-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Mon, 18 May 2026 14:11:58 -0400
Source: dovecot
Binary: dovecot-auth-lua dovecot-auth-lua-dbgsym dovecot-core dovecot-core-dbgsym dovecot-dev dovecot-gssapi dovecot-gssapi-dbgsym dovecot-imapd dovecot-imapd-dbgsym dovecot-ldap dovecot-ldap-dbgsym dovecot-lmtpd dovecot-lmtpd-dbgsym dovecot-lucene dovecot-lucene-dbgsym dovecot-managesieved dovecot-managesieved-dbgsym dovecot-mysql dovecot-mysql-dbgsym dovecot-pgsql dovecot-pgsql-dbgsym dovecot-pop3d dovecot-pop3d-dbgsym dovecot-sieve dovecot-sieve-dbgsym dovecot-solr dovecot-solr-dbgsym dovecot-sqlite dovecot-sqlite-dbgsym dovecot-submissiond dovecot-submissiond-dbgsym
Architecture: s390x
Version: 1:2.3.19.1+dfsg1-2.1+deb12u6
Distribution: bookworm-security
Urgency: medium
Maintainer: s390x Build Daemon (zandonai) <buildd_s390x-zandonai@buildd.debian.org>
Changed-By: Noah Meyerhans <noahm@debian.org>
Description:
 dovecot-auth-lua - secure POP3/IMAP server - Lua authentication plugin
 dovecot-core - secure POP3/IMAP server - core files
 dovecot-dev - secure POP3/IMAP server - header files
 dovecot-gssapi - secure POP3/IMAP server - GSSAPI support
 dovecot-imapd - secure POP3/IMAP server - IMAP daemon
 dovecot-ldap - secure POP3/IMAP server - LDAP support
 dovecot-lmtpd - secure POP3/IMAP server - LMTP server
 dovecot-lucene - secure POP3/IMAP server - Lucene support
 dovecot-managesieved - secure POP3/IMAP server - ManageSieve server
 dovecot-mysql - secure POP3/IMAP server - MySQL support
 dovecot-pgsql - secure POP3/IMAP server - PostgreSQL support
 dovecot-pop3d - secure POP3/IMAP server - POP3 daemon
 dovecot-sieve - secure POP3/IMAP server - Sieve filters support
 dovecot-solr - secure POP3/IMAP server - Solr support
 dovecot-sqlite - secure POP3/IMAP server - SQLite support
 dovecot-submissiond - secure POP3/IMAP server - mail submission agent
Closes: 1136444
Changes:
 dovecot (1:2.3.19.1+dfsg1-2.1+deb12u6) bookworm-security; urgency=medium
 .
   * Security update (Closes: #1136444)
   * [1d0162a] autopkgtest: test cram-md5 authentication
   * [d4eed2a] CVE-2026-40016: Sieve :contains/:matches O(N×M) Substring
     Match Bypasses sieve_max_cpu_time Limit (130× Overrun)
   * [898776c] CVE-2026-33603: login: Base64 input can contain tabs that
     bypass IPC protection
   * [fe76a7b] CVE-2026-40020: IMAP folders can be shared-spammed to everyone
   * [ce379ba] CVE-2026-42006: imap-login: Excessive memory usage DoS
Checksums-Sha1:
 fb518e9765c71f4f99a51fdcfcc660ceb8498e8c 32824 dovecot-auth-lua-dbgsym_2.3.19.1+dfsg1-2.1+deb12u6_s390x.deb
 9be635556742c8e5b3052091c3dadb3d993a71bd 1366488 dovecot-auth-lua_2.3.19.1+dfsg1-2.1+deb12u6_s390x.deb
 29cf3c9c97233453477e8c1603edc53e6d4312d8 9501524 dovecot-core-dbgsym_2.3.19.1+dfsg1-2.1+deb12u6_s390x.deb
 97c0ff3630076d61fe2d55464670869550f24066 4234404 dovecot-core_2.3.19.1+dfsg1-2.1+deb12u6_s390x.deb
 0699da782d1f2cee02602a92a3126d4c7f5bb0fd 1744160 dovecot-dev_2.3.19.1+dfsg1-2.1+deb12u6_s390x.deb
 211b0e6af3c40ab092a64967e82910844e0a5234 21168 dovecot-gssapi-dbgsym_2.3.19.1+dfsg1-2.1+deb12u6_s390x.deb
 a3b4dacbb066942452b194f57d5011b0019b5241 1362976 dovecot-gssapi_2.3.19.1+dfsg1-2.1+deb12u6_s390x.deb
 14d4b224d1cca07e9e16902b53cb01f70834689e 679980 dovecot-imapd-dbgsym_2.3.19.1+dfsg1-2.1+deb12u6_s390x.deb
 019fc29d3a1955555d1b99c586e8c0838bb33fcc 1512288 dovecot-imapd_2.3.19.1+dfsg1-2.1+deb12u6_s390x.deb
 78f9bd1cbc2f08cceed82687400877cdf7001f13 118604 dovecot-ldap-dbgsym_2.3.19.1+dfsg1-2.1+deb12u6_s390x.deb
 5ee4d77c026695f2bc056aceac16674426956428 1391372 dovecot-ldap_2.3.19.1+dfsg1-2.1+deb12u6_s390x.deb
 f19ddf902388427410a0773e55011fcdb81e4d94 91280 dovecot-lmtpd-dbgsym_2.3.19.1+dfsg1-2.1+deb12u6_s390x.deb
 050603ab3d09ded16f059618ec289b771a5b5989 1377364 dovecot-lmtpd_2.3.19.1+dfsg1-2.1+deb12u6_s390x.deb
 2aee32e1a45d834d6467ea048f76071c51f7fe5e 151252 dovecot-lucene-dbgsym_2.3.19.1+dfsg1-2.1+deb12u6_s390x.deb
 3d85260454e300c6bdd6c08304bbad267bb0f0fd 1380436 dovecot-lucene_2.3.19.1+dfsg1-2.1+deb12u6_s390x.deb
 5d774b560a7ecd2211fc98e3be2a23b20bce2469 146932 dovecot-managesieved-dbgsym_2.3.19.1+dfsg1-2.1+deb12u6_s390x.deb
 db2be8dc5aad760532399f4c6dc84ac02bf41997 1395796 dovecot-managesieved_2.3.19.1+dfsg1-2.1+deb12u6_s390x.deb
 a287300eb3125bd098de462a484a959521b19ff6 31016 dovecot-mysql-dbgsym_2.3.19.1+dfsg1-2.1+deb12u6_s390x.deb
 e8bcb39f790723907808af1d74e86822abe401dc 1364620 dovecot-mysql_2.3.19.1+dfsg1-2.1+deb12u6_s390x.deb
 60b6bb9ac2c2aa25e4a75d3449febcce6d2dd308 32588 dovecot-pgsql-dbgsym_2.3.19.1+dfsg1-2.1+deb12u6_s390x.deb
 485323bfc383e6dc015a39df229a8bade1653b31 1367512 dovecot-pgsql_2.3.19.1+dfsg1-2.1+deb12u6_s390x.deb
 c6d0e29bc22c7a1a42006a30cd5fc4f073a8dd0e 89928 dovecot-pop3d-dbgsym_2.3.19.1+dfsg1-2.1+deb12u6_s390x.deb
 c3651a5086616fdcdf3314d989ff7a30352937bc 1384244 dovecot-pop3d_2.3.19.1+dfsg1-2.1+deb12u6_s390x.deb
 f58a3d2a3a163c064af940150144db48d064021c 1537600 dovecot-sieve-dbgsym_2.3.19.1+dfsg1-2.1+deb12u6_s390x.deb
 2dca2b8b5328a7a20196efa8345f71c19f016f33 1668684 dovecot-sieve_2.3.19.1+dfsg1-2.1+deb12u6_s390x.deb
 d9dc752cd9b7e50e68612d6ae2274ed84de12079 86168 dovecot-solr-dbgsym_2.3.19.1+dfsg1-2.1+deb12u6_s390x.deb
 561c8954f80179320748a4005c6891dab0dcf21f 1374352 dovecot-solr_2.3.19.1+dfsg1-2.1+deb12u6_s390x.deb
 76fd2a0c4daeeeb125644b5a896a0874a804ebe7 17988 dovecot-sqlite-dbgsym_2.3.19.1+dfsg1-2.1+deb12u6_s390x.deb
 f694c9a734f247fe85bf90ec8858d30c1b2979e4 1362716 dovecot-sqlite_2.3.19.1+dfsg1-2.1+deb12u6_s390x.deb
 4e0b5c66fe6516564cef2c49c0b0b56e9e026df8 177696 dovecot-submissiond-dbgsym_2.3.19.1+dfsg1-2.1+deb12u6_s390x.deb
 2ff3bb5564dade8142f1c78558b591567faaa779 1398660 dovecot-submissiond_2.3.19.1+dfsg1-2.1+deb12u6_s390x.deb
 39d1896624fd0d864c0c99f7e44e296ca762ddda 18663 dovecot_2.3.19.1+dfsg1-2.1+deb12u6_s390x-buildd.buildinfo
Checksums-Sha256:
 1ce4498ae7367494db22495e2c2cac90479ee1d5338f0c2830cc02f3335ac036 32824 dovecot-auth-lua-dbgsym_2.3.19.1+dfsg1-2.1+deb12u6_s390x.deb
 827eb1b7efa2f1b3c7ee565d0dfc7b6ffc8f53c268f6b35b0a18cd18bba59bfb 1366488 dovecot-auth-lua_2.3.19.1+dfsg1-2.1+deb12u6_s390x.deb
 dd8e62f7ccc0e2f853074a9a8aa943395a7772fbd18ebd80d7bb54ae7d7b3dbb 9501524 dovecot-core-dbgsym_2.3.19.1+dfsg1-2.1+deb12u6_s390x.deb
 464b5c9a18b6d0713b15ae6a64a616285def6319c21f74f45ad9e226d4f0ddab 4234404 dovecot-core_2.3.19.1+dfsg1-2.1+deb12u6_s390x.deb
 b3206cc6347b3cb4109a44ce7adfd3c4c3aefde665db2886ad574a472acfa34e 1744160 dovecot-dev_2.3.19.1+dfsg1-2.1+deb12u6_s390x.deb
 e06e48b53a168cec76c253243ffe113af3128364407e0d9d4037c61f50b8d029 21168 dovecot-gssapi-dbgsym_2.3.19.1+dfsg1-2.1+deb12u6_s390x.deb
 567755d13c5a36e44b893c4405aea0c177fe758b78db04cd3b80b44857928f48 1362976 dovecot-gssapi_2.3.19.1+dfsg1-2.1+deb12u6_s390x.deb
 0e8baf455427a7ca3b5ed60ead93c3fc5c29460b6b5b07b6e92fa6c62504aeec 679980 dovecot-imapd-dbgsym_2.3.19.1+dfsg1-2.1+deb12u6_s390x.deb
 a9a0122c4aa7ca7453dc56d1918fd2a07cbe32bd05cc4698e435e58f333693a6 1512288 dovecot-imapd_2.3.19.1+dfsg1-2.1+deb12u6_s390x.deb
 28200647d51701a3e18ec9d23c93cff9142ef2504b78823925e2f0a90743e16b 118604 dovecot-ldap-dbgsym_2.3.19.1+dfsg1-2.1+deb12u6_s390x.deb
 40029fc25dd4a7896aaaa99baee6ff9052efb94f4ff0e1d11462bede2ff2d2e3 1391372 dovecot-ldap_2.3.19.1+dfsg1-2.1+deb12u6_s390x.deb
 ff090d2262ec11d9af966b0e9899cedea85974dad84e6ac516a5b2be965cd927 91280 dovecot-lmtpd-dbgsym_2.3.19.1+dfsg1-2.1+deb12u6_s390x.deb
 4fdf2c32097b274cc2d900e4f319805617c3837acf4c83da1e587b385e3616fe 1377364 dovecot-lmtpd_2.3.19.1+dfsg1-2.1+deb12u6_s390x.deb
 b6734187efc5aa52dfba9ee1d06fb7a7f8b482ebc9e75874d104d9b611cc3158 151252 dovecot-lucene-dbgsym_2.3.19.1+dfsg1-2.1+deb12u6_s390x.deb
 ef2d37ba77f07a60620fac747606d2bf7373c2bb6cd3d0870add781dc99f59b5 1380436 dovecot-lucene_2.3.19.1+dfsg1-2.1+deb12u6_s390x.deb
 c726194653f51e1cc25de5cb328088e3986fd02027e01365be8ac3ed74567bdf 146932 dovecot-managesieved-dbgsym_2.3.19.1+dfsg1-2.1+deb12u6_s390x.deb
 3578f5c2840d4d1e44467567f951ce6365859a80afd929a6936b2dba6d7b4a21 1395796 dovecot-managesieved_2.3.19.1+dfsg1-2.1+deb12u6_s390x.deb
 1c0a1eecc8fecc54345acb64e37d878e26cc16364c28fda9ac4fdedcbf35b928 31016 dovecot-mysql-dbgsym_2.3.19.1+dfsg1-2.1+deb12u6_s390x.deb
 f4ec618db295fe6113eb2f8493d79d9b9df3a1dd5db5de22692518d3fe0f3e97 1364620 dovecot-mysql_2.3.19.1+dfsg1-2.1+deb12u6_s390x.deb
 094a6870082b55ecf1166cb4e91eff76bb9d9930004f52e564d04432656aa0fd 32588 dovecot-pgsql-dbgsym_2.3.19.1+dfsg1-2.1+deb12u6_s390x.deb
 8414c7d79ee9aa0dd89d1689cd6e696a43eefdd2674db090da270ab78dd2971f 1367512 dovecot-pgsql_2.3.19.1+dfsg1-2.1+deb12u6_s390x.deb
 0772c5b359727352e3e2fa68e299216b74f936b152c8f5a41d14ddd0eb94191e 89928 dovecot-pop3d-dbgsym_2.3.19.1+dfsg1-2.1+deb12u6_s390x.deb
 63441c348bfb3729b8620ddcd937ba344d4bd6077b7012ea219ecc7f70ac69a4 1384244 dovecot-pop3d_2.3.19.1+dfsg1-2.1+deb12u6_s390x.deb
 c27bc5f915b8e02e0047a61c262e4a4a93724df42edf99dae64cb4d41b791d79 1537600 dovecot-sieve-dbgsym_2.3.19.1+dfsg1-2.1+deb12u6_s390x.deb
 ddbff12a0bc1c34ac4d9d143ffe7824c411c9fe2629604955c1f805eeeee8b96 1668684 dovecot-sieve_2.3.19.1+dfsg1-2.1+deb12u6_s390x.deb
 69ea30b34e1f2c6246f8e133b9d7667c114479d341a2072c3bfb7da9d94e1809 86168 dovecot-solr-dbgsym_2.3.19.1+dfsg1-2.1+deb12u6_s390x.deb
 34fc1ba3d3ce7444a5c25dc8d87feca83c10abb40433285a7474b16264f428ff 1374352 dovecot-solr_2.3.19.1+dfsg1-2.1+deb12u6_s390x.deb
 565b2bc4a8c4fe530eefd47912e2c8274a1bdb31c12c53207ae7c47ea13c5032 17988 dovecot-sqlite-dbgsym_2.3.19.1+dfsg1-2.1+deb12u6_s390x.deb
 57ea7620fd6891f2c25dbc8d6cdb24150481a3cafc47349253bf6d2613fe2500 1362716 dovecot-sqlite_2.3.19.1+dfsg1-2.1+deb12u6_s390x.deb
 9b07f0549178338c27a7a11e13550d9ec66906525b5d04da93e2d33519d0b4b3 177696 dovecot-submissiond-dbgsym_2.3.19.1+dfsg1-2.1+deb12u6_s390x.deb
 f08a5152b7f4ba80472219811c4f1cb17047eeb2bba8540c9a0f2774ce8d818b 1398660 dovecot-submissiond_2.3.19.1+dfsg1-2.1+deb12u6_s390x.deb
 a53b9834cc5441a3d8c02ca7c60ee38c3e539e2c4732695904238efae05f4e1d 18663 dovecot_2.3.19.1+dfsg1-2.1+deb12u6_s390x-buildd.buildinfo
Files:
 176c236c02a63de9199daff21c295b07 32824 debug optional dovecot-auth-lua-dbgsym_2.3.19.1+dfsg1-2.1+deb12u6_s390x.deb
 7f3e086017345c940b5f13e860acdad6 1366488 mail optional dovecot-auth-lua_2.3.19.1+dfsg1-2.1+deb12u6_s390x.deb
 8cc323dc6646c531af463b8d0ad8385b 9501524 debug optional dovecot-core-dbgsym_2.3.19.1+dfsg1-2.1+deb12u6_s390x.deb
 2318c916b134894c516a7a6e5a134d3a 4234404 mail optional dovecot-core_2.3.19.1+dfsg1-2.1+deb12u6_s390x.deb
 3a4ade3850549912bcfbcf634655c55e 1744160 mail optional dovecot-dev_2.3.19.1+dfsg1-2.1+deb12u6_s390x.deb
 70c146c1d416f1be229a8d69fd758887 21168 debug optional dovecot-gssapi-dbgsym_2.3.19.1+dfsg1-2.1+deb12u6_s390x.deb
 53ae9b8b6c88177d0b69a89bfeb84a73 1362976 mail optional dovecot-gssapi_2.3.19.1+dfsg1-2.1+deb12u6_s390x.deb
 699c7b958ad5619a09be8f599e86d73b 679980 debug optional dovecot-imapd-dbgsym_2.3.19.1+dfsg1-2.1+deb12u6_s390x.deb
 1dbfc1f8be82deabcf8fc905eae5e040 1512288 mail optional dovecot-imapd_2.3.19.1+dfsg1-2.1+deb12u6_s390x.deb
 854f9b6cce6165cec6e12f0fb900276b 118604 debug optional dovecot-ldap-dbgsym_2.3.19.1+dfsg1-2.1+deb12u6_s390x.deb
 0afe56636433cb01ea1e4ad66245dd6f 1391372 mail optional dovecot-ldap_2.3.19.1+dfsg1-2.1+deb12u6_s390x.deb
 ae4c7a2961897c13e00bfa43e90a088a 91280 debug optional dovecot-lmtpd-dbgsym_2.3.19.1+dfsg1-2.1+deb12u6_s390x.deb
 0b6087a1155ef8e28523764900d822de 1377364 mail optional dovecot-lmtpd_2.3.19.1+dfsg1-2.1+deb12u6_s390x.deb
 e59600db9662acaf5eca54281b2ff900 151252 debug optional dovecot-lucene-dbgsym_2.3.19.1+dfsg1-2.1+deb12u6_s390x.deb
 0359253f623d9cefaa5b20108f7c0cd7 1380436 mail optional dovecot-lucene_2.3.19.1+dfsg1-2.1+deb12u6_s390x.deb
 338bf78143c026c24fc537b1ef54bdd6 146932 debug optional dovecot-managesieved-dbgsym_2.3.19.1+dfsg1-2.1+deb12u6_s390x.deb
 f27143a31cd6450c5c9de5b1ad3ef4ab 1395796 mail optional dovecot-managesieved_2.3.19.1+dfsg1-2.1+deb12u6_s390x.deb
 860bcc793c96eed2c3f566f15b704967 31016 debug optional dovecot-mysql-dbgsym_2.3.19.1+dfsg1-2.1+deb12u6_s390x.deb
 090e5a08dd5d37ba88216fe33cb9d9bf 1364620 mail optional dovecot-mysql_2.3.19.1+dfsg1-2.1+deb12u6_s390x.deb
 8cc46513f86e83b6c757959fea4e47cf 32588 debug optional dovecot-pgsql-dbgsym_2.3.19.1+dfsg1-2.1+deb12u6_s390x.deb
 fd70bd795f4f122b80c9abdba13df3b4 1367512 mail optional dovecot-pgsql_2.3.19.1+dfsg1-2.1+deb12u6_s390x.deb
 9a4811b13a5635b72b983ec31cc89546 89928 debug optional dovecot-pop3d-dbgsym_2.3.19.1+dfsg1-2.1+deb12u6_s390x.deb
 1a4f5e789cb8abd420990fcd5829daaa 1384244 mail optional dovecot-pop3d_2.3.19.1+dfsg1-2.1+deb12u6_s390x.deb
 3b22657cb2e259a60acd8518988f23b6 1537600 debug optional dovecot-sieve-dbgsym_2.3.19.1+dfsg1-2.1+deb12u6_s390x.deb
 1a77ff2e4dc5fa8d19fbb13e4cbdb557 1668684 mail optional dovecot-sieve_2.3.19.1+dfsg1-2.1+deb12u6_s390x.deb
 b2d42735604df060c2b2fcc1af78555a 86168 debug optional dovecot-solr-dbgsym_2.3.19.1+dfsg1-2.1+deb12u6_s390x.deb
 c15a32b56d96e6b4a3f1a09284d890c2 1374352 mail optional dovecot-solr_2.3.19.1+dfsg1-2.1+deb12u6_s390x.deb
 8e8287e1a77ee6e4b3842f61b9d1420b 17988 debug optional dovecot-sqlite-dbgsym_2.3.19.1+dfsg1-2.1+deb12u6_s390x.deb
 c8a88f021f2434031858074a0b59e1f2 1362716 mail optional dovecot-sqlite_2.3.19.1+dfsg1-2.1+deb12u6_s390x.deb
 2d73d5a772eb6edd245fc7289d8e81e6 177696 debug optional dovecot-submissiond-dbgsym_2.3.19.1+dfsg1-2.1+deb12u6_s390x.deb
 a4dba57518c9de8a2327c18de565b777 1398660 mail optional dovecot-submissiond_2.3.19.1+dfsg1-2.1+deb12u6_s390x.deb
 ae8b95aa823a7c6f98644c83a29f3bb7 18663 mail optional dovecot_2.3.19.1+dfsg1-2.1+deb12u6_s390x-buildd.buildinfo

-----BEGIN PGP SIGNATURE-----
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=rjom
-----END PGP SIGNATURE-----