-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Fri, 03 Apr 2026 13:58:21 -0400
Source: dovecot
Binary: dovecot-auth-lua dovecot-auth-lua-dbgsym dovecot-core dovecot-core-dbgsym dovecot-dev dovecot-gssapi dovecot-gssapi-dbgsym dovecot-imapd dovecot-imapd-dbgsym dovecot-ldap dovecot-ldap-dbgsym dovecot-lmtpd dovecot-lmtpd-dbgsym dovecot-lucene dovecot-lucene-dbgsym dovecot-managesieved dovecot-managesieved-dbgsym dovecot-mysql dovecot-mysql-dbgsym dovecot-pgsql dovecot-pgsql-dbgsym dovecot-pop3d dovecot-pop3d-dbgsym dovecot-sieve dovecot-sieve-dbgsym dovecot-solr dovecot-solr-dbgsym dovecot-sqlite dovecot-sqlite-dbgsym dovecot-submissiond dovecot-submissiond-dbgsym
Architecture: armel
Version: 1:2.3.19.1+dfsg1-2.1+deb12u2
Distribution: bookworm-security
Urgency: medium
Maintainer: arm Build Daemon (arm-conova-02) <buildd_arm64-arm-conova-02@buildd.debian.org>
Changed-By: Noah Meyerhans <noahm@debian.org>
Description:
 dovecot-auth-lua - secure POP3/IMAP server - Lua authentication plugin
 dovecot-core - secure POP3/IMAP server - core files
 dovecot-dev - secure POP3/IMAP server - header files
 dovecot-gssapi - secure POP3/IMAP server - GSSAPI support
 dovecot-imapd - secure POP3/IMAP server - IMAP daemon
 dovecot-ldap - secure POP3/IMAP server - LDAP support
 dovecot-lmtpd - secure POP3/IMAP server - LMTP server
 dovecot-lucene - secure POP3/IMAP server - Lucene support
 dovecot-managesieved - secure POP3/IMAP server - ManageSieve server
 dovecot-mysql - secure POP3/IMAP server - MySQL support
 dovecot-pgsql - secure POP3/IMAP server - PostgreSQL support
 dovecot-pop3d - secure POP3/IMAP server - POP3 daemon
 dovecot-sieve - secure POP3/IMAP server - Sieve filters support
 dovecot-solr - secure POP3/IMAP server - Solr support
 dovecot-sqlite - secure POP3/IMAP server - SQLite support
 dovecot-submissiond - secure POP3/IMAP server - mail submission agent
Changes:
 dovecot (1:2.3.19.1+dfsg1-2.1+deb12u2) bookworm-security; urgency=medium
 .
   * [34fb460] import upstream fixes for several CVEs
     - CVE-2025-59031: Remove unsafe decode2text shell script
     - CVE-2025-59032: ManageSieve AUTHENTICATE command crashes when using
       literal as SASL initial response
     - CVE-2026-0394: potential path traversal when configured to use
       per-domain passwd
     - CVE-2026-27855: OTP driver vulnerable to replay attack.
     - CVE-2026-27856: Doveadm credentials were not checked using
       timing-safe checking function
     - CVE-2026-27857: Sending excessive parenthesis causes imap-login to
       use excessive memory
     - CVE-2026-27858: managesieve-login can allocate large amount of
       memory during authentication
     - CVE-2026-27859: Excessive RFC 2231 MIME parameters in email would
       cause excessive CPU usage
Checksums-Sha1:
 717752dd65e953f2fda1c6fd662367171f0db624 32264 dovecot-auth-lua-dbgsym_2.3.19.1+dfsg1-2.1+deb12u2_armel.deb
 df2939fb935c99e313a764062888f5317bf276a1 1366088 dovecot-auth-lua_2.3.19.1+dfsg1-2.1+deb12u2_armel.deb
 71a09b4a563dcfb8964d2ddf29392ccd827cf9e5 9280992 dovecot-core-dbgsym_2.3.19.1+dfsg1-2.1+deb12u2_armel.deb
 113854116af5089977c324f387c9d17e2d062d4b 4142408 dovecot-core_2.3.19.1+dfsg1-2.1+deb12u2_armel.deb
 9150c3c0d694a9c466b5cfb46e6b737cb6e24e51 1743484 dovecot-dev_2.3.19.1+dfsg1-2.1+deb12u2_armel.deb
 32f9b0c99c7efd478d03e1497841e93939b89c69 21868 dovecot-gssapi-dbgsym_2.3.19.1+dfsg1-2.1+deb12u2_armel.deb
 65e3a612dbbce967b2c6e4ebbda07ff8723f365c 1362332 dovecot-gssapi_2.3.19.1+dfsg1-2.1+deb12u2_armel.deb
 65a583da094158df66c9717bb6e2709a2753d6d3 668064 dovecot-imapd-dbgsym_2.3.19.1+dfsg1-2.1+deb12u2_armel.deb
 6e9b39e5fd7b315b3de3d05d97d166036fddc6a1 1505936 dovecot-imapd_2.3.19.1+dfsg1-2.1+deb12u2_armel.deb
 7b1b5d97396e18e6cae082961ca74c240fd04465 115964 dovecot-ldap-dbgsym_2.3.19.1+dfsg1-2.1+deb12u2_armel.deb
 21b473ec90061439b63c1b1ce28ec706724b7fa4 1389112 dovecot-ldap_2.3.19.1+dfsg1-2.1+deb12u2_armel.deb
 6664409ff5e998acd78bb414bbaf6f092c5a1385 91516 dovecot-lmtpd-dbgsym_2.3.19.1+dfsg1-2.1+deb12u2_armel.deb
 c63ea22a4a35217843c473cf011116cce1e113a1 1376368 dovecot-lmtpd_2.3.19.1+dfsg1-2.1+deb12u2_armel.deb
 0263a08d0555bcd371b11cb6d4aa8760573b7d66 148764 dovecot-lucene-dbgsym_2.3.19.1+dfsg1-2.1+deb12u2_armel.deb
 7591b244a8e1daba3598e60ad2a5d3e647fe2beb 1377628 dovecot-lucene_2.3.19.1+dfsg1-2.1+deb12u2_armel.deb
 bd22babb3a79d5c5159c1a12a55be6700c44985f 145620 dovecot-managesieved-dbgsym_2.3.19.1+dfsg1-2.1+deb12u2_armel.deb
 80e5de29b7ee88240b1de802b29f0089aff34a93 1394280 dovecot-managesieved_2.3.19.1+dfsg1-2.1+deb12u2_armel.deb
 6cc32ff8f865a4d647eb52463494088deb57ae68 31512 dovecot-mysql-dbgsym_2.3.19.1+dfsg1-2.1+deb12u2_armel.deb
 0183e93763b521912869d8ab4fd1eb2b5c5281e6 1363580 dovecot-mysql_2.3.19.1+dfsg1-2.1+deb12u2_armel.deb
 d7b94df713fb383ad344ef3b77ed1e19bc38a981 33304 dovecot-pgsql-dbgsym_2.3.19.1+dfsg1-2.1+deb12u2_armel.deb
 dc8cc0675f8b3fd20670d2d6a4ce3d395a29f9e5 1366516 dovecot-pgsql_2.3.19.1+dfsg1-2.1+deb12u2_armel.deb
 4e10b3c0ac67ce07f08bed8b4f99eea593d1edab 90028 dovecot-pop3d-dbgsym_2.3.19.1+dfsg1-2.1+deb12u2_armel.deb
 3c20f8d4ba346694bc3653b8802ca094d78a2c28 1382948 dovecot-pop3d_2.3.19.1+dfsg1-2.1+deb12u2_armel.deb
 3b547e43cf6d95f723341710f47859a5c72c0966 1498448 dovecot-sieve-dbgsym_2.3.19.1+dfsg1-2.1+deb12u2_armel.deb
 392794a93b9b3424a0de5424b10b14f0a5210fdd 1653156 dovecot-sieve_2.3.19.1+dfsg1-2.1+deb12u2_armel.deb
 251b030be7674fdc7bd9a88eb0f6db74e9a548de 86672 dovecot-solr-dbgsym_2.3.19.1+dfsg1-2.1+deb12u2_armel.deb
 e339254f205166756e92aa872a3f6237ad90ac30 1373376 dovecot-solr_2.3.19.1+dfsg1-2.1+deb12u2_armel.deb
 7df8542fa1acdda6bba62008474ff75479163d7e 18332 dovecot-sqlite-dbgsym_2.3.19.1+dfsg1-2.1+deb12u2_armel.deb
 68c48570ce7dcb26252347c62f4a3de49897320c 1361820 dovecot-sqlite_2.3.19.1+dfsg1-2.1+deb12u2_armel.deb
 a551d8b8e7426d4f0a33ca031a1efde57625de11 176240 dovecot-submissiond-dbgsym_2.3.19.1+dfsg1-2.1+deb12u2_armel.deb
 b2c51dc3ea24ed77aa3ea74c19d42b0fbceec84f 1396812 dovecot-submissiond_2.3.19.1+dfsg1-2.1+deb12u2_armel.deb
 966106f691c3b9ca77fe10c937cd4ec8e0944006 18678 dovecot_2.3.19.1+dfsg1-2.1+deb12u2_armel-buildd.buildinfo
Checksums-Sha256:
 c5aaba5106fb78ddac18d4098e7bd285e591b4a7c96c73324ecd0e74816b7a61 32264 dovecot-auth-lua-dbgsym_2.3.19.1+dfsg1-2.1+deb12u2_armel.deb
 766096e72c1eef622bcf1a8f4a97a155f0e8d4e50012d22b08654849ca174d8d 1366088 dovecot-auth-lua_2.3.19.1+dfsg1-2.1+deb12u2_armel.deb
 b6258080139a3a753e1d3db5670d11025df194564b31b09b4b5b0d8950c73c17 9280992 dovecot-core-dbgsym_2.3.19.1+dfsg1-2.1+deb12u2_armel.deb
 baf0638d384c792721b1efd1f6adf0a7a5998484385b6c79290ba5c36884bcef 4142408 dovecot-core_2.3.19.1+dfsg1-2.1+deb12u2_armel.deb
 a33966baae8cd8aed49041cd653a47e3ef3a197563263d0e706cd8a922acbee2 1743484 dovecot-dev_2.3.19.1+dfsg1-2.1+deb12u2_armel.deb
 f3dac321d809613432110869ff14e9cec5344cd89d254964ae1ed30792d44a3b 21868 dovecot-gssapi-dbgsym_2.3.19.1+dfsg1-2.1+deb12u2_armel.deb
 803e0e2689bca45d13f57ceefb75efc87e24ca9f351b5e42bcad3cc9b193edd0 1362332 dovecot-gssapi_2.3.19.1+dfsg1-2.1+deb12u2_armel.deb
 77945ba9efaefb122b813e95a8ee60dedf7ae4f4ea2cea696e7c4601ea33255c 668064 dovecot-imapd-dbgsym_2.3.19.1+dfsg1-2.1+deb12u2_armel.deb
 ed2acc185512c9a75b1e4f93a107c5fdf2264eb88d514ac3126f0e17750fcd91 1505936 dovecot-imapd_2.3.19.1+dfsg1-2.1+deb12u2_armel.deb
 e00a2e9db1659150d8eeb8632ad0105ae0f753eb28ca99831551b4d9f60b9eea 115964 dovecot-ldap-dbgsym_2.3.19.1+dfsg1-2.1+deb12u2_armel.deb
 5bdbb38b387a12396fc5ed8c4f7e9ec403d4f7b9b34addf60ba318741bdac5f6 1389112 dovecot-ldap_2.3.19.1+dfsg1-2.1+deb12u2_armel.deb
 401bb4ddc65fc0853e5474f68e83448781dc4c2bd41a6492186052986db2bcd9 91516 dovecot-lmtpd-dbgsym_2.3.19.1+dfsg1-2.1+deb12u2_armel.deb
 5d7a2e03ad3618ce80b3fb133dd4edbb57a247d96dfe66984c13743d94058a6b 1376368 dovecot-lmtpd_2.3.19.1+dfsg1-2.1+deb12u2_armel.deb
 595887fccb74722dddfe8a5a345c81467179c25ef72b78cb1e323529243202b4 148764 dovecot-lucene-dbgsym_2.3.19.1+dfsg1-2.1+deb12u2_armel.deb
 d8783e1d37632a9e00ef60da3bb0955c547012474db96d50818be909d2001d98 1377628 dovecot-lucene_2.3.19.1+dfsg1-2.1+deb12u2_armel.deb
 326201b19bf179d1f57b19dd8b62737fd6ea165ec09e40bc559be0192e31d232 145620 dovecot-managesieved-dbgsym_2.3.19.1+dfsg1-2.1+deb12u2_armel.deb
 c2085651ae0540d190b22c2bf955a5ca815aaa79e0d87b6d8b7a123f94c7b9cf 1394280 dovecot-managesieved_2.3.19.1+dfsg1-2.1+deb12u2_armel.deb
 fad09cbc62d5ae6caab26e1227b8f0429106d846d6e0054f6874666c9ad59e75 31512 dovecot-mysql-dbgsym_2.3.19.1+dfsg1-2.1+deb12u2_armel.deb
 a194d9d427c9b39ed29032593c6c4dcc1a33979f872425b1c00d3d9bb74d4942 1363580 dovecot-mysql_2.3.19.1+dfsg1-2.1+deb12u2_armel.deb
 41a95f58d6c158dbb94bcc6a8c32d90329ab4706a47030959a8cba02a5896a3a 33304 dovecot-pgsql-dbgsym_2.3.19.1+dfsg1-2.1+deb12u2_armel.deb
 8f8b89dffa47c089c5e7505dae429e6fd0d8e7051c37f778c0adc3be663f79e3 1366516 dovecot-pgsql_2.3.19.1+dfsg1-2.1+deb12u2_armel.deb
 bd6c11fa57708804b68e743101b1079d2a9e536abbc74ba8822fded8250c2d46 90028 dovecot-pop3d-dbgsym_2.3.19.1+dfsg1-2.1+deb12u2_armel.deb
 0a15819e859cead68f2317061ee3b29b363cc35fdbbc51f895acdd88651bdcc0 1382948 dovecot-pop3d_2.3.19.1+dfsg1-2.1+deb12u2_armel.deb
 25f1c5463dda77bf1af2a64f53a97b524d2a2bbfbfc64a4e5ac0fcf9e6b3dd77 1498448 dovecot-sieve-dbgsym_2.3.19.1+dfsg1-2.1+deb12u2_armel.deb
 4fe1b11c8ef6a14077a3696783d956a2c8320b54db291f8a2172fd01f2d68f38 1653156 dovecot-sieve_2.3.19.1+dfsg1-2.1+deb12u2_armel.deb
 870b268d865611dd171346a385d37138090529c2396736902b273c17e885e782 86672 dovecot-solr-dbgsym_2.3.19.1+dfsg1-2.1+deb12u2_armel.deb
 41a2fb3d3ddbd2621150fd44493c6f74a9be6da68849cf710337e55fa49cf2dc 1373376 dovecot-solr_2.3.19.1+dfsg1-2.1+deb12u2_armel.deb
 2db1ec7fdb236583734807c2f550f248636dd5f7ecc38fa840ef941c9955884f 18332 dovecot-sqlite-dbgsym_2.3.19.1+dfsg1-2.1+deb12u2_armel.deb
 dfdbef2ad79b1dd985b2526389a83802df6cdcf7c80f4bebd26b51a20c2a0087 1361820 dovecot-sqlite_2.3.19.1+dfsg1-2.1+deb12u2_armel.deb
 8228ef1113e723eb8708343d70de54bf8a54eb14d70ee57e0b13b08e241a6aae 176240 dovecot-submissiond-dbgsym_2.3.19.1+dfsg1-2.1+deb12u2_armel.deb
 470ec631d227c5f7bfa088bfe97c5f9a38d60f86e74341fc1181ec75c7819cf1 1396812 dovecot-submissiond_2.3.19.1+dfsg1-2.1+deb12u2_armel.deb
 1d6bc47f933b8878b7b39b3b98ef1bfb27c40458a3d35c82d440416a09f63acd 18678 dovecot_2.3.19.1+dfsg1-2.1+deb12u2_armel-buildd.buildinfo
Files:
 f1aa293e8cb727ef76b80cc348171297 32264 debug optional dovecot-auth-lua-dbgsym_2.3.19.1+dfsg1-2.1+deb12u2_armel.deb
 f8f4dc9817a95d9dd5ed59ec43702832 1366088 mail optional dovecot-auth-lua_2.3.19.1+dfsg1-2.1+deb12u2_armel.deb
 8cf395854e33bd2722518cea06d2b645 9280992 debug optional dovecot-core-dbgsym_2.3.19.1+dfsg1-2.1+deb12u2_armel.deb
 a08f2a9acc58e781aeff0feee9e7ac83 4142408 mail optional dovecot-core_2.3.19.1+dfsg1-2.1+deb12u2_armel.deb
 c9c8d1a15b94a6cb662981ba4c25260a 1743484 mail optional dovecot-dev_2.3.19.1+dfsg1-2.1+deb12u2_armel.deb
 a56a16787ed7eb5935b49e0e1b2fd54c 21868 debug optional dovecot-gssapi-dbgsym_2.3.19.1+dfsg1-2.1+deb12u2_armel.deb
 510d6f71d8e9d1e791bf37dd7b17321d 1362332 mail optional dovecot-gssapi_2.3.19.1+dfsg1-2.1+deb12u2_armel.deb
 a44b373bf9a51d18a58afdf14075fe18 668064 debug optional dovecot-imapd-dbgsym_2.3.19.1+dfsg1-2.1+deb12u2_armel.deb
 347df9e237b3ddbc60c51fc00fd7a079 1505936 mail optional dovecot-imapd_2.3.19.1+dfsg1-2.1+deb12u2_armel.deb
 085bc07553991886e3505f7cd68f1645 115964 debug optional dovecot-ldap-dbgsym_2.3.19.1+dfsg1-2.1+deb12u2_armel.deb
 b5b9c451ee29d709e144f05053d2742c 1389112 mail optional dovecot-ldap_2.3.19.1+dfsg1-2.1+deb12u2_armel.deb
 b0b4237c51f3944658f26571b521b426 91516 debug optional dovecot-lmtpd-dbgsym_2.3.19.1+dfsg1-2.1+deb12u2_armel.deb
 b2c8e82588913ee8ac635385324734b2 1376368 mail optional dovecot-lmtpd_2.3.19.1+dfsg1-2.1+deb12u2_armel.deb
 33c2d49b65eed46a6ca804818ca0aa8e 148764 debug optional dovecot-lucene-dbgsym_2.3.19.1+dfsg1-2.1+deb12u2_armel.deb
 48026ca709560fd8548afba5cef8eea5 1377628 mail optional dovecot-lucene_2.3.19.1+dfsg1-2.1+deb12u2_armel.deb
 3188623893f370ef3e1101b5cb9becad 145620 debug optional dovecot-managesieved-dbgsym_2.3.19.1+dfsg1-2.1+deb12u2_armel.deb
 2d159e829d2bde6498bcdf0b4be26351 1394280 mail optional dovecot-managesieved_2.3.19.1+dfsg1-2.1+deb12u2_armel.deb
 408b8a846ed9d859d932b0aff3b02a12 31512 debug optional dovecot-mysql-dbgsym_2.3.19.1+dfsg1-2.1+deb12u2_armel.deb
 89956d814178e66329a110435d730978 1363580 mail optional dovecot-mysql_2.3.19.1+dfsg1-2.1+deb12u2_armel.deb
 c60435c98b4c7a2f417d10d9ce401e62 33304 debug optional dovecot-pgsql-dbgsym_2.3.19.1+dfsg1-2.1+deb12u2_armel.deb
 7e9840d91db4266228335b16677e64f5 1366516 mail optional dovecot-pgsql_2.3.19.1+dfsg1-2.1+deb12u2_armel.deb
 e94b60c63b850a3c5391a0a5b3d40e6e 90028 debug optional dovecot-pop3d-dbgsym_2.3.19.1+dfsg1-2.1+deb12u2_armel.deb
 96643cc4a13d9842e027b569b3bfc79c 1382948 mail optional dovecot-pop3d_2.3.19.1+dfsg1-2.1+deb12u2_armel.deb
 907e9cd084a65c7cb386890571309bcd 1498448 debug optional dovecot-sieve-dbgsym_2.3.19.1+dfsg1-2.1+deb12u2_armel.deb
 6c72b991483a36a38de72f54db390686 1653156 mail optional dovecot-sieve_2.3.19.1+dfsg1-2.1+deb12u2_armel.deb
 60f85f2143b7119b0e9249bf9a134e0d 86672 debug optional dovecot-solr-dbgsym_2.3.19.1+dfsg1-2.1+deb12u2_armel.deb
 563af4b8a4a0c08d090ce8cf6fda3a65 1373376 mail optional dovecot-solr_2.3.19.1+dfsg1-2.1+deb12u2_armel.deb
 7a4429e64b537644c4574ced8460afa1 18332 debug optional dovecot-sqlite-dbgsym_2.3.19.1+dfsg1-2.1+deb12u2_armel.deb
 db5534331516cd99958b5550798f1ff8 1361820 mail optional dovecot-sqlite_2.3.19.1+dfsg1-2.1+deb12u2_armel.deb
 794b325e36815de99c8d003a5a9f80c1 176240 debug optional dovecot-submissiond-dbgsym_2.3.19.1+dfsg1-2.1+deb12u2_armel.deb
 bf539faa0eb26b70142266115c3cbd4c 1396812 mail optional dovecot-submissiond_2.3.19.1+dfsg1-2.1+deb12u2_armel.deb
 a649ff220c17a9ebfe42e3a93b956807 18678 mail optional dovecot_2.3.19.1+dfsg1-2.1+deb12u2_armel-buildd.buildinfo

-----BEGIN PGP SIGNATURE-----
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=w9Ff
-----END PGP SIGNATURE-----