-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Mon, 18 May 2026 14:11:58 -0400 Source: dovecot Binary: dovecot-auth-lua dovecot-auth-lua-dbgsym dovecot-core dovecot-core-dbgsym dovecot-dev dovecot-gssapi dovecot-gssapi-dbgsym dovecot-imapd dovecot-imapd-dbgsym dovecot-ldap dovecot-ldap-dbgsym dovecot-lmtpd dovecot-lmtpd-dbgsym dovecot-lucene dovecot-lucene-dbgsym dovecot-managesieved dovecot-managesieved-dbgsym dovecot-mysql dovecot-mysql-dbgsym dovecot-pgsql dovecot-pgsql-dbgsym dovecot-pop3d dovecot-pop3d-dbgsym dovecot-sieve dovecot-sieve-dbgsym dovecot-solr dovecot-solr-dbgsym dovecot-sqlite dovecot-sqlite-dbgsym dovecot-submissiond dovecot-submissiond-dbgsym Architecture: ppc64el Version: 1:2.3.19.1+dfsg1-2.1+deb12u6 Distribution: bookworm-security Urgency: medium Maintainer: ppc64el Build Daemon (ppc64el-osuosl-01) Changed-By: Noah Meyerhans Description: dovecot-auth-lua - secure POP3/IMAP server - Lua authentication plugin dovecot-core - secure POP3/IMAP server - core files dovecot-dev - secure POP3/IMAP server - header files dovecot-gssapi - secure POP3/IMAP server - GSSAPI support dovecot-imapd - secure POP3/IMAP server - IMAP daemon dovecot-ldap - secure POP3/IMAP server - LDAP support dovecot-lmtpd - secure POP3/IMAP server - LMTP server dovecot-lucene - secure POP3/IMAP server - Lucene support dovecot-managesieved - secure POP3/IMAP server - ManageSieve server dovecot-mysql - secure POP3/IMAP server - MySQL support dovecot-pgsql - secure POP3/IMAP server - PostgreSQL support dovecot-pop3d - secure POP3/IMAP server - POP3 daemon dovecot-sieve - secure POP3/IMAP server - Sieve filters support dovecot-solr - secure POP3/IMAP server - Solr support dovecot-sqlite - secure POP3/IMAP server - SQLite support dovecot-submissiond - secure POP3/IMAP server - mail submission agent Closes: 1136444 Changes: dovecot (1:2.3.19.1+dfsg1-2.1+deb12u6) bookworm-security; urgency=medium . * Security update (Closes: #1136444) * [1d0162a] autopkgtest: test cram-md5 authentication * [d4eed2a] CVE-2026-40016: Sieve :contains/:matches O(N×M) Substring Match Bypasses sieve_max_cpu_time Limit (130× Overrun) * [898776c] CVE-2026-33603: login: Base64 input can contain tabs that bypass IPC protection * [fe76a7b] CVE-2026-40020: IMAP folders can be shared-spammed to everyone * [ce379ba] CVE-2026-42006: imap-login: Excessive memory usage DoS Checksums-Sha1: d2e9904c68a29d60ee100a0136ecc2283d125500 34512 dovecot-auth-lua-dbgsym_2.3.19.1+dfsg1-2.1+deb12u6_ppc64el.deb 9334379995edff1b02fa8138d4a73e5cb294fb48 1368844 dovecot-auth-lua_2.3.19.1+dfsg1-2.1+deb12u6_ppc64el.deb 6d38d81b32b7f4394922f858a1e85c9c794f50e0 9721356 dovecot-core-dbgsym_2.3.19.1+dfsg1-2.1+deb12u6_ppc64el.deb e86a979e4b5cf92bae013d87cc70a24a1fa8db98 4653724 dovecot-core_2.3.19.1+dfsg1-2.1+deb12u6_ppc64el.deb 0c96514edf9b71fde1cf8cf11818b296829d2d35 1744092 dovecot-dev_2.3.19.1+dfsg1-2.1+deb12u6_ppc64el.deb 9636393c0c47ccc263c478b06b9b6e70ffcaed71 22060 dovecot-gssapi-dbgsym_2.3.19.1+dfsg1-2.1+deb12u6_ppc64el.deb 8ed1b2ee047068d7f6e1bfffed4ee2d17eb77b8f 1364200 dovecot-gssapi_2.3.19.1+dfsg1-2.1+deb12u6_ppc64el.deb b2da3d78a5bd04958800eb9b78241386c4348e10 697440 dovecot-imapd-dbgsym_2.3.19.1+dfsg1-2.1+deb12u6_ppc64el.deb fabe962abc2e393c884b87c4d17d19d370caca7e 1544468 dovecot-imapd_2.3.19.1+dfsg1-2.1+deb12u6_ppc64el.deb ac5db37bd65d4e9426eef99a14a2a94fd3ba6a00 123592 dovecot-ldap-dbgsym_2.3.19.1+dfsg1-2.1+deb12u6_ppc64el.deb a328d703e1562b638fcd964f0582b0729cf19a01 1397844 dovecot-ldap_2.3.19.1+dfsg1-2.1+deb12u6_ppc64el.deb d8b2b884647c9d030f65cd966ce66cd5972783fa 94348 dovecot-lmtpd-dbgsym_2.3.19.1+dfsg1-2.1+deb12u6_ppc64el.deb 7fca0a08d73905b0ecb37e0b6aa08423eed90ec7 1381088 dovecot-lmtpd_2.3.19.1+dfsg1-2.1+deb12u6_ppc64el.deb 4a27da6a1a2d52a1e7bc632a5d228e04c6104117 153260 dovecot-lucene-dbgsym_2.3.19.1+dfsg1-2.1+deb12u6_ppc64el.deb 67db0790aff910a3972aceecb157b8a55d7e10a1 1385320 dovecot-lucene_2.3.19.1+dfsg1-2.1+deb12u6_ppc64el.deb 07b9fdd3be0c3844c81c74418465e3640954fce3 151004 dovecot-managesieved-dbgsym_2.3.19.1+dfsg1-2.1+deb12u6_ppc64el.deb 5d2e39911b1e7b025ff4c6231e522497d1a79e49 1401600 dovecot-managesieved_2.3.19.1+dfsg1-2.1+deb12u6_ppc64el.deb 6cda6fd3fef9a061880df77fbe44014d278e16db 32640 dovecot-mysql-dbgsym_2.3.19.1+dfsg1-2.1+deb12u6_ppc64el.deb a383e753c90a163425870f23faa3d3e7f36914ad 1366816 dovecot-mysql_2.3.19.1+dfsg1-2.1+deb12u6_ppc64el.deb acbe67804c87009eabe5a1bcb717946dcaf5fbb1 34688 dovecot-pgsql-dbgsym_2.3.19.1+dfsg1-2.1+deb12u6_ppc64el.deb 70312c5d3d03a75d1d267b80ee10dcfd07a4ede7 1369928 dovecot-pgsql_2.3.19.1+dfsg1-2.1+deb12u6_ppc64el.deb b85fdbed1a89ae74575c22235cab15d7c241a154 94164 dovecot-pop3d-dbgsym_2.3.19.1+dfsg1-2.1+deb12u6_ppc64el.deb 3da43f7db80d337b93d931d817aeca0afb573674 1389332 dovecot-pop3d_2.3.19.1+dfsg1-2.1+deb12u6_ppc64el.deb 449deab20aa830fe1acefe0466fa170d9e78eb48 1555656 dovecot-sieve-dbgsym_2.3.19.1+dfsg1-2.1+deb12u6_ppc64el.deb 89a43f1057d16c8296b93d4f96179a244dad0ad1 1722276 dovecot-sieve_2.3.19.1+dfsg1-2.1+deb12u6_ppc64el.deb bf3b6bac35a724cef66384b94e661ee309bbc973 88756 dovecot-solr-dbgsym_2.3.19.1+dfsg1-2.1+deb12u6_ppc64el.deb aece5cbcee0fdca997e95e828d7b580be2f0b9f5 1378672 dovecot-solr_2.3.19.1+dfsg1-2.1+deb12u6_ppc64el.deb 03ced25c9827a56b5da240fc339b0186da19dda0 19152 dovecot-sqlite-dbgsym_2.3.19.1+dfsg1-2.1+deb12u6_ppc64el.deb 7f283e92955acca0800f6a035b19517dd0c48012 1364084 dovecot-sqlite_2.3.19.1+dfsg1-2.1+deb12u6_ppc64el.deb afa260c08d5ac33d6af45ebacf85a07b6f9f3651 182136 dovecot-submissiond-dbgsym_2.3.19.1+dfsg1-2.1+deb12u6_ppc64el.deb 5e73b16bd61654dc28334500d1adf7f269a01a86 1405248 dovecot-submissiond_2.3.19.1+dfsg1-2.1+deb12u6_ppc64el.deb 9ba997fa8b32780f4bf3d92296aab85a4a774c5f 19031 dovecot_2.3.19.1+dfsg1-2.1+deb12u6_ppc64el-buildd.buildinfo Checksums-Sha256: 61f116417cf6aea66b3ae803c371f5f7eb5fb56fc123f52b33804ea81deb253d 34512 dovecot-auth-lua-dbgsym_2.3.19.1+dfsg1-2.1+deb12u6_ppc64el.deb f0867bc5a9d0faa951bfe327e457c2b14517cc649a4fddfd5e0fc3ffb80f076c 1368844 dovecot-auth-lua_2.3.19.1+dfsg1-2.1+deb12u6_ppc64el.deb ee841e85eb06416bdd442222edc740115d9e2d88e478e340a7ed11191549feb3 9721356 dovecot-core-dbgsym_2.3.19.1+dfsg1-2.1+deb12u6_ppc64el.deb 005ac889d03c304ac3837af899da56bd7eea035567f772fbeafa1a5003b8c8c6 4653724 dovecot-core_2.3.19.1+dfsg1-2.1+deb12u6_ppc64el.deb d70a7ef3bc4a33a41b8b17666923d2be60f426a87750645922191577b2301eb4 1744092 dovecot-dev_2.3.19.1+dfsg1-2.1+deb12u6_ppc64el.deb 35ac49e7e4581abe127432ac2adebb5e7ddfa50e5f0fce8263323e99eee28d25 22060 dovecot-gssapi-dbgsym_2.3.19.1+dfsg1-2.1+deb12u6_ppc64el.deb cde751af8e1d3e424e67ad759a4726198897e60abe8412ee553663d37c5a49d3 1364200 dovecot-gssapi_2.3.19.1+dfsg1-2.1+deb12u6_ppc64el.deb 4a10f01e85db0d8388c6f7b067820e79abeb5bcc471085dc1991586d4361e516 697440 dovecot-imapd-dbgsym_2.3.19.1+dfsg1-2.1+deb12u6_ppc64el.deb 09e03e42c491a55cc7e1cdfc694ddbe2d5bb70773e7ed3d7276db38a5d709895 1544468 dovecot-imapd_2.3.19.1+dfsg1-2.1+deb12u6_ppc64el.deb 41aea6bdc7951aed731c2f1e0df3eb1b1af1afaeee57c3a4583d6c1caf16281e 123592 dovecot-ldap-dbgsym_2.3.19.1+dfsg1-2.1+deb12u6_ppc64el.deb 55645137ba0da1c94e59ccf537547b9601430520357af12eb40db9d6bd24874b 1397844 dovecot-ldap_2.3.19.1+dfsg1-2.1+deb12u6_ppc64el.deb 9a5bfeb88316f6213d9aca8216abf1aba15a31bc1053aa456ca561d473d7a19f 94348 dovecot-lmtpd-dbgsym_2.3.19.1+dfsg1-2.1+deb12u6_ppc64el.deb 99e322695efc596441bb5c1f9178760077f78d058d2a2e0dd4a7a7fcbe8b22b6 1381088 dovecot-lmtpd_2.3.19.1+dfsg1-2.1+deb12u6_ppc64el.deb 32385f0cd92ee727cbbfa75709c7be011473c8ec5d2faf266d995ff41724546d 153260 dovecot-lucene-dbgsym_2.3.19.1+dfsg1-2.1+deb12u6_ppc64el.deb b54378253346a73d396b4c9b8bb9d92005cc7925bd2c7b944e8ca8f456046d26 1385320 dovecot-lucene_2.3.19.1+dfsg1-2.1+deb12u6_ppc64el.deb b120c1c827dc1d00ec7bcb335149481a6dcb322988eef734d048066326c54e3f 151004 dovecot-managesieved-dbgsym_2.3.19.1+dfsg1-2.1+deb12u6_ppc64el.deb 8919147b4b68de6edd347655c76f56b8b2740ab45c99b6a39a46cbdf24a5c9bd 1401600 dovecot-managesieved_2.3.19.1+dfsg1-2.1+deb12u6_ppc64el.deb d6c1e1bc66db08906c8130510fec1db457d6eeb89f666111a07ad57e67eb9231 32640 dovecot-mysql-dbgsym_2.3.19.1+dfsg1-2.1+deb12u6_ppc64el.deb c9f154bc8865361af91b997683b09b3fb249af0284febd87d6924d7a67cc790a 1366816 dovecot-mysql_2.3.19.1+dfsg1-2.1+deb12u6_ppc64el.deb 4d41131a6c47871bc03f04e3f144bb7b4a1359952ab1ef64a677c0b244994bb1 34688 dovecot-pgsql-dbgsym_2.3.19.1+dfsg1-2.1+deb12u6_ppc64el.deb 9473345a591abdd82037659b871946ca268d823ca31596e1fabd53e8c0fd84d0 1369928 dovecot-pgsql_2.3.19.1+dfsg1-2.1+deb12u6_ppc64el.deb d99e04ec4b53555f6f44a484f04a24150d2fa1e3d592cc388dd3d85d8645e7d9 94164 dovecot-pop3d-dbgsym_2.3.19.1+dfsg1-2.1+deb12u6_ppc64el.deb 9915eec70a13baf579555300a43a9af9066e3bbf5cdb94ee0400f0058bd5f888 1389332 dovecot-pop3d_2.3.19.1+dfsg1-2.1+deb12u6_ppc64el.deb 6b22a2693f945ef7cf111ce72900acee3216454e58d6cf19fedd7de29c8a0ab7 1555656 dovecot-sieve-dbgsym_2.3.19.1+dfsg1-2.1+deb12u6_ppc64el.deb db6d24eb12a0cf338f16f90244ea48f9b60b261d09647efeff51be27a0dd438e 1722276 dovecot-sieve_2.3.19.1+dfsg1-2.1+deb12u6_ppc64el.deb 462fe6db0f614582e867e09f59cdf510d0ad02e73011dec9973df5473eec6724 88756 dovecot-solr-dbgsym_2.3.19.1+dfsg1-2.1+deb12u6_ppc64el.deb 54085006154acb81f5565b2670c355b4f02c3b1a1881ac2fd22e92462fab4f69 1378672 dovecot-solr_2.3.19.1+dfsg1-2.1+deb12u6_ppc64el.deb 4abb17d4f6cf3f5a9e86a670b3c12b04d6aae2d8f3a7b4bfa10a72cad746755c 19152 dovecot-sqlite-dbgsym_2.3.19.1+dfsg1-2.1+deb12u6_ppc64el.deb f38728f07881da8caeef93e33ff76e2958c0d7f54a92ab4e0713ae1df2f9dd47 1364084 dovecot-sqlite_2.3.19.1+dfsg1-2.1+deb12u6_ppc64el.deb 74bcaad0a1dbaeb1153e1148926f444483ac7828814d9db23622081dbbd533b0 182136 dovecot-submissiond-dbgsym_2.3.19.1+dfsg1-2.1+deb12u6_ppc64el.deb 004457fea4c529c6e51ec69c0e576b55add0ffdf387542520b54cc402094598a 1405248 dovecot-submissiond_2.3.19.1+dfsg1-2.1+deb12u6_ppc64el.deb 1be891c3521f24f32f0871985ad44270f9f2f7b9a61fa6c187761af9906434f5 19031 dovecot_2.3.19.1+dfsg1-2.1+deb12u6_ppc64el-buildd.buildinfo Files: d22c4883118910a947fbe5e2668e17ca 34512 debug optional dovecot-auth-lua-dbgsym_2.3.19.1+dfsg1-2.1+deb12u6_ppc64el.deb cca76b6bd3efb9375c2a2450311a7b67 1368844 mail optional dovecot-auth-lua_2.3.19.1+dfsg1-2.1+deb12u6_ppc64el.deb 5e2e2d4b5ff4efd5851d09d504ae117f 9721356 debug optional dovecot-core-dbgsym_2.3.19.1+dfsg1-2.1+deb12u6_ppc64el.deb b0440ffcf571ec8e20fd3eca98a0e942 4653724 mail optional dovecot-core_2.3.19.1+dfsg1-2.1+deb12u6_ppc64el.deb c325d1b0a08622549fa64da21a6ecc03 1744092 mail optional dovecot-dev_2.3.19.1+dfsg1-2.1+deb12u6_ppc64el.deb bf1b8bff395023e622aaf32c4b1b89bd 22060 debug optional dovecot-gssapi-dbgsym_2.3.19.1+dfsg1-2.1+deb12u6_ppc64el.deb 72e54dfdb6d35a5a7ea918c60407d864 1364200 mail optional dovecot-gssapi_2.3.19.1+dfsg1-2.1+deb12u6_ppc64el.deb 7b57b779961640a77718276564aff651 697440 debug optional dovecot-imapd-dbgsym_2.3.19.1+dfsg1-2.1+deb12u6_ppc64el.deb eb8c02df60a876c8cd5825c5f6de7fd7 1544468 mail optional dovecot-imapd_2.3.19.1+dfsg1-2.1+deb12u6_ppc64el.deb 6e7e5521a7b118cc34e52a4335ace6f7 123592 debug optional dovecot-ldap-dbgsym_2.3.19.1+dfsg1-2.1+deb12u6_ppc64el.deb 58663cab3b2269194470d23d7214565d 1397844 mail optional dovecot-ldap_2.3.19.1+dfsg1-2.1+deb12u6_ppc64el.deb a23eaf69d9ce0ce76af244cf45835a7a 94348 debug optional dovecot-lmtpd-dbgsym_2.3.19.1+dfsg1-2.1+deb12u6_ppc64el.deb 483480d71bdfe6354da8f31ca080073b 1381088 mail optional dovecot-lmtpd_2.3.19.1+dfsg1-2.1+deb12u6_ppc64el.deb 4f9269ab4b1e6b7364a97423ca79332b 153260 debug optional dovecot-lucene-dbgsym_2.3.19.1+dfsg1-2.1+deb12u6_ppc64el.deb a58772349343b0bd6916c863d4b3359f 1385320 mail optional dovecot-lucene_2.3.19.1+dfsg1-2.1+deb12u6_ppc64el.deb a079cb9c50d1e4dd00512f94f062797c 151004 debug optional dovecot-managesieved-dbgsym_2.3.19.1+dfsg1-2.1+deb12u6_ppc64el.deb e24be7abe90bb2de0543ceda964edc18 1401600 mail optional dovecot-managesieved_2.3.19.1+dfsg1-2.1+deb12u6_ppc64el.deb cdcf8b8ca28089eb9577f765de078544 32640 debug optional dovecot-mysql-dbgsym_2.3.19.1+dfsg1-2.1+deb12u6_ppc64el.deb 434fac763d3d64f87dc770fe578da58d 1366816 mail optional dovecot-mysql_2.3.19.1+dfsg1-2.1+deb12u6_ppc64el.deb 66f143520a501d7b36288d4d4ad47d63 34688 debug optional dovecot-pgsql-dbgsym_2.3.19.1+dfsg1-2.1+deb12u6_ppc64el.deb d6ff50d5a5ab77d2c649c0476349854e 1369928 mail optional dovecot-pgsql_2.3.19.1+dfsg1-2.1+deb12u6_ppc64el.deb 56260017d552285e23869dbd29269cf1 94164 debug optional dovecot-pop3d-dbgsym_2.3.19.1+dfsg1-2.1+deb12u6_ppc64el.deb cc914060a5eb059b9b177587ef6c81c9 1389332 mail optional dovecot-pop3d_2.3.19.1+dfsg1-2.1+deb12u6_ppc64el.deb 83f58b6e3182d114593a1d992ebe0f86 1555656 debug optional dovecot-sieve-dbgsym_2.3.19.1+dfsg1-2.1+deb12u6_ppc64el.deb 082395ab4225883557cf2ea4f946e327 1722276 mail optional dovecot-sieve_2.3.19.1+dfsg1-2.1+deb12u6_ppc64el.deb ba674b182be74598b5490341e8181e85 88756 debug optional dovecot-solr-dbgsym_2.3.19.1+dfsg1-2.1+deb12u6_ppc64el.deb 278365b962f0b0c597f2f6bfcd58f571 1378672 mail optional dovecot-solr_2.3.19.1+dfsg1-2.1+deb12u6_ppc64el.deb c935fa21b06f840ff7643a2d99d6064c 19152 debug optional dovecot-sqlite-dbgsym_2.3.19.1+dfsg1-2.1+deb12u6_ppc64el.deb b2f80bfa6f59cd4b907d6d776ec7eb8b 1364084 mail optional dovecot-sqlite_2.3.19.1+dfsg1-2.1+deb12u6_ppc64el.deb 5471392a42356a5505a12a001302b8f5 182136 debug optional dovecot-submissiond-dbgsym_2.3.19.1+dfsg1-2.1+deb12u6_ppc64el.deb c960089d0bbf8d305935436ddc716d1d 1405248 mail optional dovecot-submissiond_2.3.19.1+dfsg1-2.1+deb12u6_ppc64el.deb c95529acbe189d056caec7accf728f45 19031 mail optional dovecot_2.3.19.1+dfsg1-2.1+deb12u6_ppc64el-buildd.buildinfo -----BEGIN PGP SIGNATURE----- iQIyBAEBCgAdFiEETLpi2USYGUNSlYhoNINNphgym2QFAmoZ76QACgkQNINNphgy m2S98w/4ynRjllzihIQ2BbpP6qxJF+Zvo4l4j31jB5W1hKtowuIFw4A9Pvcv8QcO HOtWICOXejPdYw/bW2bhvc2PyqTCW26KiIIkw4o23Stbe6GpUZpLos9SGnsYZfIr WspDbPdDecox+4CbgFEieu2mRwVL4xSxvxTwa25MW3UP9Kg3RPnqnMELv3jCvo2X DM0XONkUU2wylsEaoaAI0F1SeUGm+OQXmsRLphNADk+V4x01UR+GPdyD6tg3iYxb 9VbxzAYXp+CbS5qd845fq+JhxTmqwCGBWLOt1y4ISA0YY3/h7TKA0W+aehUldF0A 1xI+J2mUoMetCxv1jWGnH63Hs4lvMiUwRCkzIaKe8fhX/77AxjS+K4R61XHD/uQa 5Jl3pFU3Xz0mhUMtHfjmm9wXNPCvvTyAE6FYnZJTplpz6wX2eQMfBHjFvBTcsE5G SveTcqyrkbKJN6teqWJLAQpltqzcjUrPsEcpmqCQPUntFhShMvmu85JPYYrJUUoz +Ja3ikQpVrY5dMwkXdUEKsRKZUmwYymSBt09wUr4+fTJCObN0ufebTNs9MhOBkN9 xS3UbDYc4FDcAOhVzAKg5yDLXuI1HsVf2uc1kMTUlyAyzV3wFLEX2+9KQnuBmdkD VMjXK+6KfwySm/PBvmQBbUETaaGRvz5J78CtM2LKSWwpFvl2Yw== =60fv -----END PGP SIGNATURE-----