-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Mon, 18 May 2026 14:11:58 -0400 Source: dovecot Binary: dovecot-auth-lua dovecot-auth-lua-dbgsym dovecot-core dovecot-core-dbgsym dovecot-dev dovecot-gssapi dovecot-gssapi-dbgsym dovecot-imapd dovecot-imapd-dbgsym dovecot-ldap dovecot-ldap-dbgsym dovecot-lmtpd dovecot-lmtpd-dbgsym dovecot-lucene dovecot-lucene-dbgsym dovecot-managesieved dovecot-managesieved-dbgsym dovecot-mysql dovecot-mysql-dbgsym dovecot-pgsql dovecot-pgsql-dbgsym dovecot-pop3d dovecot-pop3d-dbgsym dovecot-sieve dovecot-sieve-dbgsym dovecot-solr dovecot-solr-dbgsym dovecot-sqlite dovecot-sqlite-dbgsym dovecot-submissiond dovecot-submissiond-dbgsym Architecture: mips64el Version: 1:2.3.19.1+dfsg1-2.1+deb12u6 Distribution: bookworm-security Urgency: medium Maintainer: mipsel Build Daemon (mipsel-osuosl-03) Changed-By: Noah Meyerhans Description: dovecot-auth-lua - secure POP3/IMAP server - Lua authentication plugin dovecot-core - secure POP3/IMAP server - core files dovecot-dev - secure POP3/IMAP server - header files dovecot-gssapi - secure POP3/IMAP server - GSSAPI support dovecot-imapd - secure POP3/IMAP server - IMAP daemon dovecot-ldap - secure POP3/IMAP server - LDAP support dovecot-lmtpd - secure POP3/IMAP server - LMTP server dovecot-lucene - secure POP3/IMAP server - Lucene support dovecot-managesieved - secure POP3/IMAP server - ManageSieve server dovecot-mysql - secure POP3/IMAP server - MySQL support dovecot-pgsql - secure POP3/IMAP server - PostgreSQL support dovecot-pop3d - secure POP3/IMAP server - POP3 daemon dovecot-sieve - secure POP3/IMAP server - Sieve filters support dovecot-solr - secure POP3/IMAP server - Solr support dovecot-sqlite - secure POP3/IMAP server - SQLite support dovecot-submissiond - secure POP3/IMAP server - mail submission agent Closes: 1136444 Changes: dovecot (1:2.3.19.1+dfsg1-2.1+deb12u6) bookworm-security; urgency=medium . * Security update (Closes: #1136444) * [1d0162a] autopkgtest: test cram-md5 authentication * [d4eed2a] CVE-2026-40016: Sieve :contains/:matches O(N×M) Substring Match Bypasses sieve_max_cpu_time Limit (130× Overrun) * [898776c] CVE-2026-33603: login: Base64 input can contain tabs that bypass IPC protection * [fe76a7b] CVE-2026-40020: IMAP folders can be shared-spammed to everyone * [ce379ba] CVE-2026-42006: imap-login: Excessive memory usage DoS Checksums-Sha1: e1e361f34ff9e416f51bc18990fa21bb34b77df4 35284 dovecot-auth-lua-dbgsym_2.3.19.1+dfsg1-2.1+deb12u6_mips64el.deb 9ff96e9369a76d0b0093a010542669af9058f86e 1366296 dovecot-auth-lua_2.3.19.1+dfsg1-2.1+deb12u6_mips64el.deb 644c01326dc072187dd48c4aec2d13ca30a7dcca 9843620 dovecot-core-dbgsym_2.3.19.1+dfsg1-2.1+deb12u6_mips64el.deb f6cfc2294c7a90b54da8e93d33e05493cb2f8ee4 4189200 dovecot-core_2.3.19.1+dfsg1-2.1+deb12u6_mips64el.deb 6e281d4fecd4bef97a08dd52a2cc4905896cb7d1 1744100 dovecot-dev_2.3.19.1+dfsg1-2.1+deb12u6_mips64el.deb cfa44cd3564c2eca95d4e50c09e7cc7a3a83453c 22228 dovecot-gssapi-dbgsym_2.3.19.1+dfsg1-2.1+deb12u6_mips64el.deb 9c1659d5e3c42e2aab2e71e5ec9c4fa09fc195d1 1363040 dovecot-gssapi_2.3.19.1+dfsg1-2.1+deb12u6_mips64el.deb 9bd11fdbed877339c88c57b7e6d4c90dc8118b0a 706444 dovecot-imapd-dbgsym_2.3.19.1+dfsg1-2.1+deb12u6_mips64el.deb 5a9a43405429ff7c10bc20802bb03655275d26fd 1522536 dovecot-imapd_2.3.19.1+dfsg1-2.1+deb12u6_mips64el.deb 78cc598d0558a8d0239b4f086840a9940e466f9f 124920 dovecot-ldap-dbgsym_2.3.19.1+dfsg1-2.1+deb12u6_mips64el.deb e2fa6463fa08f7160446daa333cdd48889402389 1390236 dovecot-ldap_2.3.19.1+dfsg1-2.1+deb12u6_mips64el.deb d7af52f72d1a424ae8666a8e6424f950a8ff1ecc 93952 dovecot-lmtpd-dbgsym_2.3.19.1+dfsg1-2.1+deb12u6_mips64el.deb ff3f44d2cae21c23367ccc3beb94b7d14479036f 1378804 dovecot-lmtpd_2.3.19.1+dfsg1-2.1+deb12u6_mips64el.deb 4a36d6b2ec9ef7b9ec7132c93ff75c114cf88767 152660 dovecot-lucene-dbgsym_2.3.19.1+dfsg1-2.1+deb12u6_mips64el.deb 98e4234053ffd419b2187622075782908eb303e3 1381936 dovecot-lucene_2.3.19.1+dfsg1-2.1+deb12u6_mips64el.deb 29b0ded33a491388d0e6e6a70cfea29d7b0998f7 152304 dovecot-managesieved-dbgsym_2.3.19.1+dfsg1-2.1+deb12u6_mips64el.deb ade1e3089094db0b162adc31e669372d1aace6a0 1398952 dovecot-managesieved_2.3.19.1+dfsg1-2.1+deb12u6_mips64el.deb 0e154adc858b72c21ceb265837346f176a11b178 33224 dovecot-mysql-dbgsym_2.3.19.1+dfsg1-2.1+deb12u6_mips64el.deb 53d6361409df67a828b936a1016de7d172a084a9 1364540 dovecot-mysql_2.3.19.1+dfsg1-2.1+deb12u6_mips64el.deb 47bb6edead93267dd1e2496e0bc794e646366a16 35428 dovecot-pgsql-dbgsym_2.3.19.1+dfsg1-2.1+deb12u6_mips64el.deb 3fa4f4dd414589ac04559c53b9bb939719698d3c 1367344 dovecot-pgsql_2.3.19.1+dfsg1-2.1+deb12u6_mips64el.deb aed023e5151ec4aab62e95cf05a339fd804cd9f6 93656 dovecot-pop3d-dbgsym_2.3.19.1+dfsg1-2.1+deb12u6_mips64el.deb 2573a3f4ce26c73deb15695dd6cac724db76ad13 1386424 dovecot-pop3d_2.3.19.1+dfsg1-2.1+deb12u6_mips64el.deb 0c8b602be1b4a82c002882e8265d8ccc1b01995b 1583424 dovecot-sieve-dbgsym_2.3.19.1+dfsg1-2.1+deb12u6_mips64el.deb 2ed0aa3bc6e95503c51ddf371bf38472ee247561 1646876 dovecot-sieve_2.3.19.1+dfsg1-2.1+deb12u6_mips64el.deb d446f370b56b3660cb71498c6b2b806f15842f38 91996 dovecot-solr-dbgsym_2.3.19.1+dfsg1-2.1+deb12u6_mips64el.deb dd03d1fbe1828b2d8f4bc543a926a79e2509d4f9 1374440 dovecot-solr_2.3.19.1+dfsg1-2.1+deb12u6_mips64el.deb 456331639db1c0493b1e812a91468698cb4bf264 19560 dovecot-sqlite-dbgsym_2.3.19.1+dfsg1-2.1+deb12u6_mips64el.deb c35e4121aa8f13a50bd68d2ea2ae3d7110e8622d 1362784 dovecot-sqlite_2.3.19.1+dfsg1-2.1+deb12u6_mips64el.deb 3e3ab5ec175bd466f19501d10d421d70b82def81 182720 dovecot-submissiond-dbgsym_2.3.19.1+dfsg1-2.1+deb12u6_mips64el.deb 766ccb192e372227cfd0d57afbe33029a2218583 1402408 dovecot-submissiond_2.3.19.1+dfsg1-2.1+deb12u6_mips64el.deb 5492334929ce4bb41162a44578a52a9cf860359d 18910 dovecot_2.3.19.1+dfsg1-2.1+deb12u6_mips64el-buildd.buildinfo Checksums-Sha256: d794394fc67650008b9f4b57e63517a754812d2261dcf6398b7c05e939850e7a 35284 dovecot-auth-lua-dbgsym_2.3.19.1+dfsg1-2.1+deb12u6_mips64el.deb 27a28cbc0a4b4618ad911d10545b8393ae5af87280867dd5e24af1a67d68d248 1366296 dovecot-auth-lua_2.3.19.1+dfsg1-2.1+deb12u6_mips64el.deb 320553f1fec3cda25bddcc380b3c3e89ad9e234b28b9f509f90b017c06c15870 9843620 dovecot-core-dbgsym_2.3.19.1+dfsg1-2.1+deb12u6_mips64el.deb 141e29d54149ea2f7545fde3ad02175b7552b4aadfbb1f3ac354e38dc34069e0 4189200 dovecot-core_2.3.19.1+dfsg1-2.1+deb12u6_mips64el.deb 97cb6427f0d1efe741bb8abcaafa2d6c44bf2584ea2016b3d951e2242a9efe7a 1744100 dovecot-dev_2.3.19.1+dfsg1-2.1+deb12u6_mips64el.deb 3a802d9a9bdfb0e5d3ea775c26d2a4649ed1d21a30346f04f45e45e73460908c 22228 dovecot-gssapi-dbgsym_2.3.19.1+dfsg1-2.1+deb12u6_mips64el.deb 90e823b221a8b8cdf1f339deeec072ede6bb8e914e39364168a4449d1f1077c2 1363040 dovecot-gssapi_2.3.19.1+dfsg1-2.1+deb12u6_mips64el.deb 5505192ccd903a6afeea95f94c915d260efb63f0d0e72609d4559f66cfb2f58e 706444 dovecot-imapd-dbgsym_2.3.19.1+dfsg1-2.1+deb12u6_mips64el.deb 10fc640b530b6f8dffae3d3b99809ad105fe4dd45953033c15db33a7992550c0 1522536 dovecot-imapd_2.3.19.1+dfsg1-2.1+deb12u6_mips64el.deb 5541434bb062f0c43faab161de6aefa33003d1bcd4b140a29ca2d4986c204b06 124920 dovecot-ldap-dbgsym_2.3.19.1+dfsg1-2.1+deb12u6_mips64el.deb 773a693c11582e76b4aba2a5ea60e84206bd333e4ae7b7419ecca5697f47f571 1390236 dovecot-ldap_2.3.19.1+dfsg1-2.1+deb12u6_mips64el.deb 516435909e112e4a02fb49c31768716a63d6972960adf549eec856e3d54baaea 93952 dovecot-lmtpd-dbgsym_2.3.19.1+dfsg1-2.1+deb12u6_mips64el.deb 3ef718ad3a2374520c9702b3a7a36c6f31076406ce15405287b03238d5b446e8 1378804 dovecot-lmtpd_2.3.19.1+dfsg1-2.1+deb12u6_mips64el.deb c86172b2d4809bfee0072620b8671a1c2a844da5437a6f045b510e7895c8a043 152660 dovecot-lucene-dbgsym_2.3.19.1+dfsg1-2.1+deb12u6_mips64el.deb 9af49edb42301c284103cd05fbdc71d50089e46e5c5cad38146049bdda92c6bb 1381936 dovecot-lucene_2.3.19.1+dfsg1-2.1+deb12u6_mips64el.deb f34c03ace5f2b9c1fd8e60917f3fa921218ae8d17e5d3c07c7eb42eb22d108cf 152304 dovecot-managesieved-dbgsym_2.3.19.1+dfsg1-2.1+deb12u6_mips64el.deb aa04c884f3886e55c63423355184902f0b2b33832c552d05bc66c09c5ab00ea3 1398952 dovecot-managesieved_2.3.19.1+dfsg1-2.1+deb12u6_mips64el.deb 25e5814d33446ef0d9d4cc10b1673a0e4f70927d470f3f527b7bc36b8a02a7de 33224 dovecot-mysql-dbgsym_2.3.19.1+dfsg1-2.1+deb12u6_mips64el.deb 5e1b4fc1cab11e1ebe2e4eaa2b5b47f21e81de79bc841d4e37a1d4a6ec417152 1364540 dovecot-mysql_2.3.19.1+dfsg1-2.1+deb12u6_mips64el.deb 984b46bae7b09b5e6a60025b25553383e247b0abdfde482744b5a69d002be247 35428 dovecot-pgsql-dbgsym_2.3.19.1+dfsg1-2.1+deb12u6_mips64el.deb 16bac038282a340e9a363f631ed101d1a5640f7058411130c2ad131d9707bfeb 1367344 dovecot-pgsql_2.3.19.1+dfsg1-2.1+deb12u6_mips64el.deb 03faa71d0ce02a824d453f611f316bea9f967821b6f0b8ba12a0b987c14d324b 93656 dovecot-pop3d-dbgsym_2.3.19.1+dfsg1-2.1+deb12u6_mips64el.deb 298854a842b9625e7d473baecbf498109c10b6decf02edefea9e9b6aed3d8131 1386424 dovecot-pop3d_2.3.19.1+dfsg1-2.1+deb12u6_mips64el.deb 1659bdc32e9d63ff407185623e40057f2c7c98b4dea0438573756f390bcf4600 1583424 dovecot-sieve-dbgsym_2.3.19.1+dfsg1-2.1+deb12u6_mips64el.deb 976d85735359d9a41f6200a8cf2b6304a524a0ec7055f0dd99fd19e468226c3e 1646876 dovecot-sieve_2.3.19.1+dfsg1-2.1+deb12u6_mips64el.deb 6e9679627425c154d602fe69b0a4df814026f1c707e33afc121cd4d51ea17588 91996 dovecot-solr-dbgsym_2.3.19.1+dfsg1-2.1+deb12u6_mips64el.deb e669a129eb83dc28136bdaa962694e51d7bfeeaff2a1bb79346e33e94c43fc11 1374440 dovecot-solr_2.3.19.1+dfsg1-2.1+deb12u6_mips64el.deb 43126896e6de86fb6d95fa26d2c99a5905f53f143abcd7a53960d60bbdf2768a 19560 dovecot-sqlite-dbgsym_2.3.19.1+dfsg1-2.1+deb12u6_mips64el.deb b6ab29729a691e5d2a097e7ee2d0b6ae35f8e05a7eed088941ba9b96be5c34d8 1362784 dovecot-sqlite_2.3.19.1+dfsg1-2.1+deb12u6_mips64el.deb d0b2137af633844de3b620157015d978047a9ff644b4bfc58c5d65bc66ef0791 182720 dovecot-submissiond-dbgsym_2.3.19.1+dfsg1-2.1+deb12u6_mips64el.deb ebfc198e5fd61c60344fa726890313ef716d34317235b805d66c9b32e07a8e9e 1402408 dovecot-submissiond_2.3.19.1+dfsg1-2.1+deb12u6_mips64el.deb 70b24370f4b97a590f4bca9264cb60293fc2b37fae0b86a6b316db668773366c 18910 dovecot_2.3.19.1+dfsg1-2.1+deb12u6_mips64el-buildd.buildinfo Files: eaf4c62ae8102cf29572d8df2e2124cd 35284 debug optional dovecot-auth-lua-dbgsym_2.3.19.1+dfsg1-2.1+deb12u6_mips64el.deb e4b2fc5a6e6c68ab2cbb92b5a46164e8 1366296 mail optional dovecot-auth-lua_2.3.19.1+dfsg1-2.1+deb12u6_mips64el.deb f2d9970b3fc584ceffe0708125c1aa94 9843620 debug optional dovecot-core-dbgsym_2.3.19.1+dfsg1-2.1+deb12u6_mips64el.deb a3a58e3eec77c53cf4d5507d2e643a71 4189200 mail optional dovecot-core_2.3.19.1+dfsg1-2.1+deb12u6_mips64el.deb ae632b2242b60f07f8e03d54e0004291 1744100 mail optional dovecot-dev_2.3.19.1+dfsg1-2.1+deb12u6_mips64el.deb b4394847d743a6f281b04780b1faa0b2 22228 debug optional dovecot-gssapi-dbgsym_2.3.19.1+dfsg1-2.1+deb12u6_mips64el.deb 10d601e73e0c2f426cb3ebc8655b0e8b 1363040 mail optional dovecot-gssapi_2.3.19.1+dfsg1-2.1+deb12u6_mips64el.deb 2e368bf0af6645862ad9a1a6f5b9cbc2 706444 debug optional dovecot-imapd-dbgsym_2.3.19.1+dfsg1-2.1+deb12u6_mips64el.deb 24ebe1a5315d7d4e8804b79d788c422c 1522536 mail optional dovecot-imapd_2.3.19.1+dfsg1-2.1+deb12u6_mips64el.deb 4dc50cfa5e756154bff23485b854cf83 124920 debug optional dovecot-ldap-dbgsym_2.3.19.1+dfsg1-2.1+deb12u6_mips64el.deb 492a7e6f45262609af0abfeb9340ce8a 1390236 mail optional dovecot-ldap_2.3.19.1+dfsg1-2.1+deb12u6_mips64el.deb 256a6aedace1cf2a70ee7f40744791d3 93952 debug optional dovecot-lmtpd-dbgsym_2.3.19.1+dfsg1-2.1+deb12u6_mips64el.deb c335c8a6a2159d96e703be277a6cc0b3 1378804 mail optional dovecot-lmtpd_2.3.19.1+dfsg1-2.1+deb12u6_mips64el.deb e542957b5f1b4041686952eed402a953 152660 debug optional dovecot-lucene-dbgsym_2.3.19.1+dfsg1-2.1+deb12u6_mips64el.deb 35da263bbddb28ad9c30995a07d5804f 1381936 mail optional dovecot-lucene_2.3.19.1+dfsg1-2.1+deb12u6_mips64el.deb f57506e7b1737382a55d080effef6af0 152304 debug optional dovecot-managesieved-dbgsym_2.3.19.1+dfsg1-2.1+deb12u6_mips64el.deb 228c441c3650f2d362578b4f0a3eae60 1398952 mail optional dovecot-managesieved_2.3.19.1+dfsg1-2.1+deb12u6_mips64el.deb 3752991fdd32030c2d7c49794ff45e71 33224 debug optional dovecot-mysql-dbgsym_2.3.19.1+dfsg1-2.1+deb12u6_mips64el.deb d9c5b717e0ad1821fa29b259051de854 1364540 mail optional dovecot-mysql_2.3.19.1+dfsg1-2.1+deb12u6_mips64el.deb da6da7c41bfd102a49636a271b89f769 35428 debug optional dovecot-pgsql-dbgsym_2.3.19.1+dfsg1-2.1+deb12u6_mips64el.deb 339e72ff2492f9d3084cb6b0f2da6cee 1367344 mail optional dovecot-pgsql_2.3.19.1+dfsg1-2.1+deb12u6_mips64el.deb 70f01a7f301ba2164fa330d31506449f 93656 debug optional dovecot-pop3d-dbgsym_2.3.19.1+dfsg1-2.1+deb12u6_mips64el.deb a2db5e3f125ff9046f016431b501dda4 1386424 mail optional dovecot-pop3d_2.3.19.1+dfsg1-2.1+deb12u6_mips64el.deb 8f9637b3e31dc39c8e018ec3b72503b0 1583424 debug optional dovecot-sieve-dbgsym_2.3.19.1+dfsg1-2.1+deb12u6_mips64el.deb c374b85de85af82c6dea3df487c231c8 1646876 mail optional dovecot-sieve_2.3.19.1+dfsg1-2.1+deb12u6_mips64el.deb a37444970135cb97f5e9744f10914ed8 91996 debug optional dovecot-solr-dbgsym_2.3.19.1+dfsg1-2.1+deb12u6_mips64el.deb 5150179c662873625e355b03e181a7cc 1374440 mail optional dovecot-solr_2.3.19.1+dfsg1-2.1+deb12u6_mips64el.deb 2e766cf619b6645fee0462db40b2fa04 19560 debug optional dovecot-sqlite-dbgsym_2.3.19.1+dfsg1-2.1+deb12u6_mips64el.deb 240528aab5fc03e0fdbacf2499f71951 1362784 mail optional dovecot-sqlite_2.3.19.1+dfsg1-2.1+deb12u6_mips64el.deb 55eb28dec5e08039265f41b2a5edb6af 182720 debug optional dovecot-submissiond-dbgsym_2.3.19.1+dfsg1-2.1+deb12u6_mips64el.deb de4b57891dd1e607a4596a0bf010128f 1402408 mail optional dovecot-submissiond_2.3.19.1+dfsg1-2.1+deb12u6_mips64el.deb 717a0c6acc2349d01a151f894dfd4129 18910 mail optional dovecot_2.3.19.1+dfsg1-2.1+deb12u6_mips64el-buildd.buildinfo -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEE7sd7jtCtE5bBJ1Hx/qmHKZssfSAFAmoZ9NYACgkQ/qmHKZss fSD9NhAArgD/4hbKNBOUUM4FubC3R1rorDe3a/DG9D9Cvil+v+jwP4ZJI4SY/+tS CYp3v3MPZ+jAJ7JGbn0jo9uQyk8Gnp9vEBsZQ+l7wEDyykn6fze7OfgE0WiGBOhI Sv8VIPfhG7hN1M+DNFysM1C7bxCIfRuyd3PdxF7aoZxTvE6ji3hYtGXZpp+x08D0 R3SXNHMyAHPj7DMJiCkQcrlrFxQqUPkzbovvyiOSlO6gPVdric6qoGOg0kxRsqZ4 rk8il+q3daMm6EQP0OLm6J+Fn57zus6OtiVUNhJbrMDa4lMJjzEbnRiC7eJtF9ZX BYtiugBm2/tU2iAXy5iVJm8bHBqR7IZ+eefsWU3hnWY2kGLnQquT27W+aKHgrEUc 2B9qGBt5duG9I0Qn9iGOZRx7PAMEeX0uKfXp5eEQV86k57burmPEd+OnzZv5JbLO lPjhfzq5MGE0YeNho0W/AK5pVD9osahy/SL24Fy/sHu23SkWdLkr+P+MuW/I/liI Jg0Tg9jKSXHhy+PNjs04JrOFXfWX0fYhFt6kvFOE56+UGY+7FkD+zHIDdb9HST3u LnlLTCudkvPiCByfZrJw03D9rHii9X2/MzdpJNs2w8sTYgsMSLem5PWJ6ma5HAaw vLQ6F76lAYqOg51V2mb0rejmsxHp9O6Sso9L+ICsyKL+biNv1j0= =eAZq -----END PGP SIGNATURE-----