-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Tue, 31 Mar 2026 15:07:17 -0400
Source: dovecot
Binary: dovecot-auth-lua dovecot-auth-lua-dbgsym dovecot-core dovecot-core-dbgsym dovecot-dev dovecot-flatcurve dovecot-flatcurve-dbgsym dovecot-gssapi dovecot-gssapi-dbgsym dovecot-imapd dovecot-imapd-dbgsym dovecot-ldap dovecot-ldap-dbgsym dovecot-lmtpd dovecot-lmtpd-dbgsym dovecot-managesieved dovecot-managesieved-dbgsym dovecot-mysql dovecot-mysql-dbgsym dovecot-pgsql dovecot-pgsql-dbgsym dovecot-pop3d dovecot-pop3d-dbgsym dovecot-sieve dovecot-sieve-dbgsym dovecot-solr dovecot-solr-dbgsym dovecot-sqlite dovecot-sqlite-dbgsym dovecot-submissiond dovecot-submissiond-dbgsym
Architecture: riscv64
Version: 1:2.4.1+dfsg1-6+deb13u4
Distribution: trixie-security
Urgency: medium
Maintainer: riscv64 Build Daemon (rv-osuosl-03) <buildd_riscv64-rv-osuosl-03@buildd.debian.org>
Changed-By: Noah Meyerhans <noahm@debian.org>
Description:
 dovecot-auth-lua - secure POP3/IMAP server - Lua authentication plugin
 dovecot-core - secure POP3/IMAP server - core files
 dovecot-dev - secure POP3/IMAP server - header files
 dovecot-flatcurve - secure POP3/IMAP server - Flatcurve support
 dovecot-gssapi - secure POP3/IMAP server - GSSAPI support
 dovecot-imapd - secure POP3/IMAP server - IMAP daemon
 dovecot-ldap - secure POP3/IMAP server - LDAP support
 dovecot-lmtpd - secure POP3/IMAP server - LMTP server
 dovecot-managesieved - secure POP3/IMAP server - ManageSieve server
 dovecot-mysql - secure POP3/IMAP server - MySQL support
 dovecot-pgsql - secure POP3/IMAP server - PostgreSQL support
 dovecot-pop3d - secure POP3/IMAP server - POP3 daemon
 dovecot-sieve - secure POP3/IMAP server - Sieve filters support
 dovecot-solr - secure POP3/IMAP server - Solr support
 dovecot-sqlite - secure POP3/IMAP server - SQLite support
 dovecot-submissiond - secure POP3/IMAP server - mail submission agent
Changes:
 dovecot (1:2.4.1+dfsg1-6+deb13u4) trixie-security; urgency=medium
 .
   * [bc29057] CVE-2025-59028: auth: Don't disconnect auth client when
     invalid base64 SASL input is received
   * [fee7a9a] CVE-2025-59031: stop shipping the decode2text shell script
   * [9a4442e] CVE-2025-59032: managesieve-login: Fix crash when command
     didn't finish on the first call
   * [2711b3e] CVE-2026-24031, CVE-2026-27860: auth: fix ldap and sql
     injection
   * [d30f1c3] CVE-2026-27855: fix OTP authentication reply vulnerability
   * [e1b0ff7] CVE-2026-27856: doveadm: fix timing oracle attack
   * [b8a69bf] CVE-2026-27857: fix resource exhaustion DoS in NOOP command
     parsing
   * [85dd068] CVE-2026-27858: fix pre-authentication managesieve memory
     consumption issue
   * [880e332] CVE-2026-27859: fix uncontrolled resource allocation when
     delivering specially crafted email messages
Checksums-Sha1:
 3646e2a86aa701f28dddf2760617f0fa76e19114 31292 dovecot-auth-lua-dbgsym_2.4.1+dfsg1-6+deb13u4_riscv64.deb
 4ebd44a2e6156ab8eb83af2430c4c51768f717a4 21160 dovecot-auth-lua_2.4.1+dfsg1-6+deb13u4_riscv64.deb
 a8fb812e5fe1836206c2d2d2c80b6cb63a28b90f 10503216 dovecot-core-dbgsym_2.4.1+dfsg1-6+deb13u4_riscv64.deb
 846e18f7bda83f37140c85b29dc29ae4f5169cac 2697044 dovecot-core_2.4.1+dfsg1-6+deb13u4_riscv64.deb
 bde7b68bf6817ac216ad4dd04605abef029e9acd 428892 dovecot-dev_2.4.1+dfsg1-6+deb13u4_riscv64.deb
 f0b814526c5b9eb16cea961a164570133110dbc7 172668 dovecot-flatcurve-dbgsym_2.4.1+dfsg1-6+deb13u4_riscv64.deb
 dd4c8e8bab3c83993cb9db6d294b6e3ee2e2378e 41504 dovecot-flatcurve_2.4.1+dfsg1-6+deb13u4_riscv64.deb
 8dd081166e611fb73d6f9d5e8062f8c516d240f3 20608 dovecot-gssapi-dbgsym_2.4.1+dfsg1-6+deb13u4_riscv64.deb
 e2d4ff82df158d78264a37e776db056b49321c0b 17916 dovecot-gssapi_2.4.1+dfsg1-6+deb13u4_riscv64.deb
 9359a3918269b745dfab3f91a44b1a31bc3aa2c8 786480 dovecot-imapd-dbgsym_2.4.1+dfsg1-6+deb13u4_riscv64.deb
 0429b73e468368f0cb9830b100cd0351f72e4e5b 195464 dovecot-imapd_2.4.1+dfsg1-6+deb13u4_riscv64.deb
 f8440aa134946a6cca84bb37dbff5608fa122c8d 184168 dovecot-ldap-dbgsym_2.4.1+dfsg1-6+deb13u4_riscv64.deb
 08299777fb414d9eef001e80ee56e43c2c95fb4c 52404 dovecot-ldap_2.4.1+dfsg1-6+deb13u4_riscv64.deb
 fde6f13b67f7009cd8c1138df24bbb859bcc391a 98888 dovecot-lmtpd-dbgsym_2.4.1+dfsg1-6+deb13u4_riscv64.deb
 873e69d2f5e4711ac1c66d9b85028dc008528dd4 35996 dovecot-lmtpd_2.4.1+dfsg1-6+deb13u4_riscv64.deb
 0f6bf42e42c41bbb64f26f53bf4a725f9379a4f1 121980 dovecot-managesieved-dbgsym_2.4.1+dfsg1-6+deb13u4_riscv64.deb
 543e5f61948ee8c7ae5b340ffb9b5b51248a2426 47284 dovecot-managesieved_2.4.1+dfsg1-6+deb13u4_riscv64.deb
 9ce15eba255822fb9651c40dc7126ed279437e71 34776 dovecot-mysql-dbgsym_2.4.1+dfsg1-6+deb13u4_riscv64.deb
 719cab88a61b4a3c140221c337e8954bcb7e32bc 20084 dovecot-mysql_2.4.1+dfsg1-6+deb13u4_riscv64.deb
 79110ee693c2ba4787f44407958848eeaa2374be 37228 dovecot-pgsql-dbgsym_2.4.1+dfsg1-6+deb13u4_riscv64.deb
 335cd08e393c9dc2b5b797533f8a10d65d221c50 24024 dovecot-pgsql_2.4.1+dfsg1-6+deb13u4_riscv64.deb
 fecc5456fc32c081a8d14391f6115d0d2308fa46 102632 dovecot-pop3d-dbgsym_2.4.1+dfsg1-6+deb13u4_riscv64.deb
 5c712c7a64292f68aef3a38498c246d27ec19681 43852 dovecot-pop3d_2.4.1+dfsg1-6+deb13u4_riscv64.deb
 f09d6f0ad6b0f9fb7ec2e1487991364010d57e57 1688844 dovecot-sieve-dbgsym_2.4.1+dfsg1-6+deb13u4_riscv64.deb
 8e874b8874e28056159e35b6611f2e368e20827c 374988 dovecot-sieve_2.4.1+dfsg1-6+deb13u4_riscv64.deb
 832bfc0c8d293d289e10c971e488c17ce51c236f 72476 dovecot-solr-dbgsym_2.4.1+dfsg1-6+deb13u4_riscv64.deb
 093dec939082793fba21b13510b0e1778f48dfc3 37428 dovecot-solr_2.4.1+dfsg1-6+deb13u4_riscv64.deb
 12a4ee7e2f701e7b321b7b291fffe5d2500f56c9 24112 dovecot-sqlite-dbgsym_2.4.1+dfsg1-6+deb13u4_riscv64.deb
 2222da2c551bec46312e5f8db13635368ecd1b50 19588 dovecot-sqlite_2.4.1+dfsg1-6+deb13u4_riscv64.deb
 f20f6adf121e1f573dd8bb5aa5c73c414d668792 205368 dovecot-submissiond-dbgsym_2.4.1+dfsg1-6+deb13u4_riscv64.deb
 c9818332ab0de5e5bd785e5d3eb4093dee8576e8 60408 dovecot-submissiond_2.4.1+dfsg1-6+deb13u4_riscv64.deb
 4bfcbfdd240a470b48223eadefbd839adb02391e 18085 dovecot_2.4.1+dfsg1-6+deb13u4_riscv64-buildd.buildinfo
Checksums-Sha256:
 7a63113b83e01af4010c1f49b16731069dc0b9316d7f9c5a9e990ae7a2ad698a 31292 dovecot-auth-lua-dbgsym_2.4.1+dfsg1-6+deb13u4_riscv64.deb
 b26944ff73a0898a3ef309c9cac3e9b58a2501db557ad26b194361160c87f4e7 21160 dovecot-auth-lua_2.4.1+dfsg1-6+deb13u4_riscv64.deb
 0fea6b56eed31f98d03eac9e9b9cb7aba7c22e659e61805be4b5cfdf095d7eb2 10503216 dovecot-core-dbgsym_2.4.1+dfsg1-6+deb13u4_riscv64.deb
 f46610c04495029320a033fd34b2fd055ad3b3843c0461771244e9c57a3ba769 2697044 dovecot-core_2.4.1+dfsg1-6+deb13u4_riscv64.deb
 a7d7c7c24f8e8f7d1f6c3c7f5c5611d18bc31a8869abd1b0fe8c06f61e863dcd 428892 dovecot-dev_2.4.1+dfsg1-6+deb13u4_riscv64.deb
 eab52d6aa7734cd47b970ecef78c591c149aaa7fbb79164bb4fa6ed55b0f5f18 172668 dovecot-flatcurve-dbgsym_2.4.1+dfsg1-6+deb13u4_riscv64.deb
 cb6163c1eb4ad61d76176b61a7b263dcdfa1a1b8300d7dd9ade6f332c21883ea 41504 dovecot-flatcurve_2.4.1+dfsg1-6+deb13u4_riscv64.deb
 e30c67da4f0f517a3b60a08e93a332be1eb1c5031e33d13c8517e4b0cc1a5d2c 20608 dovecot-gssapi-dbgsym_2.4.1+dfsg1-6+deb13u4_riscv64.deb
 a39e5eee002576786bc6eff647e2bfe5ddc660774b8f1ba8d81d7142b2eef485 17916 dovecot-gssapi_2.4.1+dfsg1-6+deb13u4_riscv64.deb
 7ba1759462aab2b049bc7a7dce295467853352f29867ae6a6724cc2b9da2f6bf 786480 dovecot-imapd-dbgsym_2.4.1+dfsg1-6+deb13u4_riscv64.deb
 744758d2a487900288bba1a32cb6a4156352cdcda9b3bc406a2737a24fb02ef8 195464 dovecot-imapd_2.4.1+dfsg1-6+deb13u4_riscv64.deb
 5a57f241a16408a8cf01d5d0a18cfc0dfcdf67cdb05f3edab510be71794c4816 184168 dovecot-ldap-dbgsym_2.4.1+dfsg1-6+deb13u4_riscv64.deb
 195e07985dcaebc1764298f073db9f08e0070446cb5f8491a7a737c05f031379 52404 dovecot-ldap_2.4.1+dfsg1-6+deb13u4_riscv64.deb
 08a06cc2fa2206fc8239e4c2656b7775695e7820cb4f889568af5a3623643a8e 98888 dovecot-lmtpd-dbgsym_2.4.1+dfsg1-6+deb13u4_riscv64.deb
 f4797a7fec2139b4202254993c4c391c382606659a40c07b086224d69bfe24ab 35996 dovecot-lmtpd_2.4.1+dfsg1-6+deb13u4_riscv64.deb
 a19839acfcea9ef215a953a5efb0f2b7fdb6a6236cb965f5c1dc3841c1e0f018 121980 dovecot-managesieved-dbgsym_2.4.1+dfsg1-6+deb13u4_riscv64.deb
 5b4833e71ba01a958bdabc29f05083e2149f6617579f853b4071fa45d4af2b94 47284 dovecot-managesieved_2.4.1+dfsg1-6+deb13u4_riscv64.deb
 95e9c02beb7eabe3f5adbe65f17025384c2e5c521d818dbb7bd74609c7ae408d 34776 dovecot-mysql-dbgsym_2.4.1+dfsg1-6+deb13u4_riscv64.deb
 01db15e92118d57f39192cde010b55bddb87286e87eacee49b906a9419bea101 20084 dovecot-mysql_2.4.1+dfsg1-6+deb13u4_riscv64.deb
 0297efbba9a6a59eeb91c6520046ff45c1ece5334d7a6f0534b05a73b8fbc439 37228 dovecot-pgsql-dbgsym_2.4.1+dfsg1-6+deb13u4_riscv64.deb
 6321994064f060786f9f932fbced39e917976c594f0086f6564fc15bb9364b76 24024 dovecot-pgsql_2.4.1+dfsg1-6+deb13u4_riscv64.deb
 56e1a681c8dec28fb50dd108870609e13b345d286372962817b2746561481976 102632 dovecot-pop3d-dbgsym_2.4.1+dfsg1-6+deb13u4_riscv64.deb
 550eaf1e40634be50300b060beae35a86306bf2a8dc87def7a60e33b81ed7083 43852 dovecot-pop3d_2.4.1+dfsg1-6+deb13u4_riscv64.deb
 75b5e1f5e6df03286594efe1e6a8c679111b15379e9d58494e9ddaed5cdc7d97 1688844 dovecot-sieve-dbgsym_2.4.1+dfsg1-6+deb13u4_riscv64.deb
 b3553df6f25cd5689205896476352e4e6337741300316c4b14d05e74d8cafa89 374988 dovecot-sieve_2.4.1+dfsg1-6+deb13u4_riscv64.deb
 dd1c80fadb9261bbe820840ed2dd3578400f8bc1caf3be85927ded3fb0e96662 72476 dovecot-solr-dbgsym_2.4.1+dfsg1-6+deb13u4_riscv64.deb
 2e9d4e50dfb0cb9f7332f88db95c7a5dff1fee86b1335499643ba01915ff9bad 37428 dovecot-solr_2.4.1+dfsg1-6+deb13u4_riscv64.deb
 e5ed1699de5c8e51940db105ffc9084810c7b810db198e0a1a6d2a6b2b51125a 24112 dovecot-sqlite-dbgsym_2.4.1+dfsg1-6+deb13u4_riscv64.deb
 ab67473ec79ca76906708764ddab1c0a4b8671d7657af62f3af948c330274ddf 19588 dovecot-sqlite_2.4.1+dfsg1-6+deb13u4_riscv64.deb
 a09952d7b18cb8a8e4d951ac9b190d81fc6c8090fb5acfb0f608d2d6c74b6a53 205368 dovecot-submissiond-dbgsym_2.4.1+dfsg1-6+deb13u4_riscv64.deb
 c00f113bd5e6aeab34567fd0b14273c8e03add31651c6170548df2dc6d7da366 60408 dovecot-submissiond_2.4.1+dfsg1-6+deb13u4_riscv64.deb
 d1084ab00b8f684c687e746dc5fbc1884c8c638bb1b7c5316342f05fa5c5e64e 18085 dovecot_2.4.1+dfsg1-6+deb13u4_riscv64-buildd.buildinfo
Files:
 927ec45435fc8eef83af17c971cfdfa9 31292 debug optional dovecot-auth-lua-dbgsym_2.4.1+dfsg1-6+deb13u4_riscv64.deb
 b69861ae10f07c8589e633528eae44b6 21160 mail optional dovecot-auth-lua_2.4.1+dfsg1-6+deb13u4_riscv64.deb
 8e4feffd39627c54b2db22116e640589 10503216 debug optional dovecot-core-dbgsym_2.4.1+dfsg1-6+deb13u4_riscv64.deb
 f7350cbfe9715322003359e8d26ae1d0 2697044 mail optional dovecot-core_2.4.1+dfsg1-6+deb13u4_riscv64.deb
 51ed65f14ae027f39b36986b4aeecb3f 428892 mail optional dovecot-dev_2.4.1+dfsg1-6+deb13u4_riscv64.deb
 fd10396b012b80232d9340ace469c221 172668 debug optional dovecot-flatcurve-dbgsym_2.4.1+dfsg1-6+deb13u4_riscv64.deb
 e7af3c94711912ab82ed34fb19f3ad55 41504 mail optional dovecot-flatcurve_2.4.1+dfsg1-6+deb13u4_riscv64.deb
 9c376fd7c0ce08def61a9c39c25d91f2 20608 debug optional dovecot-gssapi-dbgsym_2.4.1+dfsg1-6+deb13u4_riscv64.deb
 80e967aec657fac6c89ec9093ad4b420 17916 mail optional dovecot-gssapi_2.4.1+dfsg1-6+deb13u4_riscv64.deb
 64d7c20ed0d70a7b2ecb90eec77a6991 786480 debug optional dovecot-imapd-dbgsym_2.4.1+dfsg1-6+deb13u4_riscv64.deb
 43d414d39ab2335ef279fdffc24d2439 195464 mail optional dovecot-imapd_2.4.1+dfsg1-6+deb13u4_riscv64.deb
 3eda2eb2f39f57fbfb5349806c28826d 184168 debug optional dovecot-ldap-dbgsym_2.4.1+dfsg1-6+deb13u4_riscv64.deb
 cfd5761c30ab62b48eb3126bde8c5bf7 52404 mail optional dovecot-ldap_2.4.1+dfsg1-6+deb13u4_riscv64.deb
 8fcc211aed8eba058224b323405f388d 98888 debug optional dovecot-lmtpd-dbgsym_2.4.1+dfsg1-6+deb13u4_riscv64.deb
 725e12523dd042a8b6aa0843a3beb53c 35996 mail optional dovecot-lmtpd_2.4.1+dfsg1-6+deb13u4_riscv64.deb
 998e515f49aa03c597fdcd8e2c9bd61c 121980 debug optional dovecot-managesieved-dbgsym_2.4.1+dfsg1-6+deb13u4_riscv64.deb
 b34ebb6310c0a406d1af77181bc03e46 47284 mail optional dovecot-managesieved_2.4.1+dfsg1-6+deb13u4_riscv64.deb
 06ac1e36677accc64f91b8b9a49082b2 34776 debug optional dovecot-mysql-dbgsym_2.4.1+dfsg1-6+deb13u4_riscv64.deb
 025ead4c93317014341abafa00c85b00 20084 mail optional dovecot-mysql_2.4.1+dfsg1-6+deb13u4_riscv64.deb
 b74bce90cc4a4efed87a4f2ccc815dcc 37228 debug optional dovecot-pgsql-dbgsym_2.4.1+dfsg1-6+deb13u4_riscv64.deb
 7980ef198eb05da4440a1f161e46e6fd 24024 mail optional dovecot-pgsql_2.4.1+dfsg1-6+deb13u4_riscv64.deb
 9c3022693d5c74c51456937c13bb9c20 102632 debug optional dovecot-pop3d-dbgsym_2.4.1+dfsg1-6+deb13u4_riscv64.deb
 d75977d7a8398ed83aabe0fd29556631 43852 mail optional dovecot-pop3d_2.4.1+dfsg1-6+deb13u4_riscv64.deb
 179a44c83a07f06866611bf010e38fc1 1688844 debug optional dovecot-sieve-dbgsym_2.4.1+dfsg1-6+deb13u4_riscv64.deb
 ecf8d5094e1252b37f77a88426368fe9 374988 mail optional dovecot-sieve_2.4.1+dfsg1-6+deb13u4_riscv64.deb
 2622d978c0793159bd693c518846467a 72476 debug optional dovecot-solr-dbgsym_2.4.1+dfsg1-6+deb13u4_riscv64.deb
 09d2a690aa495ba2ed559f753ecbb79a 37428 mail optional dovecot-solr_2.4.1+dfsg1-6+deb13u4_riscv64.deb
 bc05afb951be0d30c36056900a7b7069 24112 debug optional dovecot-sqlite-dbgsym_2.4.1+dfsg1-6+deb13u4_riscv64.deb
 b84129753de6256d050f1f84c967e752 19588 mail optional dovecot-sqlite_2.4.1+dfsg1-6+deb13u4_riscv64.deb
 23e97efb03b23aa15e592a81d66dee98 205368 debug optional dovecot-submissiond-dbgsym_2.4.1+dfsg1-6+deb13u4_riscv64.deb
 0d96f5a86dd6482ed20dd8bc6c7e5818 60408 mail optional dovecot-submissiond_2.4.1+dfsg1-6+deb13u4_riscv64.deb
 eeee12fd5bd141bd49097569da122931 18085 mail optional dovecot_2.4.1+dfsg1-6+deb13u4_riscv64-buildd.buildinfo

-----BEGIN PGP SIGNATURE-----
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=BfZK
-----END PGP SIGNATURE-----