-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Fri, 03 Apr 2026 13:58:21 -0400
Source: dovecot
Binary: dovecot-auth-lua dovecot-auth-lua-dbgsym dovecot-core dovecot-core-dbgsym dovecot-dev dovecot-gssapi dovecot-gssapi-dbgsym dovecot-imapd dovecot-imapd-dbgsym dovecot-ldap dovecot-ldap-dbgsym dovecot-lmtpd dovecot-lmtpd-dbgsym dovecot-lucene dovecot-lucene-dbgsym dovecot-managesieved dovecot-managesieved-dbgsym dovecot-mysql dovecot-mysql-dbgsym dovecot-pgsql dovecot-pgsql-dbgsym dovecot-pop3d dovecot-pop3d-dbgsym dovecot-sieve dovecot-sieve-dbgsym dovecot-solr dovecot-solr-dbgsym dovecot-sqlite dovecot-sqlite-dbgsym dovecot-submissiond dovecot-submissiond-dbgsym
Architecture: s390x
Version: 1:2.3.19.1+dfsg1-2.1+deb12u2
Distribution: bookworm-security
Urgency: medium
Maintainer: s390x Build Daemon (zandonai) <buildd_s390x-zandonai@buildd.debian.org>
Changed-By: Noah Meyerhans <noahm@debian.org>
Description:
 dovecot-auth-lua - secure POP3/IMAP server - Lua authentication plugin
 dovecot-core - secure POP3/IMAP server - core files
 dovecot-dev - secure POP3/IMAP server - header files
 dovecot-gssapi - secure POP3/IMAP server - GSSAPI support
 dovecot-imapd - secure POP3/IMAP server - IMAP daemon
 dovecot-ldap - secure POP3/IMAP server - LDAP support
 dovecot-lmtpd - secure POP3/IMAP server - LMTP server
 dovecot-lucene - secure POP3/IMAP server - Lucene support
 dovecot-managesieved - secure POP3/IMAP server - ManageSieve server
 dovecot-mysql - secure POP3/IMAP server - MySQL support
 dovecot-pgsql - secure POP3/IMAP server - PostgreSQL support
 dovecot-pop3d - secure POP3/IMAP server - POP3 daemon
 dovecot-sieve - secure POP3/IMAP server - Sieve filters support
 dovecot-solr - secure POP3/IMAP server - Solr support
 dovecot-sqlite - secure POP3/IMAP server - SQLite support
 dovecot-submissiond - secure POP3/IMAP server - mail submission agent
Changes:
 dovecot (1:2.3.19.1+dfsg1-2.1+deb12u2) bookworm-security; urgency=medium
 .
   * [34fb460] import upstream fixes for several CVEs
     - CVE-2025-59031: Remove unsafe decode2text shell script
     - CVE-2025-59032: ManageSieve AUTHENTICATE command crashes when using
       literal as SASL initial response
     - CVE-2026-0394: potential path traversal when configured to use
       per-domain passwd
     - CVE-2026-27855: OTP driver vulnerable to replay attack.
     - CVE-2026-27856: Doveadm credentials were not checked using
       timing-safe checking function
     - CVE-2026-27857: Sending excessive parenthesis causes imap-login to
       use excessive memory
     - CVE-2026-27858: managesieve-login can allocate large amount of
       memory during authentication
     - CVE-2026-27859: Excessive RFC 2231 MIME parameters in email would
       cause excessive CPU usage
Checksums-Sha1:
 2183619d233e0f677f87e26a32ff3931dd33103b 32820 dovecot-auth-lua-dbgsym_2.3.19.1+dfsg1-2.1+deb12u2_s390x.deb
 f44486c782e8012df450c4f683fccd748fa11853 1365984 dovecot-auth-lua_2.3.19.1+dfsg1-2.1+deb12u2_s390x.deb
 8dd0eee65b08f2678b3e58b37559ee1cb719d294 9503316 dovecot-core-dbgsym_2.3.19.1+dfsg1-2.1+deb12u2_s390x.deb
 ec2e30d3db4b9c271cd0565c9669bc261eab62d1 4237504 dovecot-core_2.3.19.1+dfsg1-2.1+deb12u2_s390x.deb
 4f8624974a248e928f7767de73ea86256d1ba336 1743536 dovecot-dev_2.3.19.1+dfsg1-2.1+deb12u2_s390x.deb
 b1fb6e16fe782c1a966b0a9577ce731741bd1c89 21164 dovecot-gssapi-dbgsym_2.3.19.1+dfsg1-2.1+deb12u2_s390x.deb
 0596ec4b47e7678ad0d0cfb33928b7eb48354da2 1362512 dovecot-gssapi_2.3.19.1+dfsg1-2.1+deb12u2_s390x.deb
 fe6194daf81031d457c1bd47151e5ba11b42d215 680572 dovecot-imapd-dbgsym_2.3.19.1+dfsg1-2.1+deb12u2_s390x.deb
 94a57b77fe480f37a8dfc88ed61fbfc3272b3b35 1511764 dovecot-imapd_2.3.19.1+dfsg1-2.1+deb12u2_s390x.deb
 46e6b1ffdba75f27d4d1e94c67d14a3e262b3eec 118592 dovecot-ldap-dbgsym_2.3.19.1+dfsg1-2.1+deb12u2_s390x.deb
 8e2d10a368c2ece2a24a387aa31518dd156e63f7 1390832 dovecot-ldap_2.3.19.1+dfsg1-2.1+deb12u2_s390x.deb
 13a744d7d1468e40f609c431b6cfc73fc49a4b3a 91272 dovecot-lmtpd-dbgsym_2.3.19.1+dfsg1-2.1+deb12u2_s390x.deb
 7656c5af5d2f8d6b675ecc508793468d530ac15f 1376780 dovecot-lmtpd_2.3.19.1+dfsg1-2.1+deb12u2_s390x.deb
 07aa93ccb25474016f84600348c60067258278e2 151252 dovecot-lucene-dbgsym_2.3.19.1+dfsg1-2.1+deb12u2_s390x.deb
 4c85ea00ea193d2cbb4e2925715a7cf16b67c4f9 1379928 dovecot-lucene_2.3.19.1+dfsg1-2.1+deb12u2_s390x.deb
 44441c287d788c83de341c6c7644513d5d8f64a1 147012 dovecot-managesieved-dbgsym_2.3.19.1+dfsg1-2.1+deb12u2_s390x.deb
 9ddd91328f092eac515daf480047f63c0ebdcfc2 1395452 dovecot-managesieved_2.3.19.1+dfsg1-2.1+deb12u2_s390x.deb
 3ce08553f71f788e3d0e76bebd1da66ebbedc488 31016 dovecot-mysql-dbgsym_2.3.19.1+dfsg1-2.1+deb12u2_s390x.deb
 48c12f79039e9d57ce1e58cb2ad57359c7b613ba 1364160 dovecot-mysql_2.3.19.1+dfsg1-2.1+deb12u2_s390x.deb
 61eff6873908ee165c745c3bab6aaaba4f8f8acb 32592 dovecot-pgsql-dbgsym_2.3.19.1+dfsg1-2.1+deb12u2_s390x.deb
 e35b0b7943b6a79c56abec0784665c46827ea9d6 1367052 dovecot-pgsql_2.3.19.1+dfsg1-2.1+deb12u2_s390x.deb
 7617695e988ea18334c46577ce6f489911808db7 89920 dovecot-pop3d-dbgsym_2.3.19.1+dfsg1-2.1+deb12u2_s390x.deb
 664669379f52ceea3c305d7789972fd56867a58b 1383744 dovecot-pop3d_2.3.19.1+dfsg1-2.1+deb12u2_s390x.deb
 c4508c42b447083360c4fa5baa4119acaaf97f81 1537416 dovecot-sieve-dbgsym_2.3.19.1+dfsg1-2.1+deb12u2_s390x.deb
 95f31c7b7557c9770018ea03eb7c89660832ff1c 1669284 dovecot-sieve_2.3.19.1+dfsg1-2.1+deb12u2_s390x.deb
 efa0637fb029d17fd2a56f5df9f57e31027790fd 86168 dovecot-solr-dbgsym_2.3.19.1+dfsg1-2.1+deb12u2_s390x.deb
 3d69929c6deab78c415c6ac78b4c3ba47ad4a3f0 1373864 dovecot-solr_2.3.19.1+dfsg1-2.1+deb12u2_s390x.deb
 7c58f4817c4c16877f68457dd6b8cc02680d86be 17988 dovecot-sqlite-dbgsym_2.3.19.1+dfsg1-2.1+deb12u2_s390x.deb
 f4775d5ba05a3c570934409c46b5703d5c28e8e1 1362232 dovecot-sqlite_2.3.19.1+dfsg1-2.1+deb12u2_s390x.deb
 5693c094d6a6a48ab380cebbbd787b1e6d986fba 177692 dovecot-submissiond-dbgsym_2.3.19.1+dfsg1-2.1+deb12u2_s390x.deb
 73e9f6ce19a8a78215749ef5cbc97374f3c403fc 1397948 dovecot-submissiond_2.3.19.1+dfsg1-2.1+deb12u2_s390x.deb
 dd1a2d9d33a13831a2f2a1cd588bed544e9f2e89 18655 dovecot_2.3.19.1+dfsg1-2.1+deb12u2_s390x-buildd.buildinfo
Checksums-Sha256:
 9e115d10124f902c341d60c4619332c75ab2dcfa8b1c4453790031a1bc952c82 32820 dovecot-auth-lua-dbgsym_2.3.19.1+dfsg1-2.1+deb12u2_s390x.deb
 15e51adfb0374938bde3654611af552309d0cd3f9d2169188f60f72c3a2d842e 1365984 dovecot-auth-lua_2.3.19.1+dfsg1-2.1+deb12u2_s390x.deb
 648c3e9a7c063246489131b0792449d2e9cc56a2d8d14bb6572ada01a08d2f62 9503316 dovecot-core-dbgsym_2.3.19.1+dfsg1-2.1+deb12u2_s390x.deb
 42a362a41c167cd342d2b50e221046649148b81b56c9ac9f9fb0e8e48ec81ca7 4237504 dovecot-core_2.3.19.1+dfsg1-2.1+deb12u2_s390x.deb
 79ad3c4bd49b2b1b18a88bb384eeba629fdf42266a44cd480a7dcf29727d2b36 1743536 dovecot-dev_2.3.19.1+dfsg1-2.1+deb12u2_s390x.deb
 bf224465403dc266166fbd1c5ee3450ac1c731f5f14ca3209d4327416e20e406 21164 dovecot-gssapi-dbgsym_2.3.19.1+dfsg1-2.1+deb12u2_s390x.deb
 920520f0cd0c2f283556f558f3d0c414d18d1914c474a571bcdabc45675f960c 1362512 dovecot-gssapi_2.3.19.1+dfsg1-2.1+deb12u2_s390x.deb
 92aa72818bbf665a7f2a6f93de280a3929f45bc0f0cff7dbffa83d93c8629558 680572 dovecot-imapd-dbgsym_2.3.19.1+dfsg1-2.1+deb12u2_s390x.deb
 9d4fafc83f849e0f86d868a4dbd8a7f312f9fe7aaf05f2ae18c8c626c5135104 1511764 dovecot-imapd_2.3.19.1+dfsg1-2.1+deb12u2_s390x.deb
 d7a51c19ebfc81ce78ecb56814de4f7ec8582e953ff57a73c874e9997b7838f2 118592 dovecot-ldap-dbgsym_2.3.19.1+dfsg1-2.1+deb12u2_s390x.deb
 1a3239e4ff918116d6107f80e9171f93f5dfba93ac5759dcad6945d4c45de5f2 1390832 dovecot-ldap_2.3.19.1+dfsg1-2.1+deb12u2_s390x.deb
 3cbea420cd0323e1c1b613740a7191af90429149a47ff65bbf914f5953b19cca 91272 dovecot-lmtpd-dbgsym_2.3.19.1+dfsg1-2.1+deb12u2_s390x.deb
 88b15728b8fd8c5e78dc62b7de0e0f306b98ded03217c8f4539e8d2f35a52a9a 1376780 dovecot-lmtpd_2.3.19.1+dfsg1-2.1+deb12u2_s390x.deb
 0238fdee7ea05feb0c31949d5005b4da26b48b0827d7e58918951ce891dc6d02 151252 dovecot-lucene-dbgsym_2.3.19.1+dfsg1-2.1+deb12u2_s390x.deb
 fc8748f755acd74f29985f602cb6f22700dbfb53c34fd5de01fd3b5738c6b366 1379928 dovecot-lucene_2.3.19.1+dfsg1-2.1+deb12u2_s390x.deb
 5f839ab3e5384b0a82b19cdf5a50206ac1fa948af4f635c66b94577bb7eddd03 147012 dovecot-managesieved-dbgsym_2.3.19.1+dfsg1-2.1+deb12u2_s390x.deb
 244c933e95344d8096dbe52299a7c2ebb3e22b07e21893f844baa751c73f67c8 1395452 dovecot-managesieved_2.3.19.1+dfsg1-2.1+deb12u2_s390x.deb
 5cca8b9d57e23df840189bd919f618d316135489e2d5a4523562ba4dfe72e627 31016 dovecot-mysql-dbgsym_2.3.19.1+dfsg1-2.1+deb12u2_s390x.deb
 3f7c6f1563bb245cb7604099fab954111cfc8e1e8bfab14e9582b65e7d6abb99 1364160 dovecot-mysql_2.3.19.1+dfsg1-2.1+deb12u2_s390x.deb
 4c1d7eb7b8f6e992e7e73fa097481400cd1ab4af6d859c8f3e58ef6aa4cad5cd 32592 dovecot-pgsql-dbgsym_2.3.19.1+dfsg1-2.1+deb12u2_s390x.deb
 2e5d1c711da37500db940643528d2fb4913d9244fd8626c49a62255f89b9a115 1367052 dovecot-pgsql_2.3.19.1+dfsg1-2.1+deb12u2_s390x.deb
 765f30ff240de77ec24096eb87a21fb467e48e8053f4f47565c75f26bda4c433 89920 dovecot-pop3d-dbgsym_2.3.19.1+dfsg1-2.1+deb12u2_s390x.deb
 0174be538112b364ef5419605a7da617201419b50fa6acce1cd1e5ebe4044fc4 1383744 dovecot-pop3d_2.3.19.1+dfsg1-2.1+deb12u2_s390x.deb
 adbdeca9ae8a3f8e9b7c95479fd3d6fbd1aa055db174991f45a2f7712ce8d8f6 1537416 dovecot-sieve-dbgsym_2.3.19.1+dfsg1-2.1+deb12u2_s390x.deb
 2f61a6ce4932a3ca4cb37352ba864977f6d4bbf650ba931fc1c608d72c56d84d 1669284 dovecot-sieve_2.3.19.1+dfsg1-2.1+deb12u2_s390x.deb
 fc8c97333f6e8a675035b7fb6f16fabb19a952ac200956b5c78085e041d4253b 86168 dovecot-solr-dbgsym_2.3.19.1+dfsg1-2.1+deb12u2_s390x.deb
 7138cfcc385e0b71ca2e065604ad542dbadc117e80c9e68562198c4f20d4efd1 1373864 dovecot-solr_2.3.19.1+dfsg1-2.1+deb12u2_s390x.deb
 e7505e51cc0ed82e8ffd634747f4d5e5622d663b0c3a49d4095a5be63c51cced 17988 dovecot-sqlite-dbgsym_2.3.19.1+dfsg1-2.1+deb12u2_s390x.deb
 fc39f9a08579b758ccff3b40efd3d965a8c714363b9e4d9f771af0fab94d4753 1362232 dovecot-sqlite_2.3.19.1+dfsg1-2.1+deb12u2_s390x.deb
 92f433f91384d037f6f5d12d911110e6439d1571be9a06687c9e64c6351a39fc 177692 dovecot-submissiond-dbgsym_2.3.19.1+dfsg1-2.1+deb12u2_s390x.deb
 b038ce75e122e062991eef8263a55f0f933175e25e9c38289f762b85f1d6e54b 1397948 dovecot-submissiond_2.3.19.1+dfsg1-2.1+deb12u2_s390x.deb
 13c380fa0b891f5c79e854721afba59ac9171be7adf4c459bae9d3b8e93ee2db 18655 dovecot_2.3.19.1+dfsg1-2.1+deb12u2_s390x-buildd.buildinfo
Files:
 99fe9126d820fa9e9a15cccd7cce625c 32820 debug optional dovecot-auth-lua-dbgsym_2.3.19.1+dfsg1-2.1+deb12u2_s390x.deb
 b6590d267f5a8af18c956ca1299fe916 1365984 mail optional dovecot-auth-lua_2.3.19.1+dfsg1-2.1+deb12u2_s390x.deb
 c534247a9456ad63fd8c46e71e748e44 9503316 debug optional dovecot-core-dbgsym_2.3.19.1+dfsg1-2.1+deb12u2_s390x.deb
 4f471d1eeeb5da038d32937e244085e9 4237504 mail optional dovecot-core_2.3.19.1+dfsg1-2.1+deb12u2_s390x.deb
 7bd0c54092af579625de5eb6494fc9e4 1743536 mail optional dovecot-dev_2.3.19.1+dfsg1-2.1+deb12u2_s390x.deb
 a59e2f588686caf0bbe64119af8b2035 21164 debug optional dovecot-gssapi-dbgsym_2.3.19.1+dfsg1-2.1+deb12u2_s390x.deb
 45165f49933fe774437f16856af3b229 1362512 mail optional dovecot-gssapi_2.3.19.1+dfsg1-2.1+deb12u2_s390x.deb
 db7a9866ccbf540558ecd37f5d9527d6 680572 debug optional dovecot-imapd-dbgsym_2.3.19.1+dfsg1-2.1+deb12u2_s390x.deb
 3f1add28fdc0438a8bfb6b7dc99d204d 1511764 mail optional dovecot-imapd_2.3.19.1+dfsg1-2.1+deb12u2_s390x.deb
 f7a2cc1ff91715c8ff6dfa600aec5aeb 118592 debug optional dovecot-ldap-dbgsym_2.3.19.1+dfsg1-2.1+deb12u2_s390x.deb
 ac5d151ffb438d339ac7ca84a799b330 1390832 mail optional dovecot-ldap_2.3.19.1+dfsg1-2.1+deb12u2_s390x.deb
 1f85d07214f96c2a6f1cc73f75ec3462 91272 debug optional dovecot-lmtpd-dbgsym_2.3.19.1+dfsg1-2.1+deb12u2_s390x.deb
 6744d26095084bebd49a5ccc56c35c0d 1376780 mail optional dovecot-lmtpd_2.3.19.1+dfsg1-2.1+deb12u2_s390x.deb
 d27c67c284dc75b105369964a83948bf 151252 debug optional dovecot-lucene-dbgsym_2.3.19.1+dfsg1-2.1+deb12u2_s390x.deb
 0a2383a458200d960459d834c2717ccb 1379928 mail optional dovecot-lucene_2.3.19.1+dfsg1-2.1+deb12u2_s390x.deb
 6d428c3e48fab2d71bc114c1519b6a63 147012 debug optional dovecot-managesieved-dbgsym_2.3.19.1+dfsg1-2.1+deb12u2_s390x.deb
 f4ba5f124c82bc2292aebc287a6f7ac4 1395452 mail optional dovecot-managesieved_2.3.19.1+dfsg1-2.1+deb12u2_s390x.deb
 517f248e325d21b8aa97673fac19fd94 31016 debug optional dovecot-mysql-dbgsym_2.3.19.1+dfsg1-2.1+deb12u2_s390x.deb
 086eec100a345c586d746ce941fab1a0 1364160 mail optional dovecot-mysql_2.3.19.1+dfsg1-2.1+deb12u2_s390x.deb
 400374d7cc067aec57b72556622026e0 32592 debug optional dovecot-pgsql-dbgsym_2.3.19.1+dfsg1-2.1+deb12u2_s390x.deb
 1f3dc48a3d237cb07e2043373467074b 1367052 mail optional dovecot-pgsql_2.3.19.1+dfsg1-2.1+deb12u2_s390x.deb
 065cae3adfc80fca32bf6a70b47cba51 89920 debug optional dovecot-pop3d-dbgsym_2.3.19.1+dfsg1-2.1+deb12u2_s390x.deb
 2cc0dabd96471c6127f8e0dba557a753 1383744 mail optional dovecot-pop3d_2.3.19.1+dfsg1-2.1+deb12u2_s390x.deb
 70ba9590e187c0c1e16ec28d7596aa1a 1537416 debug optional dovecot-sieve-dbgsym_2.3.19.1+dfsg1-2.1+deb12u2_s390x.deb
 bd654f6c336abc8cb259cd5d6cce2c02 1669284 mail optional dovecot-sieve_2.3.19.1+dfsg1-2.1+deb12u2_s390x.deb
 9464af2fa68f1bc8f30f72d6204b8b8c 86168 debug optional dovecot-solr-dbgsym_2.3.19.1+dfsg1-2.1+deb12u2_s390x.deb
 798e40afc0944dab5f1390b2953d984c 1373864 mail optional dovecot-solr_2.3.19.1+dfsg1-2.1+deb12u2_s390x.deb
 86f96824531b981b9398f81378c192f6 17988 debug optional dovecot-sqlite-dbgsym_2.3.19.1+dfsg1-2.1+deb12u2_s390x.deb
 a7eea991a79a6ebbc81873b0c2218dc0 1362232 mail optional dovecot-sqlite_2.3.19.1+dfsg1-2.1+deb12u2_s390x.deb
 f9770a0f2d66a56907d8020c7508dcb7 177692 debug optional dovecot-submissiond-dbgsym_2.3.19.1+dfsg1-2.1+deb12u2_s390x.deb
 fad1cea1678bb4027d8b373c267052d2 1397948 mail optional dovecot-submissiond_2.3.19.1+dfsg1-2.1+deb12u2_s390x.deb
 e1b219daee5ac7259e7c048d438aca85 18655 mail optional dovecot_2.3.19.1+dfsg1-2.1+deb12u2_s390x-buildd.buildinfo

-----BEGIN PGP SIGNATURE-----
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=cDEw
-----END PGP SIGNATURE-----