-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Thu, 23 Apr 2026 09:40:11 -0400 Source: dovecot Binary: dovecot-auth-lua dovecot-auth-lua-dbgsym dovecot-core dovecot-core-dbgsym dovecot-dev dovecot-gssapi dovecot-gssapi-dbgsym dovecot-imapd dovecot-imapd-dbgsym dovecot-ldap dovecot-ldap-dbgsym dovecot-lmtpd dovecot-lmtpd-dbgsym dovecot-lucene dovecot-lucene-dbgsym dovecot-managesieved dovecot-managesieved-dbgsym dovecot-mysql dovecot-mysql-dbgsym dovecot-pgsql dovecot-pgsql-dbgsym dovecot-pop3d dovecot-pop3d-dbgsym dovecot-sieve dovecot-sieve-dbgsym dovecot-solr dovecot-solr-dbgsym dovecot-sqlite dovecot-sqlite-dbgsym dovecot-submissiond dovecot-submissiond-dbgsym Architecture: armhf Version: 1:2.3.19.1+dfsg1-2.1+deb12u4 Distribution: bookworm-security Urgency: medium Maintainer: arm Build Daemon (arm-conova-02) Changed-By: Noah Meyerhans Description: dovecot-auth-lua - secure POP3/IMAP server - Lua authentication plugin dovecot-core - secure POP3/IMAP server - core files dovecot-dev - secure POP3/IMAP server - header files dovecot-gssapi - secure POP3/IMAP server - GSSAPI support dovecot-imapd - secure POP3/IMAP server - IMAP daemon dovecot-ldap - secure POP3/IMAP server - LDAP support dovecot-lmtpd - secure POP3/IMAP server - LMTP server dovecot-lucene - secure POP3/IMAP server - Lucene support dovecot-managesieved - secure POP3/IMAP server - ManageSieve server dovecot-mysql - secure POP3/IMAP server - MySQL support dovecot-pgsql - secure POP3/IMAP server - PostgreSQL support dovecot-pop3d - secure POP3/IMAP server - POP3 daemon dovecot-sieve - secure POP3/IMAP server - Sieve filters support dovecot-solr - secure POP3/IMAP server - Solr support dovecot-sqlite - secure POP3/IMAP server - SQLite support dovecot-submissiond - secure POP3/IMAP server - mail submission agent Closes: 1134464 Changes: dovecot (1:2.3.19.1+dfsg1-2.1+deb12u4) bookworm-security; urgency=medium . * [0669596] Add tests for bug 1134464 regression * [2660eb2] Fix regression in passwd-file path normalization in CVE-2026-0394 fix (Closes: #1134464) Checksums-Sha1: 1f627c78b14874588cba86ae773f87649da1064e 32404 dovecot-auth-lua-dbgsym_2.3.19.1+dfsg1-2.1+deb12u4_armhf.deb 3a160dc31fb4406e00e694d2229a68b11fa4b741 1365768 dovecot-auth-lua_2.3.19.1+dfsg1-2.1+deb12u4_armhf.deb 568ed9c6fdbc35cc7798e446493cb7595a6f5de5 9368760 dovecot-core-dbgsym_2.3.19.1+dfsg1-2.1+deb12u4_armhf.deb 9d60f028e040d6ef34efb98f606364f512a04cf3 4191904 dovecot-core_2.3.19.1+dfsg1-2.1+deb12u4_armhf.deb 7b2a8e3f0c65537eb5694a5d24b48f6a5f3a952a 1743640 dovecot-dev_2.3.19.1+dfsg1-2.1+deb12u4_armhf.deb 832a2087f299570d8946085f7c67f3fed495d437 21948 dovecot-gssapi-dbgsym_2.3.19.1+dfsg1-2.1+deb12u4_armhf.deb 7eb68c693cedd5322bc68a6d5af57ccd631915b2 1362460 dovecot-gssapi_2.3.19.1+dfsg1-2.1+deb12u4_armhf.deb 76d03420b99bf4b390b01d6d5acfb77943e6049d 672916 dovecot-imapd-dbgsym_2.3.19.1+dfsg1-2.1+deb12u4_armhf.deb c8b5d40a5f2b24524775232ac0ef7bbd6e71b1ea 1508856 dovecot-imapd_2.3.19.1+dfsg1-2.1+deb12u4_armhf.deb 98d88852d4a707b12b14c91c3e346a3dcff2cbcb 116720 dovecot-ldap-dbgsym_2.3.19.1+dfsg1-2.1+deb12u4_armhf.deb 0bf455152bafc75dd3d86adf6ba78d9f97b32d1d 1389412 dovecot-ldap_2.3.19.1+dfsg1-2.1+deb12u4_armhf.deb e546bc7efc08afc9d3bbf181f8b8697f1d098942 91872 dovecot-lmtpd-dbgsym_2.3.19.1+dfsg1-2.1+deb12u4_armhf.deb 52c1db3ae06f701cdd5f994aed0b33bae81ffad4 1376464 dovecot-lmtpd_2.3.19.1+dfsg1-2.1+deb12u4_armhf.deb 1a3f3aa7736e941c2f5e08b833ee3c024048ea41 149200 dovecot-lucene-dbgsym_2.3.19.1+dfsg1-2.1+deb12u4_armhf.deb 3ed306743379b780b376ab178e9e7de762a340da 1378128 dovecot-lucene_2.3.19.1+dfsg1-2.1+deb12u4_armhf.deb e0666c6964e74ee5ecabd6d49c62466b4f010d4c 146300 dovecot-managesieved-dbgsym_2.3.19.1+dfsg1-2.1+deb12u4_armhf.deb 022d2f810294085b16dc83b6753ea8bb541c2632 1394904 dovecot-managesieved_2.3.19.1+dfsg1-2.1+deb12u4_armhf.deb 4dffe249413bab29c70943469b77485de0d8eab1 31728 dovecot-mysql-dbgsym_2.3.19.1+dfsg1-2.1+deb12u4_armhf.deb fc2e9f454850edac9f63d7ebc47e7635d1631985 1363720 dovecot-mysql_2.3.19.1+dfsg1-2.1+deb12u4_armhf.deb b385fc1f4805beabdd2538a8d647e765d0928d77 33492 dovecot-pgsql-dbgsym_2.3.19.1+dfsg1-2.1+deb12u4_armhf.deb cdd2ffc6ed9c6dca9e07fb7f9ef1638864b8bcc6 1366752 dovecot-pgsql_2.3.19.1+dfsg1-2.1+deb12u4_armhf.deb 1bb6d97be8d8a9b9c6ee4f68a22eb329d06c6e0d 90732 dovecot-pop3d-dbgsym_2.3.19.1+dfsg1-2.1+deb12u4_armhf.deb 24e6451cf56dc2ec78852ee6b6dc7c2c2721b450 1383512 dovecot-pop3d_2.3.19.1+dfsg1-2.1+deb12u4_armhf.deb af280fef53424c0c29cdb0692a2881718a39d3ca 1504740 dovecot-sieve-dbgsym_2.3.19.1+dfsg1-2.1+deb12u4_armhf.deb 200ce99756784c9c19e2e55411b8917ba60c63ea 1658224 dovecot-sieve_2.3.19.1+dfsg1-2.1+deb12u4_armhf.deb 141dfec332c76903fcdab8126fa1af16cc6b58ad 86356 dovecot-solr-dbgsym_2.3.19.1+dfsg1-2.1+deb12u4_armhf.deb ec3063c3626e6fd30ac762b86c35a6835c31c961 1373400 dovecot-solr_2.3.19.1+dfsg1-2.1+deb12u4_armhf.deb f004ca88aaddd943d0ad4ab80ff500b3512e408e 18460 dovecot-sqlite-dbgsym_2.3.19.1+dfsg1-2.1+deb12u4_armhf.deb 6a5c7a92d157417ac42888cdc3fcab8af192dc08 1362024 dovecot-sqlite_2.3.19.1+dfsg1-2.1+deb12u4_armhf.deb 21f326e662135bca77c19b23443ab77757f628e4 177424 dovecot-submissiond-dbgsym_2.3.19.1+dfsg1-2.1+deb12u4_armhf.deb 82557f9795244a1e02801c600d40630b905ce75b 1397304 dovecot-submissiond_2.3.19.1+dfsg1-2.1+deb12u4_armhf.deb 50706d4bcf6676567c9ea7a74543be44b2a67d39 18680 dovecot_2.3.19.1+dfsg1-2.1+deb12u4_armhf-buildd.buildinfo Checksums-Sha256: e5b03969b4977138baa136a248da22e9a026a5dc5d05185f4b14501befdad22b 32404 dovecot-auth-lua-dbgsym_2.3.19.1+dfsg1-2.1+deb12u4_armhf.deb 0c75cc8178f26f43e88c216a622409420a0e25452c93f09eb6e57f26524f543f 1365768 dovecot-auth-lua_2.3.19.1+dfsg1-2.1+deb12u4_armhf.deb 34312627583a516dd8471eb63f85be4cbdc115b007d765900146d86cc062810f 9368760 dovecot-core-dbgsym_2.3.19.1+dfsg1-2.1+deb12u4_armhf.deb f1660d5f808addb45d3f0566e153f3467a3cb3f9e0d845c99ce638c6daea0ff3 4191904 dovecot-core_2.3.19.1+dfsg1-2.1+deb12u4_armhf.deb 239aac9a3cb878160a393ad8828b7108c952e06188417ed4c0227d9f520ee58e 1743640 dovecot-dev_2.3.19.1+dfsg1-2.1+deb12u4_armhf.deb 12c4fd83093d39f0f90baca9b3c75509336c098d215e1802eeca2aca29ab5377 21948 dovecot-gssapi-dbgsym_2.3.19.1+dfsg1-2.1+deb12u4_armhf.deb ac79e345c9e3f04194f5608eb3a99c2f330a07e1c794d7911808c8dfb24a2fc7 1362460 dovecot-gssapi_2.3.19.1+dfsg1-2.1+deb12u4_armhf.deb 4c67b3adc95dd7134ba4c36bb18ef4d3d3dfdbc11a42508e813c92ba222e53af 672916 dovecot-imapd-dbgsym_2.3.19.1+dfsg1-2.1+deb12u4_armhf.deb 73e107b79277ae0b8a7f076489d508e15b906d8dcd31423bafa4624afcc2c864 1508856 dovecot-imapd_2.3.19.1+dfsg1-2.1+deb12u4_armhf.deb 58e30655329db4078ff5c642cb9dbd7ff3ce1088f39e03b9558b04fee2f3e4f9 116720 dovecot-ldap-dbgsym_2.3.19.1+dfsg1-2.1+deb12u4_armhf.deb ab411ca2b855966e5f0097a78ac96fbfcff7063197918652d738937d2380a0f0 1389412 dovecot-ldap_2.3.19.1+dfsg1-2.1+deb12u4_armhf.deb c0778e06c01a30d96de8bd90088f04a2e236629fb8e4be79021d002bf052c65e 91872 dovecot-lmtpd-dbgsym_2.3.19.1+dfsg1-2.1+deb12u4_armhf.deb 466f4a7d3ac28301431b55b5126ecfd954e31155705095c0520d254a31d68ff0 1376464 dovecot-lmtpd_2.3.19.1+dfsg1-2.1+deb12u4_armhf.deb c81da62cfc2ccaec9b72d432c2885db739f7bc68a37d074696bad74069f241b1 149200 dovecot-lucene-dbgsym_2.3.19.1+dfsg1-2.1+deb12u4_armhf.deb deaa6657c5db2ce06483b8529c926261b055e68dd6a8ae2fcee9cb75e6a49496 1378128 dovecot-lucene_2.3.19.1+dfsg1-2.1+deb12u4_armhf.deb 8b754873fe4a3a33ca593b3c76b348b92028c5f664106df57fc7ce0100be43d8 146300 dovecot-managesieved-dbgsym_2.3.19.1+dfsg1-2.1+deb12u4_armhf.deb f5ef831f6c7700963d84e74974754b156ba09ce377d547c2d95a855850a13fe2 1394904 dovecot-managesieved_2.3.19.1+dfsg1-2.1+deb12u4_armhf.deb a2bc0f636cdd217bc64845546e2d37a7d5a1d4abeed30aeec0d35a36af4835b9 31728 dovecot-mysql-dbgsym_2.3.19.1+dfsg1-2.1+deb12u4_armhf.deb fcfddfd8868e82189634399e69333703249ca26816f41268ccdab2b7d9e30c79 1363720 dovecot-mysql_2.3.19.1+dfsg1-2.1+deb12u4_armhf.deb 6c344ed38858f2e0ba4393a0a8d5b41a4696904dffd2b7e4cadc157b940e17d3 33492 dovecot-pgsql-dbgsym_2.3.19.1+dfsg1-2.1+deb12u4_armhf.deb a9a830ccc8d1ed995bb04accdf66639b95fbd568dc6601042c9a405541e58102 1366752 dovecot-pgsql_2.3.19.1+dfsg1-2.1+deb12u4_armhf.deb de5e0749718711f110ba7734523dded8ad313d2a33bb8d7cf2886c57c1ae62ae 90732 dovecot-pop3d-dbgsym_2.3.19.1+dfsg1-2.1+deb12u4_armhf.deb f0eefbf7655e5670b5e087316bee5ad538fd15207321660cdc3fb01efbebc173 1383512 dovecot-pop3d_2.3.19.1+dfsg1-2.1+deb12u4_armhf.deb 86ee00b52243199485941cfaee29001fa3eb772515ec6aa7efcb2f98b2beb8ca 1504740 dovecot-sieve-dbgsym_2.3.19.1+dfsg1-2.1+deb12u4_armhf.deb 12c3a8c0144c9d37f64a807dfd43d3deccebc7cd370b807826236f20bec7deec 1658224 dovecot-sieve_2.3.19.1+dfsg1-2.1+deb12u4_armhf.deb 4086fafa06b21f57cc59160987e850a2f54edfc947ae7696c98cd8ee0eabfdae 86356 dovecot-solr-dbgsym_2.3.19.1+dfsg1-2.1+deb12u4_armhf.deb a1a156502b237077e8d9672acc84b3b370db54d4f6997b2fc778c6ff814321a1 1373400 dovecot-solr_2.3.19.1+dfsg1-2.1+deb12u4_armhf.deb 7f7473ba8964db7225966ec55433e9b641731bbb935df70186c36d911899353e 18460 dovecot-sqlite-dbgsym_2.3.19.1+dfsg1-2.1+deb12u4_armhf.deb 0777e2bbcfd3d9b7ae56cecb042604dae316681425d0bfa0e77b9bfcdf8a0d53 1362024 dovecot-sqlite_2.3.19.1+dfsg1-2.1+deb12u4_armhf.deb 4a5d3f26d7a9eb89f16ce0ee8964ae78eb7d6f2bf48e7c9f5248ca49cb99c369 177424 dovecot-submissiond-dbgsym_2.3.19.1+dfsg1-2.1+deb12u4_armhf.deb 13ac85312527ec4a85d801ed24d083970920770bb5038b05879806fa5696dee1 1397304 dovecot-submissiond_2.3.19.1+dfsg1-2.1+deb12u4_armhf.deb 48d1d621c3d9875ce89ab8295de071851d95c73687a80f4aae93b7f8d745ae4f 18680 dovecot_2.3.19.1+dfsg1-2.1+deb12u4_armhf-buildd.buildinfo Files: 3416974e338de9060cb893d1834529af 32404 debug optional dovecot-auth-lua-dbgsym_2.3.19.1+dfsg1-2.1+deb12u4_armhf.deb b7f1d241424db91fb1c02ab35f3d8d6b 1365768 mail optional dovecot-auth-lua_2.3.19.1+dfsg1-2.1+deb12u4_armhf.deb 660ebe57ab2098af9bb1545df3fcdf31 9368760 debug optional dovecot-core-dbgsym_2.3.19.1+dfsg1-2.1+deb12u4_armhf.deb 060caf55af2bd35f7a4d602cf0adb5a7 4191904 mail optional dovecot-core_2.3.19.1+dfsg1-2.1+deb12u4_armhf.deb 94eabb84c512c2ebf7fc5acdd9605094 1743640 mail optional dovecot-dev_2.3.19.1+dfsg1-2.1+deb12u4_armhf.deb 67eb1245c75e5817ed299f197772e139 21948 debug optional dovecot-gssapi-dbgsym_2.3.19.1+dfsg1-2.1+deb12u4_armhf.deb 5e22f1e873c71643659e3a79a030bc2d 1362460 mail optional dovecot-gssapi_2.3.19.1+dfsg1-2.1+deb12u4_armhf.deb bdc46fc45081f92661abaff3998f479d 672916 debug optional dovecot-imapd-dbgsym_2.3.19.1+dfsg1-2.1+deb12u4_armhf.deb 41327483224940b11bbac124ef2cad84 1508856 mail optional dovecot-imapd_2.3.19.1+dfsg1-2.1+deb12u4_armhf.deb f43b3fb6ed96bdd23db04e8e0dcd99b2 116720 debug optional dovecot-ldap-dbgsym_2.3.19.1+dfsg1-2.1+deb12u4_armhf.deb fa828c8e4db8132d3130419231efefcb 1389412 mail optional dovecot-ldap_2.3.19.1+dfsg1-2.1+deb12u4_armhf.deb 3b28760d062dd0bfa24d0bb4703f85d5 91872 debug optional dovecot-lmtpd-dbgsym_2.3.19.1+dfsg1-2.1+deb12u4_armhf.deb 460c6ec47a709af6dbade6294a07bfe4 1376464 mail optional dovecot-lmtpd_2.3.19.1+dfsg1-2.1+deb12u4_armhf.deb 6cc926c0a4b9b3906439701abb0e6462 149200 debug optional dovecot-lucene-dbgsym_2.3.19.1+dfsg1-2.1+deb12u4_armhf.deb 8b99267c063f1873765a5ebe23951f1d 1378128 mail optional dovecot-lucene_2.3.19.1+dfsg1-2.1+deb12u4_armhf.deb fd43126cbe70b849f7974e849a36ed45 146300 debug optional dovecot-managesieved-dbgsym_2.3.19.1+dfsg1-2.1+deb12u4_armhf.deb 07761a1770aa66f824b2c8f38d757862 1394904 mail optional dovecot-managesieved_2.3.19.1+dfsg1-2.1+deb12u4_armhf.deb 299df84bc01c0b10f44a8351cb7929ec 31728 debug optional dovecot-mysql-dbgsym_2.3.19.1+dfsg1-2.1+deb12u4_armhf.deb a4d0d3aa3f1ae93a900f503dae474a54 1363720 mail optional dovecot-mysql_2.3.19.1+dfsg1-2.1+deb12u4_armhf.deb 1cd3e04779d5bdf1a72d92fd5a466ff2 33492 debug optional dovecot-pgsql-dbgsym_2.3.19.1+dfsg1-2.1+deb12u4_armhf.deb 0ce79340116f8019a5e250ddf6c49350 1366752 mail optional dovecot-pgsql_2.3.19.1+dfsg1-2.1+deb12u4_armhf.deb f4c5f2194e594df743db85e25c2a5079 90732 debug optional dovecot-pop3d-dbgsym_2.3.19.1+dfsg1-2.1+deb12u4_armhf.deb 8276551101659aecb2b5a442086ccf2d 1383512 mail optional dovecot-pop3d_2.3.19.1+dfsg1-2.1+deb12u4_armhf.deb fa5650f55ef81352d46941cf461814bd 1504740 debug optional dovecot-sieve-dbgsym_2.3.19.1+dfsg1-2.1+deb12u4_armhf.deb 8fa7a9f367ac3e0eea87769ab277ecad 1658224 mail optional dovecot-sieve_2.3.19.1+dfsg1-2.1+deb12u4_armhf.deb 7606053a748187ff8d3c02bd3379c66b 86356 debug optional dovecot-solr-dbgsym_2.3.19.1+dfsg1-2.1+deb12u4_armhf.deb 488f6b115d98ad878c443251d959d429 1373400 mail optional dovecot-solr_2.3.19.1+dfsg1-2.1+deb12u4_armhf.deb 0766053cdd9779627b95b4143d28ec71 18460 debug optional dovecot-sqlite-dbgsym_2.3.19.1+dfsg1-2.1+deb12u4_armhf.deb 3053ac3643ebfa6f2aeeb6e4c0343d4d 1362024 mail optional dovecot-sqlite_2.3.19.1+dfsg1-2.1+deb12u4_armhf.deb f797c5b08f2f7f9a38bf0d8f222b1105 177424 debug optional dovecot-submissiond-dbgsym_2.3.19.1+dfsg1-2.1+deb12u4_armhf.deb e3313468159930c55dca7e742aae845b 1397304 mail optional dovecot-submissiond_2.3.19.1+dfsg1-2.1+deb12u4_armhf.deb 20ecc547905722372eb0c65922168674 18680 mail optional dovecot_2.3.19.1+dfsg1-2.1+deb12u4_armhf-buildd.buildinfo -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEWHj9K9pO9l4btbD1OQKMdMnEH5MFAmnvb1UACgkQOQKMdMnE H5MAdQ//TF/e689rWOnDfJzmtkY6VAfb2hyV5PS/H5W0cv4Zb8qEg2b2bfrE3Y21 NBHxmHjNDudCZ13aO/STGtxc1Z2mWcUkB+X359hIaOC6AOXvQi0B1f0GS8JIpI4y yqVSYkh3T5OBIdZngcfE+ClO/YUKCswiyY7e6/rblA798VyENzr7CmONbKditu5v 0xHsyzrBhD66+s0Ok82dF4Q8nBjTJSP0/JmXWkeWSZCWm8NNAePVTCWVvmh4wFut OjUeOJi4CRPaQy2mPqNZU3L0B4//0GzL0EmnsaVbCTBcREFPnohM8NOwRf+iUmkM UTdfSuibJgBUMZLKQvaEV1z5vLieXET6naZ/LyCDemxtWTc/L8h+G/kZzY2t0VkH DZ0rFVbsRP9kdj8YaKw+cNNjwD7UAo6EU7ysOW2ZM316J/+KsnW+nABcql69SaxJ fy4J1y/rJoKkjRNzcYMtDlhKzRoImzEMn/ldgZI3NwrWa+zZoviulLnm80nXn0Hx S6yveWK+y0bH9wuk3QOzrxlZdZCHDPBvpUrmlJm5SxeS5g5zc1mAbaKMpYzSK90k 1pXVgFePvmKm6NWg9QvU2SO5Fdr3ZdA8Pi/BEpSITcYpCKqAwh4zLN7kfvuW4jH4 5b174Qno/g3Glhdkewep8F5rX+zQtv2Rd3iasfnNdPK0/HeNlyk= =J9xR -----END PGP SIGNATURE-----