-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Mon, 18 May 2026 14:11:58 -0400
Source: dovecot
Binary: dovecot-auth-lua dovecot-auth-lua-dbgsym dovecot-core dovecot-core-dbgsym dovecot-dev dovecot-gssapi dovecot-gssapi-dbgsym dovecot-imapd dovecot-imapd-dbgsym dovecot-ldap dovecot-ldap-dbgsym dovecot-lmtpd dovecot-lmtpd-dbgsym dovecot-lucene dovecot-lucene-dbgsym dovecot-managesieved dovecot-managesieved-dbgsym dovecot-mysql dovecot-mysql-dbgsym dovecot-pgsql dovecot-pgsql-dbgsym dovecot-pop3d dovecot-pop3d-dbgsym dovecot-sieve dovecot-sieve-dbgsym dovecot-solr dovecot-solr-dbgsym dovecot-sqlite dovecot-sqlite-dbgsym dovecot-submissiond dovecot-submissiond-dbgsym
Architecture: mipsel
Version: 1:2.3.19.1+dfsg1-2.1+deb12u6
Distribution: bookworm-security
Urgency: medium
Maintainer: mipsel Build Daemon (mipsel-osuosl-05) <buildd_mips64el-mipsel-osuosl-05@buildd.debian.org>
Changed-By: Noah Meyerhans <noahm@debian.org>
Description:
 dovecot-auth-lua - secure POP3/IMAP server - Lua authentication plugin
 dovecot-core - secure POP3/IMAP server - core files
 dovecot-dev - secure POP3/IMAP server - header files
 dovecot-gssapi - secure POP3/IMAP server - GSSAPI support
 dovecot-imapd - secure POP3/IMAP server - IMAP daemon
 dovecot-ldap - secure POP3/IMAP server - LDAP support
 dovecot-lmtpd - secure POP3/IMAP server - LMTP server
 dovecot-lucene - secure POP3/IMAP server - Lucene support
 dovecot-managesieved - secure POP3/IMAP server - ManageSieve server
 dovecot-mysql - secure POP3/IMAP server - MySQL support
 dovecot-pgsql - secure POP3/IMAP server - PostgreSQL support
 dovecot-pop3d - secure POP3/IMAP server - POP3 daemon
 dovecot-sieve - secure POP3/IMAP server - Sieve filters support
 dovecot-solr - secure POP3/IMAP server - Solr support
 dovecot-sqlite - secure POP3/IMAP server - SQLite support
 dovecot-submissiond - secure POP3/IMAP server - mail submission agent
Closes: 1136444
Changes:
 dovecot (1:2.3.19.1+dfsg1-2.1+deb12u6) bookworm-security; urgency=medium
 .
   * Security update (Closes: #1136444)
   * [1d0162a] autopkgtest: test cram-md5 authentication
   * [d4eed2a] CVE-2026-40016: Sieve :contains/:matches O(N×M) Substring
     Match Bypasses sieve_max_cpu_time Limit (130× Overrun)
   * [898776c] CVE-2026-33603: login: Base64 input can contain tabs that
     bypass IPC protection
   * [fe76a7b] CVE-2026-40020: IMAP folders can be shared-spammed to everyone
   * [ce379ba] CVE-2026-42006: imap-login: Excessive memory usage DoS
Checksums-Sha1:
 c7867448ce0b949fa9b873fad16f9682a2af8fac 34040 dovecot-auth-lua-dbgsym_2.3.19.1+dfsg1-2.1+deb12u6_mipsel.deb
 67acb6bfd259c9e9d35fa5b31a4ab0170e5a473b 1366192 dovecot-auth-lua_2.3.19.1+dfsg1-2.1+deb12u6_mipsel.deb
 1053d2f05cfa2f2c257ba9a8ab874515ff133b01 9612284 dovecot-core-dbgsym_2.3.19.1+dfsg1-2.1+deb12u6_mipsel.deb
 ca7085b18423d3e6041d54740150675f99c83c06 4217324 dovecot-core_2.3.19.1+dfsg1-2.1+deb12u6_mipsel.deb
 7d5cd2d27877d17da6d83e109f9c246d305a161a 1744120 dovecot-dev_2.3.19.1+dfsg1-2.1+deb12u6_mipsel.deb
 110208c4b719087c2f703807508979f39f9a8ceb 22064 dovecot-gssapi-dbgsym_2.3.19.1+dfsg1-2.1+deb12u6_mipsel.deb
 3afe2f247f3944af98f403c7503f3e159edc5436 1363036 dovecot-gssapi_2.3.19.1+dfsg1-2.1+deb12u6_mipsel.deb
 d48c751fe1d0d8446d5398f6a58f405be7f31ffe 682124 dovecot-imapd-dbgsym_2.3.19.1+dfsg1-2.1+deb12u6_mipsel.deb
 fbf51c3fce203a363c8f6962ea6dda8ef4fb7475 1523692 dovecot-imapd_2.3.19.1+dfsg1-2.1+deb12u6_mipsel.deb
 0852fd13bf2b30a2c9dbd54d33bd3de66f102db0 120296 dovecot-ldap-dbgsym_2.3.19.1+dfsg1-2.1+deb12u6_mipsel.deb
 fc5a9c84540761d661149f1ce7595d237e7fbc76 1390124 dovecot-ldap_2.3.19.1+dfsg1-2.1+deb12u6_mipsel.deb
 10e3bc126ef1cd35ec01069006acc3dd009c2eec 91984 dovecot-lmtpd-dbgsym_2.3.19.1+dfsg1-2.1+deb12u6_mipsel.deb
 354d2e58b13e31720dd2a6a3b49f66637c09f353 1378672 dovecot-lmtpd_2.3.19.1+dfsg1-2.1+deb12u6_mipsel.deb
 be39888f4b401c916f728a0e799504b8b5b11da0 150392 dovecot-lucene-dbgsym_2.3.19.1+dfsg1-2.1+deb12u6_mipsel.deb
 963dde4b9f1930d3dfa10b0eb98f77a0f8950d13 1381956 dovecot-lucene_2.3.19.1+dfsg1-2.1+deb12u6_mipsel.deb
 56e55766a101862bba2f1f6e50338d67b9eba33e 148860 dovecot-managesieved-dbgsym_2.3.19.1+dfsg1-2.1+deb12u6_mipsel.deb
 a6d7649aaae116962c115666b6be826a4aa2fa23 1399160 dovecot-managesieved_2.3.19.1+dfsg1-2.1+deb12u6_mipsel.deb
 deead16d31175952fb75f0952d7eefed4d547e70 32428 dovecot-mysql-dbgsym_2.3.19.1+dfsg1-2.1+deb12u6_mipsel.deb
 360bea1eef8382eb14906a7b950650389ad9dd55 1364404 dovecot-mysql_2.3.19.1+dfsg1-2.1+deb12u6_mipsel.deb
 1800eaecffd4f2020f797b5ca3303ff7890f57dc 34816 dovecot-pgsql-dbgsym_2.3.19.1+dfsg1-2.1+deb12u6_mipsel.deb
 8e0927b040befbb1a712b449d743b3fadb7472f2 1367416 dovecot-pgsql_2.3.19.1+dfsg1-2.1+deb12u6_mipsel.deb
 137541503cc4d9570fcf59731e168b693e3afe8e 90372 dovecot-pop3d-dbgsym_2.3.19.1+dfsg1-2.1+deb12u6_mipsel.deb
 f89d5bba57428d97155994a57ed01369a682ed82 1386344 dovecot-pop3d_2.3.19.1+dfsg1-2.1+deb12u6_mipsel.deb
 7bdac4691a05106efcb98e23ad96c54d448c51b1 1544156 dovecot-sieve-dbgsym_2.3.19.1+dfsg1-2.1+deb12u6_mipsel.deb
 895f075a9c2632f99089c8efd9a98fa388cc29d5 1651172 dovecot-sieve_2.3.19.1+dfsg1-2.1+deb12u6_mipsel.deb
 0f08185d28525b43ac6c76ab4fa0160861cb23ab 89556 dovecot-solr-dbgsym_2.3.19.1+dfsg1-2.1+deb12u6_mipsel.deb
 7f9672cc3409ab667302830dec641d01ce8cbe06 1374248 dovecot-solr_2.3.19.1+dfsg1-2.1+deb12u6_mipsel.deb
 7b260ed57016f575ea27ea7bfba2bf2a7cd34c40 18928 dovecot-sqlite-dbgsym_2.3.19.1+dfsg1-2.1+deb12u6_mipsel.deb
 fdf43a396d639da511da6a8429e2d2ae0bdfe3bc 1362684 dovecot-sqlite_2.3.19.1+dfsg1-2.1+deb12u6_mipsel.deb
 ca38b964190c052fd1fbca706a231974c8a1e994 178592 dovecot-submissiond-dbgsym_2.3.19.1+dfsg1-2.1+deb12u6_mipsel.deb
 ccce2ab9c08ffcd4c649548c52b7e58f57299e71 1402432 dovecot-submissiond_2.3.19.1+dfsg1-2.1+deb12u6_mipsel.deb
 987f7dc6b550ae47dc6828eda3ac91e61f513148 18713 dovecot_2.3.19.1+dfsg1-2.1+deb12u6_mipsel-buildd.buildinfo
Checksums-Sha256:
 a3fb7ff914c5782b4d23ddceccc169192de86cfe8f077976e18eb6e09d139f91 34040 dovecot-auth-lua-dbgsym_2.3.19.1+dfsg1-2.1+deb12u6_mipsel.deb
 522d399a0e6a5672a2736b27bc75d52b6ee536c3fc6896c5236d77fc21cc28fa 1366192 dovecot-auth-lua_2.3.19.1+dfsg1-2.1+deb12u6_mipsel.deb
 1a188ccc8372e0184eaa4af12dd061e9c958480ca284da100547d799337e6964 9612284 dovecot-core-dbgsym_2.3.19.1+dfsg1-2.1+deb12u6_mipsel.deb
 3ef06d0c15c19e62bf25d2977ce371223e7f8abaaf50ab68bb7fd2016d8159cb 4217324 dovecot-core_2.3.19.1+dfsg1-2.1+deb12u6_mipsel.deb
 4a9e62bd8dbe80ee932fef9ba0d00c23fa60c6685409a19a2074f85b5a6ded4d 1744120 dovecot-dev_2.3.19.1+dfsg1-2.1+deb12u6_mipsel.deb
 c4e682a78fa024226a18c2a8ca1a4348a96200cf7e62b51ce407fbe6fc7cd137 22064 dovecot-gssapi-dbgsym_2.3.19.1+dfsg1-2.1+deb12u6_mipsel.deb
 63d400a42e77ad0f4d1a21524be8aa64a89e4da0a2ceb1bee512f929822bc6ef 1363036 dovecot-gssapi_2.3.19.1+dfsg1-2.1+deb12u6_mipsel.deb
 05bbca81930c9b6b7528ce3a62ae6c836036e2ab59b32da8d6a7faec1046f60a 682124 dovecot-imapd-dbgsym_2.3.19.1+dfsg1-2.1+deb12u6_mipsel.deb
 dc29511597481fdc7c877534d6d50714d5b64735285703c26b0fe70dc3a44720 1523692 dovecot-imapd_2.3.19.1+dfsg1-2.1+deb12u6_mipsel.deb
 e1dce81abf4ce6dc8e8088a811ed78a935077048211aa7a3b0a46d649ecd2b60 120296 dovecot-ldap-dbgsym_2.3.19.1+dfsg1-2.1+deb12u6_mipsel.deb
 c147ebeac330e1645fbed49a0b6d272418a6542977f5d6ea5bd1606a88ee33ed 1390124 dovecot-ldap_2.3.19.1+dfsg1-2.1+deb12u6_mipsel.deb
 2d2355704576e543e614b13874f0549cdb397f555a207b57a0f2057c5dbff792 91984 dovecot-lmtpd-dbgsym_2.3.19.1+dfsg1-2.1+deb12u6_mipsel.deb
 34899d0048a8827e5a633c398dd9093fc532d8c10fa64d8535f12a1a8183f06a 1378672 dovecot-lmtpd_2.3.19.1+dfsg1-2.1+deb12u6_mipsel.deb
 7c16ca5a01764fbf44ff6dfaa856318c058cb908a53988dfad35f86a3b098488 150392 dovecot-lucene-dbgsym_2.3.19.1+dfsg1-2.1+deb12u6_mipsel.deb
 d70aac338f643fa1bd824ac2fa3d385470d1c914bdfebaccc96c06baaddf38e8 1381956 dovecot-lucene_2.3.19.1+dfsg1-2.1+deb12u6_mipsel.deb
 1a8ffec8f07c45bf35cb8e388ecbb05faf228728c224457d3cfc4afd9631f911 148860 dovecot-managesieved-dbgsym_2.3.19.1+dfsg1-2.1+deb12u6_mipsel.deb
 2ea7007080868e54ee88a7b0bf866785c357ceea00e6c116a762ae337a683a93 1399160 dovecot-managesieved_2.3.19.1+dfsg1-2.1+deb12u6_mipsel.deb
 bcfb31338b241206ae95b2dcefacdfac63ff9c22a559b30df08e6a4dc8c1ddca 32428 dovecot-mysql-dbgsym_2.3.19.1+dfsg1-2.1+deb12u6_mipsel.deb
 62e0cca593a1a27fda296957a8feb18da78a74d6cd3ea9b0fcc58150753c076f 1364404 dovecot-mysql_2.3.19.1+dfsg1-2.1+deb12u6_mipsel.deb
 a941a4a85bcdd88b25f75e09429acf3aa78ccd0bf5a0618ec296e6ded18be716 34816 dovecot-pgsql-dbgsym_2.3.19.1+dfsg1-2.1+deb12u6_mipsel.deb
 6a8dc6fa2c7943f3be40b7c8fe66c2906696ec4c92ce90b6b62dec8b1a80c8e7 1367416 dovecot-pgsql_2.3.19.1+dfsg1-2.1+deb12u6_mipsel.deb
 e68fbe1f9f0044a4fa1f2c573ed397a714110747df803d175b4351e5bf847f33 90372 dovecot-pop3d-dbgsym_2.3.19.1+dfsg1-2.1+deb12u6_mipsel.deb
 cace6af03a39713d839f97d786a81feb2bf67027037a9f84138dc3de4c487da0 1386344 dovecot-pop3d_2.3.19.1+dfsg1-2.1+deb12u6_mipsel.deb
 164e36cb4c41a052504f8721b9881dfe56ddbf897be9b1195d47b437b84aee78 1544156 dovecot-sieve-dbgsym_2.3.19.1+dfsg1-2.1+deb12u6_mipsel.deb
 82eb76c90c97a6dfeea25d60d8c6e2de888472497da60929cf643ebe89a659a6 1651172 dovecot-sieve_2.3.19.1+dfsg1-2.1+deb12u6_mipsel.deb
 513d1707ab25f1c644be3571ee7a1a65551aac3c253d0cf5582535df8b064c70 89556 dovecot-solr-dbgsym_2.3.19.1+dfsg1-2.1+deb12u6_mipsel.deb
 e3b9446cc30db0da5543726e65e1a6d476fae474baf8accecd70510cda8436cb 1374248 dovecot-solr_2.3.19.1+dfsg1-2.1+deb12u6_mipsel.deb
 befdde19c630004cf5e7a78edeb887c64393233b260dd616724351646b2dc51e 18928 dovecot-sqlite-dbgsym_2.3.19.1+dfsg1-2.1+deb12u6_mipsel.deb
 a779f625b8abe6e8a9d0594718e115f51581b855b86cd1de54a61fe22aba2b03 1362684 dovecot-sqlite_2.3.19.1+dfsg1-2.1+deb12u6_mipsel.deb
 2bdb77d9972c4e78138b08c050451e0fe81d636d4c2f7b0c83e57acc215e972b 178592 dovecot-submissiond-dbgsym_2.3.19.1+dfsg1-2.1+deb12u6_mipsel.deb
 98f3d6a6b2367ffd143a931fd0d64c947328d4ff53f35d365f4d6cb4eacfc0da 1402432 dovecot-submissiond_2.3.19.1+dfsg1-2.1+deb12u6_mipsel.deb
 4fd7c19a9fd2162c29712ff379b556e6b1cc1a62087c4c683815b16297d7ec2e 18713 dovecot_2.3.19.1+dfsg1-2.1+deb12u6_mipsel-buildd.buildinfo
Files:
 a438e8f7bb758d02d132aff5f6507654 34040 debug optional dovecot-auth-lua-dbgsym_2.3.19.1+dfsg1-2.1+deb12u6_mipsel.deb
 71af589437e7e9bdeeb6aa01db641307 1366192 mail optional dovecot-auth-lua_2.3.19.1+dfsg1-2.1+deb12u6_mipsel.deb
 5ddb0ec22f561da930ab47f83dec52b4 9612284 debug optional dovecot-core-dbgsym_2.3.19.1+dfsg1-2.1+deb12u6_mipsel.deb
 1671401a9a870d4c6e021f39f697f5ca 4217324 mail optional dovecot-core_2.3.19.1+dfsg1-2.1+deb12u6_mipsel.deb
 bdd5adefda19aa8f0eb44e2ddc1d7059 1744120 mail optional dovecot-dev_2.3.19.1+dfsg1-2.1+deb12u6_mipsel.deb
 8c6104e7e781b0635b4946166fda7085 22064 debug optional dovecot-gssapi-dbgsym_2.3.19.1+dfsg1-2.1+deb12u6_mipsel.deb
 f8d6ef5b022f842df404b7239da36134 1363036 mail optional dovecot-gssapi_2.3.19.1+dfsg1-2.1+deb12u6_mipsel.deb
 5bd5fae3eeae5c4f39b0f837842ad84d 682124 debug optional dovecot-imapd-dbgsym_2.3.19.1+dfsg1-2.1+deb12u6_mipsel.deb
 53655484e8ef9f82ce55add6da1617ad 1523692 mail optional dovecot-imapd_2.3.19.1+dfsg1-2.1+deb12u6_mipsel.deb
 f21597f7186f708a040c28a5ddcd8be3 120296 debug optional dovecot-ldap-dbgsym_2.3.19.1+dfsg1-2.1+deb12u6_mipsel.deb
 b7e32fb3245ab8c00cd2600045fe3cbe 1390124 mail optional dovecot-ldap_2.3.19.1+dfsg1-2.1+deb12u6_mipsel.deb
 3412e65195fed43694691996f0699055 91984 debug optional dovecot-lmtpd-dbgsym_2.3.19.1+dfsg1-2.1+deb12u6_mipsel.deb
 280942427a2e681fcc6fb0313172425d 1378672 mail optional dovecot-lmtpd_2.3.19.1+dfsg1-2.1+deb12u6_mipsel.deb
 fd6a1533b3d3a092d64efb5f8174f994 150392 debug optional dovecot-lucene-dbgsym_2.3.19.1+dfsg1-2.1+deb12u6_mipsel.deb
 f8ac7c370fa1f2f03f7a55c83fb6adfe 1381956 mail optional dovecot-lucene_2.3.19.1+dfsg1-2.1+deb12u6_mipsel.deb
 1ad1905bae0cf9474cd460f84dd39af1 148860 debug optional dovecot-managesieved-dbgsym_2.3.19.1+dfsg1-2.1+deb12u6_mipsel.deb
 7f72e75f40724f1cb2ae1f9edb64ad8f 1399160 mail optional dovecot-managesieved_2.3.19.1+dfsg1-2.1+deb12u6_mipsel.deb
 29c33d12cc8821b2a29aa42eaa33fa16 32428 debug optional dovecot-mysql-dbgsym_2.3.19.1+dfsg1-2.1+deb12u6_mipsel.deb
 959595bc23c3e1ac0681a353d4291236 1364404 mail optional dovecot-mysql_2.3.19.1+dfsg1-2.1+deb12u6_mipsel.deb
 92abd094856d863f597b0426beec9e91 34816 debug optional dovecot-pgsql-dbgsym_2.3.19.1+dfsg1-2.1+deb12u6_mipsel.deb
 6b60296ec42c448b466334a76c222c9a 1367416 mail optional dovecot-pgsql_2.3.19.1+dfsg1-2.1+deb12u6_mipsel.deb
 d23861fd7f3dfcd4d6bc5a7619178c04 90372 debug optional dovecot-pop3d-dbgsym_2.3.19.1+dfsg1-2.1+deb12u6_mipsel.deb
 843d879594dd05f34521d2fb4a58bbfe 1386344 mail optional dovecot-pop3d_2.3.19.1+dfsg1-2.1+deb12u6_mipsel.deb
 e0f05b06e6f8c41acf8b2084192cdc08 1544156 debug optional dovecot-sieve-dbgsym_2.3.19.1+dfsg1-2.1+deb12u6_mipsel.deb
 830e14ebb0e1f52e9f52cdefd32269e7 1651172 mail optional dovecot-sieve_2.3.19.1+dfsg1-2.1+deb12u6_mipsel.deb
 4504549740dfd8c07f1ee828268f1718 89556 debug optional dovecot-solr-dbgsym_2.3.19.1+dfsg1-2.1+deb12u6_mipsel.deb
 f7a295bd7a68ec1ce0b1789ffb6661a4 1374248 mail optional dovecot-solr_2.3.19.1+dfsg1-2.1+deb12u6_mipsel.deb
 34f9110f05e67ddfc612ae0fc788e08f 18928 debug optional dovecot-sqlite-dbgsym_2.3.19.1+dfsg1-2.1+deb12u6_mipsel.deb
 fbebd52497371b41650525e87ca0796b 1362684 mail optional dovecot-sqlite_2.3.19.1+dfsg1-2.1+deb12u6_mipsel.deb
 05dd7570946347fcf363f7678d51337c 178592 debug optional dovecot-submissiond-dbgsym_2.3.19.1+dfsg1-2.1+deb12u6_mipsel.deb
 2b0ffc4596acf445a5513c03177a1e04 1402432 mail optional dovecot-submissiond_2.3.19.1+dfsg1-2.1+deb12u6_mipsel.deb
 371b1a04c26885bc41848f71396b65e8 18713 mail optional dovecot_2.3.19.1+dfsg1-2.1+deb12u6_mipsel-buildd.buildinfo

-----BEGIN PGP SIGNATURE-----
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=HwqH
-----END PGP SIGNATURE-----