-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Mon, 18 May 2026 16:03:51 -0400 Source: dovecot Binary: dovecot-auth-lua dovecot-auth-lua-dbgsym dovecot-core dovecot-core-dbgsym dovecot-dev dovecot-flatcurve dovecot-flatcurve-dbgsym dovecot-gssapi dovecot-gssapi-dbgsym dovecot-imapd dovecot-imapd-dbgsym dovecot-ldap dovecot-ldap-dbgsym dovecot-lmtpd dovecot-lmtpd-dbgsym dovecot-managesieved dovecot-managesieved-dbgsym dovecot-mysql dovecot-mysql-dbgsym dovecot-pgsql dovecot-pgsql-dbgsym dovecot-pop3d dovecot-pop3d-dbgsym dovecot-sieve dovecot-sieve-dbgsym dovecot-solr dovecot-solr-dbgsym dovecot-sqlite dovecot-sqlite-dbgsym dovecot-submissiond dovecot-submissiond-dbgsym Architecture: s390x Version: 1:2.4.1+dfsg1-6+deb13u6 Distribution: trixie-security Urgency: medium Maintainer: s390x Build Daemon (ziehrer) Changed-By: Noah Meyerhans Description: dovecot-auth-lua - secure POP3/IMAP server - Lua authentication plugin dovecot-core - secure POP3/IMAP server - core files dovecot-dev - secure POP3/IMAP server - header files dovecot-flatcurve - secure POP3/IMAP server - Flatcurve support dovecot-gssapi - secure POP3/IMAP server - GSSAPI support dovecot-imapd - secure POP3/IMAP server - IMAP daemon dovecot-ldap - secure POP3/IMAP server - LDAP support dovecot-lmtpd - secure POP3/IMAP server - LMTP server dovecot-managesieved - secure POP3/IMAP server - ManageSieve server dovecot-mysql - secure POP3/IMAP server - MySQL support dovecot-pgsql - secure POP3/IMAP server - PostgreSQL support dovecot-pop3d - secure POP3/IMAP server - POP3 daemon dovecot-sieve - secure POP3/IMAP server - Sieve filters support dovecot-solr - secure POP3/IMAP server - Solr support dovecot-sqlite - secure POP3/IMAP server - SQLite support dovecot-submissiond - secure POP3/IMAP server - mail submission agent Closes: 1136444 Changes: dovecot (1:2.4.1+dfsg1-6+deb13u6) trixie-security; urgency=medium . * Security update (Closes: #1136444) * [76ceed4] CVE-2026-27851: lib-var-expand: Reset safe state when transfer is unset * [4af6fb3] CVE-2026-40016: lib-sieve: Enforce CPU time limit within :contains and :matches matcher loops * [366ef61] CVE-2026-33603: login-common: Only accept base64 in sasl * [26bd41e] CVE-2026-40020: IMAP folders can be shared-spammed to everyone. * [b6f5bac] CVE-2026-42006: imap-login: Excessive memory usage DoS Checksums-Sha1: 7eb91db0f4e427bf7003fff9608e2750f9c2bd70 31900 dovecot-auth-lua-dbgsym_2.4.1+dfsg1-6+deb13u6_s390x.deb 05f0b1907a7285eda209464c7a544ddba07a99b3 21320 dovecot-auth-lua_2.4.1+dfsg1-6+deb13u6_s390x.deb 197b3778bdbf2acdcf4f87b5ce44ac58eb1269f9 10098704 dovecot-core-dbgsym_2.4.1+dfsg1-6+deb13u6_s390x.deb dec854340bc87af2afb772efcede27b17d64e906 2563216 dovecot-core_2.4.1+dfsg1-6+deb13u6_s390x.deb 5b0d5ed93858ef0020461588e992d4e4a311f9c3 429424 dovecot-dev_2.4.1+dfsg1-6+deb13u6_s390x.deb 1160c518ab3d36819acfce51b67553379c34857c 187804 dovecot-flatcurve-dbgsym_2.4.1+dfsg1-6+deb13u6_s390x.deb 1e35fcea2eb07a3341290e80947d9532f63431cc 41116 dovecot-flatcurve_2.4.1+dfsg1-6+deb13u6_s390x.deb 7f89fcd7c31d3404ce375e985512800308d53593 20824 dovecot-gssapi-dbgsym_2.4.1+dfsg1-6+deb13u6_s390x.deb ecf2126ed8e75e5dcca97f2918966ecaa4bf8fdd 18112 dovecot-gssapi_2.4.1+dfsg1-6+deb13u6_s390x.deb 7cc30756501470d3fecb339c7b30427c55481442 746636 dovecot-imapd-dbgsym_2.4.1+dfsg1-6+deb13u6_s390x.deb 26142305e5056789f589ab164711f7a529e701cc 183880 dovecot-imapd_2.4.1+dfsg1-6+deb13u6_s390x.deb 785c415c40e5a8e3d15836e8a599ca5253334d74 167332 dovecot-ldap-dbgsym_2.4.1+dfsg1-6+deb13u6_s390x.deb 1d5ec04bc9043dfd84564e83da5bff1faf462e24 51840 dovecot-ldap_2.4.1+dfsg1-6+deb13u6_s390x.deb e8d425be8f1dabb8f29b663e84b67cac69ac3752 100392 dovecot-lmtpd-dbgsym_2.4.1+dfsg1-6+deb13u6_s390x.deb c2c7e93aa1fecc7be579bb67509f4f87eb1779d7 35588 dovecot-lmtpd_2.4.1+dfsg1-6+deb13u6_s390x.deb 846e0b48478c52ad0e95824efe045d405cab7ce7 117120 dovecot-managesieved-dbgsym_2.4.1+dfsg1-6+deb13u6_s390x.deb e54f6f6d228decefca602511cbb6230e4f190478 45620 dovecot-managesieved_2.4.1+dfsg1-6+deb13u6_s390x.deb bfea50f92b79db53a9fd925895ac83eb3d303f46 35060 dovecot-mysql-dbgsym_2.4.1+dfsg1-6+deb13u6_s390x.deb 43d3111154e7e10e4082a93ca0f69e55cd11d50c 20548 dovecot-mysql_2.4.1+dfsg1-6+deb13u6_s390x.deb 8c4615b086808004a42fc559643439b2757c80ae 38532 dovecot-pgsql-dbgsym_2.4.1+dfsg1-6+deb13u6_s390x.deb f958b9f2bc15417e62f88e007ba3bbf032e4eada 24104 dovecot-pgsql_2.4.1+dfsg1-6+deb13u6_s390x.deb 2e32c61364c617c2371e9dcc9f2d30fded4bd684 103240 dovecot-pop3d-dbgsym_2.4.1+dfsg1-6+deb13u6_s390x.deb a7199b30aa9e314a07f5397db4fb074a0d195efd 43284 dovecot-pop3d_2.4.1+dfsg1-6+deb13u6_s390x.deb 8040837d234ab63c5107de244fa13438a99b50be 1701904 dovecot-sieve-dbgsym_2.4.1+dfsg1-6+deb13u6_s390x.deb 77a878c08a691dee6cdb1a668eecd093dc2e5ae4 360484 dovecot-sieve_2.4.1+dfsg1-6+deb13u6_s390x.deb 4dd3e43363847ea755b505bd19187dc279c36803 74560 dovecot-solr-dbgsym_2.4.1+dfsg1-6+deb13u6_s390x.deb a0dd1d6edcf92db9a1e27e13dc543b9ada10ee7e 37408 dovecot-solr_2.4.1+dfsg1-6+deb13u6_s390x.deb 4d66eae890fd5cb47d446e419c70b4d81fe6d4c4 24676 dovecot-sqlite-dbgsym_2.4.1+dfsg1-6+deb13u6_s390x.deb 42332bd7b6b0fe47ab911664b791b8491ff1b6ef 19560 dovecot-sqlite_2.4.1+dfsg1-6+deb13u6_s390x.deb 7513c4e7896407a9fb114b1bfa0b8f7b4f9d3125 206712 dovecot-submissiond-dbgsym_2.4.1+dfsg1-6+deb13u6_s390x.deb a0541bc5f36f0de8bec8475a1bc1293771a019e2 57460 dovecot-submissiond_2.4.1+dfsg1-6+deb13u6_s390x.deb 67552c04716ea9e101a245886b250a56ef75f9a1 17933 dovecot_2.4.1+dfsg1-6+deb13u6_s390x-buildd.buildinfo Checksums-Sha256: 94a22701fe16b07131c895e52b41a375a4dd3a795607deb2190af1303b30fac8 31900 dovecot-auth-lua-dbgsym_2.4.1+dfsg1-6+deb13u6_s390x.deb 9f7f1625ac2d91bf01832a2ed8969edfa35b3e2eadf1e06f14f40bf8d947fb26 21320 dovecot-auth-lua_2.4.1+dfsg1-6+deb13u6_s390x.deb b4788853bcc5296f2f78e8e380dc3ff86e936a122e7ddbbe3736aa0c395bac92 10098704 dovecot-core-dbgsym_2.4.1+dfsg1-6+deb13u6_s390x.deb 58a0149abf2de56eb9c17d9dba865c15dce385c3e8064e48d43979879b2cf215 2563216 dovecot-core_2.4.1+dfsg1-6+deb13u6_s390x.deb f3723c1d17af15f155a608bc41fff4ad0f5954b957589be7f2a7151fa176ba20 429424 dovecot-dev_2.4.1+dfsg1-6+deb13u6_s390x.deb 3f692d31a17e2df72f840ac383d22922af8df1c78ffead19ecd75ed34eadfe71 187804 dovecot-flatcurve-dbgsym_2.4.1+dfsg1-6+deb13u6_s390x.deb 1d48e6f53bd3351aa2df8edcb78a768d5c64dbebe3242b44b33b37b879cabbcb 41116 dovecot-flatcurve_2.4.1+dfsg1-6+deb13u6_s390x.deb 272e3abf41d7458d58fa6ef1ecc8ee17a4d263d29785b325f716a1e0835ae358 20824 dovecot-gssapi-dbgsym_2.4.1+dfsg1-6+deb13u6_s390x.deb c075b8b138fafb53c9f86e13e3b884707c3a773bdff92b264b501f844a4ce6ff 18112 dovecot-gssapi_2.4.1+dfsg1-6+deb13u6_s390x.deb 90e028aa18687d93883b39af0b46b367b4764c373c29f81841fa64adbf338244 746636 dovecot-imapd-dbgsym_2.4.1+dfsg1-6+deb13u6_s390x.deb 56a2759a68972d888eb8acdc79ae323df5bbb1bea4bfc4ea9e94e1cc2e250d25 183880 dovecot-imapd_2.4.1+dfsg1-6+deb13u6_s390x.deb 4c5c7ccb22b1da2c228d54c8c7b988e7f91c257536458ebfec79d72dbe9b71f8 167332 dovecot-ldap-dbgsym_2.4.1+dfsg1-6+deb13u6_s390x.deb 08bd237de05d0f1f50602966333781cdbb618eb57375b82b95fdb73ecb3ca28d 51840 dovecot-ldap_2.4.1+dfsg1-6+deb13u6_s390x.deb 5a36e5d874d21d6a0257e6c1cd5ed8d266eb5c326b506f5463c6d209a6758c3a 100392 dovecot-lmtpd-dbgsym_2.4.1+dfsg1-6+deb13u6_s390x.deb 32f0fa93d77cab1a2bc18f9cfdaeb8d799c210258d7cf21c57fbbb9efff3b792 35588 dovecot-lmtpd_2.4.1+dfsg1-6+deb13u6_s390x.deb ebf9ad258a8652a215095e33faf8f1210c168b80216bd632e577791d44a80b42 117120 dovecot-managesieved-dbgsym_2.4.1+dfsg1-6+deb13u6_s390x.deb 6ee6f769549fc4924c2233544f20b98e80bc96e98e528b3b86fe74006485bde5 45620 dovecot-managesieved_2.4.1+dfsg1-6+deb13u6_s390x.deb 284e538ed2e4dfcd12d4f08c10a4f7de291debc2d92e55a1d60831758bb2e651 35060 dovecot-mysql-dbgsym_2.4.1+dfsg1-6+deb13u6_s390x.deb 32b87fc98e830e423d7219993c58a1da3e2d3a11af8fc18d0d1066b7035c9177 20548 dovecot-mysql_2.4.1+dfsg1-6+deb13u6_s390x.deb e8b74d768eff13a14b1ad4e63c0c34ec510ec9dd587ad9bfb2cfc4c371cc4146 38532 dovecot-pgsql-dbgsym_2.4.1+dfsg1-6+deb13u6_s390x.deb f4386b016e96e6eaa1416909f1567803b6cac8ac86d2afacf6fe58c6bc003ee6 24104 dovecot-pgsql_2.4.1+dfsg1-6+deb13u6_s390x.deb 43ed86489e7688fc76918c909c9ff65b916a47b3a224d5ecd452c5f51542da78 103240 dovecot-pop3d-dbgsym_2.4.1+dfsg1-6+deb13u6_s390x.deb 566c3665db28986deeef4fb4dd6ca99b97509c5db6f1df8241c87bd000197a93 43284 dovecot-pop3d_2.4.1+dfsg1-6+deb13u6_s390x.deb aa013008e71c9e886970e7b1c0e5a56f2201b0674522cfea11214e93809ab861 1701904 dovecot-sieve-dbgsym_2.4.1+dfsg1-6+deb13u6_s390x.deb b34f4c51ba560551dc31060d57fafcf8092fd3d9d6762c10b00fa9269fc0d36d 360484 dovecot-sieve_2.4.1+dfsg1-6+deb13u6_s390x.deb 7235846c27077e9452b27b350aff1b00456aa01ba26bc2c3d3783e1fb41e4f88 74560 dovecot-solr-dbgsym_2.4.1+dfsg1-6+deb13u6_s390x.deb 17d8d348624361fbc31e31f16907e732ed7f790121b845dc1da3a21c63191d43 37408 dovecot-solr_2.4.1+dfsg1-6+deb13u6_s390x.deb 37ecde06b496dc6c67e5319a3658563849c6a24ec9ff7c219c64ac5cc34607aa 24676 dovecot-sqlite-dbgsym_2.4.1+dfsg1-6+deb13u6_s390x.deb 4d95faf8ffc435a69b706af09f6508abb8d986609d739575b5c758ca1e51a36b 19560 dovecot-sqlite_2.4.1+dfsg1-6+deb13u6_s390x.deb fc5828f6a000031a1ed29cbbf1a8b7a4dc29a35e0ed7995083dce25134e2eee9 206712 dovecot-submissiond-dbgsym_2.4.1+dfsg1-6+deb13u6_s390x.deb 46513804fb35567e2a997ce5f2336729e6964f23dfb2d09c029c30e9783942e3 57460 dovecot-submissiond_2.4.1+dfsg1-6+deb13u6_s390x.deb e68610a0d70db44c4b14d2a65812f2add1d49c9bb6713a0214602c41c661f0f9 17933 dovecot_2.4.1+dfsg1-6+deb13u6_s390x-buildd.buildinfo Files: bf671faeb370d70da503481177dbb5df 31900 debug optional dovecot-auth-lua-dbgsym_2.4.1+dfsg1-6+deb13u6_s390x.deb c2ed250da863fb1a9dbc82b0486077e8 21320 mail optional dovecot-auth-lua_2.4.1+dfsg1-6+deb13u6_s390x.deb 64a3a80be8b2d6e55f45e91d0eb48d08 10098704 debug optional dovecot-core-dbgsym_2.4.1+dfsg1-6+deb13u6_s390x.deb 298cd5d0a8b34f4d8f339cb0c563060f 2563216 mail optional dovecot-core_2.4.1+dfsg1-6+deb13u6_s390x.deb 7d1a47b67fc1b336a6f991be04e93558 429424 mail optional dovecot-dev_2.4.1+dfsg1-6+deb13u6_s390x.deb 460d325b36d8b9571265e358bf71085d 187804 debug optional dovecot-flatcurve-dbgsym_2.4.1+dfsg1-6+deb13u6_s390x.deb 218ac55287bf2ccce37c04dfc19e279e 41116 mail optional dovecot-flatcurve_2.4.1+dfsg1-6+deb13u6_s390x.deb bfad0eb35d881903d5bcb0ae1346898e 20824 debug optional dovecot-gssapi-dbgsym_2.4.1+dfsg1-6+deb13u6_s390x.deb 0addf5851a4171f520448c2a7a5e0282 18112 mail optional dovecot-gssapi_2.4.1+dfsg1-6+deb13u6_s390x.deb c28735cb56d4a28f061362dd27b7e6d9 746636 debug optional dovecot-imapd-dbgsym_2.4.1+dfsg1-6+deb13u6_s390x.deb a926a2fe6c1017d76e8549f135042ddf 183880 mail optional dovecot-imapd_2.4.1+dfsg1-6+deb13u6_s390x.deb 11f250354f69103aac21f97f90fd617e 167332 debug optional dovecot-ldap-dbgsym_2.4.1+dfsg1-6+deb13u6_s390x.deb cbbc0dbaf6e8cab59f4c73295fe47720 51840 mail optional dovecot-ldap_2.4.1+dfsg1-6+deb13u6_s390x.deb 2589ed3da8077b05cbc4e84fa98905ec 100392 debug optional dovecot-lmtpd-dbgsym_2.4.1+dfsg1-6+deb13u6_s390x.deb 940aabb9f2f7c2b991e3d738328e6a1a 35588 mail optional dovecot-lmtpd_2.4.1+dfsg1-6+deb13u6_s390x.deb 871e5d24b4fc3f102f2cf2dc851e946c 117120 debug optional dovecot-managesieved-dbgsym_2.4.1+dfsg1-6+deb13u6_s390x.deb 2ba6a4a7e108d0fc99a8a89cac828be2 45620 mail optional dovecot-managesieved_2.4.1+dfsg1-6+deb13u6_s390x.deb 4419185c6a53fd578b2a4f2b88ad3a9f 35060 debug optional dovecot-mysql-dbgsym_2.4.1+dfsg1-6+deb13u6_s390x.deb c6ad1a5054d25f90146e83ee9dc23f1c 20548 mail optional dovecot-mysql_2.4.1+dfsg1-6+deb13u6_s390x.deb 50168417a1e9c52da73473a54e83a4d3 38532 debug optional dovecot-pgsql-dbgsym_2.4.1+dfsg1-6+deb13u6_s390x.deb b8b1e2ab9bbcab890bf345de4d2269da 24104 mail optional dovecot-pgsql_2.4.1+dfsg1-6+deb13u6_s390x.deb fc1931ce4d0e306041232ee8e9cbdad3 103240 debug optional dovecot-pop3d-dbgsym_2.4.1+dfsg1-6+deb13u6_s390x.deb 7c258df763e6435155bb56204d3dfba1 43284 mail optional dovecot-pop3d_2.4.1+dfsg1-6+deb13u6_s390x.deb 292a719e1c032895fc4422448b6047ae 1701904 debug optional dovecot-sieve-dbgsym_2.4.1+dfsg1-6+deb13u6_s390x.deb 6ed5c4351a20d547380ddd3bb6e20617 360484 mail optional dovecot-sieve_2.4.1+dfsg1-6+deb13u6_s390x.deb b5f68e8b2905d5fded93a35d0a4e06c8 74560 debug optional dovecot-solr-dbgsym_2.4.1+dfsg1-6+deb13u6_s390x.deb dc7fd6811d0cf3fd77a89e7622f30e13 37408 mail optional dovecot-solr_2.4.1+dfsg1-6+deb13u6_s390x.deb 76aeefbf84b0ba537ebb6ecd0861978b 24676 debug optional dovecot-sqlite-dbgsym_2.4.1+dfsg1-6+deb13u6_s390x.deb 0528daf85057adf43260cdb13f16734d 19560 mail optional dovecot-sqlite_2.4.1+dfsg1-6+deb13u6_s390x.deb 28303ecc6fb1068621e19e1f025cb0f3 206712 debug optional dovecot-submissiond-dbgsym_2.4.1+dfsg1-6+deb13u6_s390x.deb 360cfbca96c576836894f244c8e9b505 57460 mail optional dovecot-submissiond_2.4.1+dfsg1-6+deb13u6_s390x.deb d22f682c8578cd85bb553a60c8e81f60 17933 mail optional dovecot_2.4.1+dfsg1-6+deb13u6_s390x-buildd.buildinfo -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEl0BM/nR+Oj597wRWMWUFebkHnoQFAmoZ88QACgkQMWUFebkH noS1vA/+LyMlAXH7Ad0kDqUilThL+vQbAGXkeCsbTvFRVikzpxIjARBy8CESjlFg 3ArteitQS40S561sfpPGZBtRMn0D5+8iJ6ee0Pnw37Fb+scFbwNTxVqeY0lGlYQ3 +9gkz6/zb86jjFNSCESVwkSxgLEGusb0SJzmwsRT/FlrSilG8E8GHz0FiICWa3XY UgK+nduBVW10M/VPkgRn2wsRAWSPwqC9RMe1zH9HJJZUs75e6peEbl8USnQthNl2 yDHJIjaO6hXzeAp2X8VE66dAnhSJ6NipL/mdoaF/eJwBWNVzgJqX+O0wFv2zmpmA dlDSmoj4rgSmlIUvP6qdRVPWL2/oYxOFVrmtpk6uqmSQt+EQ5LTxxKru1RQ7j1Ay nR/81A3kVvj+jeTnn00tJMd72++RIzR7NiOwz5QNozciXudkfVjGNbPeh2YXT/y3 nGaJUOqSClzChKN2TZTlZrNlrR1DiwsHJfiCmGHOAupDh+5aOT1rSAdCweA8ifgy 5w1c6zKkVp5XUD6HOTekBj0WxMi9jJrPq/nPyy6NN8yBKGD6HpfLAbxm578Srdym AnirIRZOwsQi79X0AWek0ggM6fPRCFIBrxc4T/bHLpYHwiq8usMO9tudOkWDS01s VO9kEtodsWBNVprVcIfJhzUKPnUPyAcInWeUGQNa7i0SPf5OVu0= =vWwx -----END PGP SIGNATURE-----