-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Tue, 31 Mar 2026 15:07:17 -0400 Source: dovecot Binary: dovecot-auth-lua dovecot-auth-lua-dbgsym dovecot-core dovecot-core-dbgsym dovecot-dev dovecot-flatcurve dovecot-flatcurve-dbgsym dovecot-gssapi dovecot-gssapi-dbgsym dovecot-imapd dovecot-imapd-dbgsym dovecot-ldap dovecot-ldap-dbgsym dovecot-lmtpd dovecot-lmtpd-dbgsym dovecot-managesieved dovecot-managesieved-dbgsym dovecot-mysql dovecot-mysql-dbgsym dovecot-pgsql dovecot-pgsql-dbgsym dovecot-pop3d dovecot-pop3d-dbgsym dovecot-sieve dovecot-sieve-dbgsym dovecot-solr dovecot-solr-dbgsym dovecot-sqlite dovecot-sqlite-dbgsym dovecot-submissiond dovecot-submissiond-dbgsym Architecture: s390x Version: 1:2.4.1+dfsg1-6+deb13u4 Distribution: trixie-security Urgency: medium Maintainer: s390x Build Daemon (zandonai) Changed-By: Noah Meyerhans Description: dovecot-auth-lua - secure POP3/IMAP server - Lua authentication plugin dovecot-core - secure POP3/IMAP server - core files dovecot-dev - secure POP3/IMAP server - header files dovecot-flatcurve - secure POP3/IMAP server - Flatcurve support dovecot-gssapi - secure POP3/IMAP server - GSSAPI support dovecot-imapd - secure POP3/IMAP server - IMAP daemon dovecot-ldap - secure POP3/IMAP server - LDAP support dovecot-lmtpd - secure POP3/IMAP server - LMTP server dovecot-managesieved - secure POP3/IMAP server - ManageSieve server dovecot-mysql - secure POP3/IMAP server - MySQL support dovecot-pgsql - secure POP3/IMAP server - PostgreSQL support dovecot-pop3d - secure POP3/IMAP server - POP3 daemon dovecot-sieve - secure POP3/IMAP server - Sieve filters support dovecot-solr - secure POP3/IMAP server - Solr support dovecot-sqlite - secure POP3/IMAP server - SQLite support dovecot-submissiond - secure POP3/IMAP server - mail submission agent Changes: dovecot (1:2.4.1+dfsg1-6+deb13u4) trixie-security; urgency=medium . * [bc29057] CVE-2025-59028: auth: Don't disconnect auth client when invalid base64 SASL input is received * [fee7a9a] CVE-2025-59031: stop shipping the decode2text shell script * [9a4442e] CVE-2025-59032: managesieve-login: Fix crash when command didn't finish on the first call * [2711b3e] CVE-2026-24031, CVE-2026-27860: auth: fix ldap and sql injection * [d30f1c3] CVE-2026-27855: fix OTP authentication reply vulnerability * [e1b0ff7] CVE-2026-27856: doveadm: fix timing oracle attack * [b8a69bf] CVE-2026-27857: fix resource exhaustion DoS in NOOP command parsing * [85dd068] CVE-2026-27858: fix pre-authentication managesieve memory consumption issue * [880e332] CVE-2026-27859: fix uncontrolled resource allocation when delivering specially crafted email messages Checksums-Sha1: daf1c88c6992d0d93d14052572e5995f4f7d899d 31896 dovecot-auth-lua-dbgsym_2.4.1+dfsg1-6+deb13u4_s390x.deb 61a4b92e30eb413e970a990bf574019d9713e2d3 21028 dovecot-auth-lua_2.4.1+dfsg1-6+deb13u4_s390x.deb cc9f66f6d3b615adda821a87c19b8f283ca199f1 10097828 dovecot-core-dbgsym_2.4.1+dfsg1-6+deb13u4_s390x.deb 9cf537f12d5623fbd4a2c8f2e4b886dad9377940 2558344 dovecot-core_2.4.1+dfsg1-6+deb13u4_s390x.deb e8cde6c34cba96a6fb0f92b8d5d6aa975d3ad495 428940 dovecot-dev_2.4.1+dfsg1-6+deb13u4_s390x.deb 2b96579ec2ee2e028d40cf389e0b2faa355d7483 187808 dovecot-flatcurve-dbgsym_2.4.1+dfsg1-6+deb13u4_s390x.deb 3d98d24e4453c55fd78409d4b1f9a7a2cda5b7c0 40836 dovecot-flatcurve_2.4.1+dfsg1-6+deb13u4_s390x.deb 4f92468e031b5e9154b6db17c0abfea95bf9a042 20824 dovecot-gssapi-dbgsym_2.4.1+dfsg1-6+deb13u4_s390x.deb 61a8276ed05afa30757b63e181a0e20cdcd0f879 17840 dovecot-gssapi_2.4.1+dfsg1-6+deb13u4_s390x.deb fd9b059627c7eedd66a21dfac072e84f758b4b5f 746788 dovecot-imapd-dbgsym_2.4.1+dfsg1-6+deb13u4_s390x.deb 21790acde524ea1818f158b95f02b9b12bf6f52e 183448 dovecot-imapd_2.4.1+dfsg1-6+deb13u4_s390x.deb fc850d2d0837a15bbb4cad35ce7099edddd5cf28 167336 dovecot-ldap-dbgsym_2.4.1+dfsg1-6+deb13u4_s390x.deb d7d119d88a65c92e7743c4ad9eab02eab70f5d68 51392 dovecot-ldap_2.4.1+dfsg1-6+deb13u4_s390x.deb ab630e7b6682072999161c44554a338e5e30f016 100396 dovecot-lmtpd-dbgsym_2.4.1+dfsg1-6+deb13u4_s390x.deb 02291e503a886bfbcbe07d642aa1f1115d40b8c3 35296 dovecot-lmtpd_2.4.1+dfsg1-6+deb13u4_s390x.deb 7016d1dee5b83771ca78df10427e9d1511fec0c9 117196 dovecot-managesieved-dbgsym_2.4.1+dfsg1-6+deb13u4_s390x.deb 2f851c474a277da82794ade994884f9e95294536 45220 dovecot-managesieved_2.4.1+dfsg1-6+deb13u4_s390x.deb 29248f8454a2c285622a09aece3571aa7f6b4117 35056 dovecot-mysql-dbgsym_2.4.1+dfsg1-6+deb13u4_s390x.deb f9c261dec8578967df1b9c1fcf9cad862e7fa103 20272 dovecot-mysql_2.4.1+dfsg1-6+deb13u4_s390x.deb 62211da2fddf45be2ee8879e4a9349c603cf809f 38524 dovecot-pgsql-dbgsym_2.4.1+dfsg1-6+deb13u4_s390x.deb 2661bf8b8e9c162293a46e31e0b5a0eb5f062330 23840 dovecot-pgsql_2.4.1+dfsg1-6+deb13u4_s390x.deb 650c5a07ac6e6ed5cc89275c833f116e8e57e7d9 103220 dovecot-pop3d-dbgsym_2.4.1+dfsg1-6+deb13u4_s390x.deb 7baa26bdabef7c799d40a443edeadd6997db890a 42984 dovecot-pop3d_2.4.1+dfsg1-6+deb13u4_s390x.deb de4ee18c2cda39b302b669a8ecced072a0292f71 1699132 dovecot-sieve-dbgsym_2.4.1+dfsg1-6+deb13u4_s390x.deb 0763afd5b218813262ad6cc1a48a9f06f22b71d2 358324 dovecot-sieve_2.4.1+dfsg1-6+deb13u4_s390x.deb 909505df06944581ed95a3700bd603d32a101e5f 74572 dovecot-solr-dbgsym_2.4.1+dfsg1-6+deb13u4_s390x.deb fd1b2b5f823d5ea5a45339bfad10e195b16d4693 37108 dovecot-solr_2.4.1+dfsg1-6+deb13u4_s390x.deb e8122bb2790a2da22e75fde5007c617edca2bb13 24680 dovecot-sqlite-dbgsym_2.4.1+dfsg1-6+deb13u4_s390x.deb 109cee3079a82e26d3cfe9808dbdf6789f946d6f 19272 dovecot-sqlite_2.4.1+dfsg1-6+deb13u4_s390x.deb b30bdfde9e7213667cd5ef7f3141f3abec962679 206708 dovecot-submissiond-dbgsym_2.4.1+dfsg1-6+deb13u4_s390x.deb 34027eaf6424d11de935d3380ae6db38d24160c1 57308 dovecot-submissiond_2.4.1+dfsg1-6+deb13u4_s390x.deb 80f1c2e463cc845f2beded6e456781271c7b2c7c 17832 dovecot_2.4.1+dfsg1-6+deb13u4_s390x-buildd.buildinfo Checksums-Sha256: 3a50bfc6324217f5f19c7492475ad8803bc921fc99a403316809ea98556655c2 31896 dovecot-auth-lua-dbgsym_2.4.1+dfsg1-6+deb13u4_s390x.deb 9cfdd73e00a3890ed1c3b52f42f9033ec7e343b201b709e6f9bf5491b185f95a 21028 dovecot-auth-lua_2.4.1+dfsg1-6+deb13u4_s390x.deb 272ae13e814c2cfa8f996e4c5f61d137a87f9959b8c7016c150cf78d70450279 10097828 dovecot-core-dbgsym_2.4.1+dfsg1-6+deb13u4_s390x.deb 3235baa9bcd86a57855eac3e2f35f8734fa72fd606c8dcba8c01b5d93232d578 2558344 dovecot-core_2.4.1+dfsg1-6+deb13u4_s390x.deb cb9ab6ffc898156d5949cffeb88c577bd7a9b4b4cb61f2cdd4a06fd8b5fab099 428940 dovecot-dev_2.4.1+dfsg1-6+deb13u4_s390x.deb ddf46bda7a4d54a75c66d75d694d56ace99c57b6679f1f8b959f8f7ed543324c 187808 dovecot-flatcurve-dbgsym_2.4.1+dfsg1-6+deb13u4_s390x.deb 4caf1bf83bf98d827989fc2fb76572a068e5d57eb48a64cab7516d49a064326e 40836 dovecot-flatcurve_2.4.1+dfsg1-6+deb13u4_s390x.deb dcc955ca9e6116c0ad0d83aed7c9019ffb6375a3dcc3a57b7ce6b1609e2a418d 20824 dovecot-gssapi-dbgsym_2.4.1+dfsg1-6+deb13u4_s390x.deb 455429aeba02ed48a35aefd5c20ae3b65b27f8fc156d331d11cba55a3dc20745 17840 dovecot-gssapi_2.4.1+dfsg1-6+deb13u4_s390x.deb d8bd09dcb9b4b9d3474f1b834cd940a131b52a96119e057fdbc1c03bf98bf42a 746788 dovecot-imapd-dbgsym_2.4.1+dfsg1-6+deb13u4_s390x.deb 40299acbca7d01d81147b8c241a1fc16b7f823c2ab4c844db7db64544b6149f9 183448 dovecot-imapd_2.4.1+dfsg1-6+deb13u4_s390x.deb 29ef99c379a8427af8bedc8ada1c9f38cbc6f9b5efe43744e699a733003f3fb9 167336 dovecot-ldap-dbgsym_2.4.1+dfsg1-6+deb13u4_s390x.deb bf9ae85291b672fdf6de89e05fe2fd17263b42ae8dfc82ff1f0e0c076b9d782b 51392 dovecot-ldap_2.4.1+dfsg1-6+deb13u4_s390x.deb 735f3581a6a37ecfea1eda128391ee85672fe492fcbe77429a69a5f3a4481456 100396 dovecot-lmtpd-dbgsym_2.4.1+dfsg1-6+deb13u4_s390x.deb 082d6bead611ddc8347405d8654631004bf5cc5f737a22b7e6fc578c07fb118a 35296 dovecot-lmtpd_2.4.1+dfsg1-6+deb13u4_s390x.deb 93a598bf8a794cca8017226cef551527838c4f47ad8387f62dabd82880d8131d 117196 dovecot-managesieved-dbgsym_2.4.1+dfsg1-6+deb13u4_s390x.deb bf024619808e778debd361821b1d72a8948784903a395d55f8c13d7f62969055 45220 dovecot-managesieved_2.4.1+dfsg1-6+deb13u4_s390x.deb 39a7eb1247fe038ebd341978318c13dfb0a36e92debb5d1709228f4be46191f9 35056 dovecot-mysql-dbgsym_2.4.1+dfsg1-6+deb13u4_s390x.deb 32a318cf279db15305ec3ec85363f0465b0530791556efa1234273d23a9a301f 20272 dovecot-mysql_2.4.1+dfsg1-6+deb13u4_s390x.deb 0e480ab3509eb67f7f8dd815cec40a2f53cdabd96cf795c00fa383401241f329 38524 dovecot-pgsql-dbgsym_2.4.1+dfsg1-6+deb13u4_s390x.deb a7013a2bb166759ce4f4049c38eacbe777d11bc25265eeb8620ca7924ee86f3c 23840 dovecot-pgsql_2.4.1+dfsg1-6+deb13u4_s390x.deb 237aa0410beec9364518d7bd9679127c715710a693ab7e045c885a537be5e89a 103220 dovecot-pop3d-dbgsym_2.4.1+dfsg1-6+deb13u4_s390x.deb 738db695cc7d0cb2e280eb8913257e6a12bb7f75dee0e6e4e503069efb1b4878 42984 dovecot-pop3d_2.4.1+dfsg1-6+deb13u4_s390x.deb 215d6813309ec070dc77706563ddc2bc2f8045b672dcc3b0c80bc525d4ce2b6f 1699132 dovecot-sieve-dbgsym_2.4.1+dfsg1-6+deb13u4_s390x.deb 615c1092ff47322cd377d30f3903834a930652db82fffca432731791b77e26b4 358324 dovecot-sieve_2.4.1+dfsg1-6+deb13u4_s390x.deb 406dce2a4767f21a17b9f6cd143a3505b94f9de2e32796b05321ec81a51c66e9 74572 dovecot-solr-dbgsym_2.4.1+dfsg1-6+deb13u4_s390x.deb 391e6509bd6f48691dd350aa6c960d08fe961937fe67239dcd65b95c88bd0aff 37108 dovecot-solr_2.4.1+dfsg1-6+deb13u4_s390x.deb 1134279164c6b7408a92a0e7deb3d20fffb9cde95e5d540841ecb21f3500a1f4 24680 dovecot-sqlite-dbgsym_2.4.1+dfsg1-6+deb13u4_s390x.deb f4fa76394c9c635b8904c55fd4299eee8cb3190f4e63f06fd65cecf4d79c32de 19272 dovecot-sqlite_2.4.1+dfsg1-6+deb13u4_s390x.deb 4129dd814579992c90bc776c8a877a84550eabd76d9236162738d5abb131c8f4 206708 dovecot-submissiond-dbgsym_2.4.1+dfsg1-6+deb13u4_s390x.deb 846ee7dff21159e25bc4a2b1e34654400d493e8e8d3e7b7bba2ea41f34b23042 57308 dovecot-submissiond_2.4.1+dfsg1-6+deb13u4_s390x.deb 8e8fa7d435a074ae6fdb5bac7c97d6ccb100b6937b5878fd0b7ce4c7db6c0c8f 17832 dovecot_2.4.1+dfsg1-6+deb13u4_s390x-buildd.buildinfo Files: 100bf865303e5a780390f0b2bd9bc82b 31896 debug optional dovecot-auth-lua-dbgsym_2.4.1+dfsg1-6+deb13u4_s390x.deb 1565d30e1435f68c1024b8cfa2350dd9 21028 mail optional dovecot-auth-lua_2.4.1+dfsg1-6+deb13u4_s390x.deb 0ff0c6f645114316a86c35625973f651 10097828 debug optional dovecot-core-dbgsym_2.4.1+dfsg1-6+deb13u4_s390x.deb 4488cf52025c665c3ffb6d4b75335cbc 2558344 mail optional dovecot-core_2.4.1+dfsg1-6+deb13u4_s390x.deb af0b3f70f9bcdc4ead1260e3d64a58d7 428940 mail optional dovecot-dev_2.4.1+dfsg1-6+deb13u4_s390x.deb c249dbe92c5b586824a57e50431dd689 187808 debug optional dovecot-flatcurve-dbgsym_2.4.1+dfsg1-6+deb13u4_s390x.deb 52b83e1432db9d822f5456887624e211 40836 mail optional dovecot-flatcurve_2.4.1+dfsg1-6+deb13u4_s390x.deb 04b0b2c7121614921185eeed33ed9406 20824 debug optional dovecot-gssapi-dbgsym_2.4.1+dfsg1-6+deb13u4_s390x.deb 16a552fe8abead1a818726bdf52b19d0 17840 mail optional dovecot-gssapi_2.4.1+dfsg1-6+deb13u4_s390x.deb 0fc5618daab2095c7cc89077ada7f21c 746788 debug optional dovecot-imapd-dbgsym_2.4.1+dfsg1-6+deb13u4_s390x.deb 67702a1b8d4341fb6e40b47ba955a4be 183448 mail optional dovecot-imapd_2.4.1+dfsg1-6+deb13u4_s390x.deb fa3d143e627fe90a3bc0393a20627ea4 167336 debug optional dovecot-ldap-dbgsym_2.4.1+dfsg1-6+deb13u4_s390x.deb 72ac9bc2b7f3f35aaf7ab0580bc53aeb 51392 mail optional dovecot-ldap_2.4.1+dfsg1-6+deb13u4_s390x.deb b2399fa48e074575c01666643d4bf002 100396 debug optional dovecot-lmtpd-dbgsym_2.4.1+dfsg1-6+deb13u4_s390x.deb 558efb4be028461a5d8066fbda54b5a1 35296 mail optional dovecot-lmtpd_2.4.1+dfsg1-6+deb13u4_s390x.deb de0834d014cdcb1e52d5b88313f23ae9 117196 debug optional dovecot-managesieved-dbgsym_2.4.1+dfsg1-6+deb13u4_s390x.deb 01c8f67a47fc069f2a3004ead3dabcaa 45220 mail optional dovecot-managesieved_2.4.1+dfsg1-6+deb13u4_s390x.deb d79ef13b7a80f23c54a8d1e05e2c8ea4 35056 debug optional dovecot-mysql-dbgsym_2.4.1+dfsg1-6+deb13u4_s390x.deb d79622ff5ad95b50fabe706e95024136 20272 mail optional dovecot-mysql_2.4.1+dfsg1-6+deb13u4_s390x.deb 8e64137de89359177b3c31f3bbf2db56 38524 debug optional dovecot-pgsql-dbgsym_2.4.1+dfsg1-6+deb13u4_s390x.deb a2c93f5b29650c38a88f678b88b05822 23840 mail optional dovecot-pgsql_2.4.1+dfsg1-6+deb13u4_s390x.deb 9443c61243770dd71a4ef2f112813d79 103220 debug optional dovecot-pop3d-dbgsym_2.4.1+dfsg1-6+deb13u4_s390x.deb cd00619d1a7a5839c47762b976381a05 42984 mail optional dovecot-pop3d_2.4.1+dfsg1-6+deb13u4_s390x.deb dc83e82a813adbb349156aeb384ab5e7 1699132 debug optional dovecot-sieve-dbgsym_2.4.1+dfsg1-6+deb13u4_s390x.deb ec220e6fffbc7ef457821c246576d0ab 358324 mail optional dovecot-sieve_2.4.1+dfsg1-6+deb13u4_s390x.deb 4b4edd9e2fd63406c90cc4468fa3601d 74572 debug optional dovecot-solr-dbgsym_2.4.1+dfsg1-6+deb13u4_s390x.deb c461646a5380bc071e3497209b734679 37108 mail optional dovecot-solr_2.4.1+dfsg1-6+deb13u4_s390x.deb 3e40638e40893abb611e7dc5a83aa11c 24680 debug optional dovecot-sqlite-dbgsym_2.4.1+dfsg1-6+deb13u4_s390x.deb 814c2eec7b4f857bde9141b45f2947cc 19272 mail optional dovecot-sqlite_2.4.1+dfsg1-6+deb13u4_s390x.deb 87511f03a5ce76ad98f2d07b4167a884 206708 debug optional dovecot-submissiond-dbgsym_2.4.1+dfsg1-6+deb13u4_s390x.deb 633d4fa808eac6ab5a4394909c1e0f1a 57308 mail optional dovecot-submissiond_2.4.1+dfsg1-6+deb13u4_s390x.deb 4aa48be0b54a72c41cbc04bbfababa4f 17832 mail optional dovecot_2.4.1+dfsg1-6+deb13u4_s390x-buildd.buildinfo -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEENly2ANlpa4eeqnluvVOPI7pYNpgFAmnPIFkACgkQvVOPI7pY NpiNPRAAxKUFcA2vDPBW0i3yiy0hgpB8ZEm6ZFkeXYVvgAUoxY/QMhfUXUuou8LJ /hQOap4u2Cc+IxyijjIy6MQoi6YDR3hMLPpA8sjDIYpdPONn1TrWzhNyyu4mQwCa 7GDpS2oLoC3Kw8syVZnojiHP0a3pzs/RAlFW980uotbDc5vnw8IZjyZDbvXVf/9B +Q1+B/G9WHIKAjJH0f1or3M63iK8SeFGYih+iU50FsLRuiRmWkS6T/QOwiyMpse3 G0MLpBe+gelA7wCOHD1tH94LWYR2dYJyOBN+k15QZUXijylF1o5ZYxVq7GKEliiJ 35KjdTQhv3NyLD5W9LJTBm7qX/0fdbqghlzRCiD+D3pVTjPxqPgs6ajS/lrMJg1c 4qWhyTfte527+npOZ3gz3nZa6oeki9qEw5q3F7zW+lEdg/3yX3SJqzpzg3dhnS7q Ku0x4edJeprhcHszZOq+gQTO3dFTzoiKnrnLUksUxeClWXWekmH4gQ0PyGV+q8KP udzrqku3udrAjCNGdyQUmTLVn3ivdL3CWjUp8VuaBHTFMNFruWN7QK1O4yjJFblw Bsinm0PEG3KS4kkFAmDV4qy6k074lYyOOlvLPwb29gGl0BF4dHLbagL/577jvmBX QN8j1fd0+hvo+8tizD1tuq5YzKRmAyby+BTFIFb2VrGHOf3mw2Q= =UOjO -----END PGP SIGNATURE-----