-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Fri, 03 Apr 2026 13:58:21 -0400
Source: dovecot
Binary: dovecot-auth-lua dovecot-auth-lua-dbgsym dovecot-core dovecot-core-dbgsym dovecot-dev dovecot-gssapi dovecot-gssapi-dbgsym dovecot-imapd dovecot-imapd-dbgsym dovecot-ldap dovecot-ldap-dbgsym dovecot-lmtpd dovecot-lmtpd-dbgsym dovecot-lucene dovecot-lucene-dbgsym dovecot-managesieved dovecot-managesieved-dbgsym dovecot-mysql dovecot-mysql-dbgsym dovecot-pgsql dovecot-pgsql-dbgsym dovecot-pop3d dovecot-pop3d-dbgsym dovecot-sieve dovecot-sieve-dbgsym dovecot-solr dovecot-solr-dbgsym dovecot-sqlite dovecot-sqlite-dbgsym dovecot-submissiond dovecot-submissiond-dbgsym
Architecture: armhf
Version: 1:2.3.19.1+dfsg1-2.1+deb12u2
Distribution: bookworm-security
Urgency: medium
Maintainer: arm Build Daemon (arm-ubc-02) <buildd_arm64-arm-ubc-02@buildd.debian.org>
Changed-By: Noah Meyerhans <noahm@debian.org>
Description:
 dovecot-auth-lua - secure POP3/IMAP server - Lua authentication plugin
 dovecot-core - secure POP3/IMAP server - core files
 dovecot-dev - secure POP3/IMAP server - header files
 dovecot-gssapi - secure POP3/IMAP server - GSSAPI support
 dovecot-imapd - secure POP3/IMAP server - IMAP daemon
 dovecot-ldap - secure POP3/IMAP server - LDAP support
 dovecot-lmtpd - secure POP3/IMAP server - LMTP server
 dovecot-lucene - secure POP3/IMAP server - Lucene support
 dovecot-managesieved - secure POP3/IMAP server - ManageSieve server
 dovecot-mysql - secure POP3/IMAP server - MySQL support
 dovecot-pgsql - secure POP3/IMAP server - PostgreSQL support
 dovecot-pop3d - secure POP3/IMAP server - POP3 daemon
 dovecot-sieve - secure POP3/IMAP server - Sieve filters support
 dovecot-solr - secure POP3/IMAP server - Solr support
 dovecot-sqlite - secure POP3/IMAP server - SQLite support
 dovecot-submissiond - secure POP3/IMAP server - mail submission agent
Changes:
 dovecot (1:2.3.19.1+dfsg1-2.1+deb12u2) bookworm-security; urgency=medium
 .
   * [34fb460] import upstream fixes for several CVEs
     - CVE-2025-59031: Remove unsafe decode2text shell script
     - CVE-2025-59032: ManageSieve AUTHENTICATE command crashes when using
       literal as SASL initial response
     - CVE-2026-0394: potential path traversal when configured to use
       per-domain passwd
     - CVE-2026-27855: OTP driver vulnerable to replay attack.
     - CVE-2026-27856: Doveadm credentials were not checked using
       timing-safe checking function
     - CVE-2026-27857: Sending excessive parenthesis causes imap-login to
       use excessive memory
     - CVE-2026-27858: managesieve-login can allocate large amount of
       memory during authentication
     - CVE-2026-27859: Excessive RFC 2231 MIME parameters in email would
       cause excessive CPU usage
Checksums-Sha1:
 fbc5392fabb6b0ec52d9d30a19cc42324417ea80 32400 dovecot-auth-lua-dbgsym_2.3.19.1+dfsg1-2.1+deb12u2_armhf.deb
 a80cc83c6bf10c8b63ad9d564a679890bb14e455 1365592 dovecot-auth-lua_2.3.19.1+dfsg1-2.1+deb12u2_armhf.deb
 62e3ef99b36c35bfd1d464b4e0257ed11c740640 9367064 dovecot-core-dbgsym_2.3.19.1+dfsg1-2.1+deb12u2_armhf.deb
 9eab08d19d77b53d8544822c1de65b4370cc637a 4191628 dovecot-core_2.3.19.1+dfsg1-2.1+deb12u2_armhf.deb
 973a91520f55ae44eee48ba0ffec14059e7f599a 1743484 dovecot-dev_2.3.19.1+dfsg1-2.1+deb12u2_armhf.deb
 dc3af7b611c94010b0905327cac285a1bcc5f9ab 21940 dovecot-gssapi-dbgsym_2.3.19.1+dfsg1-2.1+deb12u2_armhf.deb
 4395988c9271d77b816e3a325e5034a8ecc03e93 1362308 dovecot-gssapi_2.3.19.1+dfsg1-2.1+deb12u2_armhf.deb
 122afd35f961c6bf9a849e7a54f4db81b4fd163f 672896 dovecot-imapd-dbgsym_2.3.19.1+dfsg1-2.1+deb12u2_armhf.deb
 57c60cda96f82e522a422305cbe7cf3102dbaf60 1508524 dovecot-imapd_2.3.19.1+dfsg1-2.1+deb12u2_armhf.deb
 a2980be2019344ace3c6369bb3505bbee2e9ad21 116720 dovecot-ldap-dbgsym_2.3.19.1+dfsg1-2.1+deb12u2_armhf.deb
 c848c39b0579e10f9c7b14ae2fad9241b1c51167 1389224 dovecot-ldap_2.3.19.1+dfsg1-2.1+deb12u2_armhf.deb
 d2a7d6a74ef16af92f5c287a74b39357bb8d1251 91868 dovecot-lmtpd-dbgsym_2.3.19.1+dfsg1-2.1+deb12u2_armhf.deb
 9f6fba9cf9e1d35a22ca008f5e5815643957db2b 1376232 dovecot-lmtpd_2.3.19.1+dfsg1-2.1+deb12u2_armhf.deb
 2a6c333dfe0f113b6463969d77fea986ed0bfac0 149200 dovecot-lucene-dbgsym_2.3.19.1+dfsg1-2.1+deb12u2_armhf.deb
 c9126d04b668dae300ff632ba17a985b819ec7f8 1377952 dovecot-lucene_2.3.19.1+dfsg1-2.1+deb12u2_armhf.deb
 aff6e3afab1ff5391070b05446158f5b6ef75a0a 146316 dovecot-managesieved-dbgsym_2.3.19.1+dfsg1-2.1+deb12u2_armhf.deb
 aa879bf112694966536727e643455affb91584ed 1395024 dovecot-managesieved_2.3.19.1+dfsg1-2.1+deb12u2_armhf.deb
 108acb96b8e3f0cad7549aee6f556fea2ad733eb 31728 dovecot-mysql-dbgsym_2.3.19.1+dfsg1-2.1+deb12u2_armhf.deb
 75e5956d514597dfa361971beab8adc3d3663d7c 1363560 dovecot-mysql_2.3.19.1+dfsg1-2.1+deb12u2_armhf.deb
 76fa86b82787514338e196f819baedac5bd0d052 33488 dovecot-pgsql-dbgsym_2.3.19.1+dfsg1-2.1+deb12u2_armhf.deb
 16be504ac215473c10f326417ee58d1ec2c963d5 1366580 dovecot-pgsql_2.3.19.1+dfsg1-2.1+deb12u2_armhf.deb
 84f1dc2886307dcb7740c37bfc03d26ade0cb220 90732 dovecot-pop3d-dbgsym_2.3.19.1+dfsg1-2.1+deb12u2_armhf.deb
 5b8358dc8108c667485e36b9e4500242eb6f6e07 1383424 dovecot-pop3d_2.3.19.1+dfsg1-2.1+deb12u2_armhf.deb
 f3abde40fba7e2ce0a400c3b502b3f27cfe4f87d 1504684 dovecot-sieve-dbgsym_2.3.19.1+dfsg1-2.1+deb12u2_armhf.deb
 40f54900ecad6c75412305178ab798cd78f70051 1658020 dovecot-sieve_2.3.19.1+dfsg1-2.1+deb12u2_armhf.deb
 2c5f9cea8a07244ebb6a9fa8aa757323b5d99938 86348 dovecot-solr-dbgsym_2.3.19.1+dfsg1-2.1+deb12u2_armhf.deb
 510a7081f228beb10b8d05f2e0fc2d0c11cd1a55 1373224 dovecot-solr_2.3.19.1+dfsg1-2.1+deb12u2_armhf.deb
 0ae9ba901bb7e087ce9fb8630beeb934eb1a5b6a 18456 dovecot-sqlite-dbgsym_2.3.19.1+dfsg1-2.1+deb12u2_armhf.deb
 f30f7a489607b9504e85ef71abab66985a7236b2 1361844 dovecot-sqlite_2.3.19.1+dfsg1-2.1+deb12u2_armhf.deb
 db66ce5abccffa2f7b267ec2714e76d2a7e2ddc4 177416 dovecot-submissiond-dbgsym_2.3.19.1+dfsg1-2.1+deb12u2_armhf.deb
 16047170ca3948b22398612ced13cb7d3c3b1aac 1397148 dovecot-submissiond_2.3.19.1+dfsg1-2.1+deb12u2_armhf.deb
 4f0b976bd41d7bab2c8342893a682ad7e41cbe0d 18680 dovecot_2.3.19.1+dfsg1-2.1+deb12u2_armhf-buildd.buildinfo
Checksums-Sha256:
 693ac4ab65f550f78bb3a3c3aac1b7d08a6169465bd5d35a4da7fa2d5a51c9c5 32400 dovecot-auth-lua-dbgsym_2.3.19.1+dfsg1-2.1+deb12u2_armhf.deb
 1e9b5aee56c1bb62c6ba06f1035d5f126bff517fb66cf2059bff6957214b85af 1365592 dovecot-auth-lua_2.3.19.1+dfsg1-2.1+deb12u2_armhf.deb
 5940061eb5d692dec84580507d1b291c7fbda7f3a613541b5e8f33c590b2c3d1 9367064 dovecot-core-dbgsym_2.3.19.1+dfsg1-2.1+deb12u2_armhf.deb
 710ea99c87dd1c1e2f03e54cccf7ccaccc7ad4bac1311e8a95882eb7feca5590 4191628 dovecot-core_2.3.19.1+dfsg1-2.1+deb12u2_armhf.deb
 8c7d1c6767772afba35fca966561151d63c5b21fa578805d5bf84a646dc13407 1743484 dovecot-dev_2.3.19.1+dfsg1-2.1+deb12u2_armhf.deb
 7ed80390c4d6ae335c181b1f38d7e8263de806a79449e16e0a01217d3a2446fc 21940 dovecot-gssapi-dbgsym_2.3.19.1+dfsg1-2.1+deb12u2_armhf.deb
 d4559a00c1dee4b7420a80c931aec740a4cf523b30f53b0a4893204701c8ce63 1362308 dovecot-gssapi_2.3.19.1+dfsg1-2.1+deb12u2_armhf.deb
 4604b4567c20f35e2b48d1af6795bbfd9f302e797e906a8f41c10998c482415d 672896 dovecot-imapd-dbgsym_2.3.19.1+dfsg1-2.1+deb12u2_armhf.deb
 ea3be89d730d4401be0bec367b9b364eb9c73eb2e7908dedb34f5835a9ae24b8 1508524 dovecot-imapd_2.3.19.1+dfsg1-2.1+deb12u2_armhf.deb
 35846cb068b3388d488abd27a30ec1a7dd24d4a4cd0ef3d554768c578ab6daaa 116720 dovecot-ldap-dbgsym_2.3.19.1+dfsg1-2.1+deb12u2_armhf.deb
 9641fd2f79363cd587f0e5a2f7aea046e2c2810020586296f33f6d9b34e505ab 1389224 dovecot-ldap_2.3.19.1+dfsg1-2.1+deb12u2_armhf.deb
 4778ee3381013d2d4d52ec9b2db0dd9137157e86314f3d3c9e95917b97d42344 91868 dovecot-lmtpd-dbgsym_2.3.19.1+dfsg1-2.1+deb12u2_armhf.deb
 3c077375c08561656f9828113d37e17881a0f9167bbf1634357640907133f7cb 1376232 dovecot-lmtpd_2.3.19.1+dfsg1-2.1+deb12u2_armhf.deb
 d4d340b5807d61490d590ab34287997a5724ff95c3c3692238783e7432e78955 149200 dovecot-lucene-dbgsym_2.3.19.1+dfsg1-2.1+deb12u2_armhf.deb
 646db2e512edcbbf8287162c202eedd1090aedcc301d19e5585b78b42e6c3286 1377952 dovecot-lucene_2.3.19.1+dfsg1-2.1+deb12u2_armhf.deb
 72a803c4585cb1b2c8b76e90e2141721f8193326a74c1efa20edf9517b85bb36 146316 dovecot-managesieved-dbgsym_2.3.19.1+dfsg1-2.1+deb12u2_armhf.deb
 dc260c714fafe045de1bada04c2b4146cbcb3d9a11bc614cf223f38e549e761f 1395024 dovecot-managesieved_2.3.19.1+dfsg1-2.1+deb12u2_armhf.deb
 ea6ec3e33abb6ba45832f76a0e401a8ced0825f9ba0035a46e0994187165b565 31728 dovecot-mysql-dbgsym_2.3.19.1+dfsg1-2.1+deb12u2_armhf.deb
 dbcb7516b30b4eaaebb1080ba959b648f1becea2d523c0b22d036a1ce63b2c2d 1363560 dovecot-mysql_2.3.19.1+dfsg1-2.1+deb12u2_armhf.deb
 0dcb0eb49b2ef66c33d9417e95db70e1c28d1383a64c2220ff27a883d1fae4cb 33488 dovecot-pgsql-dbgsym_2.3.19.1+dfsg1-2.1+deb12u2_armhf.deb
 f0ee94130268d7ca5f6b0cd4545e6bb9636532e0ef995f701dfafc2c72f22ccd 1366580 dovecot-pgsql_2.3.19.1+dfsg1-2.1+deb12u2_armhf.deb
 1ef88623234c24b5c9195667bd81de02b03e4276a21e4f36733aba9cc9548956 90732 dovecot-pop3d-dbgsym_2.3.19.1+dfsg1-2.1+deb12u2_armhf.deb
 2e26d11d336814eddb4e2fc7242f589150ce1bc6a0daf7ff1896b986225e63b3 1383424 dovecot-pop3d_2.3.19.1+dfsg1-2.1+deb12u2_armhf.deb
 22c840dad8eaf43e1d4e837a5d98580d96db5c73337dba99b1c0433dbc556bf3 1504684 dovecot-sieve-dbgsym_2.3.19.1+dfsg1-2.1+deb12u2_armhf.deb
 e5895eb7f4c70d382e5db0589731445744deddd39779617087a167101000e300 1658020 dovecot-sieve_2.3.19.1+dfsg1-2.1+deb12u2_armhf.deb
 1e4a12b4de8d777e002aaeaceeab75212015b1b6732086aec35148fa0003751e 86348 dovecot-solr-dbgsym_2.3.19.1+dfsg1-2.1+deb12u2_armhf.deb
 8be748ed66af97db940d648398ced1251981dff739fe1a782ffc2ef8aeb65353 1373224 dovecot-solr_2.3.19.1+dfsg1-2.1+deb12u2_armhf.deb
 f8697c53bab28cbb595601672563ddb2f8fff8635d14167b43f4d46dcc314f2e 18456 dovecot-sqlite-dbgsym_2.3.19.1+dfsg1-2.1+deb12u2_armhf.deb
 f8dda4ecfccf61fd08805ddb8066a78212fc51a4662573ac718f309852219ec9 1361844 dovecot-sqlite_2.3.19.1+dfsg1-2.1+deb12u2_armhf.deb
 6dec8d6605ad966f220c9d6d27a3021ad8236bb43be9783bf2b143faa0a82dce 177416 dovecot-submissiond-dbgsym_2.3.19.1+dfsg1-2.1+deb12u2_armhf.deb
 353b38b1fc59f9d7cc2336547db20bce85dcdfcbfade80a351c9827b6d412974 1397148 dovecot-submissiond_2.3.19.1+dfsg1-2.1+deb12u2_armhf.deb
 493c09bcff156ff8b0e6bdbd53864fe5d28eec0ef91dde1452c5193c041f7841 18680 dovecot_2.3.19.1+dfsg1-2.1+deb12u2_armhf-buildd.buildinfo
Files:
 b8a36fb4171e604e5470887a76e3dcc8 32400 debug optional dovecot-auth-lua-dbgsym_2.3.19.1+dfsg1-2.1+deb12u2_armhf.deb
 a310e2e20a06115256666c43e89b1e33 1365592 mail optional dovecot-auth-lua_2.3.19.1+dfsg1-2.1+deb12u2_armhf.deb
 92eb93e6cb57ee971ac41db1e971f4a7 9367064 debug optional dovecot-core-dbgsym_2.3.19.1+dfsg1-2.1+deb12u2_armhf.deb
 5fd583d73827bc51aa36ee6807737016 4191628 mail optional dovecot-core_2.3.19.1+dfsg1-2.1+deb12u2_armhf.deb
 a30707637926e2aa74aa100467a64f76 1743484 mail optional dovecot-dev_2.3.19.1+dfsg1-2.1+deb12u2_armhf.deb
 7c803f059a4ccca64fdad114a4c86368 21940 debug optional dovecot-gssapi-dbgsym_2.3.19.1+dfsg1-2.1+deb12u2_armhf.deb
 27369f8cf7a62df51dac693c940ed15a 1362308 mail optional dovecot-gssapi_2.3.19.1+dfsg1-2.1+deb12u2_armhf.deb
 c8afafec22b192ded6ce87d57e9b2f59 672896 debug optional dovecot-imapd-dbgsym_2.3.19.1+dfsg1-2.1+deb12u2_armhf.deb
 e7039aad2bb9a59d7d512b057bf1b1d7 1508524 mail optional dovecot-imapd_2.3.19.1+dfsg1-2.1+deb12u2_armhf.deb
 c1cb41d1d07ffc570a630a3cdef6312c 116720 debug optional dovecot-ldap-dbgsym_2.3.19.1+dfsg1-2.1+deb12u2_armhf.deb
 c3280fe8e3900af128afd6e3748a8e9a 1389224 mail optional dovecot-ldap_2.3.19.1+dfsg1-2.1+deb12u2_armhf.deb
 d200c93f1d3596dfc0480d06ef9ea5e7 91868 debug optional dovecot-lmtpd-dbgsym_2.3.19.1+dfsg1-2.1+deb12u2_armhf.deb
 19be45983eb3be8010cdfc00b853a4d7 1376232 mail optional dovecot-lmtpd_2.3.19.1+dfsg1-2.1+deb12u2_armhf.deb
 213bcb4b4086635659e81fe5924818d0 149200 debug optional dovecot-lucene-dbgsym_2.3.19.1+dfsg1-2.1+deb12u2_armhf.deb
 8414f1aaf5d33f59829a8c95c95c5189 1377952 mail optional dovecot-lucene_2.3.19.1+dfsg1-2.1+deb12u2_armhf.deb
 d33aeac20df4fde590d29a94bf162e5b 146316 debug optional dovecot-managesieved-dbgsym_2.3.19.1+dfsg1-2.1+deb12u2_armhf.deb
 58f8f738ca1c1913dcd542e787fa8d11 1395024 mail optional dovecot-managesieved_2.3.19.1+dfsg1-2.1+deb12u2_armhf.deb
 dd4029875c7785eda8f49c4763ca7eff 31728 debug optional dovecot-mysql-dbgsym_2.3.19.1+dfsg1-2.1+deb12u2_armhf.deb
 54e58b84b6bbd1dd391a7165538cdda4 1363560 mail optional dovecot-mysql_2.3.19.1+dfsg1-2.1+deb12u2_armhf.deb
 de8f79c2d137ce9220be8cef40b45deb 33488 debug optional dovecot-pgsql-dbgsym_2.3.19.1+dfsg1-2.1+deb12u2_armhf.deb
 f7e745d34056533de63a4c6249971d49 1366580 mail optional dovecot-pgsql_2.3.19.1+dfsg1-2.1+deb12u2_armhf.deb
 f3aed5bc1a9582a766486b44950311f0 90732 debug optional dovecot-pop3d-dbgsym_2.3.19.1+dfsg1-2.1+deb12u2_armhf.deb
 3ac726207b1d6f3f2fb45df2b1e8a961 1383424 mail optional dovecot-pop3d_2.3.19.1+dfsg1-2.1+deb12u2_armhf.deb
 0ee0b96ffdded50bc93e3c40b8bf4f6e 1504684 debug optional dovecot-sieve-dbgsym_2.3.19.1+dfsg1-2.1+deb12u2_armhf.deb
 b00cd0e0c4de2f79ea50119ab7acc124 1658020 mail optional dovecot-sieve_2.3.19.1+dfsg1-2.1+deb12u2_armhf.deb
 408680434c680c9c3d0b4dbde0492812 86348 debug optional dovecot-solr-dbgsym_2.3.19.1+dfsg1-2.1+deb12u2_armhf.deb
 51af848c2c5b83aa12962ef2dc82f12e 1373224 mail optional dovecot-solr_2.3.19.1+dfsg1-2.1+deb12u2_armhf.deb
 d4e3ef8bb63749c184fe229c1366c052 18456 debug optional dovecot-sqlite-dbgsym_2.3.19.1+dfsg1-2.1+deb12u2_armhf.deb
 114e340736c0e94fc3346a049e1ad69e 1361844 mail optional dovecot-sqlite_2.3.19.1+dfsg1-2.1+deb12u2_armhf.deb
 0941b35490d7205abc2df4092d9c3009 177416 debug optional dovecot-submissiond-dbgsym_2.3.19.1+dfsg1-2.1+deb12u2_armhf.deb
 40434a09ca13dcf9407007363d4b061c 1397148 mail optional dovecot-submissiond_2.3.19.1+dfsg1-2.1+deb12u2_armhf.deb
 c87a36f4d837bb4b4797bd3597d1779d 18680 mail optional dovecot_2.3.19.1+dfsg1-2.1+deb12u2_armhf-buildd.buildinfo

-----BEGIN PGP SIGNATURE-----
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=3nT6
-----END PGP SIGNATURE-----