-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Mon, 18 May 2026 16:03:51 -0400 Source: dovecot Binary: dovecot-auth-lua dovecot-auth-lua-dbgsym dovecot-core dovecot-core-dbgsym dovecot-dev dovecot-flatcurve dovecot-flatcurve-dbgsym dovecot-gssapi dovecot-gssapi-dbgsym dovecot-imapd dovecot-imapd-dbgsym dovecot-ldap dovecot-ldap-dbgsym dovecot-lmtpd dovecot-lmtpd-dbgsym dovecot-managesieved dovecot-managesieved-dbgsym dovecot-mysql dovecot-mysql-dbgsym dovecot-pgsql dovecot-pgsql-dbgsym dovecot-pop3d dovecot-pop3d-dbgsym dovecot-sieve dovecot-sieve-dbgsym dovecot-solr dovecot-solr-dbgsym dovecot-sqlite dovecot-sqlite-dbgsym dovecot-submissiond dovecot-submissiond-dbgsym Architecture: i386 Version: 1:2.4.1+dfsg1-6+deb13u6 Distribution: trixie-security Urgency: medium Maintainer: i386 Build Daemon (x86-grnet-01) Changed-By: Noah Meyerhans Description: dovecot-auth-lua - secure POP3/IMAP server - Lua authentication plugin dovecot-core - secure POP3/IMAP server - core files dovecot-dev - secure POP3/IMAP server - header files dovecot-flatcurve - secure POP3/IMAP server - Flatcurve support dovecot-gssapi - secure POP3/IMAP server - GSSAPI support dovecot-imapd - secure POP3/IMAP server - IMAP daemon dovecot-ldap - secure POP3/IMAP server - LDAP support dovecot-lmtpd - secure POP3/IMAP server - LMTP server dovecot-managesieved - secure POP3/IMAP server - ManageSieve server dovecot-mysql - secure POP3/IMAP server - MySQL support dovecot-pgsql - secure POP3/IMAP server - PostgreSQL support dovecot-pop3d - secure POP3/IMAP server - POP3 daemon dovecot-sieve - secure POP3/IMAP server - Sieve filters support dovecot-solr - secure POP3/IMAP server - Solr support dovecot-sqlite - secure POP3/IMAP server - SQLite support dovecot-submissiond - secure POP3/IMAP server - mail submission agent Closes: 1136444 Changes: dovecot (1:2.4.1+dfsg1-6+deb13u6) trixie-security; urgency=medium . * Security update (Closes: #1136444) * [76ceed4] CVE-2026-27851: lib-var-expand: Reset safe state when transfer is unset * [4af6fb3] CVE-2026-40016: lib-sieve: Enforce CPU time limit within :contains and :matches matcher loops * [366ef61] CVE-2026-33603: login-common: Only accept base64 in sasl * [26bd41e] CVE-2026-40020: IMAP folders can be shared-spammed to everyone. * [b6f5bac] CVE-2026-42006: imap-login: Excessive memory usage DoS Checksums-Sha1: 182e905e918486a2ca5e497ec5023c8e2927f6f5 28996 dovecot-auth-lua-dbgsym_2.4.1+dfsg1-6+deb13u6_i386.deb d7866f8dc7fa13b908a1317a5b9854f045d34f4e 22984 dovecot-auth-lua_2.4.1+dfsg1-6+deb13u6_i386.deb 4fcda9097d84ee0b2b9568dc3f53bf7af70075d0 9841188 dovecot-core-dbgsym_2.4.1+dfsg1-6+deb13u6_i386.deb c80af56f2e1f022a53aa584b924626a1abdd0a73 2942264 dovecot-core_2.4.1+dfsg1-6+deb13u6_i386.deb 3fdca274aa4214afa54433ee1a7a7b3938ec6675 429580 dovecot-dev_2.4.1+dfsg1-6+deb13u6_i386.deb 48dd08abe58c658e88fb0e430bab5689c7f7adee 183252 dovecot-flatcurve-dbgsym_2.4.1+dfsg1-6+deb13u6_i386.deb cbad74daa0dcead0700827c8c163e3234a772d25 46308 dovecot-flatcurve_2.4.1+dfsg1-6+deb13u6_i386.deb 494f425a5b54f47deb8edc289a357dcb6c58e06e 19632 dovecot-gssapi-dbgsym_2.4.1+dfsg1-6+deb13u6_i386.deb f11d1fc5c95f399fc561eb9626a9b156b7e42a4b 18772 dovecot-gssapi_2.4.1+dfsg1-6+deb13u6_i386.deb a0262ca428b1201c85d6976a54e06612989ac953 747240 dovecot-imapd-dbgsym_2.4.1+dfsg1-6+deb13u6_i386.deb 3beaced044d03d45cca254e6accff5ba06b980c0 216100 dovecot-imapd_2.4.1+dfsg1-6+deb13u6_i386.deb ba1b2c75d3b1fe025d304f4206da00f122b4ee44 175652 dovecot-ldap-dbgsym_2.4.1+dfsg1-6+deb13u6_i386.deb af0bf852e9419307f92a93158785e7ca1e089055 57768 dovecot-ldap_2.4.1+dfsg1-6+deb13u6_i386.deb 76a47161922878dc910f288abdb607fbd89e5e8c 93992 dovecot-lmtpd-dbgsym_2.4.1+dfsg1-6+deb13u6_i386.deb e2377408a6f9bc46339d020558fc05421e8908ff 39144 dovecot-lmtpd_2.4.1+dfsg1-6+deb13u6_i386.deb c426a979c4a1e4865a3d7dda18bc61b3c0b770af 113068 dovecot-managesieved-dbgsym_2.4.1+dfsg1-6+deb13u6_i386.deb 348489863834e7846fd2f9dc1f620672701de11b 51228 dovecot-managesieved_2.4.1+dfsg1-6+deb13u6_i386.deb 01baf8518fb92940a361d861b4d69d22ee76f5e9 33124 dovecot-mysql-dbgsym_2.4.1+dfsg1-6+deb13u6_i386.deb 0edc2f86f6330bf6d4a8c428a0b2088d9e727be3 21488 dovecot-mysql_2.4.1+dfsg1-6+deb13u6_i386.deb 7c4da0e5723de3e03b50704a100c4cf9f066527d 35012 dovecot-pgsql-dbgsym_2.4.1+dfsg1-6+deb13u6_i386.deb aaf1cad961c88af5a983e90e5d3ed0cb38517911 26824 dovecot-pgsql_2.4.1+dfsg1-6+deb13u6_i386.deb 7ebea1a005c663456154def2c64d9bce4392a1f5 97972 dovecot-pop3d-dbgsym_2.4.1+dfsg1-6+deb13u6_i386.deb 7f441ef2aa0ecf81717447db6f192f4eea1fd98d 48084 dovecot-pop3d_2.4.1+dfsg1-6+deb13u6_i386.deb 70751ff5a5c47b55860dd8c9b7b41aa672226ea2 1574316 dovecot-sieve-dbgsym_2.4.1+dfsg1-6+deb13u6_i386.deb 2c1c1e276570677c9b16dedfcb2f896f5df66168 412968 dovecot-sieve_2.4.1+dfsg1-6+deb13u6_i386.deb 8ccb8409a9ee582f4a4c3b74c00ebbfb13f072b4 69228 dovecot-solr-dbgsym_2.4.1+dfsg1-6+deb13u6_i386.deb e938630b50a4cfe4cd52d779f2e9212f80b4447f 39348 dovecot-solr_2.4.1+dfsg1-6+deb13u6_i386.deb cd2b77410401feefd28378584a86a47ebeba92a7 22396 dovecot-sqlite-dbgsym_2.4.1+dfsg1-6+deb13u6_i386.deb b6c773e52e6d518aae33d3306bf02063c6a2c65d 20640 dovecot-sqlite_2.4.1+dfsg1-6+deb13u6_i386.deb 7170cc97b9500461d6825e59717a8bc3a60d403d 193128 dovecot-submissiond-dbgsym_2.4.1+dfsg1-6+deb13u6_i386.deb 58f7c1b9a7c0e70459c48295cbe284585c6ebaae 65944 dovecot-submissiond_2.4.1+dfsg1-6+deb13u6_i386.deb 609358205d62efea8104fc31706186e6e58a09d0 17876 dovecot_2.4.1+dfsg1-6+deb13u6_i386-buildd.buildinfo Checksums-Sha256: 760e2c0d5381163727070d6b2b23c52cbeceb3abb3e02ed643d506a846f9bcf5 28996 dovecot-auth-lua-dbgsym_2.4.1+dfsg1-6+deb13u6_i386.deb 04bb8b6a28c4564689e56addaf012ad270ace8c065003fd0666101cb35d8ff74 22984 dovecot-auth-lua_2.4.1+dfsg1-6+deb13u6_i386.deb c4790ccffdad9b170afd8f5c5a3e115fecf953419f187c8dee42c88283bc9804 9841188 dovecot-core-dbgsym_2.4.1+dfsg1-6+deb13u6_i386.deb 0ff20610c625fa9ae0b2fb7fa8b3fe3f75b3dd0c1017abffa8f4c419bacabcf7 2942264 dovecot-core_2.4.1+dfsg1-6+deb13u6_i386.deb 51ab9c03f564e54a25a4f02bb82e86e4960270ddb5e9542a7acc6607ab6eff4a 429580 dovecot-dev_2.4.1+dfsg1-6+deb13u6_i386.deb cd934954a61e53dc5d13e6f1961ed46bf7687dfb80bd6effcaebe458059f7371 183252 dovecot-flatcurve-dbgsym_2.4.1+dfsg1-6+deb13u6_i386.deb 5900b36528e4f043e333535d5deb875de9d60ede5227a183bd817db1dc756920 46308 dovecot-flatcurve_2.4.1+dfsg1-6+deb13u6_i386.deb dc27544626494401e243c733e5121faa7d07fbcd6405b8ae7330c0799a986df5 19632 dovecot-gssapi-dbgsym_2.4.1+dfsg1-6+deb13u6_i386.deb e7ea019be19b2196cf3680a88fc3cf1cdb04ee79b7542d1a37c984550d617462 18772 dovecot-gssapi_2.4.1+dfsg1-6+deb13u6_i386.deb efcfbdda2d4768ce0cbfbf6e24a4967ad2ef22d164ea07d726278c23c67fa1b4 747240 dovecot-imapd-dbgsym_2.4.1+dfsg1-6+deb13u6_i386.deb ce30ffc07328fad95751a801f0f0b5b7a62ea452b0311c3e700bda47241bc292 216100 dovecot-imapd_2.4.1+dfsg1-6+deb13u6_i386.deb 722797238cc27a71ea7d2ff7f5d9505407a81aa5d40490f0c0c3ea2c13aeb831 175652 dovecot-ldap-dbgsym_2.4.1+dfsg1-6+deb13u6_i386.deb 0342837fb92192f65a76215bd46350490c1bed3002ee1f2edff5daf705271c72 57768 dovecot-ldap_2.4.1+dfsg1-6+deb13u6_i386.deb 27d1efaca90c7f71ccb59735fcc0061f884290b545000e51f69f63f3f3f2be66 93992 dovecot-lmtpd-dbgsym_2.4.1+dfsg1-6+deb13u6_i386.deb 0e77e45d38e9dd4ea6e0dd288480cbea5ebd07e4f952856b01eabd2d542b0bdc 39144 dovecot-lmtpd_2.4.1+dfsg1-6+deb13u6_i386.deb 0d5b0c5ee3c8b39289f02d4f9bb81f76c9ca1eab48295554434174ce7b32f619 113068 dovecot-managesieved-dbgsym_2.4.1+dfsg1-6+deb13u6_i386.deb b3a463025a4bf293672454ea08f725a9edab61cdc2f48073bd564e165742f052 51228 dovecot-managesieved_2.4.1+dfsg1-6+deb13u6_i386.deb 7fec770ef3730ac0627c8367a34d67f4381d90dd323b9d387076dd18fad86964 33124 dovecot-mysql-dbgsym_2.4.1+dfsg1-6+deb13u6_i386.deb be477dc88c1784279e433f963c2a9b34a7e6da992cd77cc8e42792edfc817110 21488 dovecot-mysql_2.4.1+dfsg1-6+deb13u6_i386.deb 3ab89b95003c4c13a39e6d0d11ab359fb0058403a989001b9738d56d82efbd05 35012 dovecot-pgsql-dbgsym_2.4.1+dfsg1-6+deb13u6_i386.deb 70be36667764110ce0374e948024d6b24e0f02b5078e2864b0cded906ca0bad5 26824 dovecot-pgsql_2.4.1+dfsg1-6+deb13u6_i386.deb 62f4b4776c2385db39f58b4101626b9f12f3388b50627ceebc8594157cfb5278 97972 dovecot-pop3d-dbgsym_2.4.1+dfsg1-6+deb13u6_i386.deb fb2b9391305b263694e2c718d507851ae5cc4b4624042aba0c0e42ff402969d2 48084 dovecot-pop3d_2.4.1+dfsg1-6+deb13u6_i386.deb e12036cba9ee98f4c06e09077b01f05891da587814d856fac288a0033844d1c0 1574316 dovecot-sieve-dbgsym_2.4.1+dfsg1-6+deb13u6_i386.deb 3479a36ada3d5b622258da70072e4079aad8369dbea1bdf873c815a6b1e11bb4 412968 dovecot-sieve_2.4.1+dfsg1-6+deb13u6_i386.deb 71c5f5e8c24d08b24c2005a4aa5a3711ce793afc26f921a1237f07b3e60cf27a 69228 dovecot-solr-dbgsym_2.4.1+dfsg1-6+deb13u6_i386.deb e7242742cf88b09c72eb4e70b34b8d675f05c6d9dceff501181606933b4bd888 39348 dovecot-solr_2.4.1+dfsg1-6+deb13u6_i386.deb 5c284b592240afa9a2a8d360127a66ad928deb769495e55aae197ef112ad67a9 22396 dovecot-sqlite-dbgsym_2.4.1+dfsg1-6+deb13u6_i386.deb f9154a5e6a3e32dd602bd1b5fc1611631b80539fc551c3bd771d4615b4f55f7a 20640 dovecot-sqlite_2.4.1+dfsg1-6+deb13u6_i386.deb 184543579df7f3806185c1271bc72b7da90cd6c071dd5b6494c5a5e3d49daa0f 193128 dovecot-submissiond-dbgsym_2.4.1+dfsg1-6+deb13u6_i386.deb d5a012de3367366f60ac80089cf8f64874ca4a67d505f3ea59e020abfeb5d47f 65944 dovecot-submissiond_2.4.1+dfsg1-6+deb13u6_i386.deb fe0fdca72d92fd1cae17af43c2e732d4b43db9260fdeb07b35e57444e62b3d24 17876 dovecot_2.4.1+dfsg1-6+deb13u6_i386-buildd.buildinfo Files: 6140f9ed996de0a156d7ea8ffa517564 28996 debug optional dovecot-auth-lua-dbgsym_2.4.1+dfsg1-6+deb13u6_i386.deb e015b6a8e6238c0b6f2a4e5a911efca6 22984 mail optional dovecot-auth-lua_2.4.1+dfsg1-6+deb13u6_i386.deb 9c36e683d82136176eeac5ec34a87fdc 9841188 debug optional dovecot-core-dbgsym_2.4.1+dfsg1-6+deb13u6_i386.deb 41235cda98dfaf00de5b54cee6a0656b 2942264 mail optional dovecot-core_2.4.1+dfsg1-6+deb13u6_i386.deb 4f01d1d50a163e29689b982bd69c7f3c 429580 mail optional dovecot-dev_2.4.1+dfsg1-6+deb13u6_i386.deb cdde742adf6a633439a7bec2c5579332 183252 debug optional dovecot-flatcurve-dbgsym_2.4.1+dfsg1-6+deb13u6_i386.deb 4d8ae908d8d1fd9b7462fe7fa586713d 46308 mail optional dovecot-flatcurve_2.4.1+dfsg1-6+deb13u6_i386.deb 4bc918c583affecde8f6db3981c63b69 19632 debug optional dovecot-gssapi-dbgsym_2.4.1+dfsg1-6+deb13u6_i386.deb 95a24fb8f61519139f488534430d77d3 18772 mail optional dovecot-gssapi_2.4.1+dfsg1-6+deb13u6_i386.deb 39994f89aec3f8dfdec50d53082666ad 747240 debug optional dovecot-imapd-dbgsym_2.4.1+dfsg1-6+deb13u6_i386.deb 2224c356157bc831bfddaa1b1f27287f 216100 mail optional dovecot-imapd_2.4.1+dfsg1-6+deb13u6_i386.deb 2b729c9d64f9b860e9484b8f7cad8e8f 175652 debug optional dovecot-ldap-dbgsym_2.4.1+dfsg1-6+deb13u6_i386.deb 6a8d96c695ded6f70fd49bafb3f60c23 57768 mail optional dovecot-ldap_2.4.1+dfsg1-6+deb13u6_i386.deb c5da3cf8732e8255c3b49a9c149b8cac 93992 debug optional dovecot-lmtpd-dbgsym_2.4.1+dfsg1-6+deb13u6_i386.deb cab4a98e96eb91fa07ecf79265940b81 39144 mail optional dovecot-lmtpd_2.4.1+dfsg1-6+deb13u6_i386.deb 9b54a73c92112af6070bfe2276615d5a 113068 debug optional dovecot-managesieved-dbgsym_2.4.1+dfsg1-6+deb13u6_i386.deb cb9ffbcaab133bd2bd5032a63097ef91 51228 mail optional dovecot-managesieved_2.4.1+dfsg1-6+deb13u6_i386.deb d26a7df050a5407c8e51a1f0577eb0b0 33124 debug optional dovecot-mysql-dbgsym_2.4.1+dfsg1-6+deb13u6_i386.deb c8e2127abf44404712d4961bf5e7f1ea 21488 mail optional dovecot-mysql_2.4.1+dfsg1-6+deb13u6_i386.deb 5106c935435d09a3703f9ad280387d37 35012 debug optional dovecot-pgsql-dbgsym_2.4.1+dfsg1-6+deb13u6_i386.deb c6ed44be712065847c79a3636a5ce865 26824 mail optional dovecot-pgsql_2.4.1+dfsg1-6+deb13u6_i386.deb c8ea88e8448ecf5b35e1a2bedb13323b 97972 debug optional dovecot-pop3d-dbgsym_2.4.1+dfsg1-6+deb13u6_i386.deb b247ee7f885ec4d03bd6579a17287c7f 48084 mail optional dovecot-pop3d_2.4.1+dfsg1-6+deb13u6_i386.deb 9d839f69c38e4a9d94322dbcf4f5e102 1574316 debug optional dovecot-sieve-dbgsym_2.4.1+dfsg1-6+deb13u6_i386.deb 1f5970a9465b2a7af4a53e75f8752c1f 412968 mail optional dovecot-sieve_2.4.1+dfsg1-6+deb13u6_i386.deb fcb7abece29f0e82318ac27dba3a7e7d 69228 debug optional dovecot-solr-dbgsym_2.4.1+dfsg1-6+deb13u6_i386.deb a36a78c8e8fb6de23a5f801d2e5f06fd 39348 mail optional dovecot-solr_2.4.1+dfsg1-6+deb13u6_i386.deb 0d68773d808e33cc20c64122442594f6 22396 debug optional dovecot-sqlite-dbgsym_2.4.1+dfsg1-6+deb13u6_i386.deb a111249ff6d466aac4c0d7cb3e4e6a37 20640 mail optional dovecot-sqlite_2.4.1+dfsg1-6+deb13u6_i386.deb 3ccbcfab9622898edace16236369b7bd 193128 debug optional dovecot-submissiond-dbgsym_2.4.1+dfsg1-6+deb13u6_i386.deb f318452a4593cd58e14407117a726156 65944 mail optional dovecot-submissiond_2.4.1+dfsg1-6+deb13u6_i386.deb 8863bb0e9066db32beb207c161ce5237 17876 mail optional dovecot_2.4.1+dfsg1-6+deb13u6_i386-buildd.buildinfo -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEPAUaMA0H0rOy6qBWf2INRiCdaWIFAmoZ9NoACgkQf2INRiCd aWLCwg/+Jc3zqIkDQDZCk4NBwXtjwxtmYRJwWs4GXET/Hh4HWdtzN5y8/+3lUzvV pUZcVysneqIoiMu+Vnm5Tx3eHSuwfoJmIi/1Joq0PJrDpvHrKCWZHsCqTAnuz7/M WTmK9u0h7TAikHEMWB8VYel6lDTU/xnHqUTc2GGwCpJzPLUetOacpbGwofxHFTbv EOxVIDTo33nVeJulJsrlfdXJKZImGdlR8bEqzJJmsg8VMss22VKQ7OAauPnO7ILv KCMSNLGL1t4ww1rifQKbZrGIRYMretSBIaEqa6oovAxJQZHkDGoB0y2qaAtzk9OM yvtKIi+VN6kmARpoHiZoiwBBvh6W3jJ35+uCJdl2CDzvBqdRHFVWGrLOXWrVuvI/ zMLlkUg1NtezhppWByCNP2jFY2As+YFaZVWEgFVK/mQQ0O0fBXlLKShSrbOAVVaF ZLmXP1IP9WDASx6fJ+qgW7sgUM9cVE1kz8FieT4FY/TbkCzqxL9z1fS3M9QZgjWo 5lypTnp5mPPIB4cP//rN4oNQPJoXN3rhwO12qGZpHNY1jXYPWU16NdS2oKS16X9m XRgu1PEg92sV+d4dps/cOq0wHBhb86js5KIznjZ5i9S7+GOp3+IwxtCDCspXvLbK BctlftxzHTgWfq32v0ZaRlHV0DRCA4NncAmse950NUsQyxdIpKk= =FgNJ -----END PGP SIGNATURE-----