428a9f9f19b25a72907be59a7f476e979b5a3548e987a 1365700 dovecot-auth-lua_2.3.19.1+dfsg1-2.1+deb12u2_mipsel.deb 659449d40a6b7c0bf57bfa5309c6311c55145fd444e91374f53c5a597950d253 9607820 dovecot-core-dbgsym_2.3.19.1+dfsg1-2.1+deb12u2_mipsel.deb 3329908f06e7cabc104f5396d9a998341e1a07e179ecdbdc5cff470df13d6d8a 4216876 dovecot-core_2.3.19.1+dfsg1-2.1+deb12u2_mipsel.deb d359278ee4245b4d634a4878c3fe1ec9e4bcbe4e3d5e14cef31949fd6505d190 1743484 dovecot-dev_2.3.19.1+dfsg1-2.1+deb12u2_mipsel.deb f7ea9f806489a14f6add43aabd3142b7c39c6a9fb9f4019c4559f7bd5fab0974 22048 dovecot-gssapi-dbgsym_2.3.19.1+dfsg1-2.1+deb12u2_mipsel.deb 2cb884701c9792c35ad3bc4656e96731c2e363ac3f5ed9fbf33463ce1cdcc844 1362560 dovecot-gssapi_2.3.19.1+dfsg1-2.1+deb12u2_mipsel.deb 0d1e01cb27c3bf8f8e1b9b24572d7b9a5fc58758f052dfb61e8254ce6ed689ed 682848 dovecot-imapd-dbgsym_2.3.19.1+dfsg1-2.1+deb12u2_mipsel.deb 6ea6ee4938a417dfd80bbd33206e17f7a14d8f2da9908bfbb89eba61644985da 1523408 dovecot-imapd_2.3.19.1+dfsg1-2.1+deb12u2_mipsel.deb dbb36a3a32901472f750af1091e7a7ec8edb4f55924e8c175baf971849b2af67 120296 dovecot-ldap-dbgsym_2.3.19.1+dfsg1-2.1+deb12u2_mipsel.deb dc84c75ec40a85b8a27d74df919d720f29bad5217284ac52b8fc4d7457879574 1389676 dovecot-ldap_2.3.19.1+dfsg1-2.1+deb12u2_mipsel.deb b720d51b354568747f9c650dc8e44e1e3a1880563bcac79832f014ff75b3c42c 91996 dovecot-lmtpd-dbgsym_2.3.19.1+dfsg1-2.1+deb12u2_mipsel.deb ceaacc3b9ba87d6f95718df82706c6622cce9d73cdd04a07caebbed2999c55aa 1378180 dovecot-lmtpd_2.3.19.1+dfsg1-2.1+deb12u2_mipsel.deb 4d0aac64032d0b1a1911f3e11abc736df17b81f46c2cdd8f8d4a5983731bb96e 150388 dovecot-lucene-dbgsym_2.3.19.1+dfsg1-2.1+deb12u2_mipsel.deb fc28ac31c59dd8ac737cdb203d92041728daf68e7888282d209c5f1da742054f 1381460 dovecot-lucene_2.3.19.1+dfsg1-2.1+deb12u2_mipsel.deb b3eb6c4afdc366cb757552b0b85a9c329157a260e951fa8cc73dc29f0dd9a0a9 149012 dovecot-managesieved-dbgsym_2.3.19.1+dfsg1-2.1+deb12u2_mipsel.deb 1d1c874d259967c84cece7525d6334e02520ae21cbef793c4503b0b1ccc29e06 1398656 dovecot-managesieved_2.3.19.1+dfsg1-2.1+deb12u2_mipsel.deb 85e439cb21299fb52397ada98b2fe5889e6cb1d0e5996824be6a81e4ef126ead 32436 dovecot-mysql-dbgsym_2.3.19.1+dfsg1-2.1+deb12u2_mipsel.deb 699b1506cc1757049ad48fe71e45ff65df773af8b664c33a8a2968cc2854e63c 1363916 dovecot-mysql_2.3.19.1+dfsg1-2.1+deb12u2_mipsel.deb 83ee8773fcd96cc6fa1b8855684f2d32e084f1584b1d46c02a586ca5770e4759 34816 dovecot-pgsql-dbgsym_2.3.19.1+dfsg1-2.1+deb12u2_mipsel.deb 83e1c82042fad7b84a23977172e622547d9b1a84b09545c2cfbd15a2f4114262 1366936 dovecot-pgsql_2.3.19.1+dfsg1-2.1+deb12u2_mipsel.deb 9d620dd8901466adb0404604334581a2da7a04f851703d209751ce40ee49ab8f 90376 dovecot-pop3d-dbgsym_2.3.19.1+dfsg1-2.1+deb12u2_mipsel.deb 0806db0cf139f0fe49683697d9e94c212f5119883ac563156c7f0a4af339772e 1385836 dovecot-pop3d_2.3.19.1+dfsg1-2.1+deb12u2_mipsel.deb cff3957890ff482b3f1574350d2fc9a651cc8c538d623a25707aa84dbba5bb3b 1543168 dovecot-sieve-dbgsym_2.3.19.1+dfsg1-2.1+deb12u2_mipsel.deb 1cd9cc88b4484b89dea68f29c467d4a7496d1228d2a1b3485bdca18b75d8374a 1650752 dovecot-sieve_2.3.19.1+dfsg1-2.1+deb12u2_mipsel.deb 719a4490b8b53839fa7a373b46915907477e84f4bf8c48af00e6b58b7381b9c0 89556 dovecot-solr-dbgsym_2.3.19.1+dfsg1-2.1+deb12u2_mipsel.deb fe9e1c1323dee86491284af2453901f601d67cba91c992b84c6236f13c7bf259 1373776 dovecot-solr_2.3.19.1+dfsg1-2.1+deb12u2_mipsel.deb 182cf223d45633718b5f4321122195588b5450f43ee77f45f1c7bd304b7e1e3f 18932 dovecot-sqlite-dbgsym_2.3.19.1+dfsg1-2.1+deb12u2_mipsel.deb 3d7af6b8b8988b38321b3170bc4ae3dc07a719410c8400c0ed4db880acfd5cb3 1362196 dovecot-sqlite_2.3.19.1+dfsg1-2.1+deb12u2_mipsel.deb 35e7600ed56381c762d60ee3b8bb5212e760f740c57b2083329b7e085ce9c4e6 178592 dovecot-submissiond-dbgsym_2.3.19.1+dfsg1-2.1+deb12u2_mipsel.deb 7bd3d91ff9112e1c183cd5a10ec8bc38b8a81280e92d6a592fab0fa39f6cdc7f 1401964 dovecot-submissiond_2.3.19.1+dfsg1-2.1+deb12u2_mipsel.deb a6a7af1817ffd8042414b0e53a556c690cbd5b9901e22b27af0ffd46dc2bbbf1 18705 dovecot_2.3.19.1+dfsg1-2.1+deb12u2_mipsel-buildd.buildinfo Files: cd333bb5d2acadfc41ee2c48805f8d89 34064 debug optional dovecot-auth-lua-dbgsym_2.3.19.1+dfsg1-2.1+deb12u2_mipsel.deb dbf18a86f6a0e74d68d7a7a98b05d522 1365700 mail optional dovecot-auth-lua_2.3.19.1+dfsg1-2.1+deb12u2_mipsel.deb 670919f9d64abea9e2179639eb9e7b6d 9607820 debug optional dovecot-core-dbgsym_2.3.19.1+dfsg1-2.1+deb12u2_mipsel.deb f940d2e20072b9a788173c8144f0736b 4216876 mail optional dovecot-core_2.3.19.1+dfsg1-2.1+deb12u2_mipsel.deb 8affb7e3e14944e26c8bba75a99a7c8e 1743484 mail optional dovecot-dev_2.3.19.1+dfsg1-2.1+deb12u2_mipsel.deb b9c597c870c1365b52697baa47e6fb73 22048 debug optional dovecot-gssapi-dbgsym_2.3.19.1+dfsg1-2.1+deb12u2_mipsel.deb ae63c64ff3c559907692eeb8692a0a61 1362560 mail optional dovecot-gssapi_2.3.19.1+dfsg1-2.1+deb12u2_mipsel.deb 5b994f78bd585d8f3a7dd4a307d1149e 682848 debug optional dovecot-imapd-dbgsym_2.3.19.1+dfsg1-2.1+deb12u2_mipsel.deb 2ad9d547411b78b49b1d096414205771 1523408 mail optional dovecot-imapd_2.3.19.1+dfsg1-2.1+deb12u2_mipsel.deb f2bce7457d81cb24923bb67566fd9925 120296 debug optional dovecot-ldap-dbgsym_2.3.19.1+dfsg1-2.1+deb12u2_mipsel.deb 24ad73013d39ee99f17d2888a72f377c 1389676 mail optional dovecot-ldap_2.3.19.1+dfsg1-2.1+deb12u2_mipsel.deb a2d75f3e14124788cd9e39302ae3bd16 91996 debug optional dovecot-lmtpd-dbgsym_2.3.19.1+dfsg1-2.1+deb12u2_mipsel.deb 7b0adae18313c442cc30dfa0f87b1d92 1378180 mail optional dovecot-lmtpd_2.3.19.1+dfsg1-2.1+deb12u2_mipsel.deb 81e82fa9dd3cf5ffece0ccc697da14e8 150388 debug optional dovecot-lucene-dbgsym_2.3.19.1+dfsg1-2.1+deb12u2_mipsel.deb 80e181d0ac7610f9718d27e2475d5788 1381460 mail optional dovecot-lucene_2.3.19.1+dfsg1-2.1+deb12u2_mipsel.deb 143f3fb15e6e0a3d52b9fc486bd9887d 149012 debug optional dovecot-managesieved-dbgsym_2.3.19.1+dfsg1-2.1+deb12u2_mipsel.deb 1e98be3ad891cb7c928b3e0a96eb3b49 1398656 mail optional dovecot-managesieved_2.3.19.1+dfsg1-2.1+deb12u2_mipsel.deb 1ba0cc0556943861b42a738da0b5b58d 32436 debug optional dovecot-mysql-dbgsym_2.3.19.1+dfsg1-2.1+deb12u2_mipsel.deb f9a55ea432f100597c4f9d21fdcf0124 1363916 mail optional dovecot-mysql_2.3.19.1+dfsg1-2.1+deb12u2_mipsel.deb 4fc2af18eec6f0991025dd874f52c67c 34816 debug optional dovecot-pgsql-dbgsym_2.3.19.1+dfsg1-2.1+deb12u2_mipsel.deb 347b90c38ec6c16b15d715b1ba8e1202 1366936 mail optional dovecot-pgsql_2.3.19.1+dfsg1-2.1+deb12u2_mipsel.deb 1015a491dd6d3c288f4eabb8eaecda13 90376 debug optional dovecot-pop3d-dbgsym_2.3.19.1+dfsg1-2.1+deb12u2_mipsel.deb 1143abe513bbd36764e1facdf9e5b0b3 1385836 mail optional dovecot-pop3d_2.3.19.1+dfsg1-2.1+deb12u2_mipsel.deb cfc7abe9ec488525f3c0e4fede593c8d 1543168 debug optional dovecot-sieve-dbgsym_2.3.19.1+dfsg1-2.1+deb12u2_mipsel.deb 3d21e07ac5f631412d1c4db8d26b526d 1650752 mail optional dovecot-sieve_2.3.19.1+dfsg1-2.1+deb12u2_mipsel.deb e4d3a4241c79a5226accd8a38dd7de74 89556 debug optional dovecot-solr-dbgsym_2.3.19.1+dfsg1-2.1+deb12u2_mipsel.deb 834d52a32fd311454e0b8c5057023644 1373776 mail optional dovecot-solr_2.3.19.1+dfsg1-2.1+deb12u2_mipsel.deb 43376a34de759f4136a9a7f4606f25f5 18932 debug optional dovecot-sqlite-dbgsym_2.3.19.1+dfsg1-2.1+deb12u2_mipsel.deb caad11354780e487de008538ecef5ec8 1362196 mail optional dovecot-sqlite_2.3.19.1+dfsg1-2.1+deb12u2_mipsel.deb db2dc463fa051afa84a453db84d5d81c 178592 debug optional dovecot-submissiond-dbgsym_2.3.19.1+dfsg1-2.1+deb12u2_mipsel.deb 836c52f829f357f75f0c7a5cc344ca12 1401964 mail optional dovecot-submissiond_2.3.19.1+dfsg1-2.1+deb12u2_mipsel.deb 5b35233f403e529fc0cb6fa588ebff9f 18705 mail optional dovecot_2.3.19.1+dfsg1-2.1+deb12u2_mipsel-buildd.buildinfo -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEyYUQCyzsgu940OiVpwP2OD8jZaoFAmnQRy4ACgkQpwP2OD8j Zaqosw/8CT1oW7/xeNuInTZJAvoj8ZsNFk6zBKx0Ww1f3ZmUrZzmzw0Xef5pXIef P4BIte/WZoRf3f41rh1UIZgU2pbeT05qBxxLgG8P9MqB/pBc+0XDIndRQNQGZF4e tkW/dS9Wm5dmkkARoFv3CPq9evQjVeDgFLZbNx3KTtJNdj3tuPZ3VA0N7AZXnSsI UR8IrfttcQkv6nrWIVH6VJ6IZpvOy7PTB/KeVCUh05KmrBgQ2/oaV7ONSRKXyd1q 2lNOX9WxAyZdUUknVnepxG8foIiGbjmecXzUzBqihBbofpWBKZkr1JW2p041v6is YExcjo8rDo3fYnlF7Ux5Tm+J1pzMy8z75P3y4kNFVlAWEBGRLGrY2h5jOigIf0Xc O0A37EY0zl2lALltA3sXNzEvUvz7fEvvrkHAP+9kObhgAw0QpDzlxveZF6CMlBuF iv61yI3tyDoIUx+Am0m0AC06xtrys/SAo3+VhMBhkZOt2XfQLsaUZTIn4QJt4QEd KOMM7dOOyjoOURyLO++J6EexFEIyDtxgnCthigQ3WMIGVplTQnx2H1DVZJLwnf5c ZImslw6JjjPc5Zk6DcW/hMq07oOMniZjRPge/5UDNg5/y1TIexKwewpFEqphxCJ6 BHN4jzfWsQx3X70baHV/X9vYEXviqX5mN+dkbmpXrPoOP0mMcsA= =T8Ah -----END PGP SIGNATURE-----