Debian alert DSA-6197-2 (dovecot)

From:
             
 
Moritz Muehlenhoff <jmm@debian.org>
To:
             
 
debian-security-announce@lists.debian.org
Subject:
             
 
[SECURITY] [DSA 6197-2] dovecot regression update
Date:
             
 
Mon, 06 Apr 2026 21:19:54 +0000
Message-ID:
             
 
<adQjerw0K1GMeCN-@seger.debian.org>
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

- -------------------------------------------------------------------------
Debian Security Advisory DSA-6197-2                   security@debian.org
https://www.debian.org/security/                       Moritz Muehlenhoff
April 06, 2026                        https://www.debian.org/security/faq
- -------------------------------------------------------------------------

Package        : dovecot

The Bookworm backport of the security fix for CVE-2025-59032 introduced
a regression in authenticating against managesieved.

For the oldstable distribution (bookworm), this problem has been fixed
in version 1:2.3.19.1+dfsg1-2.1+deb12u3.

We recommend that you upgrade your dovecot packages.

For the detailed security status of dovecot please refer to
its security tracker page at:
https://security-tracker.debian.org/tracker/dovecot

Further information about Debian Security Advisories, how to apply
these updates to your system and frequently asked questions can be
found at: https://www.debian.org/security/

Mailing list: debian-security-announce@lists.debian.org
-----BEGIN PGP SIGNATURE-----
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=wq+z
-----END PGP SIGNATURE-----