-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Tue, 31 Mar 2026 15:07:17 -0400 Source: dovecot Binary: dovecot-auth-lua dovecot-auth-lua-dbgsym dovecot-core dovecot-core-dbgsym dovecot-dev dovecot-flatcurve dovecot-flatcurve-dbgsym dovecot-gssapi dovecot-gssapi-dbgsym dovecot-imapd dovecot-imapd-dbgsym dovecot-ldap dovecot-ldap-dbgsym dovecot-lmtpd dovecot-lmtpd-dbgsym dovecot-managesieved dovecot-managesieved-dbgsym dovecot-mysql dovecot-mysql-dbgsym dovecot-pgsql dovecot-pgsql-dbgsym dovecot-pop3d dovecot-pop3d-dbgsym dovecot-sieve dovecot-sieve-dbgsym dovecot-solr dovecot-solr-dbgsym dovecot-sqlite dovecot-sqlite-dbgsym dovecot-submissiond dovecot-submissiond-dbgsym Architecture: ppc64el Version: 1:2.4.1+dfsg1-6+deb13u4 Distribution: trixie-security Urgency: medium Maintainer: ppc64el Build Daemon (ppc64el-osuosl-02) Changed-By: Noah Meyerhans Description: dovecot-auth-lua - secure POP3/IMAP server - Lua authentication plugin dovecot-core - secure POP3/IMAP server - core files dovecot-dev - secure POP3/IMAP server - header files dovecot-flatcurve - secure POP3/IMAP server - Flatcurve support dovecot-gssapi - secure POP3/IMAP server - GSSAPI support dovecot-imapd - secure POP3/IMAP server - IMAP daemon dovecot-ldap - secure POP3/IMAP server - LDAP support dovecot-lmtpd - secure POP3/IMAP server - LMTP server dovecot-managesieved - secure POP3/IMAP server - ManageSieve server dovecot-mysql - secure POP3/IMAP server - MySQL support dovecot-pgsql - secure POP3/IMAP server - PostgreSQL support dovecot-pop3d - secure POP3/IMAP server - POP3 daemon dovecot-sieve - secure POP3/IMAP server - Sieve filters support dovecot-solr - secure POP3/IMAP server - Solr support dovecot-sqlite - secure POP3/IMAP server - SQLite support dovecot-submissiond - secure POP3/IMAP server - mail submission agent Changes: dovecot (1:2.4.1+dfsg1-6+deb13u4) trixie-security; urgency=medium . * [bc29057] CVE-2025-59028: auth: Don't disconnect auth client when invalid base64 SASL input is received * [fee7a9a] CVE-2025-59031: stop shipping the decode2text shell script * [9a4442e] CVE-2025-59032: managesieve-login: Fix crash when command didn't finish on the first call * [2711b3e] CVE-2026-24031, CVE-2026-27860: auth: fix ldap and sql injection * [d30f1c3] CVE-2026-27855: fix OTP authentication reply vulnerability * [e1b0ff7] CVE-2026-27856: doveadm: fix timing oracle attack * [b8a69bf] CVE-2026-27857: fix resource exhaustion DoS in NOOP command parsing * [85dd068] CVE-2026-27858: fix pre-authentication managesieve memory consumption issue * [880e332] CVE-2026-27859: fix uncontrolled resource allocation when delivering specially crafted email messages Checksums-Sha1: e243200e238d3e4e20e9f38e38f7f3f00f68fcaa 33012 dovecot-auth-lua-dbgsym_2.4.1+dfsg1-6+deb13u4_ppc64el.deb 06bcfaa018e37d6040e6c81635a42ae4018a819e 22248 dovecot-auth-lua_2.4.1+dfsg1-6+deb13u4_ppc64el.deb 35aaa73d62737c4d892c50221c60d1498050d37c 10160976 dovecot-core-dbgsym_2.4.1+dfsg1-6+deb13u4_ppc64el.deb 7aa6c0fbc4ae5aaed4a5dcf452c5b4cf741e0680 2822996 dovecot-core_2.4.1+dfsg1-6+deb13u4_ppc64el.deb 494b57545f362755f03da0f2c40bb102c495518b 428880 dovecot-dev_2.4.1+dfsg1-6+deb13u4_ppc64el.deb 4295b3e70dc67b591cf3d457bf8f5de661e24998 189528 dovecot-flatcurve-dbgsym_2.4.1+dfsg1-6+deb13u4_ppc64el.deb 955bd5e220c494110fa801c0361ac436e0271467 43412 dovecot-flatcurve_2.4.1+dfsg1-6+deb13u4_ppc64el.deb 3f4c39bd134373650d602884ff558f6e2ace2693 21500 dovecot-gssapi-dbgsym_2.4.1+dfsg1-6+deb13u4_ppc64el.deb 4b3f465badc2ff5a2eed4ade2c00ed375e11e0f4 18696 dovecot-gssapi_2.4.1+dfsg1-6+deb13u4_ppc64el.deb f01f8aabce9882a66d193b7c26d3de3a78677507 754300 dovecot-imapd-dbgsym_2.4.1+dfsg1-6+deb13u4_ppc64el.deb 0f4481c0f3034488126fec747733a886b85a7ff7 207148 dovecot-imapd_2.4.1+dfsg1-6+deb13u4_ppc64el.deb 6196bcfe69d50def534097e6ddfd76d48906bf8f 171964 dovecot-ldap-dbgsym_2.4.1+dfsg1-6+deb13u4_ppc64el.deb c0bfefeedfcea6797770fe79a6b2b87d62f2bd44 55420 dovecot-ldap_2.4.1+dfsg1-6+deb13u4_ppc64el.deb 0c4f1cfdd2b5b870f2a151405b7cd823435993ec 102444 dovecot-lmtpd-dbgsym_2.4.1+dfsg1-6+deb13u4_ppc64el.deb fc1a08ff14931a1372ce3c9fb3eb7cd588303e74 37932 dovecot-lmtpd_2.4.1+dfsg1-6+deb13u4_ppc64el.deb 93fc16aa681003c4e3da875b309d20b92dda2c44 120584 dovecot-managesieved-dbgsym_2.4.1+dfsg1-6+deb13u4_ppc64el.deb 26db56c9cf97a86fd522d9b90be2d584eaa69174 49176 dovecot-managesieved_2.4.1+dfsg1-6+deb13u4_ppc64el.deb 66470ef36d3c914a722e24d60f8556a434c30126 36316 dovecot-mysql-dbgsym_2.4.1+dfsg1-6+deb13u4_ppc64el.deb f983c0c7cf56dc83495d4f5a388977a52b9d0a47 21060 dovecot-mysql_2.4.1+dfsg1-6+deb13u4_ppc64el.deb 37f9a3939d7b5203531f4c55060cccb646a210ec 39396 dovecot-pgsql-dbgsym_2.4.1+dfsg1-6+deb13u4_ppc64el.deb f6625f3472b11317efce7e163a44efa305be6aee 25328 dovecot-pgsql_2.4.1+dfsg1-6+deb13u4_ppc64el.deb ccb0fd53c947b227e1173c4825561710471d9202 107396 dovecot-pop3d-dbgsym_2.4.1+dfsg1-6+deb13u4_ppc64el.deb 43feab20ae8ffdae9805590d1b249b16ef25fd82 47268 dovecot-pop3d_2.4.1+dfsg1-6+deb13u4_ppc64el.deb 27c214931bb02530bc5fece6a24f8af308467a3e 1706820 dovecot-sieve-dbgsym_2.4.1+dfsg1-6+deb13u4_ppc64el.deb b052642c9c61233c8ac3ab37759a40f3a19c278a 393820 dovecot-sieve_2.4.1+dfsg1-6+deb13u4_ppc64el.deb e86483d2ee1e2262a380d003d905cacbf184789b 75948 dovecot-solr-dbgsym_2.4.1+dfsg1-6+deb13u4_ppc64el.deb 9534903acb19e16ea48ade886f02b3afc78254d8 39136 dovecot-solr_2.4.1+dfsg1-6+deb13u4_ppc64el.deb 4683802ca529613c6518cbe5ac07eb692d46b914 25500 dovecot-sqlite-dbgsym_2.4.1+dfsg1-6+deb13u4_ppc64el.deb 003ba0ed614c41b9672cbada99cdd317965c819c 20364 dovecot-sqlite_2.4.1+dfsg1-6+deb13u4_ppc64el.deb c46034b35826ab4843a0470deb39f3d4a3e599d9 210704 dovecot-submissiond-dbgsym_2.4.1+dfsg1-6+deb13u4_ppc64el.deb 4664f73582617c4655f0768748f729c46c9b4def 63296 dovecot-submissiond_2.4.1+dfsg1-6+deb13u4_ppc64el.deb 4d7261f7ef1d8a21cd3211a83b4f21fa6d5749bb 18143 dovecot_2.4.1+dfsg1-6+deb13u4_ppc64el-buildd.buildinfo Checksums-Sha256: bd6c7dc3f2f9e7775db49dc1217a748d3c49bd1bab8d90abb4d17cde32143c9a 33012 dovecot-auth-lua-dbgsym_2.4.1+dfsg1-6+deb13u4_ppc64el.deb 73de139d658b09c36bebf04f405c38af67cf17658439a68888101b7f2dc62f78 22248 dovecot-auth-lua_2.4.1+dfsg1-6+deb13u4_ppc64el.deb c0d34856a2a6a2b3d31b4ccc698c7e34056b4281ae439246ce9a54d5d6bb3275 10160976 dovecot-core-dbgsym_2.4.1+dfsg1-6+deb13u4_ppc64el.deb f48195aa3266f162bcd9ab023dc7a678a1147cedb9ed466aac0a357332d02ae8 2822996 dovecot-core_2.4.1+dfsg1-6+deb13u4_ppc64el.deb 33a9606125a23be2674eed6aef5eb0d19256b7fb538ebdf03d7e9ca941a3274e 428880 dovecot-dev_2.4.1+dfsg1-6+deb13u4_ppc64el.deb c0258364d3974e72db158274624644a5b111d12452dc4d8ab6ac0b4229b21ecf 189528 dovecot-flatcurve-dbgsym_2.4.1+dfsg1-6+deb13u4_ppc64el.deb 17a39753aa5800b9f0dc05a26f1e514da0396ede39534629ef0bc8f3f2de679c 43412 dovecot-flatcurve_2.4.1+dfsg1-6+deb13u4_ppc64el.deb 4ea1ad5517aa9e95272ce729706ffe9a6ee547af7f0dae7867d6c69d94178be5 21500 dovecot-gssapi-dbgsym_2.4.1+dfsg1-6+deb13u4_ppc64el.deb 46f12a39d408836bf23dbb1885b12f7a876ae0f9cbf879bed7cc1cd302650d33 18696 dovecot-gssapi_2.4.1+dfsg1-6+deb13u4_ppc64el.deb 22ad58cc23b68862c6de220904d000e58478a2ff24c084ee01f3f7c3e26d41d7 754300 dovecot-imapd-dbgsym_2.4.1+dfsg1-6+deb13u4_ppc64el.deb 277d646e535e4edd61cbc016cd3edbda54811151e5dfbfc3897cb9f483438952 207148 dovecot-imapd_2.4.1+dfsg1-6+deb13u4_ppc64el.deb 9bec24a6e5f9ed97668b4196f8750e58e6f64629c97192ed2a0bbaf247dd127c 171964 dovecot-ldap-dbgsym_2.4.1+dfsg1-6+deb13u4_ppc64el.deb ba9c970b14853af4434aed678a495e073145619145aec189d504ee213b8e8872 55420 dovecot-ldap_2.4.1+dfsg1-6+deb13u4_ppc64el.deb da7ee89f6221270a98308201e7eccbc5d673b6323b9a17c98b73d18e67f72d41 102444 dovecot-lmtpd-dbgsym_2.4.1+dfsg1-6+deb13u4_ppc64el.deb a7069a50699459518682762397c6f6b37f178b3dfb7110e344703fa811e90663 37932 dovecot-lmtpd_2.4.1+dfsg1-6+deb13u4_ppc64el.deb d69f48fa0506a6ba949f402cb435b46a13eb98cb7d255254477e1e71b75b83f5 120584 dovecot-managesieved-dbgsym_2.4.1+dfsg1-6+deb13u4_ppc64el.deb 2f509b0f9a7e1d4db445bdc2c2aa8fcd1128b09222e82a0783ff1ccd98417e2b 49176 dovecot-managesieved_2.4.1+dfsg1-6+deb13u4_ppc64el.deb 5d2798c9045f62d3009a57ef08344107eedce59ed31420b133ae0ce1df63661a 36316 dovecot-mysql-dbgsym_2.4.1+dfsg1-6+deb13u4_ppc64el.deb 6f704ca0037daa60ba9071eba0c42de3db435f55e134f5cd4ecd0c4d7d90dfba 21060 dovecot-mysql_2.4.1+dfsg1-6+deb13u4_ppc64el.deb 35cc2b70f0019849f26182ddb31dd7f84bc4924dc801bcc6127dc1c891822ac6 39396 dovecot-pgsql-dbgsym_2.4.1+dfsg1-6+deb13u4_ppc64el.deb 6f478cb242dc22ab9bb24e63cfe0e06c90fde81d7cba3e8bd7d0bdba8c81a196 25328 dovecot-pgsql_2.4.1+dfsg1-6+deb13u4_ppc64el.deb 5ddf3f473647eec96879371ff81b3abaced702a231d9d1a46551a5fed9c35ae1 107396 dovecot-pop3d-dbgsym_2.4.1+dfsg1-6+deb13u4_ppc64el.deb ec3b8d06617e5b371a14e84273bb47a3413ac3737ff981105ddde15901a674be 47268 dovecot-pop3d_2.4.1+dfsg1-6+deb13u4_ppc64el.deb ce23d2e86687251938ffde2cde90a052bb0eb4ea1672b505fee0d04fbe5c8728 1706820 dovecot-sieve-dbgsym_2.4.1+dfsg1-6+deb13u4_ppc64el.deb 0850f89175abd0a90de94d29470b9bbec4e01e06290d2be721a0009f9675d6ed 393820 dovecot-sieve_2.4.1+dfsg1-6+deb13u4_ppc64el.deb a17fb2144b2d09a2ee1fe8e70a43308fd7e0dbb3d9c67c9c2aaf13912375de74 75948 dovecot-solr-dbgsym_2.4.1+dfsg1-6+deb13u4_ppc64el.deb c49a1d6c20047fc1f0aad98add6f60699f3ab01c21481ff9593e0ba133c18924 39136 dovecot-solr_2.4.1+dfsg1-6+deb13u4_ppc64el.deb f4876f02bdad0fdeb7becfcc0ec1004fcbf2f484d3e282fa4be6f9a5ac710abb 25500 dovecot-sqlite-dbgsym_2.4.1+dfsg1-6+deb13u4_ppc64el.deb d38e19a1e12d582cb21d04e9aa8ce6c353103d3a716bd96794cbdbefc0e95744 20364 dovecot-sqlite_2.4.1+dfsg1-6+deb13u4_ppc64el.deb 957dc79407e0a517b95d8c03573cd511105120df749aeafbd2818ffe62773960 210704 dovecot-submissiond-dbgsym_2.4.1+dfsg1-6+deb13u4_ppc64el.deb 67ba91d16f917eebedb37f43577c61fe1b50240316d83693dbb765382049c9f4 63296 dovecot-submissiond_2.4.1+dfsg1-6+deb13u4_ppc64el.deb 7a7bc03bde5241564a6a7583f7fbc3ebecacd3a136f85440f08fb8044bfafe12 18143 dovecot_2.4.1+dfsg1-6+deb13u4_ppc64el-buildd.buildinfo Files: 09bf3ee0209652dfd6548ec4da0ee805 33012 debug optional dovecot-auth-lua-dbgsym_2.4.1+dfsg1-6+deb13u4_ppc64el.deb 4e0dfa05e38dfaa197cd2c8057d3e7d9 22248 mail optional dovecot-auth-lua_2.4.1+dfsg1-6+deb13u4_ppc64el.deb 04ffcd2cab0dfa0dab50723f0c8bd500 10160976 debug optional dovecot-core-dbgsym_2.4.1+dfsg1-6+deb13u4_ppc64el.deb 55a932f38998dddfa2cdb000ac467d3e 2822996 mail optional dovecot-core_2.4.1+dfsg1-6+deb13u4_ppc64el.deb 033c2611f59643103045ad99b8d7be9c 428880 mail optional dovecot-dev_2.4.1+dfsg1-6+deb13u4_ppc64el.deb 29fe4294719f7e8a258cfa0666776330 189528 debug optional dovecot-flatcurve-dbgsym_2.4.1+dfsg1-6+deb13u4_ppc64el.deb f949073447c4f9030eecb2920caf87c5 43412 mail optional dovecot-flatcurve_2.4.1+dfsg1-6+deb13u4_ppc64el.deb 6292f2618d1bfc0021772a7ef83d7df6 21500 debug optional dovecot-gssapi-dbgsym_2.4.1+dfsg1-6+deb13u4_ppc64el.deb 9517482db956dd255e83f18b1cb2a821 18696 mail optional dovecot-gssapi_2.4.1+dfsg1-6+deb13u4_ppc64el.deb a7f2648525f6c6f50e96654d215abaea 754300 debug optional dovecot-imapd-dbgsym_2.4.1+dfsg1-6+deb13u4_ppc64el.deb 99b8797a84e658f1970bcaf29114ce5a 207148 mail optional dovecot-imapd_2.4.1+dfsg1-6+deb13u4_ppc64el.deb 3ece631da45cae7e5279a834842546c1 171964 debug optional dovecot-ldap-dbgsym_2.4.1+dfsg1-6+deb13u4_ppc64el.deb 180b51a5f41126d5e96eb715a4c64f82 55420 mail optional dovecot-ldap_2.4.1+dfsg1-6+deb13u4_ppc64el.deb 8d7e288a2f7b137fcbfc192e7c3a5b65 102444 debug optional dovecot-lmtpd-dbgsym_2.4.1+dfsg1-6+deb13u4_ppc64el.deb 6c4100d4b322e90076f897bc8374d39a 37932 mail optional dovecot-lmtpd_2.4.1+dfsg1-6+deb13u4_ppc64el.deb df57f7fda7a855ecaddda186e54696f6 120584 debug optional dovecot-managesieved-dbgsym_2.4.1+dfsg1-6+deb13u4_ppc64el.deb 8c0aafeaddfd3af16cb6840d55354022 49176 mail optional dovecot-managesieved_2.4.1+dfsg1-6+deb13u4_ppc64el.deb 6b871863c4de31fbc468bb2cfbd9febe 36316 debug optional dovecot-mysql-dbgsym_2.4.1+dfsg1-6+deb13u4_ppc64el.deb f28ea3862262fa3fce906a31f1554257 21060 mail optional dovecot-mysql_2.4.1+dfsg1-6+deb13u4_ppc64el.deb b6f2fe8dbbf4b1843e5df50830672c0d 39396 debug optional dovecot-pgsql-dbgsym_2.4.1+dfsg1-6+deb13u4_ppc64el.deb 161bda2c1a3965982214df770746d9bd 25328 mail optional dovecot-pgsql_2.4.1+dfsg1-6+deb13u4_ppc64el.deb 30ca39ad50a17b773707a886354023d4 107396 debug optional dovecot-pop3d-dbgsym_2.4.1+dfsg1-6+deb13u4_ppc64el.deb 97a0cc05a1655878759013ca6252b1dd 47268 mail optional dovecot-pop3d_2.4.1+dfsg1-6+deb13u4_ppc64el.deb a065691a2b91d77688106300cd299ac1 1706820 debug optional dovecot-sieve-dbgsym_2.4.1+dfsg1-6+deb13u4_ppc64el.deb bcea68db967ec73b0a9d56c98be73abd 393820 mail optional dovecot-sieve_2.4.1+dfsg1-6+deb13u4_ppc64el.deb 68e3ac115b02cb9d86a80d526219248f 75948 debug optional dovecot-solr-dbgsym_2.4.1+dfsg1-6+deb13u4_ppc64el.deb 68e8b182bc4faa7e102573f21e33445c 39136 mail optional dovecot-solr_2.4.1+dfsg1-6+deb13u4_ppc64el.deb 766283127c000d7facfaa3252ad31371 25500 debug optional dovecot-sqlite-dbgsym_2.4.1+dfsg1-6+deb13u4_ppc64el.deb edbfe6583bd81dae6443500e023fbfe3 20364 mail optional dovecot-sqlite_2.4.1+dfsg1-6+deb13u4_ppc64el.deb 42238655c28a8ca6dd5c343687d3366d 210704 debug optional dovecot-submissiond-dbgsym_2.4.1+dfsg1-6+deb13u4_ppc64el.deb 79187b8b531eb112b16e4eee24604db1 63296 mail optional dovecot-submissiond_2.4.1+dfsg1-6+deb13u4_ppc64el.deb 91473a17e25e7d3c15be6f6c5140abde 18143 mail optional dovecot_2.4.1+dfsg1-6+deb13u4_ppc64el-buildd.buildinfo -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEYo4fOZBRi9qmvTxH1PowSTJ8+YQFAmnPICgACgkQ1PowSTJ8 +YQ97g/+MmazR2rL9Q6TJVSdlT0WByt9JZZONJLkmoenl/+aRSsLDBw04czPZ2Ax uhiHhU+HnY+o+Rd66f2KwPPhWEOWRW+OrbhZk6ECqooglcw4V1mWzOKtHKSi3IlH lPxx58/Ogpq/sJ2GiuGt3Jh37eEtebs+Jpww2hA71Fj8+DEulc0A+9AtnN6PbTXf ku2E1MgXRUbb7GFR6yDzJtX0hZF+JY19Sngjm9irfZW487S2vHFl5RX7+KsGwHeb NT4/H2Hb8eVseem3YDiJGbcDq7C9Ce156mzYo7wMHaNYpWZsxxGqCOlG7PB7f/Ai XHyX4JeetxfyO9QVBXnrhX3sO71UXhoDjZlbbDYtX/Pz3JK2qN44tPJ5MjVjso9Z OcLfc63p5ut3ypr2AYZfnlyTSh9w3r4HB5beAyV0H5g9W7i6xK7nOOEobTuGawY0 9anP2y8HRxaOMPC3Xu2FSXxcGKFQxoq+QVQdX9sG4ubc1Nj2N0Z3IcjHt6wCz7uN R7OML9yyinTtntoUb/93N50qtlyseY3tzOR7x1jexaNWUzWeZi4/cXm5LEU7wU4A 4CGlS8C2gj3iMY1OhrwXjNfnBBV9/ZLavsHopmigEadh1f5AIAoNTh0tiexQgRmV 6OQv3BTYlfbQvVQN/vujorjDvc4r+OwtsQU4zrA4y4QIAKVNw7c= =6eYz -----END PGP SIGNATURE-----