-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Mon, 18 May 2026 16:03:51 -0400 Source: dovecot Binary: dovecot-auth-lua dovecot-auth-lua-dbgsym dovecot-core dovecot-core-dbgsym dovecot-dev dovecot-flatcurve dovecot-flatcurve-dbgsym dovecot-gssapi dovecot-gssapi-dbgsym dovecot-imapd dovecot-imapd-dbgsym dovecot-ldap dovecot-ldap-dbgsym dovecot-lmtpd dovecot-lmtpd-dbgsym dovecot-managesieved dovecot-managesieved-dbgsym dovecot-mysql dovecot-mysql-dbgsym dovecot-pgsql dovecot-pgsql-dbgsym dovecot-pop3d dovecot-pop3d-dbgsym dovecot-sieve dovecot-sieve-dbgsym dovecot-solr dovecot-solr-dbgsym dovecot-sqlite dovecot-sqlite-dbgsym dovecot-submissiond dovecot-submissiond-dbgsym Architecture: riscv64 Version: 1:2.4.1+dfsg1-6+deb13u6 Distribution: trixie-security Urgency: medium Maintainer: riscv64 Build Daemon (rv-osuosl-04) Changed-By: Noah Meyerhans Description: dovecot-auth-lua - secure POP3/IMAP server - Lua authentication plugin dovecot-core - secure POP3/IMAP server - core files dovecot-dev - secure POP3/IMAP server - header files dovecot-flatcurve - secure POP3/IMAP server - Flatcurve support dovecot-gssapi - secure POP3/IMAP server - GSSAPI support dovecot-imapd - secure POP3/IMAP server - IMAP daemon dovecot-ldap - secure POP3/IMAP server - LDAP support dovecot-lmtpd - secure POP3/IMAP server - LMTP server dovecot-managesieved - secure POP3/IMAP server - ManageSieve server dovecot-mysql - secure POP3/IMAP server - MySQL support dovecot-pgsql - secure POP3/IMAP server - PostgreSQL support dovecot-pop3d - secure POP3/IMAP server - POP3 daemon dovecot-sieve - secure POP3/IMAP server - Sieve filters support dovecot-solr - secure POP3/IMAP server - Solr support dovecot-sqlite - secure POP3/IMAP server - SQLite support dovecot-submissiond - secure POP3/IMAP server - mail submission agent Closes: 1136444 Changes: dovecot (1:2.4.1+dfsg1-6+deb13u6) trixie-security; urgency=medium . * Security update (Closes: #1136444) * [76ceed4] CVE-2026-27851: lib-var-expand: Reset safe state when transfer is unset * [4af6fb3] CVE-2026-40016: lib-sieve: Enforce CPU time limit within :contains and :matches matcher loops * [366ef61] CVE-2026-33603: login-common: Only accept base64 in sasl * [26bd41e] CVE-2026-40020: IMAP folders can be shared-spammed to everyone. * [b6f5bac] CVE-2026-42006: imap-login: Excessive memory usage DoS Checksums-Sha1: 70000c14267efe48f7a8ec97f55c162b284182e7 31280 dovecot-auth-lua-dbgsym_2.4.1+dfsg1-6+deb13u6_riscv64.deb 9d96cca0a3b265f558a4be3956609e58d604f9dd 21444 dovecot-auth-lua_2.4.1+dfsg1-6+deb13u6_riscv64.deb 70b168fbdf76cad4c374d2d5e07df18e0ab542d4 10504304 dovecot-core-dbgsym_2.4.1+dfsg1-6+deb13u6_riscv64.deb 9d964f3fa05bdc217dba1bc3f6811a8b5452fef6 2700108 dovecot-core_2.4.1+dfsg1-6+deb13u6_riscv64.deb 0b7395fcb55b54da9830f89fed70bc19c7458356 429424 dovecot-dev_2.4.1+dfsg1-6+deb13u6_riscv64.deb d866910e85856dcffb8470e06f75d5762e6bff4e 172668 dovecot-flatcurve-dbgsym_2.4.1+dfsg1-6+deb13u6_riscv64.deb 60fdd8a6feb0a64e6cd2962890975e756b0df4b9 41780 dovecot-flatcurve_2.4.1+dfsg1-6+deb13u6_riscv64.deb 40e44267de93333dd35fe6ece5f3e5b6c52ce15a 20608 dovecot-gssapi-dbgsym_2.4.1+dfsg1-6+deb13u6_riscv64.deb bdaca09111e606f1cdfb9e0650d7acddeb6f9caa 18196 dovecot-gssapi_2.4.1+dfsg1-6+deb13u6_riscv64.deb 2e6adb8664708d9d3b310415bff7890598e28aed 786504 dovecot-imapd-dbgsym_2.4.1+dfsg1-6+deb13u6_riscv64.deb 3010c168dec8c5997cadb3f2ad8458abb0a9ea00 195660 dovecot-imapd_2.4.1+dfsg1-6+deb13u6_riscv64.deb b218205c5a302146a81ed20b2748807ea036c025 184144 dovecot-ldap-dbgsym_2.4.1+dfsg1-6+deb13u6_riscv64.deb 03ae05a6896e05be74c174b8ecc7504e8bce99af 52884 dovecot-ldap_2.4.1+dfsg1-6+deb13u6_riscv64.deb c92602eb4e91405e5ce3607c830c094a6c7add51 98892 dovecot-lmtpd-dbgsym_2.4.1+dfsg1-6+deb13u6_riscv64.deb 1485542a9f17313f3fd6040d68d481416bc2a84d 36324 dovecot-lmtpd_2.4.1+dfsg1-6+deb13u6_riscv64.deb 115463a646337c038552074b628ba3c1b0c76eda 121984 dovecot-managesieved-dbgsym_2.4.1+dfsg1-6+deb13u6_riscv64.deb 68ef844c1370a22119d95a5237eae6dab8d1b447 47512 dovecot-managesieved_2.4.1+dfsg1-6+deb13u6_riscv64.deb 902d0a50cfb85b8001a0220bb00a8c9adaea524c 34780 dovecot-mysql-dbgsym_2.4.1+dfsg1-6+deb13u6_riscv64.deb 14934c6065e429cc1553c05bf6a1398a42b9743b 20308 dovecot-mysql_2.4.1+dfsg1-6+deb13u6_riscv64.deb 6af68aaa3917968d7fc077296c0b9ff283080f3e 37232 dovecot-pgsql-dbgsym_2.4.1+dfsg1-6+deb13u6_riscv64.deb 218713df44dc4bf6789d6983fe62943cd4109aa8 24316 dovecot-pgsql_2.4.1+dfsg1-6+deb13u6_riscv64.deb 37ea154c217b4c3c34a546f5f17adfbf2de3e5af 102644 dovecot-pop3d-dbgsym_2.4.1+dfsg1-6+deb13u6_riscv64.deb f8b8bba5e9fdbe44bc0ef9fada9aa8597f9ca78b 44132 dovecot-pop3d_2.4.1+dfsg1-6+deb13u6_riscv64.deb 4ba4d70a80b09cbf13b7850292dfb382482b3eb1 1689932 dovecot-sieve-dbgsym_2.4.1+dfsg1-6+deb13u6_riscv64.deb 715dba61cb964715fcf53e8e5e7140f700a73130 375352 dovecot-sieve_2.4.1+dfsg1-6+deb13u6_riscv64.deb d6e534ae6be47c279b75d1dd7185963bf3ec73ef 72468 dovecot-solr-dbgsym_2.4.1+dfsg1-6+deb13u6_riscv64.deb e54a2b5265baa059022c18fec6cdb98a6fb17dc7 37724 dovecot-solr_2.4.1+dfsg1-6+deb13u6_riscv64.deb df9aff1fd192bcc53e6139d9f3c0e5c9cad5d6a8 24112 dovecot-sqlite-dbgsym_2.4.1+dfsg1-6+deb13u6_riscv64.deb a2ef9ec3d94ae3b9907bd8e3c90461c8d2a2d92a 19892 dovecot-sqlite_2.4.1+dfsg1-6+deb13u6_riscv64.deb c629c401b3403be87601d6e4a1725259b986dbae 205380 dovecot-submissiond-dbgsym_2.4.1+dfsg1-6+deb13u6_riscv64.deb 27c2515380162fabf9f8bf657a4eaadafc299fd5 60684 dovecot-submissiond_2.4.1+dfsg1-6+deb13u6_riscv64.deb 9b9e42fdb8e7e2b00a8559fb9eac2b0edc5d346b 18186 dovecot_2.4.1+dfsg1-6+deb13u6_riscv64-buildd.buildinfo Checksums-Sha256: aba2a7910c0885d32c4482e273bc23b1715bc9e797a29747708eb023a41a3aa6 31280 dovecot-auth-lua-dbgsym_2.4.1+dfsg1-6+deb13u6_riscv64.deb 1bea86cee764eff473a96af4f454e1048303371c1c9e781d1567b12f0754d8f6 21444 dovecot-auth-lua_2.4.1+dfsg1-6+deb13u6_riscv64.deb 6ee645f8448458d508fea33d7914aee56a497976071c64a873678843bce9e507 10504304 dovecot-core-dbgsym_2.4.1+dfsg1-6+deb13u6_riscv64.deb a05520af712e8024c04f48f2578c791baa64f86e543c84570a02a29f29bfa1ed 2700108 dovecot-core_2.4.1+dfsg1-6+deb13u6_riscv64.deb 9bb856cf4aab8ad515c8f929d9068d946b788e819704cdd8c429a9a25a3c2ef2 429424 dovecot-dev_2.4.1+dfsg1-6+deb13u6_riscv64.deb 8f153cca8f199b3580124c8247f79afa9b2970240c7db970eb1c342d5c28bcb9 172668 dovecot-flatcurve-dbgsym_2.4.1+dfsg1-6+deb13u6_riscv64.deb a5cefb4550594ec4936ead401b83307021868e73de29da3414f3f9d65f5ef029 41780 dovecot-flatcurve_2.4.1+dfsg1-6+deb13u6_riscv64.deb a8926e0eaf96cc3ba9c42df1a6f0426cc7cf64c410d4190a0b586ffe6afbb3ee 20608 dovecot-gssapi-dbgsym_2.4.1+dfsg1-6+deb13u6_riscv64.deb ef12c0370298c1fce42dfb96ba308fcc11e43585019b7d7379e35c74494ce236 18196 dovecot-gssapi_2.4.1+dfsg1-6+deb13u6_riscv64.deb 1f3075ca81ba0845ab39a86aaced499de3fbde5e005920e66718b8c679850129 786504 dovecot-imapd-dbgsym_2.4.1+dfsg1-6+deb13u6_riscv64.deb 672018b689a91df96aea6084640a06086db6f616d8352b8a0efcc16af5e301f1 195660 dovecot-imapd_2.4.1+dfsg1-6+deb13u6_riscv64.deb 3c152639cecd05722ed3799aafd64ab6de0ee8bed7c922d7f7244cc4c05e2b6a 184144 dovecot-ldap-dbgsym_2.4.1+dfsg1-6+deb13u6_riscv64.deb 7a1a470f356ab629b6f6a7936ee0baabe7d3d6d73c2af0aed58cb90e7ecb65fc 52884 dovecot-ldap_2.4.1+dfsg1-6+deb13u6_riscv64.deb 89cc7d75795abcc90f22d6bb3e7d09692f42bb09d8a3477cb77007423725589a 98892 dovecot-lmtpd-dbgsym_2.4.1+dfsg1-6+deb13u6_riscv64.deb d1e11168de960d4dec462c1a31f64d4a9d451ee409e79add11c2923344c26c1d 36324 dovecot-lmtpd_2.4.1+dfsg1-6+deb13u6_riscv64.deb d7a61e54e5af5dd50ce96b56c8b072e9968d3100c7ef6d445b6c87d3046c92ca 121984 dovecot-managesieved-dbgsym_2.4.1+dfsg1-6+deb13u6_riscv64.deb e89a9fe993ca4064e9699248296a673cccb90665be3e9855ccb5608507f7e8ec 47512 dovecot-managesieved_2.4.1+dfsg1-6+deb13u6_riscv64.deb c96fb94386b8b0f23de69c4d41798775639fcb538cc8d2f7fa2f748a6c4c52f7 34780 dovecot-mysql-dbgsym_2.4.1+dfsg1-6+deb13u6_riscv64.deb c62fa81af838bb4d68d92d7d0643456cac9f99a939d5729c6aae602258be44bd 20308 dovecot-mysql_2.4.1+dfsg1-6+deb13u6_riscv64.deb 4acec0031443ae6e6ec1f5cc1bcdc26159db37d37fb608ddf2180e98982724c3 37232 dovecot-pgsql-dbgsym_2.4.1+dfsg1-6+deb13u6_riscv64.deb 8809bbb85754c4cddb014765a2133ea982a40b8561ab681243d84f796dd66be7 24316 dovecot-pgsql_2.4.1+dfsg1-6+deb13u6_riscv64.deb 6b2a2f66b1e1895c49ca84bcd989e4bccb2c1ec187263cce46818d4d75ce686a 102644 dovecot-pop3d-dbgsym_2.4.1+dfsg1-6+deb13u6_riscv64.deb 0ceb5f2793b571c1f9a099a19c34c735945c10099676bc4a68addd9283b8be56 44132 dovecot-pop3d_2.4.1+dfsg1-6+deb13u6_riscv64.deb f977cd09d5a999d8d368c55097028cd97fb37d438de1859ed98c1dc01e3567d8 1689932 dovecot-sieve-dbgsym_2.4.1+dfsg1-6+deb13u6_riscv64.deb aeb4cc64eff72be4210dcff494d2742dcb4dbd35fd165c1afed3374991d19f77 375352 dovecot-sieve_2.4.1+dfsg1-6+deb13u6_riscv64.deb b075e390c4e46b8d17105bbfc41129f40a3a802630ffe5c483aa33bd342d7b3c 72468 dovecot-solr-dbgsym_2.4.1+dfsg1-6+deb13u6_riscv64.deb 4f77f46a9479a7557a92bc586e512d631c0630615709550d82a9dd329b89736e 37724 dovecot-solr_2.4.1+dfsg1-6+deb13u6_riscv64.deb 162f18e2cbf71dc6ed33844e17bf9da8ec73127b1f122aa646e74accc8de78db 24112 dovecot-sqlite-dbgsym_2.4.1+dfsg1-6+deb13u6_riscv64.deb 7a35ce3b8f9e393d95a7b259c548b49ade57308b27952b1e684ff974b9a109c3 19892 dovecot-sqlite_2.4.1+dfsg1-6+deb13u6_riscv64.deb a87c528c1e1501eb6d75e30880ff26f688b2d2910a4ee14611a241877b78c662 205380 dovecot-submissiond-dbgsym_2.4.1+dfsg1-6+deb13u6_riscv64.deb 9aaed6f6951077c8be0dd308c909164b11c9968da571a7ddca31a01ef2465603 60684 dovecot-submissiond_2.4.1+dfsg1-6+deb13u6_riscv64.deb 7b6c48277b2fa71b31575ee80ab8283f3633292d8660b5cae641f16824c62663 18186 dovecot_2.4.1+dfsg1-6+deb13u6_riscv64-buildd.buildinfo Files: 779aa6c4738d22fdbf3aea251bcbbb9d 31280 debug optional dovecot-auth-lua-dbgsym_2.4.1+dfsg1-6+deb13u6_riscv64.deb 3a51544adbc22ce04f84969b21842d9a 21444 mail optional dovecot-auth-lua_2.4.1+dfsg1-6+deb13u6_riscv64.deb 2db58ed4e1cdf729f89858af067d0ac4 10504304 debug optional dovecot-core-dbgsym_2.4.1+dfsg1-6+deb13u6_riscv64.deb a24deef3c519ee73a7883b996ed4141c 2700108 mail optional dovecot-core_2.4.1+dfsg1-6+deb13u6_riscv64.deb d7f82dda1ff6d000ede4d3ad03aab5dd 429424 mail optional dovecot-dev_2.4.1+dfsg1-6+deb13u6_riscv64.deb c12a831d12bb7315f7dceee35dfe3651 172668 debug optional dovecot-flatcurve-dbgsym_2.4.1+dfsg1-6+deb13u6_riscv64.deb e50d1c7310c0b8ceb2b153dde4fe67b5 41780 mail optional dovecot-flatcurve_2.4.1+dfsg1-6+deb13u6_riscv64.deb 298655c1acea7da5a976ef26613058e8 20608 debug optional dovecot-gssapi-dbgsym_2.4.1+dfsg1-6+deb13u6_riscv64.deb 988bf8927611f9dcabfcbf11beef5702 18196 mail optional dovecot-gssapi_2.4.1+dfsg1-6+deb13u6_riscv64.deb be8d92650904d1a6c18be142c7bf7524 786504 debug optional dovecot-imapd-dbgsym_2.4.1+dfsg1-6+deb13u6_riscv64.deb cdad8a3a31df4eb4bfb56c42528a7a57 195660 mail optional dovecot-imapd_2.4.1+dfsg1-6+deb13u6_riscv64.deb f3b7bfcd4cbbedc26b51f902ef638bd0 184144 debug optional dovecot-ldap-dbgsym_2.4.1+dfsg1-6+deb13u6_riscv64.deb 5d8cc24207e8a45497ce76787d4fbc41 52884 mail optional dovecot-ldap_2.4.1+dfsg1-6+deb13u6_riscv64.deb b9155a538bd4f41cc29b5b16c6416254 98892 debug optional dovecot-lmtpd-dbgsym_2.4.1+dfsg1-6+deb13u6_riscv64.deb 210205d5507379c66426ff65951c15f0 36324 mail optional dovecot-lmtpd_2.4.1+dfsg1-6+deb13u6_riscv64.deb a3cf10671c4bacd9f235810afc8dbca2 121984 debug optional dovecot-managesieved-dbgsym_2.4.1+dfsg1-6+deb13u6_riscv64.deb 6c593186e4c0401b39b3ec57e6d85c4e 47512 mail optional dovecot-managesieved_2.4.1+dfsg1-6+deb13u6_riscv64.deb a6b2a1dbf81c762a4c58c7c3d7463319 34780 debug optional dovecot-mysql-dbgsym_2.4.1+dfsg1-6+deb13u6_riscv64.deb 6e23546974b9fe6db46080bc48f354e0 20308 mail optional dovecot-mysql_2.4.1+dfsg1-6+deb13u6_riscv64.deb 1fcaaafae83b4d37024fe431a1fad787 37232 debug optional dovecot-pgsql-dbgsym_2.4.1+dfsg1-6+deb13u6_riscv64.deb 88f567a3c2046cfffcf7b1eabe4eedd8 24316 mail optional dovecot-pgsql_2.4.1+dfsg1-6+deb13u6_riscv64.deb b2dd51caaa9db4978cce81028659640f 102644 debug optional dovecot-pop3d-dbgsym_2.4.1+dfsg1-6+deb13u6_riscv64.deb e2451649bc6ffb4bc2bc2790ddcd6aca 44132 mail optional dovecot-pop3d_2.4.1+dfsg1-6+deb13u6_riscv64.deb d2c91eef348ffc8bb02561171013619f 1689932 debug optional dovecot-sieve-dbgsym_2.4.1+dfsg1-6+deb13u6_riscv64.deb 9f6365f54eb6a00d08f9c634b21bbfc6 375352 mail optional dovecot-sieve_2.4.1+dfsg1-6+deb13u6_riscv64.deb 8856b8649afa26b7584a137210253c41 72468 debug optional dovecot-solr-dbgsym_2.4.1+dfsg1-6+deb13u6_riscv64.deb d15be17230bdaf7d91021f6cb8435dd8 37724 mail optional dovecot-solr_2.4.1+dfsg1-6+deb13u6_riscv64.deb cf62f7b68a75c586f882312c9215bf02 24112 debug optional dovecot-sqlite-dbgsym_2.4.1+dfsg1-6+deb13u6_riscv64.deb 1e8ace331da7d0e6790e4025f961ed5c 19892 mail optional dovecot-sqlite_2.4.1+dfsg1-6+deb13u6_riscv64.deb ae2aa2b52a404d717e46f5459e4ab94e 205380 debug optional dovecot-submissiond-dbgsym_2.4.1+dfsg1-6+deb13u6_riscv64.deb 77e76eef97d48310b0e69587b7e616e0 60684 mail optional dovecot-submissiond_2.4.1+dfsg1-6+deb13u6_riscv64.deb a974135d6d65762b3dff07e0c6e8d44f 18186 mail optional dovecot_2.4.1+dfsg1-6+deb13u6_riscv64-buildd.buildinfo -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEgLDDByWcR07HDSHyNVgvumj7+mMFAmoaH64ACgkQNVgvumj7 +mPjVg/+IhLsz2T/+R0uQSVkbHy1pTAK5bY+6YTRkfqmdjtL+j8XYb0W2wOW+WVd u38EAMNO/OMo1ecwdw5jS25bmwEOGxT2jo6Lf74cb9Y1TYYRLcN+XZNucuAQ6IvK dmDQr64dmbaYM0SGP5SSG/C8cYp/6T2X5HaxYyWoAUONdqmMWDIkBsmtycCEcm7b Pop0d5vRSDKhbfK00NOs9Nv1sL+TUXDCR7ZzU1Vfl+7PV0UvYNyU4iKneJ2Ir6ZX spG3gyasl+nQMzJK/LTSYI5qrYUDZgMHpTBDNg1S67z1KryMkwIy+1aiLEA3ECvV Y23IPvs1czmyMXkCOPV0HghSUvhsk2ct+O5eNh1Y07LWKjjwWiWQhC0oSbK/m5tm 3+RD2P3fOGw0FLmQvg4ymimkND7+iDgkvlih/nz6zU6AJPShGRZ/8shb0WPAjpv8 iCKuC5XnNTHHd80sp/6FbRcrJYDqqyfpdWzrwS26erp99i9ENumSyKx5Oboh7QuU ZBbnM9FS2g4Bs41ZzS4tJ1ofRWHGydbWrDMjInH9RWR9QFfLUUrs91h6LNLX5mBT ycNTu3/MHtHdDYIitD0HIMjJj1Cnr07vpY4UqY1OZE/9Krb6lQAnD0CK9p9BM8Fv mVGv73n5v0MhGiXoCJlEmftqvDennnTownxLSFe6TbUM+cRYtGM= =7Lzo -----END PGP SIGNATURE-----