-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Mon, 18 May 2026 16:03:51 -0400 Source: dovecot Binary: dovecot-auth-lua dovecot-auth-lua-dbgsym dovecot-core dovecot-core-dbgsym dovecot-dev dovecot-flatcurve dovecot-flatcurve-dbgsym dovecot-gssapi dovecot-gssapi-dbgsym dovecot-imapd dovecot-imapd-dbgsym dovecot-ldap dovecot-ldap-dbgsym dovecot-lmtpd dovecot-lmtpd-dbgsym dovecot-managesieved dovecot-managesieved-dbgsym dovecot-mysql dovecot-mysql-dbgsym dovecot-pgsql dovecot-pgsql-dbgsym dovecot-pop3d dovecot-pop3d-dbgsym dovecot-sieve dovecot-sieve-dbgsym dovecot-solr dovecot-solr-dbgsym dovecot-sqlite dovecot-sqlite-dbgsym dovecot-submissiond dovecot-submissiond-dbgsym Architecture: ppc64el Version: 1:2.4.1+dfsg1-6+deb13u6 Distribution: trixie-security Urgency: medium Maintainer: ppc64el Build Daemon (ppc64el-osuosl-01) Changed-By: Noah Meyerhans Description: dovecot-auth-lua - secure POP3/IMAP server - Lua authentication plugin dovecot-core - secure POP3/IMAP server - core files dovecot-dev - secure POP3/IMAP server - header files dovecot-flatcurve - secure POP3/IMAP server - Flatcurve support dovecot-gssapi - secure POP3/IMAP server - GSSAPI support dovecot-imapd - secure POP3/IMAP server - IMAP daemon dovecot-ldap - secure POP3/IMAP server - LDAP support dovecot-lmtpd - secure POP3/IMAP server - LMTP server dovecot-managesieved - secure POP3/IMAP server - ManageSieve server dovecot-mysql - secure POP3/IMAP server - MySQL support dovecot-pgsql - secure POP3/IMAP server - PostgreSQL support dovecot-pop3d - secure POP3/IMAP server - POP3 daemon dovecot-sieve - secure POP3/IMAP server - Sieve filters support dovecot-solr - secure POP3/IMAP server - Solr support dovecot-sqlite - secure POP3/IMAP server - SQLite support dovecot-submissiond - secure POP3/IMAP server - mail submission agent Closes: 1136444 Changes: dovecot (1:2.4.1+dfsg1-6+deb13u6) trixie-security; urgency=medium . * Security update (Closes: #1136444) * [76ceed4] CVE-2026-27851: lib-var-expand: Reset safe state when transfer is unset * [4af6fb3] CVE-2026-40016: lib-sieve: Enforce CPU time limit within :contains and :matches matcher loops * [366ef61] CVE-2026-33603: login-common: Only accept base64 in sasl * [26bd41e] CVE-2026-40020: IMAP folders can be shared-spammed to everyone. * [b6f5bac] CVE-2026-42006: imap-login: Excessive memory usage DoS Checksums-Sha1: 93718874dea1b2a269dad7d637ad09a50076776f 33008 dovecot-auth-lua-dbgsym_2.4.1+dfsg1-6+deb13u6_ppc64el.deb a14192c80d088deed91e7f914e9bcc16ebc21a45 22532 dovecot-auth-lua_2.4.1+dfsg1-6+deb13u6_ppc64el.deb f93dd4fa53a0e8f1e63ce6088d0e4f426e91661c 10152432 dovecot-core-dbgsym_2.4.1+dfsg1-6+deb13u6_ppc64el.deb f726d78ce0b77f38ce51a102337a9c0a044fc052 2823584 dovecot-core_2.4.1+dfsg1-6+deb13u6_ppc64el.deb 1584df3bf298b55500f46c2b33ff586e139aea33 429424 dovecot-dev_2.4.1+dfsg1-6+deb13u6_ppc64el.deb 5bf6edd6ae94a62a775eefc7b937c2b5b01262c0 189524 dovecot-flatcurve-dbgsym_2.4.1+dfsg1-6+deb13u6_ppc64el.deb 979e03142fa566e6021043d634c8f9b78957cd72 43676 dovecot-flatcurve_2.4.1+dfsg1-6+deb13u6_ppc64el.deb 6837086b6c6d59925bd585a841aa5587c9822890 21508 dovecot-gssapi-dbgsym_2.4.1+dfsg1-6+deb13u6_ppc64el.deb bc0d753363e1a33914002f087cb23b582c323ad8 18952 dovecot-gssapi_2.4.1+dfsg1-6+deb13u6_ppc64el.deb 62c89ff9019f4df38fae2dd5aaba988f4c35be09 754228 dovecot-imapd-dbgsym_2.4.1+dfsg1-6+deb13u6_ppc64el.deb 0f43a8c68c754e92892e4430293d70cdc18eb1b1 207096 dovecot-imapd_2.4.1+dfsg1-6+deb13u6_ppc64el.deb 0f6a17e63cf1d6405912af9752405b49081fd889 171968 dovecot-ldap-dbgsym_2.4.1+dfsg1-6+deb13u6_ppc64el.deb 1b5fd9bc38aef2906ae8219ee3dfc3b0d84110d5 55724 dovecot-ldap_2.4.1+dfsg1-6+deb13u6_ppc64el.deb 30e6eed9fa2e7c43ad32f3f99fa96d1b81449fa6 102428 dovecot-lmtpd-dbgsym_2.4.1+dfsg1-6+deb13u6_ppc64el.deb 110d509cac142cbca8af26279b625cc3a9ad89a9 38184 dovecot-lmtpd_2.4.1+dfsg1-6+deb13u6_ppc64el.deb cb6d4c705947eef47ea9571546e49477720d07a1 120600 dovecot-managesieved-dbgsym_2.4.1+dfsg1-6+deb13u6_ppc64el.deb 183d52e713d8c8636d5605e2892b70762494694e 49336 dovecot-managesieved_2.4.1+dfsg1-6+deb13u6_ppc64el.deb 319bc03cad0fbd70db8868e57fa79ed1fe35dd8b 36312 dovecot-mysql-dbgsym_2.4.1+dfsg1-6+deb13u6_ppc64el.deb c65d41b7c1ed26df72c6db337a64b53b928eccfb 21332 dovecot-mysql_2.4.1+dfsg1-6+deb13u6_ppc64el.deb 4ddf4808796e5b29b59e71f5355aa05eec55b7c2 39396 dovecot-pgsql-dbgsym_2.4.1+dfsg1-6+deb13u6_ppc64el.deb 88e24a36291389dd157c12ad94625a0ebc59129c 25620 dovecot-pgsql_2.4.1+dfsg1-6+deb13u6_ppc64el.deb 31bbf70d289281801ab9807f16681813a38de1f8 107404 dovecot-pop3d-dbgsym_2.4.1+dfsg1-6+deb13u6_ppc64el.deb a37fabb488fbb8e34555348d238ca99fbc087b60 47580 dovecot-pop3d_2.4.1+dfsg1-6+deb13u6_ppc64el.deb 89028e2770e7126282cfd1e143d9f77b2ecab159 1707892 dovecot-sieve-dbgsym_2.4.1+dfsg1-6+deb13u6_ppc64el.deb 5064ce0a68ed52c36639f07ba784cddb33dcb177 394480 dovecot-sieve_2.4.1+dfsg1-6+deb13u6_ppc64el.deb 6affa344538688df613cdf4ae3e288cf6c878745 75960 dovecot-solr-dbgsym_2.4.1+dfsg1-6+deb13u6_ppc64el.deb fb77fbd44764ab9c8c3a58a99bce994f329cf4e5 39416 dovecot-solr_2.4.1+dfsg1-6+deb13u6_ppc64el.deb bf29e5a5a72da78c629e60204ce6347826d83768 25504 dovecot-sqlite-dbgsym_2.4.1+dfsg1-6+deb13u6_ppc64el.deb a1b292630e61a032438efda8f4d7cce0c93efb51 20652 dovecot-sqlite_2.4.1+dfsg1-6+deb13u6_ppc64el.deb bac9365d808812c68c15345c40b463fd77eb00a5 210708 dovecot-submissiond-dbgsym_2.4.1+dfsg1-6+deb13u6_ppc64el.deb 91aed7f8106809b812a626314310c02ddb3c5466 63532 dovecot-submissiond_2.4.1+dfsg1-6+deb13u6_ppc64el.deb 8f59ad82f53bbf6156b212830b52a66f307ed289 18244 dovecot_2.4.1+dfsg1-6+deb13u6_ppc64el-buildd.buildinfo Checksums-Sha256: 49ce6a58b880422549c68ee61a18e60355380768965eabae4f662837e93a8cfe 33008 dovecot-auth-lua-dbgsym_2.4.1+dfsg1-6+deb13u6_ppc64el.deb b207a2396571f1b2209228c12d9938410ac8e172f69216ce3250f43e1f81b95a 22532 dovecot-auth-lua_2.4.1+dfsg1-6+deb13u6_ppc64el.deb 104a19e00ab4adfe19761746a37f8ea5ad8ac3d1e079acfe6bf5d72ac5b37a7e 10152432 dovecot-core-dbgsym_2.4.1+dfsg1-6+deb13u6_ppc64el.deb d4da9eac1396bd2534d3d422c78c116a122f1ffd19a58597434cafb062e63c0e 2823584 dovecot-core_2.4.1+dfsg1-6+deb13u6_ppc64el.deb 2f935f73e11002bfb4c85b053e5460fe8b65a74f898bac03f92662e9bace88f8 429424 dovecot-dev_2.4.1+dfsg1-6+deb13u6_ppc64el.deb 1cba615d9affa604fdbdc98b94a8c61fd1458d8fa05bb8ad4a5d21d580239ae6 189524 dovecot-flatcurve-dbgsym_2.4.1+dfsg1-6+deb13u6_ppc64el.deb 19dcc306258ddf2ec29f1acad33ee1e46f7c5937086bba91436a7c4abd0f1a30 43676 dovecot-flatcurve_2.4.1+dfsg1-6+deb13u6_ppc64el.deb ee7f5a982b8a6d6170d2dcf4de4585b976e6d2e6590cd53c0b1861e2d96eeb62 21508 dovecot-gssapi-dbgsym_2.4.1+dfsg1-6+deb13u6_ppc64el.deb 2fa66137f78374ed5c57e1a533b0334afe2b9c3126878ba51d4490bfe5c3df01 18952 dovecot-gssapi_2.4.1+dfsg1-6+deb13u6_ppc64el.deb 29fd5c76e82a9a2fd00ea2d0e5707b2ef0bb07828ce184aee812f5a35cf7b6d7 754228 dovecot-imapd-dbgsym_2.4.1+dfsg1-6+deb13u6_ppc64el.deb 12bacabdb30c2422424503bea459d8214400338689772a14bd1dac5f91254f17 207096 dovecot-imapd_2.4.1+dfsg1-6+deb13u6_ppc64el.deb 882efe96ca2ccce5ae157e6f3eebd4e740cb97fc3315b8c48d97a16167e11750 171968 dovecot-ldap-dbgsym_2.4.1+dfsg1-6+deb13u6_ppc64el.deb 4006c22c395486afe51c6826aa2396c83b93dbc85b14cb44c558896c7b4a5811 55724 dovecot-ldap_2.4.1+dfsg1-6+deb13u6_ppc64el.deb 51f85242cce8fbbbd391edbf37d2a25168c6225d4a6132dc88cf6c592161d6b2 102428 dovecot-lmtpd-dbgsym_2.4.1+dfsg1-6+deb13u6_ppc64el.deb defed9efdf7df59e36099b5927749fc72e295ff71dbdb6aebcdf0a26c233872b 38184 dovecot-lmtpd_2.4.1+dfsg1-6+deb13u6_ppc64el.deb 5999266364bd747617f0da423f2166b16c8a339432ed8139de5393fa14deebca 120600 dovecot-managesieved-dbgsym_2.4.1+dfsg1-6+deb13u6_ppc64el.deb 25a82eaab9f0fba5d955e1d25555f3b06bcd0da9fbfa480b9489c72ea35e9689 49336 dovecot-managesieved_2.4.1+dfsg1-6+deb13u6_ppc64el.deb 1c2fe50de0782d1f6c0077fc96e76e18b60d70b7cde6a774ff0648fb10f18628 36312 dovecot-mysql-dbgsym_2.4.1+dfsg1-6+deb13u6_ppc64el.deb b1f968b0eeb10775f045204525d81c60792b463a4979a5935f25259e7a55f48c 21332 dovecot-mysql_2.4.1+dfsg1-6+deb13u6_ppc64el.deb 93b25f1c927c62a25afde729603528d5770f4e6a21de2bd397f51681968b3c6c 39396 dovecot-pgsql-dbgsym_2.4.1+dfsg1-6+deb13u6_ppc64el.deb 068dce9e4b3ed6999c63e0ce161fee74b778543370ebb7772f5c22bd2221f075 25620 dovecot-pgsql_2.4.1+dfsg1-6+deb13u6_ppc64el.deb 3b4c11bcb881edcf962aec2bc67c2aa860bb1bde4d9c489de8ff8e14aa3436a8 107404 dovecot-pop3d-dbgsym_2.4.1+dfsg1-6+deb13u6_ppc64el.deb 1c07dfaa6b45081abd4093a24ba825367b1abb716427077033d9389f46a480b0 47580 dovecot-pop3d_2.4.1+dfsg1-6+deb13u6_ppc64el.deb e1c0f7d0805bc16b981245558b41cac0654117b448eb3c35ab8191453f77b3bf 1707892 dovecot-sieve-dbgsym_2.4.1+dfsg1-6+deb13u6_ppc64el.deb d424fb5c7efc935a5b27a37f59477f153e0f28b31de5e9ed6a9f9cbd438676e5 394480 dovecot-sieve_2.4.1+dfsg1-6+deb13u6_ppc64el.deb 46c07a39e9f7ed5a216a6b5be44134c71043ae11ddaf9599d56a713fe5779d4c 75960 dovecot-solr-dbgsym_2.4.1+dfsg1-6+deb13u6_ppc64el.deb e9d75caa4b5c8c448948abcb12777c137e1e991fcd52f14c80dddb0e40cb66f7 39416 dovecot-solr_2.4.1+dfsg1-6+deb13u6_ppc64el.deb 92832709df5c442ba76a625efec48589bf40a61076e5c9551c919e516b85d788 25504 dovecot-sqlite-dbgsym_2.4.1+dfsg1-6+deb13u6_ppc64el.deb 190ee2d91a6d47e38b53c0bb3a9f771d12e1fd380fb63bf76dfda188ad562a65 20652 dovecot-sqlite_2.4.1+dfsg1-6+deb13u6_ppc64el.deb 477dcdb6e1bfc8e8426f3373d43f4efc0f5b4a804f6db701d80eb13bac6e9d0f 210708 dovecot-submissiond-dbgsym_2.4.1+dfsg1-6+deb13u6_ppc64el.deb a7f7d9f047a122e83fd7fe4ea3150130272150c311ae4361bd92b2d686299aca 63532 dovecot-submissiond_2.4.1+dfsg1-6+deb13u6_ppc64el.deb 9a8cc0963f97b549838792241eaab689318ca1cb0e6e955ed7a294d7710b700e 18244 dovecot_2.4.1+dfsg1-6+deb13u6_ppc64el-buildd.buildinfo Files: a87971750f94c19b87567011bea250c8 33008 debug optional dovecot-auth-lua-dbgsym_2.4.1+dfsg1-6+deb13u6_ppc64el.deb bc7676c20b4c29c2b10682e1ddacdd71 22532 mail optional dovecot-auth-lua_2.4.1+dfsg1-6+deb13u6_ppc64el.deb 48c2c48a346a1cf83c0b54110d74388c 10152432 debug optional dovecot-core-dbgsym_2.4.1+dfsg1-6+deb13u6_ppc64el.deb a1c4c7c5f4d1048c13cc252cf4eb517c 2823584 mail optional dovecot-core_2.4.1+dfsg1-6+deb13u6_ppc64el.deb 7e7363f480643eb29a64d05ce2286314 429424 mail optional dovecot-dev_2.4.1+dfsg1-6+deb13u6_ppc64el.deb 6fe3568c38325b7eabc32a2c38453eed 189524 debug optional dovecot-flatcurve-dbgsym_2.4.1+dfsg1-6+deb13u6_ppc64el.deb 75aee7294de2773ad2788fe919c217b8 43676 mail optional dovecot-flatcurve_2.4.1+dfsg1-6+deb13u6_ppc64el.deb 384e43f23203687bd9c13c4ce1573cfa 21508 debug optional dovecot-gssapi-dbgsym_2.4.1+dfsg1-6+deb13u6_ppc64el.deb 1c2ca0b959b2cc28cae5fa54041cbfa2 18952 mail optional dovecot-gssapi_2.4.1+dfsg1-6+deb13u6_ppc64el.deb 26265fe3ffc737df00afac38382dd477 754228 debug optional dovecot-imapd-dbgsym_2.4.1+dfsg1-6+deb13u6_ppc64el.deb 3eb1ca1e68c6d8bfabb883af68c6748b 207096 mail optional dovecot-imapd_2.4.1+dfsg1-6+deb13u6_ppc64el.deb fd563201c2478f7de4df4422ed27ad38 171968 debug optional dovecot-ldap-dbgsym_2.4.1+dfsg1-6+deb13u6_ppc64el.deb d9a35727beaccd8b3b82615d93f37ffa 55724 mail optional dovecot-ldap_2.4.1+dfsg1-6+deb13u6_ppc64el.deb 12d68884660206a6413967dca8a43da4 102428 debug optional dovecot-lmtpd-dbgsym_2.4.1+dfsg1-6+deb13u6_ppc64el.deb 0c44a001b05cc467c553123fd8f62ef3 38184 mail optional dovecot-lmtpd_2.4.1+dfsg1-6+deb13u6_ppc64el.deb e0f1899c2b2e7c79373890debc345f8f 120600 debug optional dovecot-managesieved-dbgsym_2.4.1+dfsg1-6+deb13u6_ppc64el.deb bdbb0b7bfa9cec0dede4342e6a622279 49336 mail optional dovecot-managesieved_2.4.1+dfsg1-6+deb13u6_ppc64el.deb a225b898d3f8881f6128e3216a153701 36312 debug optional dovecot-mysql-dbgsym_2.4.1+dfsg1-6+deb13u6_ppc64el.deb f933ddc4b5ef829d5250cb0d91955d05 21332 mail optional dovecot-mysql_2.4.1+dfsg1-6+deb13u6_ppc64el.deb dd669a15494c927cc921263c9e2e2245 39396 debug optional dovecot-pgsql-dbgsym_2.4.1+dfsg1-6+deb13u6_ppc64el.deb 5402d8dcfed068eed268ea6dbadda9ec 25620 mail optional dovecot-pgsql_2.4.1+dfsg1-6+deb13u6_ppc64el.deb 2d1a4df0f98b6b56913bf9f037d52056 107404 debug optional dovecot-pop3d-dbgsym_2.4.1+dfsg1-6+deb13u6_ppc64el.deb 2c132b8f78b4806e31fddd6ae2725e14 47580 mail optional dovecot-pop3d_2.4.1+dfsg1-6+deb13u6_ppc64el.deb 003f0ba5cb7ead025021399cc5b93f55 1707892 debug optional dovecot-sieve-dbgsym_2.4.1+dfsg1-6+deb13u6_ppc64el.deb 3498fbeb37ad10f077e90b06db535830 394480 mail optional dovecot-sieve_2.4.1+dfsg1-6+deb13u6_ppc64el.deb 751d8939edd81bf40580e6399ffca0d9 75960 debug optional dovecot-solr-dbgsym_2.4.1+dfsg1-6+deb13u6_ppc64el.deb 3bb394986483ffbaf68011ea9b32fb03 39416 mail optional dovecot-solr_2.4.1+dfsg1-6+deb13u6_ppc64el.deb 29d9035ade4de51e231739bd6895b128 25504 debug optional dovecot-sqlite-dbgsym_2.4.1+dfsg1-6+deb13u6_ppc64el.deb 469ee2f311a6a53e284a8f10124cf497 20652 mail optional dovecot-sqlite_2.4.1+dfsg1-6+deb13u6_ppc64el.deb 9ee0eb8e909df06ed4905fa1a6159b8f 210708 debug optional dovecot-submissiond-dbgsym_2.4.1+dfsg1-6+deb13u6_ppc64el.deb a7bfeb27b0ab6d3f697a79ede11fbe86 63532 mail optional dovecot-submissiond_2.4.1+dfsg1-6+deb13u6_ppc64el.deb 2d9314c8292867110685fd2936797be8 18244 mail optional dovecot_2.4.1+dfsg1-6+deb13u6_ppc64el-buildd.buildinfo -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEETLpi2USYGUNSlYhoNINNphgym2QFAmoZ9HYACgkQNINNphgy m2SQEg/7BlYCWPqSFmhTzZqOG9RRmp17kSp1i7vfCe06AuuB+8K0P0r+0AGuY8Wl JTzhh8DVCkDtwDgIH2r3NqKJ9pt8AR1wEFyzoJtjMilE5it3jXU+2Qu8cqwRsmr+ ZQXZLOh2pkvxm0iFWY/HEe3UXsKQeMh+B2218qbWFrpgYoPLAEP8ieeGL18Dk+JR P5UiA+3/chiTiq47hDJIttb2QjSb6stN4H8n+gy0XtgUod2pzs/tBHcfaEHi7ARD 4Xh6TBfhKRIobJkOqDDOzWyRSR2yV6E2Ui/cQWbBCyvlANAEQvAm76BVYGO8Rwkm ChG+ih9rcrwvoNsjv0te0x1rFRD4glKcG3Ro4yb1/5fUET0aSTSF1hofo0GknRoZ vCt2+alcq/NFvjm5JFZ6zqZK/bDOM4VM9NETj8Hq51R0Q/fS8idSmWKLIKsf99io SQRKbTgbVU09GS8fRks/+Dd8//bEOnpBK2sSnCF9z4b59yvGl96Exa86tTLjk1QL OKHGhs/8ruwahV5bwoQW4tA1hzE3Zb8CxsB5/EcRovfYwZXzfdoR3edEX8tQ/pV0 l8Jin/s3hdxVJe42/I6NniaGVGHJyGeZhI8s8a5a6dml8uCIwO21l2/cTwHgEGVV bsyxYu1IRvCD3xyOps3A/MGm8xZbEhWU5qIohihsvzhML/VB/5o= =AsV6 -----END PGP SIGNATURE-----