-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Fri, 03 Apr 2026 13:58:21 -0400
Source: dovecot
Binary: dovecot-auth-lua dovecot-auth-lua-dbgsym dovecot-core dovecot-core-dbgsym dovecot-dev dovecot-gssapi dovecot-gssapi-dbgsym dovecot-imapd dovecot-imapd-dbgsym dovecot-ldap dovecot-ldap-dbgsym dovecot-lmtpd dovecot-lmtpd-dbgsym dovecot-lucene dovecot-lucene-dbgsym dovecot-managesieved dovecot-managesieved-dbgsym dovecot-mysql dovecot-mysql-dbgsym dovecot-pgsql dovecot-pgsql-dbgsym dovecot-pop3d dovecot-pop3d-dbgsym dovecot-sieve dovecot-sieve-dbgsym dovecot-solr dovecot-solr-dbgsym dovecot-sqlite dovecot-sqlite-dbgsym dovecot-submissiond dovecot-submissiond-dbgsym
Architecture: arm64
Version: 1:2.3.19.1+dfsg1-2.1+deb12u2
Distribution: bookworm-security
Urgency: medium
Maintainer: arm Build Daemon (arm-conova-03) <buildd_arm64-arm-conova-03@buildd.debian.org>
Changed-By: Noah Meyerhans <noahm@debian.org>
Description:
 dovecot-auth-lua - secure POP3/IMAP server - Lua authentication plugin
 dovecot-core - secure POP3/IMAP server - core files
 dovecot-dev - secure POP3/IMAP server - header files
 dovecot-gssapi - secure POP3/IMAP server - GSSAPI support
 dovecot-imapd - secure POP3/IMAP server - IMAP daemon
 dovecot-ldap - secure POP3/IMAP server - LDAP support
 dovecot-lmtpd - secure POP3/IMAP server - LMTP server
 dovecot-lucene - secure POP3/IMAP server - Lucene support
 dovecot-managesieved - secure POP3/IMAP server - ManageSieve server
 dovecot-mysql - secure POP3/IMAP server - MySQL support
 dovecot-pgsql - secure POP3/IMAP server - PostgreSQL support
 dovecot-pop3d - secure POP3/IMAP server - POP3 daemon
 dovecot-sieve - secure POP3/IMAP server - Sieve filters support
 dovecot-solr - secure POP3/IMAP server - Solr support
 dovecot-sqlite - secure POP3/IMAP server - SQLite support
 dovecot-submissiond - secure POP3/IMAP server - mail submission agent
Changes:
 dovecot (1:2.3.19.1+dfsg1-2.1+deb12u2) bookworm-security; urgency=medium
 .
   * [34fb460] import upstream fixes for several CVEs
     - CVE-2025-59031: Remove unsafe decode2text shell script
     - CVE-2025-59032: ManageSieve AUTHENTICATE command crashes when using
       literal as SASL initial response
     - CVE-2026-0394: potential path traversal when configured to use
       per-domain passwd
     - CVE-2026-27855: OTP driver vulnerable to replay attack.
     - CVE-2026-27856: Doveadm credentials were not checked using
       timing-safe checking function
     - CVE-2026-27857: Sending excessive parenthesis causes imap-login to
       use excessive memory
     - CVE-2026-27858: managesieve-login can allocate large amount of
       memory during authentication
     - CVE-2026-27859: Excessive RFC 2231 MIME parameters in email would
       cause excessive CPU usage
Checksums-Sha1:
 0fb94cea5e36a218e72f385c1c3b1d2a124993ba 33208 dovecot-auth-lua-dbgsym_2.3.19.1+dfsg1-2.1+deb12u2_arm64.deb
 ef3b4e18a49a8ab76c76d8f0d078840477175f7e 1366328 dovecot-auth-lua_2.3.19.1+dfsg1-2.1+deb12u2_arm64.deb
 43a8cee9d753b1903a382fdedd1dbaf01ee2397a 10206916 dovecot-core-dbgsym_2.3.19.1+dfsg1-2.1+deb12u2_arm64.deb
 602f0b1d5d31b6044375602053240e518383caf8 4283740 dovecot-core_2.3.19.1+dfsg1-2.1+deb12u2_arm64.deb
 2bc6fd75db097c61aca3c8abdd21377069576efe 1743496 dovecot-dev_2.3.19.1+dfsg1-2.1+deb12u2_arm64.deb
 8612a1d9854aab730f5a0a90b079f03c6cdd874b 21588 dovecot-gssapi-dbgsym_2.3.19.1+dfsg1-2.1+deb12u2_arm64.deb
 f4c0f65f27cd64ca9d5bc8171860ccabcbeb54c0 1362936 dovecot-gssapi_2.3.19.1+dfsg1-2.1+deb12u2_arm64.deb
 bfe6c3b73a06ee0215cf7606d45bf308701dac4a 714008 dovecot-imapd-dbgsym_2.3.19.1+dfsg1-2.1+deb12u2_arm64.deb
 514e0ddeabb8df7fdf89ffd6e151bf7d6d7f495e 1516868 dovecot-imapd_2.3.19.1+dfsg1-2.1+deb12u2_arm64.deb
 8390c8e5e01fb60f2ffb604f6a6913644a26eff8 117696 dovecot-ldap-dbgsym_2.3.19.1+dfsg1-2.1+deb12u2_arm64.deb
 85b7971bd9819cccdd58fa564d7aa97b60c12eba 1391024 dovecot-ldap_2.3.19.1+dfsg1-2.1+deb12u2_arm64.deb
 49c15689484bc4d7d0b7aad9f81b165105099b60 91948 dovecot-lmtpd-dbgsym_2.3.19.1+dfsg1-2.1+deb12u2_arm64.deb
 7dc693821f3407ce1e598070df4f4735b05e5133 1377480 dovecot-lmtpd_2.3.19.1+dfsg1-2.1+deb12u2_arm64.deb
 36a5e6e25ac1a627a81a403a1447155b0f1fcf0a 149356 dovecot-lucene-dbgsym_2.3.19.1+dfsg1-2.1+deb12u2_arm64.deb
 b2b9fba2d525b42b24a14ee2e5ec778feec605c2 1379968 dovecot-lucene_2.3.19.1+dfsg1-2.1+deb12u2_arm64.deb
 3d6c805f0d5465cc25e7e9bfd2e5dcff2eba11b8 161396 dovecot-managesieved-dbgsym_2.3.19.1+dfsg1-2.1+deb12u2_arm64.deb
 c29b729a0297134bc8e486d14874fe7a76ff31e9 1396708 dovecot-managesieved_2.3.19.1+dfsg1-2.1+deb12u2_arm64.deb
 e8f849cd66b20fc46d3f96215fa1ab75d1a02ff7 31564 dovecot-mysql-dbgsym_2.3.19.1+dfsg1-2.1+deb12u2_arm64.deb
 3ecf3ffddf557a57b94a81edb6abe7a7b717de82 1364352 dovecot-mysql_2.3.19.1+dfsg1-2.1+deb12u2_arm64.deb
 84ca8bbdbed5b04a6c29dc636da71fd8bfbbc58f 32500 dovecot-pgsql-dbgsym_2.3.19.1+dfsg1-2.1+deb12u2_arm64.deb
 6cc83779b6e42aeb0a589ae6bb7453f91588311b 1367212 dovecot-pgsql_2.3.19.1+dfsg1-2.1+deb12u2_arm64.deb
 2bab77c26ce6046b8e6fec23a0e146b41b852795 93436 dovecot-pop3d-dbgsym_2.3.19.1+dfsg1-2.1+deb12u2_arm64.deb
 8003baffac12c89936fe0293e02db0f7e6917a2a 1384756 dovecot-pop3d_2.3.19.1+dfsg1-2.1+deb12u2_arm64.deb
 f1603ed4b70b4eb08220898d6c4be0125cfca5a6 1552236 dovecot-sieve-dbgsym_2.3.19.1+dfsg1-2.1+deb12u2_arm64.deb
 2d6d580116fa2a2d5cb150d3ac55a5ca48043510 1673012 dovecot-sieve_2.3.19.1+dfsg1-2.1+deb12u2_arm64.deb
 ccb10f7b9b433cf73be4cf5fc8459b9ff85e2dde 86060 dovecot-solr-dbgsym_2.3.19.1+dfsg1-2.1+deb12u2_arm64.deb
 f68704957d742585b6d3d22aee81ff14bae286de 1374644 dovecot-solr_2.3.19.1+dfsg1-2.1+deb12u2_arm64.deb
 535b974a1a2d96aafdcbadf69edc529610cb50aa 18020 dovecot-sqlite-dbgsym_2.3.19.1+dfsg1-2.1+deb12u2_arm64.deb
 4d8b2a0b7d517949587a580c05ff91f1623d6207 1362620 dovecot-sqlite_2.3.19.1+dfsg1-2.1+deb12u2_arm64.deb
 798eebbe3b40d4ee20f9893b4e1a3b47500e066c 180780 dovecot-submissiond-dbgsym_2.3.19.1+dfsg1-2.1+deb12u2_arm64.deb
 a6f23b4fdb48e5190bce5f50cc5bac90d6d3866a 1399204 dovecot-submissiond_2.3.19.1+dfsg1-2.1+deb12u2_arm64.deb
 a4b67f3985e178c2516a39d03492034579609aaa 18839 dovecot_2.3.19.1+dfsg1-2.1+deb12u2_arm64-buildd.buildinfo
Checksums-Sha256:
 b1692c07ca6d1bc24c11f5b9265c1ebd58aab71f351721fddf1638a6642fb365 33208 dovecot-auth-lua-dbgsym_2.3.19.1+dfsg1-2.1+deb12u2_arm64.deb
 527999cbc63153895d0cadb80e0ec415d544bc3c7addd39d66b24196f34a326b 1366328 dovecot-auth-lua_2.3.19.1+dfsg1-2.1+deb12u2_arm64.deb
 d40539afe64a0a6ede4e69383f027f1586ed9fb1744979986eaa666a2125071c 10206916 dovecot-core-dbgsym_2.3.19.1+dfsg1-2.1+deb12u2_arm64.deb
 b8bb238f5af7af62df1c1c8bdf6222eefcfa33abb124ba43de3756b0e311ec51 4283740 dovecot-core_2.3.19.1+dfsg1-2.1+deb12u2_arm64.deb
 e24b36fa337d0c7f5d4d39a00e81ad10da560fdd7086b5ab7b3d61f038e19141 1743496 dovecot-dev_2.3.19.1+dfsg1-2.1+deb12u2_arm64.deb
 d50b81eefe4b9e42aed2a7515e9c594a3fc57acfa99c87558b43a5dbcbb15151 21588 dovecot-gssapi-dbgsym_2.3.19.1+dfsg1-2.1+deb12u2_arm64.deb
 0b4852300cdad9ae584830ec3260825f465a6053ed7be9b2506b160001027463 1362936 dovecot-gssapi_2.3.19.1+dfsg1-2.1+deb12u2_arm64.deb
 ca282b9bbc13fb6e51ec7a9531db408dacbbb8c771722aff69a2d5f19bd7c782 714008 dovecot-imapd-dbgsym_2.3.19.1+dfsg1-2.1+deb12u2_arm64.deb
 05486b2d9184479a93012c8c5bb71f7b2e17342cbe97871a6e5f927ce40150d5 1516868 dovecot-imapd_2.3.19.1+dfsg1-2.1+deb12u2_arm64.deb
 46306c6d7c892c8de0d527970cce0d36f59fda6d6d65f4db1f9597c1d9d25180 117696 dovecot-ldap-dbgsym_2.3.19.1+dfsg1-2.1+deb12u2_arm64.deb
 82fd4fbd1394529934b72fc576bb9adb23cee89ab329005d122ff5746df23753 1391024 dovecot-ldap_2.3.19.1+dfsg1-2.1+deb12u2_arm64.deb
 d46fdd822e1341383bf519fc0472a87f1e2d6c62a3105a7e9f5b3ede93f4cbb3 91948 dovecot-lmtpd-dbgsym_2.3.19.1+dfsg1-2.1+deb12u2_arm64.deb
 fe638516b610b5bef110e96572837084cbac416dc25958f8e3783600bf7e4411 1377480 dovecot-lmtpd_2.3.19.1+dfsg1-2.1+deb12u2_arm64.deb
 eb142f85e8782c33a1a7edf20b98c87502d0fe5012ee12e6a18c74390a81a28e 149356 dovecot-lucene-dbgsym_2.3.19.1+dfsg1-2.1+deb12u2_arm64.deb
 216a8dcd355d0a087e85efab630bd91ffd58e27f85d5ee7e1db45b455fd89aea 1379968 dovecot-lucene_2.3.19.1+dfsg1-2.1+deb12u2_arm64.deb
 468629d41c7a664abe936317b1e221a613c16099cfd862b9343e321f44eb50c4 161396 dovecot-managesieved-dbgsym_2.3.19.1+dfsg1-2.1+deb12u2_arm64.deb
 9c91a215c86642093d612138f1a79ba4f67a7caab4ee6f8b53c3f7139ba2e850 1396708 dovecot-managesieved_2.3.19.1+dfsg1-2.1+deb12u2_arm64.deb
 225450549cbae9a81a509d93b4db71c7b0ceaff43c0637bafaebce6af929bff0 31564 dovecot-mysql-dbgsym_2.3.19.1+dfsg1-2.1+deb12u2_arm64.deb
 723daf4330faadb083bebc45bbc13825854441ccbee9a52801ac051e2506c4d0 1364352 dovecot-mysql_2.3.19.1+dfsg1-2.1+deb12u2_arm64.deb
 4fa0b18c457477922f852a44faf7f75b70ad27f669c3ecac3cafff088c35f37d 32500 dovecot-pgsql-dbgsym_2.3.19.1+dfsg1-2.1+deb12u2_arm64.deb
 caab099449214848d16a565fb6ec08754bf0466173a45482a54c607aa6ec2f79 1367212 dovecot-pgsql_2.3.19.1+dfsg1-2.1+deb12u2_arm64.deb
 b4197779609d18b92da1050c8b40c3a8cc0a0e3450d345c266dc869ccb93b813 93436 dovecot-pop3d-dbgsym_2.3.19.1+dfsg1-2.1+deb12u2_arm64.deb
 92050631cbaa067a12d7daf63f2b55d1e975c095b363dbb9aebfff6e1292891b 1384756 dovecot-pop3d_2.3.19.1+dfsg1-2.1+deb12u2_arm64.deb
 54ae9f851b6954cd4f16951504984cd1ceaa7104c3564f52c4cfe7f2ff37924f 1552236 dovecot-sieve-dbgsym_2.3.19.1+dfsg1-2.1+deb12u2_arm64.deb
 f11798336524aff00c3dd6b55e7ca5a4c12acc4775ee1e7a9c7869cf838ef0f6 1673012 dovecot-sieve_2.3.19.1+dfsg1-2.1+deb12u2_arm64.deb
 e0fb7adb6b5ca0e5e5aeb96bcb14a1d9e8d6afa4f3b111219813e376bae50d48 86060 dovecot-solr-dbgsym_2.3.19.1+dfsg1-2.1+deb12u2_arm64.deb
 34f351b10923696e83d754b27d6243e6c4d600dd8f1eb1d08c9a561605728cf7 1374644 dovecot-solr_2.3.19.1+dfsg1-2.1+deb12u2_arm64.deb
 e2a74c337b6574cab58438ab3ac0bc76f259b71aa9d014dd573be7ae6a0e7e2a 18020 dovecot-sqlite-dbgsym_2.3.19.1+dfsg1-2.1+deb12u2_arm64.deb
 3ad27dc26ac86d213e2503efb751bc8c69d079df7708a8d907d587fa86c34a73 1362620 dovecot-sqlite_2.3.19.1+dfsg1-2.1+deb12u2_arm64.deb
 257d7a1c9ef719dc0635012dfce2d128ac8a26e80153541a8b3c2306f70faaef 180780 dovecot-submissiond-dbgsym_2.3.19.1+dfsg1-2.1+deb12u2_arm64.deb
 95645383e92f24cd6d36e8dcdf1ecb8b7bf15cf4f7e524afd1ac00a5dc1a646a 1399204 dovecot-submissiond_2.3.19.1+dfsg1-2.1+deb12u2_arm64.deb
 bccc9c4e0848de2214e55ec17f5f747dd472d74c62aa121f0800c1fc46b9751b 18839 dovecot_2.3.19.1+dfsg1-2.1+deb12u2_arm64-buildd.buildinfo
Files:
 8d29b9a005581ae2c71cbbbe53b403db 33208 debug optional dovecot-auth-lua-dbgsym_2.3.19.1+dfsg1-2.1+deb12u2_arm64.deb
 ec24c5ab226c09734e70983d43bbd2eb 1366328 mail optional dovecot-auth-lua_2.3.19.1+dfsg1-2.1+deb12u2_arm64.deb
 c23b9827e71c72070777a443d8550fdd 10206916 debug optional dovecot-core-dbgsym_2.3.19.1+dfsg1-2.1+deb12u2_arm64.deb
 c0f0ca9cd07b64939437e382b5398231 4283740 mail optional dovecot-core_2.3.19.1+dfsg1-2.1+deb12u2_arm64.deb
 a5240cd93829affcd0f0067576ecb2cb 1743496 mail optional dovecot-dev_2.3.19.1+dfsg1-2.1+deb12u2_arm64.deb
 c6ed89fffa2fab40be95a0d5f50b4ead 21588 debug optional dovecot-gssapi-dbgsym_2.3.19.1+dfsg1-2.1+deb12u2_arm64.deb
 96755d3508aa4de45c2edda1831e0c51 1362936 mail optional dovecot-gssapi_2.3.19.1+dfsg1-2.1+deb12u2_arm64.deb
 a3b7a267645f4d495291d18fe5db00a4 714008 debug optional dovecot-imapd-dbgsym_2.3.19.1+dfsg1-2.1+deb12u2_arm64.deb
 4654d2b6670728da2c3b1f027632d6a4 1516868 mail optional dovecot-imapd_2.3.19.1+dfsg1-2.1+deb12u2_arm64.deb
 127b2c3e02d79f90659b67f7d91b0aae 117696 debug optional dovecot-ldap-dbgsym_2.3.19.1+dfsg1-2.1+deb12u2_arm64.deb
 fe2bd70a95326446bd744e74967c51aa 1391024 mail optional dovecot-ldap_2.3.19.1+dfsg1-2.1+deb12u2_arm64.deb
 d1716c5df9d2916f88dd37864965dbb4 91948 debug optional dovecot-lmtpd-dbgsym_2.3.19.1+dfsg1-2.1+deb12u2_arm64.deb
 4ba8da2ffff7c6049cdbad8920ce6553 1377480 mail optional dovecot-lmtpd_2.3.19.1+dfsg1-2.1+deb12u2_arm64.deb
 dafea6a43899d72ced6413a46ecc5944 149356 debug optional dovecot-lucene-dbgsym_2.3.19.1+dfsg1-2.1+deb12u2_arm64.deb
 b03dee948f67e265daad1ecec59ba3fb 1379968 mail optional dovecot-lucene_2.3.19.1+dfsg1-2.1+deb12u2_arm64.deb
 a3466c3a17d37b2722b68ee164e39b63 161396 debug optional dovecot-managesieved-dbgsym_2.3.19.1+dfsg1-2.1+deb12u2_arm64.deb
 7d852b3f0b07025dc0d75b6842fb0e38 1396708 mail optional dovecot-managesieved_2.3.19.1+dfsg1-2.1+deb12u2_arm64.deb
 ad8935992dc1adc2876491ad585f43d9 31564 debug optional dovecot-mysql-dbgsym_2.3.19.1+dfsg1-2.1+deb12u2_arm64.deb
 81c6204392a4213657002a13e11c3111 1364352 mail optional dovecot-mysql_2.3.19.1+dfsg1-2.1+deb12u2_arm64.deb
 6352d046d524ee901872bda0e3ec38d2 32500 debug optional dovecot-pgsql-dbgsym_2.3.19.1+dfsg1-2.1+deb12u2_arm64.deb
 707abcbe17c87b6e8f90e94c041fa1c5 1367212 mail optional dovecot-pgsql_2.3.19.1+dfsg1-2.1+deb12u2_arm64.deb
 8b740a61cd37029f64ddb4e533f22504 93436 debug optional dovecot-pop3d-dbgsym_2.3.19.1+dfsg1-2.1+deb12u2_arm64.deb
 dbe2642120e16e7972c2c15bf13b0c59 1384756 mail optional dovecot-pop3d_2.3.19.1+dfsg1-2.1+deb12u2_arm64.deb
 7dfb9da053ced7e73a52819812fa9f9b 1552236 debug optional dovecot-sieve-dbgsym_2.3.19.1+dfsg1-2.1+deb12u2_arm64.deb
 f05a879155b9ccf787cb4717764f423c 1673012 mail optional dovecot-sieve_2.3.19.1+dfsg1-2.1+deb12u2_arm64.deb
 5e6716773bd8921db61ddce321ba9645 86060 debug optional dovecot-solr-dbgsym_2.3.19.1+dfsg1-2.1+deb12u2_arm64.deb
 ffe4c55a386f0cd42b637afb53654efa 1374644 mail optional dovecot-solr_2.3.19.1+dfsg1-2.1+deb12u2_arm64.deb
 cd9303e64a8fab10bd1141f8e497b340 18020 debug optional dovecot-sqlite-dbgsym_2.3.19.1+dfsg1-2.1+deb12u2_arm64.deb
 98f7938e59f2239f942808940ad7744c 1362620 mail optional dovecot-sqlite_2.3.19.1+dfsg1-2.1+deb12u2_arm64.deb
 9561fee054eaf5ff561641d463e7195b 180780 debug optional dovecot-submissiond-dbgsym_2.3.19.1+dfsg1-2.1+deb12u2_arm64.deb
 6a6e80853c1bf068a4b8ee96a57962f2 1399204 mail optional dovecot-submissiond_2.3.19.1+dfsg1-2.1+deb12u2_arm64.deb
 255f42721204c6a93a5a44c26ef9987b 18839 mail optional dovecot_2.3.19.1+dfsg1-2.1+deb12u2_arm64-buildd.buildinfo

-----BEGIN PGP SIGNATURE-----

iQIzBAEBCgAdFiEElFiH1oZRZh1t4FSiXVp1sEH/1mIFAmnQOR4ACgkQXVp1sEH/
1mJ1Zw/7BCGBTIB9yKu7Tt1XDK3EXXf8wwNfVKlsmWiRdyPJTvmUgot2Vo2Fi0+E
1PP1OBCZWz0R1do2RZDTHaFKCFzryD+W1f98w5WLKaBhO28SKjghR47ysszzgJ03
ezMwulpuW42b6OXaCL1ebuNDo4nQq26qgdHEOZI6t9rJVZolzheoCe09jCfuD309
gadDenB+M64e6Q6um9XqJNHgdlBSYtaRK0FyC1+iGvwDZ83rEVbi9oKTWO4D4BaF
rRPzgKk2OV28W1vNx5Lzak2rGZY7F5EdPRilqE5A3vC/87y1+wcUw5JbFeuvDxRQ
c07zTnVwHgxVlOksdUlfERVCProZgEkKPXCLMEtBobKIw0G+zSPKu41yvuxh9mS+
CJ2Xcnn6M7Qs7EDFt8zEhr+R5/a6rShwptm9qu1Ai8o9TO8OzczCevxp3Xdp4GEe
b/4VL7GfliYHqGNFQ76aaLWZNPGoBr7SkTtYCw7DpnGh+C/Ltrx2JDUCyqkFv8ch
EAccIAn5AB1bJFBW0WutOkXzoEMQJCoWC1Qg7JFyPEVPUxH7FIcc/cnZnUfuD7Pq
rdwb995hNSVK4HoBsiunts57FiyUvGvfxORcrbTp/JqJDu8Izp7/Tc0qdw83wHkw
SHZrWIfId1kRn7wFRgMMRSlj7EwGde8rUs8UlCVTJdPVCaFy3Gs=
=+EEx
-----END PGP SIGNATURE-----