-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Tue, 31 Mar 2026 15:07:17 -0400 Source: dovecot Binary: dovecot-auth-lua dovecot-auth-lua-dbgsym dovecot-core dovecot-core-dbgsym dovecot-dev dovecot-flatcurve dovecot-flatcurve-dbgsym dovecot-gssapi dovecot-gssapi-dbgsym dovecot-imapd dovecot-imapd-dbgsym dovecot-ldap dovecot-ldap-dbgsym dovecot-lmtpd dovecot-lmtpd-dbgsym dovecot-managesieved dovecot-managesieved-dbgsym dovecot-mysql dovecot-mysql-dbgsym dovecot-pgsql dovecot-pgsql-dbgsym dovecot-pop3d dovecot-pop3d-dbgsym dovecot-sieve dovecot-sieve-dbgsym dovecot-solr dovecot-solr-dbgsym dovecot-sqlite dovecot-sqlite-dbgsym dovecot-submissiond dovecot-submissiond-dbgsym Architecture: armhf Version: 1:2.4.1+dfsg1-6+deb13u4 Distribution: trixie-security Urgency: medium Maintainer: arm Build Daemon (arm-ubc-06) Changed-By: Noah Meyerhans Description: dovecot-auth-lua - secure POP3/IMAP server - Lua authentication plugin dovecot-core - secure POP3/IMAP server - core files dovecot-dev - secure POP3/IMAP server - header files dovecot-flatcurve - secure POP3/IMAP server - Flatcurve support dovecot-gssapi - secure POP3/IMAP server - GSSAPI support dovecot-imapd - secure POP3/IMAP server - IMAP daemon dovecot-ldap - secure POP3/IMAP server - LDAP support dovecot-lmtpd - secure POP3/IMAP server - LMTP server dovecot-managesieved - secure POP3/IMAP server - ManageSieve server dovecot-mysql - secure POP3/IMAP server - MySQL support dovecot-pgsql - secure POP3/IMAP server - PostgreSQL support dovecot-pop3d - secure POP3/IMAP server - POP3 daemon dovecot-sieve - secure POP3/IMAP server - Sieve filters support dovecot-solr - secure POP3/IMAP server - Solr support dovecot-sqlite - secure POP3/IMAP server - SQLite support dovecot-submissiond - secure POP3/IMAP server - mail submission agent Changes: dovecot (1:2.4.1+dfsg1-6+deb13u4) trixie-security; urgency=medium . * [bc29057] CVE-2025-59028: auth: Don't disconnect auth client when invalid base64 SASL input is received * [fee7a9a] CVE-2025-59031: stop shipping the decode2text shell script * [9a4442e] CVE-2025-59032: managesieve-login: Fix crash when command didn't finish on the first call * [2711b3e] CVE-2026-24031, CVE-2026-27860: auth: fix ldap and sql injection * [d30f1c3] CVE-2026-27855: fix OTP authentication reply vulnerability * [e1b0ff7] CVE-2026-27856: doveadm: fix timing oracle attack * [b8a69bf] CVE-2026-27857: fix resource exhaustion DoS in NOOP command parsing * [85dd068] CVE-2026-27858: fix pre-authentication managesieve memory consumption issue * [880e332] CVE-2026-27859: fix uncontrolled resource allocation when delivering specially crafted email messages Checksums-Sha1: c0c4a59212e28b0a765c89bd2a9fe480997cd22b 31968 dovecot-auth-lua-dbgsym_2.4.1+dfsg1-6+deb13u4_armhf.deb af00dd593bf7f403c56663ca93be71d83afb8a8e 20608 dovecot-auth-lua_2.4.1+dfsg1-6+deb13u4_armhf.deb 3e754f78e73dc2e163efe4e3d90e370c9a6554c4 9761904 dovecot-core-dbgsym_2.4.1+dfsg1-6+deb13u4_armhf.deb 6c8f62a8181f036512debb65849cc85c94492b71 2427784 dovecot-core_2.4.1+dfsg1-6+deb13u4_armhf.deb 51bdf636796e4333e50c001836e10df54e91fd74 428928 dovecot-dev_2.4.1+dfsg1-6+deb13u4_armhf.deb a5fcf7326c223e042a16c9e44c82b5aca5ceb98b 185728 dovecot-flatcurve-dbgsym_2.4.1+dfsg1-6+deb13u4_armhf.deb f4ae4f29b794df66bd83d73c436fb360606d0e94 38892 dovecot-flatcurve_2.4.1+dfsg1-6+deb13u4_armhf.deb d7ae8cacd5926e7f840d89f83a7c61639107f154 21384 dovecot-gssapi-dbgsym_2.4.1+dfsg1-6+deb13u4_armhf.deb 8ca48bcd39b0f5a74c65ed2c3fff917338c5fe27 17560 dovecot-gssapi_2.4.1+dfsg1-6+deb13u4_armhf.deb ec792544254a85aee3ad6c38af366c77df421a65 731192 dovecot-imapd-dbgsym_2.4.1+dfsg1-6+deb13u4_armhf.deb fbfc5448d294367f0bf4e242e8272ab0caa58c79 174872 dovecot-imapd_2.4.1+dfsg1-6+deb13u4_armhf.deb 1dd099c389871b17c7192047f58a365c0107bf73 164396 dovecot-ldap-dbgsym_2.4.1+dfsg1-6+deb13u4_armhf.deb 3b72297826ecacbf0f577cfc948cb7c2cd592ba0 49040 dovecot-ldap_2.4.1+dfsg1-6+deb13u4_armhf.deb c81507088743222ab63e5edc55663d055510b0c4 100136 dovecot-lmtpd-dbgsym_2.4.1+dfsg1-6+deb13u4_armhf.deb c66c7c1ee63ae8a98ba6d7be92c714b512733d89 34460 dovecot-lmtpd_2.4.1+dfsg1-6+deb13u4_armhf.deb 282cbca20e1107c44cd50ad14c7f8a066a90f88c 116504 dovecot-managesieved-dbgsym_2.4.1+dfsg1-6+deb13u4_armhf.deb 8e9cb546ad8de389c679e21c2e3f26c374f664ef 44932 dovecot-managesieved_2.4.1+dfsg1-6+deb13u4_armhf.deb 638cd1a01b14ba72d0db3911fe5d70e393ac526a 35608 dovecot-mysql-dbgsym_2.4.1+dfsg1-6+deb13u4_armhf.deb e91745acca1b780f5b9e4b0119cce2b19445933f 19528 dovecot-mysql_2.4.1+dfsg1-6+deb13u4_armhf.deb d034b51afbedb7398404d0a4d32d1349a444d1e7 38920 dovecot-pgsql-dbgsym_2.4.1+dfsg1-6+deb13u4_armhf.deb 33f6103d0c1c9519aed90d9bdeb765f24584a642 23556 dovecot-pgsql_2.4.1+dfsg1-6+deb13u4_armhf.deb fb86617c49fb5c90a1fb2735780ab1bcc42aa7ec 102528 dovecot-pop3d-dbgsym_2.4.1+dfsg1-6+deb13u4_armhf.deb 722436b66a493b2d50cdd8035586e94dcd9dc1b9 41660 dovecot-pop3d_2.4.1+dfsg1-6+deb13u4_armhf.deb 7a623dd13c8db25d679bd60759ad55f1ad33c3e4 1658128 dovecot-sieve-dbgsym_2.4.1+dfsg1-6+deb13u4_armhf.deb 165122607729fc258687c33a6b36c592c4ad22c9 336232 dovecot-sieve_2.4.1+dfsg1-6+deb13u4_armhf.deb 854b03430d37707cff02b7b14af233fe5a6dab5d 73844 dovecot-solr-dbgsym_2.4.1+dfsg1-6+deb13u4_armhf.deb 2a1fb6f6943df12bda5fbb1409c18ecb77eb1c1e 36232 dovecot-solr_2.4.1+dfsg1-6+deb13u4_armhf.deb a75208e76aab23bb38a14525c80d2d1a275d05d7 25020 dovecot-sqlite-dbgsym_2.4.1+dfsg1-6+deb13u4_armhf.deb f525633ea90e42ee57ec86692661c2dcde9fdd92 18872 dovecot-sqlite_2.4.1+dfsg1-6+deb13u4_armhf.deb d9d3f2d96dc67f667cc895504cf3940e2e65f2b3 205648 dovecot-submissiond-dbgsym_2.4.1+dfsg1-6+deb13u4_armhf.deb 6aed5314eed0edfa8ad18387661612536bbef811 55812 dovecot-submissiond_2.4.1+dfsg1-6+deb13u4_armhf.deb e8e65e161fe53f7c9f6971308eae0f6482b81fb8 17833 dovecot_2.4.1+dfsg1-6+deb13u4_armhf-buildd.buildinfo Checksums-Sha256: 17bf4553bc8f6db2c5d60b0e695bdeb7c731a738e20844c7c02e6ca7141082f4 31968 dovecot-auth-lua-dbgsym_2.4.1+dfsg1-6+deb13u4_armhf.deb 15448e288fead6873e0619ae7fcc813dd4b4b90d6dc3d0d60a581b7014abf1d6 20608 dovecot-auth-lua_2.4.1+dfsg1-6+deb13u4_armhf.deb 1f581b127594b226e44162a7c82b47701b63157b559847414eed5e02edfd4081 9761904 dovecot-core-dbgsym_2.4.1+dfsg1-6+deb13u4_armhf.deb 9e7d2b34f9b8247b201f67bdd440e5509a7a35dede1e256c8ffb7d081f3c6914 2427784 dovecot-core_2.4.1+dfsg1-6+deb13u4_armhf.deb 17ef39d325c90b5d6ecfa64b70876a870ec86d9edc90b6735ec87db1aab85e7b 428928 dovecot-dev_2.4.1+dfsg1-6+deb13u4_armhf.deb 56432d1ed0c4c56654a20dfd75fd667f17ca2d6549a61c69c20e3a66c923e564 185728 dovecot-flatcurve-dbgsym_2.4.1+dfsg1-6+deb13u4_armhf.deb 7453eaa31a3c33e09dc8a42cc8d9383f0ede16035924a10c555d06d2bd661a47 38892 dovecot-flatcurve_2.4.1+dfsg1-6+deb13u4_armhf.deb d19b8a945c9d885453059e00a3bb1d4cb6ec656774942eccea3d383fbbfaaffe 21384 dovecot-gssapi-dbgsym_2.4.1+dfsg1-6+deb13u4_armhf.deb 48a48502867d9b1fe3a34402a5f998a65cd801b18357867b88dd4c5693de5ccc 17560 dovecot-gssapi_2.4.1+dfsg1-6+deb13u4_armhf.deb e255b5789625da8ef496cca9cafbdafba08b17eb2040a8afceb9d686b38f4296 731192 dovecot-imapd-dbgsym_2.4.1+dfsg1-6+deb13u4_armhf.deb b1d85d6164782fac0ed6723f30745ced7ed0ba8bfe3b3db844e531ceccddade5 174872 dovecot-imapd_2.4.1+dfsg1-6+deb13u4_armhf.deb 9ed9ad028ab3dbd7161060fa3d5eab128b53f0f8c201d007ed2e9e2dcc72224d 164396 dovecot-ldap-dbgsym_2.4.1+dfsg1-6+deb13u4_armhf.deb 2fdedd00557942102b6468443e54a557691ce4c528edca4e4e21e2a3123d420a 49040 dovecot-ldap_2.4.1+dfsg1-6+deb13u4_armhf.deb 4f1b3fe8ab4b66a2954a6c5c5064ce844066c26b8403c4bf8396db14df1c2a6c 100136 dovecot-lmtpd-dbgsym_2.4.1+dfsg1-6+deb13u4_armhf.deb 581f90a9d4009a6b18136b0c4612d8170e0cf42bfa11577dd365345df263042b 34460 dovecot-lmtpd_2.4.1+dfsg1-6+deb13u4_armhf.deb 243a13f0125cc411c3b179fbbea945234f7841d0918cfe73293ecbf4a8e04233 116504 dovecot-managesieved-dbgsym_2.4.1+dfsg1-6+deb13u4_armhf.deb b99a1422d361edbcd75bbed81a747b9efd1ee77e0e51fd40179600c3ff84096e 44932 dovecot-managesieved_2.4.1+dfsg1-6+deb13u4_armhf.deb ada1b79375e3c4b00a50d1345aed1c322aba2580896cb19f91b0326c66913bab 35608 dovecot-mysql-dbgsym_2.4.1+dfsg1-6+deb13u4_armhf.deb 4fa5f63edeb8720c16e7932ecd1d4b84fcec26669806f177268e1c08e59dde1b 19528 dovecot-mysql_2.4.1+dfsg1-6+deb13u4_armhf.deb 44e71b66f4dbc75456a671beb453435f3cc9c7f661be7982e79e136b22d3b7e1 38920 dovecot-pgsql-dbgsym_2.4.1+dfsg1-6+deb13u4_armhf.deb 4750991ffd8ac8df92696c7f67e4fcc0fddb31c986f447e25ff44b8b3ebf430d 23556 dovecot-pgsql_2.4.1+dfsg1-6+deb13u4_armhf.deb f5ff3530d2eb3e2d4589c1f7ba1cc8933322e96dac146e86d6ed865f89d8149c 102528 dovecot-pop3d-dbgsym_2.4.1+dfsg1-6+deb13u4_armhf.deb 149accd9695068a89345a39b427cc324cb5c205e78e0a39d1d572f16f3731cbb 41660 dovecot-pop3d_2.4.1+dfsg1-6+deb13u4_armhf.deb eb67c29ddee593bbbd45e4002414b36f6bac2fffb7b16ee3bade5ba800fb31ae 1658128 dovecot-sieve-dbgsym_2.4.1+dfsg1-6+deb13u4_armhf.deb 0ecc294cf379b39944b271ddf72842d971c8324f84a81d6cedba28b9f5637697 336232 dovecot-sieve_2.4.1+dfsg1-6+deb13u4_armhf.deb 150dc6015764cb9aa8b506cdd83f197d1d7b18231bba843f1eeca36846701dd1 73844 dovecot-solr-dbgsym_2.4.1+dfsg1-6+deb13u4_armhf.deb 2eb860401744e36c2c6891e6be5eebcc6c58e94b66ec9bac0a8bf0838a0db28a 36232 dovecot-solr_2.4.1+dfsg1-6+deb13u4_armhf.deb a82ef1d496ae2a30d965c44335663a12d83e1e49307eddf5836136cffb2705d8 25020 dovecot-sqlite-dbgsym_2.4.1+dfsg1-6+deb13u4_armhf.deb edbefd04c1a716e1c2566b058277dc9c4fbc9b8ffd2b2f608b0c3c954be8098b 18872 dovecot-sqlite_2.4.1+dfsg1-6+deb13u4_armhf.deb 26b7d94dcb6bf274b36c2c464fdaeb4132b714ffb7379b446f5260af429a0ae8 205648 dovecot-submissiond-dbgsym_2.4.1+dfsg1-6+deb13u4_armhf.deb a49ef01c14c53c59f69435f62fc9b9826dda69379ffd075c91aaaedfb34950e9 55812 dovecot-submissiond_2.4.1+dfsg1-6+deb13u4_armhf.deb aeef519c107c734919663ef66d182e82a1598634545492ce29ffd568eb6c4882 17833 dovecot_2.4.1+dfsg1-6+deb13u4_armhf-buildd.buildinfo Files: 72686a0501f488eadc5a913cb3af3779 31968 debug optional dovecot-auth-lua-dbgsym_2.4.1+dfsg1-6+deb13u4_armhf.deb 0763ec8689a47ba66a3108b3cdd1cc80 20608 mail optional dovecot-auth-lua_2.4.1+dfsg1-6+deb13u4_armhf.deb 1635dc704353d691002649919a8984a0 9761904 debug optional dovecot-core-dbgsym_2.4.1+dfsg1-6+deb13u4_armhf.deb 44ed3029245d86357258145a940ec8bb 2427784 mail optional dovecot-core_2.4.1+dfsg1-6+deb13u4_armhf.deb 8ae7b7f41a1cd94a9da83f500be5f811 428928 mail optional dovecot-dev_2.4.1+dfsg1-6+deb13u4_armhf.deb 3788015ec8320c9f4f9746f810024f3c 185728 debug optional dovecot-flatcurve-dbgsym_2.4.1+dfsg1-6+deb13u4_armhf.deb cd94a0d8092cafd58a4e42c6d7764a6c 38892 mail optional dovecot-flatcurve_2.4.1+dfsg1-6+deb13u4_armhf.deb 2721f9036a8e737f67e43b456b9b6275 21384 debug optional dovecot-gssapi-dbgsym_2.4.1+dfsg1-6+deb13u4_armhf.deb a0c0d8300c146206a7407fbfd6d0f443 17560 mail optional dovecot-gssapi_2.4.1+dfsg1-6+deb13u4_armhf.deb 77b0e0d12dcf87335d5d3afc3b334cea 731192 debug optional dovecot-imapd-dbgsym_2.4.1+dfsg1-6+deb13u4_armhf.deb b1e8e668f59904f12321ddbbdfbaa40e 174872 mail optional dovecot-imapd_2.4.1+dfsg1-6+deb13u4_armhf.deb e3a650f3dc270f1964992a8a4d381985 164396 debug optional dovecot-ldap-dbgsym_2.4.1+dfsg1-6+deb13u4_armhf.deb e243a4cfdd4850dcacc6300bf2f40aa7 49040 mail optional dovecot-ldap_2.4.1+dfsg1-6+deb13u4_armhf.deb fa43b1cce4607b5c83fb69cdcf2ecd16 100136 debug optional dovecot-lmtpd-dbgsym_2.4.1+dfsg1-6+deb13u4_armhf.deb 1c522a6de1dfbab91260346b6edb3c8a 34460 mail optional dovecot-lmtpd_2.4.1+dfsg1-6+deb13u4_armhf.deb 97ce4a7b1d0751200ab2c835cca6d09c 116504 debug optional dovecot-managesieved-dbgsym_2.4.1+dfsg1-6+deb13u4_armhf.deb 15e5b3fa1d556f7d27b5f3657e09ddc7 44932 mail optional dovecot-managesieved_2.4.1+dfsg1-6+deb13u4_armhf.deb be23724f6fddc8dd37f83183e2858ff1 35608 debug optional dovecot-mysql-dbgsym_2.4.1+dfsg1-6+deb13u4_armhf.deb bf5f2362707c00b6485332a294e6c536 19528 mail optional dovecot-mysql_2.4.1+dfsg1-6+deb13u4_armhf.deb 2ed0f635044ba76ed9f6670e88a04fc6 38920 debug optional dovecot-pgsql-dbgsym_2.4.1+dfsg1-6+deb13u4_armhf.deb f25846bd0179771ab22682392992f15e 23556 mail optional dovecot-pgsql_2.4.1+dfsg1-6+deb13u4_armhf.deb 057d0c3351a2b084118ffd5f9f8da31d 102528 debug optional dovecot-pop3d-dbgsym_2.4.1+dfsg1-6+deb13u4_armhf.deb c910e5d531992bce8b11f864d0fea4f3 41660 mail optional dovecot-pop3d_2.4.1+dfsg1-6+deb13u4_armhf.deb 07382d712f57b22c14a88253bc06f933 1658128 debug optional dovecot-sieve-dbgsym_2.4.1+dfsg1-6+deb13u4_armhf.deb bd6585a5046a3c6a4a4b587893df77a2 336232 mail optional dovecot-sieve_2.4.1+dfsg1-6+deb13u4_armhf.deb 550b72be5adff757d1bd4fdfa3c44ced 73844 debug optional dovecot-solr-dbgsym_2.4.1+dfsg1-6+deb13u4_armhf.deb 5a9af6eca093f068270d0c2184af4c9d 36232 mail optional dovecot-solr_2.4.1+dfsg1-6+deb13u4_armhf.deb eb72011a14793b0bca59fea286b8a865 25020 debug optional dovecot-sqlite-dbgsym_2.4.1+dfsg1-6+deb13u4_armhf.deb a3f0b1ad724f52bf7767f856fcc0aae5 18872 mail optional dovecot-sqlite_2.4.1+dfsg1-6+deb13u4_armhf.deb 98c0f30619e9d4076e55e1917687e473 205648 debug optional dovecot-submissiond-dbgsym_2.4.1+dfsg1-6+deb13u4_armhf.deb e84216fbeb5a16c6da6463f411b45da3 55812 mail optional dovecot-submissiond_2.4.1+dfsg1-6+deb13u4_armhf.deb a4273b44897c7631dc64eca57982624c 17833 mail optional dovecot_2.4.1+dfsg1-6+deb13u4_armhf-buildd.buildinfo -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEpxWVfktWxVoKRwGgJ7tNDw2WyRsFAmnPH8YACgkQJ7tNDw2W yRsNHg/+LKAJ8Jff0B4ygA4yNtZ7fDW607w1/NHVFi7gJbLOBJNp0ZTzt/ujHLPc WhBKZHOgLDztfoZ2ZN1lBWHf5NyXu3SLodZinrYvQmE2ALOBuq7yDx3SqovL9qvV NvETt7GZBveBvaVL+4CqL9WuHWgUyslTuELnv/8WTXM5x/0PuiCBw7cNWYB3CZPX HeVx79NCGiXKqkcJs557VGdctJrUcKDLWuIXrp2/WwLxArrp1NJyvNCLUTG6IG3Y q0+F9GuznoivOyC8XWyydd/aPNm/OnCPZR/nK6oyA7RX6eslxoiCq7hzrsoKAtzu mgKkd4cGBTnK4TU4vYlmltwWSAR7zrilKl7asnjUciZ01NzL+wGg9sws+dzIYxyn S0g8pztx53elLQli45c/Hw4hlHLIsI4dpU4FzfN+6fpKZG2uUbDmVV/9pix+d2MJ YSSWkRTAw3Bm9wqowvW0frHNi7u8UBcu+o5tDJCXiTl+Bin45m5PpS6H8ekX4ZcR eGsurrxP0JazViolIVBxwUpSqns1tT0GcU5kIRLeaeukoBzPR7oWW3hvMQXfNrUn rWu60flu+3ONTGIxe/7fjlpAcAdMwe1osEq3k1BA0yPr3iukvLC+LXEaqURWT30v VS+SOyBuB7MDvOOX/wIqFxa9MS6pGmDTpFBBgcgxKdFdc6/NkJ0= =k47L -----END PGP SIGNATURE-----