CVE catalog

CVE-2020-28200

dovecot affected and fixed versions

[CVE catalog]

The Sieve engine in Dovecot before 2.3.15 allows Uncontrolled Resource Consumption, as demonstrated by a situation with a complex regular expression for the regex extension.

Severity
Medium · CVSS 4.3CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L
Published
Source
[NVD] · [CVE record]
EPSS
1.97% · Oct 27, 2026

Projects and upstream resources

Reported versions and fixes

Each observation applies to its named package, distribution, and release. Distribution backports can fix a vulnerability while retaining an older upstream version number.

Distribution / releasePackageVersionStatusSource
Debiantrixie-securitydovecot1:2.4.1+dfsg1-6+deb13u7Fixed[CVE-2020-28200]
Debiantrixiedovecot1:2.3.16+dfsg1-1FixedDistribution-reported fixed boundary[CVE-2020-28200]
Debiantrixiedovecot1:2.4.1+dfsg1-6+deb13u6Fixed[CVE-2020-28200]
Debiansiddovecot1:2.3.16+dfsg1-1FixedDistribution-reported fixed boundary[CVE-2020-28200]
Debiansiddovecot1:2.4.5+dfsg1-4Fixed[CVE-2020-28200]
Debianforkydovecot1:2.3.16+dfsg1-1FixedDistribution-reported fixed boundary[CVE-2020-28200]
Debianforkydovecot1:2.4.5+dfsg1-4Fixed[CVE-2020-28200]
Debianbookworm-securitydovecot1:2.3.19.1+dfsg1-2.1+deb12u6Fixed[CVE-2020-28200]
Debianbookwormdovecot1:2.3.16+dfsg1-1FixedDistribution-reported fixed boundary[CVE-2020-28200]
Debianbookwormdovecot1:2.3.19.1+dfsg1-2.1+deb12u6Fixed[CVE-2020-28200]

Showing 10 fix observations. All 80 observations, including unknown and conflicting reports, are available below.

Provider details and historical evidence
Distribution / releasePackageVersionStatusSource
UnknownRelease not reporteddovecot1:2.3.16+dfsg1-1UnknownSource applicability is not establishedProvider not reported
Debianbookwormdovecot1:2.3.16+dfsg1-1FixedDistribution-reported fixed boundary[CVE-2020-28200]
Debianbookwormdovecot1:2.3.19.1+dfsg1-2.1+deb12u6Fixed[CVE-2020-28200]
Debianbookworm-securitydovecot1:2.3.19.1+dfsg1-2.1+deb12u6Fixed[CVE-2020-28200]
Debianforkydovecot1:2.3.16+dfsg1-1FixedDistribution-reported fixed boundary[CVE-2020-28200]
Debianforkydovecot1:2.4.5+dfsg1-4Fixed[CVE-2020-28200]
Debiansiddovecot1:2.3.16+dfsg1-1FixedDistribution-reported fixed boundary[CVE-2020-28200]
Debiansiddovecot1:2.4.5+dfsg1-4Fixed[CVE-2020-28200]
Debiantrixiedovecot1:2.3.16+dfsg1-1FixedDistribution-reported fixed boundary[CVE-2020-28200]
Debiantrixiedovecot1:2.4.1+dfsg1-6+deb13u6Fixed[CVE-2020-28200]
Debiantrixie-securitydovecot1:2.4.1+dfsg1-6+deb13u7Fixed[CVE-2020-28200]
Opensuseleap 15.2dovecot232.3.15-lp152.2.12.1UnknownSource applicability is not established[OPENSUSE-SU-2021:1225-1]
Opensuseleap 15.3dovecot232.3.15-58.3UnknownSource applicability is not established[OPENSUSE-SU-2021:2892-1]
Suseenterprise storage 6dovecot232.3.15-27.3UnknownSource applicability is not established[SUSE-SU-2021:2891-1]
Suselinux enterprise high performance computing 15 sp1-esposdovecot232.3.15-27.3UnknownSource applicability is not established[SUSE-SU-2021:2891-1]
Suselinux enterprise high performance computing 15 sp1-ltssdovecot232.3.15-27.3UnknownSource applicability is not established[SUSE-SU-2021:2891-1]
Suselinux enterprise high performance computing 15-esposdovecot232.3.15-4.38.3UnknownSource applicability is not established[SUSE-SU-2021:2890-1]
Suselinux enterprise high performance computing 15-ltssdovecot232.3.15-4.38.3UnknownSource applicability is not established[SUSE-SU-2021:2890-1]
Suselinux enterprise module for server applications 15 sp2dovecot232.3.15-58.3UnknownSource applicability is not established[SUSE-SU-2021:2892-1]
Suselinux enterprise module for server applications 15 sp3dovecot232.3.15-58.3UnknownSource applicability is not established[SUSE-SU-2021:2892-1]
Suselinux enterprise server 15 sp1-bcldovecot232.3.15-27.3UnknownSource applicability is not established[SUSE-SU-2021:2891-1]
Suselinux enterprise server 15 sp1-ltssdovecot232.3.15-27.3UnknownSource applicability is not established[SUSE-SU-2021:2891-1]
Suselinux enterprise server 15-ltssdovecot232.3.15-4.38.3UnknownSource applicability is not established[SUSE-SU-2021:2890-1]
Suselinux enterprise server for sap applications 15dovecot232.3.15-4.38.3UnknownSource applicability is not established[SUSE-SU-2021:2890-1]
Suselinux enterprise server for sap applications 15 sp1dovecot232.3.15-27.3UnknownSource applicability is not established[SUSE-SU-2021:2891-1]
Susemanager proxy 4.0dovecot232.3.15-27.3UnknownSource applicability is not established[SUSE-SU-2021:2891-1]
Susemanager retail branch server 4.0dovecot232.3.15-27.3UnknownSource applicability is not established[SUSE-SU-2021:2891-1]
Susemanager server 4.0dovecot232.3.15-27.3UnknownSource applicability is not established[SUSE-SU-2021:2891-1]
Ubuntu16.04dovecot1:2.2.18-2ubuntu2UnknownSource applicability is not established[UBUNTU-CVE-2020-28200]
Ubuntu16.04dovecot1:2.2.22-1ubuntu1UnknownSource applicability is not established[UBUNTU-CVE-2020-28200]
Ubuntu16.04dovecot1:2.2.22-1ubuntu2UnknownSource applicability is not established[UBUNTU-CVE-2020-28200]
Ubuntu16.04dovecot1:2.2.22-1ubuntu2.1UnknownSource applicability is not established[UBUNTU-CVE-2020-28200]
Ubuntu16.04dovecot1:2.2.22-1ubuntu2.10UnknownSource applicability is not established[UBUNTU-CVE-2020-28200]
Ubuntu16.04dovecot1:2.2.22-1ubuntu2.11UnknownSource applicability is not established[UBUNTU-CVE-2020-28200]
Ubuntu16.04dovecot1:2.2.22-1ubuntu2.12UnknownSource applicability is not established[UBUNTU-CVE-2020-28200]
Ubuntu16.04dovecot1:2.2.22-1ubuntu2.13UnknownSource applicability is not established[UBUNTU-CVE-2020-28200]
Ubuntu16.04dovecot1:2.2.22-1ubuntu2.14UnknownSource applicability is not established[UBUNTU-CVE-2020-28200]
Ubuntu16.04dovecot1:2.2.22-1ubuntu2.2UnknownSource applicability is not established[UBUNTU-CVE-2020-28200]
Ubuntu16.04dovecot1:2.2.22-1ubuntu2.3UnknownSource applicability is not established[UBUNTU-CVE-2020-28200]
Ubuntu16.04dovecot1:2.2.22-1ubuntu2.4UnknownSource applicability is not established[UBUNTU-CVE-2020-28200]
Ubuntu16.04dovecot1:2.2.22-1ubuntu2.6UnknownSource applicability is not established[UBUNTU-CVE-2020-28200]
Ubuntu16.04dovecot1:2.2.22-1ubuntu2.7UnknownSource applicability is not established[UBUNTU-CVE-2020-28200]
Ubuntu16.04dovecot1:2.2.22-1ubuntu2.8UnknownSource applicability is not established[UBUNTU-CVE-2020-28200]
Ubuntu16.04dovecot1:2.2.22-1ubuntu2.9UnknownSource applicability is not established[UBUNTU-CVE-2020-28200]
Ubuntu18.04dovecot1:2.2.27-3ubuntu1UnknownSource applicability is not established[UBUNTU-CVE-2020-28200]
Ubuntu18.04dovecot1:2.2.33.2-1ubuntu1UnknownSource applicability is not established[UBUNTU-CVE-2020-28200]
Ubuntu18.04dovecot1:2.2.33.2-1ubuntu2UnknownSource applicability is not established[UBUNTU-CVE-2020-28200]
Ubuntu18.04dovecot1:2.2.33.2-1ubuntu3UnknownSource applicability is not established[UBUNTU-CVE-2020-28200]
Ubuntu18.04dovecot1:2.2.33.2-1ubuntu4UnknownSource applicability is not established[UBUNTU-CVE-2020-28200]
Ubuntu18.04dovecot1:2.2.33.2-1ubuntu4.1UnknownSource applicability is not established[UBUNTU-CVE-2020-28200]
Ubuntu18.04dovecot1:2.2.33.2-1ubuntu4.2UnknownSource applicability is not established[UBUNTU-CVE-2020-28200]
Ubuntu18.04dovecot1:2.2.33.2-1ubuntu4.3UnknownSource applicability is not established[UBUNTU-CVE-2020-28200]
Ubuntu18.04dovecot1:2.2.33.2-1ubuntu4.4UnknownSource applicability is not established[UBUNTU-CVE-2020-28200]
Ubuntu18.04dovecot1:2.2.33.2-1ubuntu4.5UnknownSource applicability is not established[UBUNTU-CVE-2020-28200]
Ubuntu18.04dovecot1:2.2.33.2-1ubuntu4.6UnknownSource applicability is not established[UBUNTU-CVE-2020-28200]
Ubuntu18.04dovecot1:2.2.33.2-1ubuntu4.7UnknownSource applicability is not established[UBUNTU-CVE-2020-28200]
Ubuntu18.04dovecot1:2.2.33.2-1ubuntu4.8UnknownSource applicability is not established[UBUNTU-CVE-2020-28200]
Ubuntu20.04dovecot1:2.3.4.1-5ubuntu3UnknownSource applicability is not established[UBUNTU-CVE-2020-28200]
Ubuntu20.04dovecot1:2.3.7.2-1ubuntu1UnknownSource applicability is not established[UBUNTU-CVE-2020-28200]
Ubuntu20.04dovecot1:2.3.7.2-1ubuntu2UnknownSource applicability is not established[UBUNTU-CVE-2020-28200]
Ubuntu20.04dovecot1:2.3.7.2-1ubuntu3UnknownSource applicability is not established[UBUNTU-CVE-2020-28200]
Ubuntu20.04dovecot1:2.3.7.2-1ubuntu3.1UnknownSource applicability is not established[UBUNTU-CVE-2020-28200]
Ubuntu20.04dovecot1:2.3.7.2-1ubuntu3.2UnknownSource applicability is not established[UBUNTU-CVE-2020-28200]
Ubuntu20.04dovecot1:2.3.7.2-1ubuntu3.3UnknownSource applicability is not established[UBUNTU-CVE-2020-28200]
Ubuntu20.04dovecot1:2.3.7.2-1ubuntu3.4UnknownSource applicability is not established[UBUNTU-CVE-2020-28200]
Ubuntu20.04dovecot1:2.3.7.2-1ubuntu3.5UnknownSource applicability is not established[UBUNTU-CVE-2020-28200]
Ubuntu20.04dovecot1:2.3.7.2-1ubuntu3.6UnknownSource applicability is not established[UBUNTU-CVE-2020-28200]
Ubuntu20.04dovecot1:2.3.7.2-1ubuntu3.7UnknownSource applicability is not established[UBUNTU-CVE-2020-28200]
Ubuntuprodovecot1:2.1.7-7ubuntu3UnknownSource applicability is not established[UBUNTU-CVE-2020-28200]
Ubuntuprodovecot1:2.2.9-1ubuntu1UnknownSource applicability is not established[UBUNTU-CVE-2020-28200]
Ubuntuprodovecot1:2.2.9-1ubuntu2UnknownSource applicability is not established[UBUNTU-CVE-2020-28200]
Ubuntuprodovecot1:2.2.9-1ubuntu2.1UnknownSource applicability is not established[UBUNTU-CVE-2020-28200]
Ubuntuprodovecot1:2.2.9-1ubuntu2.3UnknownSource applicability is not established[UBUNTU-CVE-2020-28200]
Ubuntuprodovecot1:2.2.9-1ubuntu2.4UnknownSource applicability is not established[UBUNTU-CVE-2020-28200]
Ubuntuprodovecot1:2.2.9-1ubuntu2.5UnknownSource applicability is not established[UBUNTU-CVE-2020-28200]
Ubuntuprodovecot1:2.2.9-1ubuntu2.6UnknownSource applicability is not established[UBUNTU-CVE-2020-28200]
Ubuntuprodovecot1:2.2.9-1ubuntu2.6+esm1UnknownSource applicability is not established[UBUNTU-CVE-2020-28200]
Ubuntuprodovecot1:2.2.9-1ubuntu2.6+esm2UnknownSource applicability is not established[UBUNTU-CVE-2020-28200]
Ubuntuprodovecot1:2.2.9-1ubuntu2.6+esm3UnknownSource applicability is not established[UBUNTU-CVE-2020-28200]
Ubuntuprodovecot1:2.2.9-1ubuntu2.6+esm4UnknownSource applicability is not established[UBUNTU-CVE-2020-28200]
Original provider fields
{
  "package_releases": [
    {
      "name": "dovecot",
      "status": "fixed",
      "release": "sid",
      "version": "1:2.4.5+dfsg1-4"
    },
    {
      "name": "dovecot",
      "status": "fixed",
      "release": "forky",
      "version": "1:2.4.5+dfsg1-4"
    },
    {
      "name": "dovecot",
      "status": "fixed",
      "release": "trixie",
      "version": "1:2.4.1+dfsg1-6+deb13u6"
    },
    {
      "name": "dovecot",
      "status": "fixed",
      "release": "trixie-security",
      "version": "1:2.4.1+dfsg1-6+deb13u7"
    },
    {
      "name": "dovecot",
      "status": "fixed",
      "release": "bookworm",
      "version": "1:2.3.19.1+dfsg1-2.1+deb12u6"
    },
    {
      "name": "dovecot",
      "status": "fixed",
      "release": "bookworm-security",
      "version": "1:2.3.19.1+dfsg1-2.1+deb12u6"
    }
  ],
  "fixed_versions": [
    {
      "bug": 990566,
      "name": "dovecot",
      "type": "source",
      "origin": null,
      "release": "sid",
      "urgency": "not yet assigned",
      "fixed_version": "1:2.3.16+dfsg1-1"
    },
    {
      "bug": 990566,
      "name": "dovecot",
      "type": "source",
      "origin": null,
      "release": "forky",
      "urgency": "not yet assigned",
      "fixed_version": "1:2.3.16+dfsg1-1"
    },
    {
      "bug": 990566,
      "name": "dovecot",
      "type": "source",
      "origin": null,
      "release": "trixie",
      "urgency": "not yet assigned",
      "fixed_version": "1:2.3.16+dfsg1-1"
    },
    {
      "bug": 990566,
      "name": "dovecot",
      "type": "source",
      "origin": null,
      "release": "bookworm",
      "urgency": "not yet assigned",
      "fixed_version": "1:2.3.16+dfsg1-1"
    }
  ],
  "distribution_packages": [
    {
      "name": "dovecot",
      "fixed_version": "1:2.3.16+dfsg1-1",
      "applicability_unknown": true
    },
    {
      "name": "dovecot",
      "distro": "ubuntu",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            }
          ]
        }
      ],
      "release": "pro",
      "versions": [
        "1:2.1.7-7ubuntu3",
        "1:2.2.9-1ubuntu1",
        "1:2.2.9-1ubuntu2",
        "1:2.2.9-1ubuntu2.1",
        "1:2.2.9-1ubuntu2.3",
        "1:2.2.9-1ubuntu2.4",
        "1:2.2.9-1ubuntu2.5",
        "1:2.2.9-1ubuntu2.6",
        "1:2.2.9-1ubuntu2.6+esm1",
        "1:2.2.9-1ubuntu2.6+esm2",
        "1:2.2.9-1ubuntu2.6+esm3",
        "1:2.2.9-1ubuntu2.6+esm4"
      ],
      "ecosystem": "deb",
      "provider_url": "https://osv.dev/vulnerability/UBUNTU-CVE-2020-28200",
      "fixed_version": "",
      "provider_source": "pypi",
      "provider_record_id": "UBUNTU-CVE-2020-28200",
      "provider_updated_at": "2026-04-22T12:37:34.445415Z",
      "applicability_unknown": true
    },
    {
      "name": "dovecot",
      "distro": "ubuntu",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            }
          ]
        }
      ],
      "release": "16.04",
      "versions": [
        "1:2.2.18-2ubuntu2",
        "1:2.2.22-1ubuntu1",
        "1:2.2.22-1ubuntu2",
        "1:2.2.22-1ubuntu2.1",
        "1:2.2.22-1ubuntu2.2",
        "1:2.2.22-1ubuntu2.3",
        "1:2.2.22-1ubuntu2.4",
        "1:2.2.22-1ubuntu2.6",
        "1:2.2.22-1ubuntu2.7",
        "1:2.2.22-1ubuntu2.8",
        "1:2.2.22-1ubuntu2.9",
        "1:2.2.22-1ubuntu2.10",
        "1:2.2.22-1ubuntu2.11",
        "1:2.2.22-1ubuntu2.12",
        "1:2.2.22-1ubuntu2.13",
        "1:2.2.22-1ubuntu2.14"
      ],
      "ecosystem": "deb",
      "provider_url": "https://osv.dev/vulnerability/UBUNTU-CVE-2020-28200",
      "fixed_version": "",
      "provider_source": "pypi",
      "provider_record_id": "UBUNTU-CVE-2020-28200",
      "provider_updated_at": "2026-04-22T12:37:34.445415Z",
      "applicability_unknown": true
    },
    {
      "name": "dovecot",
      "distro": "ubuntu",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            }
          ]
        }
      ],
      "release": "18.04",
      "versions": [
        "1:2.2.27-3ubuntu1",
        "1:2.2.33.2-1ubuntu1",
        "1:2.2.33.2-1ubuntu2",
        "1:2.2.33.2-1ubuntu3",
        "1:2.2.33.2-1ubuntu4",
        "1:2.2.33.2-1ubuntu4.1",
        "1:2.2.33.2-1ubuntu4.2",
        "1:2.2.33.2-1ubuntu4.3",
        "1:2.2.33.2-1ubuntu4.4",
        "1:2.2.33.2-1ubuntu4.5",
        "1:2.2.33.2-1ubuntu4.6",
        "1:2.2.33.2-1ubuntu4.7",
        "1:2.2.33.2-1ubuntu4.8"
      ],
      "ecosystem": "deb",
      "provider_url": "https://osv.dev/vulnerability/UBUNTU-CVE-2020-28200",
      "fixed_version": "",
      "provider_source": "pypi",
      "provider_record_id": "UBUNTU-CVE-2020-28200",
      "provider_updated_at": "2026-04-22T12:37:34.445415Z",
      "applicability_unknown": true
    },
    {
      "name": "dovecot",
      "distro": "ubuntu",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            }
          ]
        }
      ],
      "release": "20.04",
      "versions": [
        "1:2.3.4.1-5ubuntu3",
        "1:2.3.7.2-1ubuntu1",
        "1:2.3.7.2-1ubuntu2",
        "1:2.3.7.2-1ubuntu3",
        "1:2.3.7.2-1ubuntu3.1",
        "1:2.3.7.2-1ubuntu3.2",
        "1:2.3.7.2-1ubuntu3.3",
        "1:2.3.7.2-1ubuntu3.4",
        "1:2.3.7.2-1ubuntu3.5",
        "1:2.3.7.2-1ubuntu3.6",
        "1:2.3.7.2-1ubuntu3.7"
      ],
      "ecosystem": "deb",
      "provider_url": "https://osv.dev/vulnerability/UBUNTU-CVE-2020-28200",
      "fixed_version": "",
      "provider_source": "pypi",
      "provider_record_id": "UBUNTU-CVE-2020-28200",
      "provider_updated_at": "2026-04-22T12:37:34.445415Z",
      "applicability_unknown": true
    },
    {
      "name": "dovecot23",
      "distro": "suse",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "2.3.15-4.38.3"
            }
          ]
        }
      ],
      "release": "linux enterprise high performance computing 15-espos",
      "versions": [],
      "ecosystem": "rpm",
      "provider_url": "https://osv.dev/vulnerability/SUSE-SU-2021:2890-1",
      "fixed_version": "2.3.15-4.38.3",
      "provider_source": "pypi",
      "provider_record_id": "SUSE-SU-2021:2890-1",
      "provider_updated_at": "2026-02-04T03:26:38.718530Z",
      "applicability_unknown": true
    },
    {
      "name": "dovecot23",
      "distro": "suse",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "2.3.15-4.38.3"
            }
          ]
        }
      ],
      "release": "linux enterprise high performance computing 15-ltss",
      "versions": [],
      "ecosystem": "rpm",
      "provider_url": "https://osv.dev/vulnerability/SUSE-SU-2021:2890-1",
      "fixed_version": "2.3.15-4.38.3",
      "provider_source": "pypi",
      "provider_record_id": "SUSE-SU-2021:2890-1",
      "provider_updated_at": "2026-02-04T03:26:38.718530Z",
      "applicability_unknown": true
    },
    {
      "name": "dovecot23",
      "distro": "suse",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "2.3.15-4.38.3"
            }
          ]
        }
      ],
      "release": "linux enterprise server 15-ltss",
      "versions": [],
      "ecosystem": "rpm",
      "provider_url": "https://osv.dev/vulnerability/SUSE-SU-2021:2890-1",
      "fixed_version": "2.3.15-4.38.3",
      "provider_source": "pypi",
      "provider_record_id": "SUSE-SU-2021:2890-1",
      "provider_updated_at": "2026-02-04T03:26:38.718530Z",
      "applicability_unknown": true
    },
    {
      "name": "dovecot23",
      "distro": "suse",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "2.3.15-4.38.3"
            }
          ]
        }
      ],
      "release": "linux enterprise server for sap applications 15",
      "versions": [],
      "ecosystem": "rpm",
      "provider_url": "https://osv.dev/vulnerability/SUSE-SU-2021:2890-1",
      "fixed_version": "2.3.15-4.38.3",
      "provider_source": "pypi",
      "provider_record_id": "SUSE-SU-2021:2890-1",
      "provider_updated_at": "2026-02-04T03:26:38.718530Z",
      "applicability_unknown": true
    },
    {
      "name": "dovecot23",
      "distro": "suse",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "2.3.15-27.3"
            }
          ]
        }
      ],
      "release": "linux enterprise high performance computing 15 sp1-espos",
      "versions": [],
      "ecosystem": "rpm",
      "provider_url": "https://osv.dev/vulnerability/SUSE-SU-2021:2891-1",
      "fixed_version": "2.3.15-27.3",
      "provider_source": "pypi",
      "provider_record_id": "SUSE-SU-2021:2891-1",
      "provider_updated_at": "2026-02-04T03:25:34.133336Z",
      "applicability_unknown": true
    },
    {
      "name": "dovecot23",
      "distro": "suse",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "2.3.15-27.3"
            }
          ]
        }
      ],
      "release": "linux enterprise high performance computing 15 sp1-ltss",
      "versions": [],
      "ecosystem": "rpm",
      "provider_url": "https://osv.dev/vulnerability/SUSE-SU-2021:2891-1",
      "fixed_version": "2.3.15-27.3",
      "provider_source": "pypi",
      "provider_record_id": "SUSE-SU-2021:2891-1",
      "provider_updated_at": "2026-02-04T03:25:34.133336Z",
      "applicability_unknown": true
    },
    {
      "name": "dovecot23",
      "distro": "suse",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "2.3.15-27.3"
            }
          ]
        }
      ],
      "release": "linux enterprise server 15 sp1-bcl",
      "versions": [],
      "ecosystem": "rpm",
      "provider_url": "https://osv.dev/vulnerability/SUSE-SU-2021:2891-1",
      "fixed_version": "2.3.15-27.3",
      "provider_source": "pypi",
      "provider_record_id": "SUSE-SU-2021:2891-1",
      "provider_updated_at": "2026-02-04T03:25:34.133336Z",
      "applicability_unknown": true
    },
    {
      "name": "dovecot23",
      "distro": "suse",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "2.3.15-27.3"
            }
          ]
        }
      ],
      "release": "linux enterprise server 15 sp1-ltss",
      "versions": [],
      "ecosystem": "rpm",
      "provider_url": "https://osv.dev/vulnerability/SUSE-SU-2021:2891-1",
      "fixed_version": "2.3.15-27.3",
      "provider_source": "pypi",
      "provider_record_id": "SUSE-SU-2021:2891-1",
      "provider_updated_at": "2026-02-04T03:25:34.133336Z",
      "applicability_unknown": true
    },
    {
      "name": "dovecot23",
      "distro": "suse",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "2.3.15-27.3"
            }
          ]
        }
      ],
      "release": "linux enterprise server for sap applications 15 sp1",
      "versions": [],
      "ecosystem": "rpm",
      "provider_url": "https://osv.dev/vulnerability/SUSE-SU-2021:2891-1",
      "fixed_version": "2.3.15-27.3",
      "provider_source": "pypi",
      "provider_record_id": "SUSE-SU-2021:2891-1",
      "provider_updated_at": "2026-02-04T03:25:34.133336Z",
      "applicability_unknown": true
    },
    {
      "name": "dovecot23",
      "distro": "suse",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "2.3.15-27.3"
            }
          ]
        }
      ],
      "release": "manager proxy 4.0",
      "versions": [],
      "ecosystem": "rpm",
      "provider_url": "https://osv.dev/vulnerability/SUSE-SU-2021:2891-1",
      "fixed_version": "2.3.15-27.3",
      "provider_source": "pypi",
      "provider_record_id": "SUSE-SU-2021:2891-1",
      "provider_updated_at": "2026-02-04T03:25:34.133336Z",
      "applicability_unknown": true
    },
    {
      "name": "dovecot23",
      "distro": "suse",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "2.3.15-27.3"
            }
          ]
        }
      ],
      "release": "manager retail branch server 4.0",
      "versions": [],
      "ecosystem": "rpm",
      "provider_url": "https://osv.dev/vulnerability/SUSE-SU-2021:2891-1",
      "fixed_version": "2.3.15-27.3",
      "provider_source": "pypi",
      "provider_record_id": "SUSE-SU-2021:2891-1",
      "provider_updated_at": "2026-02-04T03:25:34.133336Z",
      "applicability_unknown": true
    },
    {
      "name": "dovecot23",
      "distro": "suse",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "2.3.15-27.3"
            }
          ]
        }
      ],
      "release": "manager server 4.0",
      "versions": [],
      "ecosystem": "rpm",
      "provider_url": "https://osv.dev/vulnerability/SUSE-SU-2021:2891-1",
      "fixed_version": "2.3.15-27.3",
      "provider_source": "pypi",
      "provider_record_id": "SUSE-SU-2021:2891-1",
      "provider_updated_at": "2026-02-04T03:25:34.133336Z",
      "applicability_unknown": true
    },
    {
      "name": "dovecot23",
      "distro": "suse",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "2.3.15-27.3"
            }
          ]
        }
      ],
      "release": "enterprise storage 6",
      "versions": [],
      "ecosystem": "rpm",
      "provider_url": "https://osv.dev/vulnerability/SUSE-SU-2021:2891-1",
      "fixed_version": "2.3.15-27.3",
      "provider_source": "pypi",
      "provider_record_id": "SUSE-SU-2021:2891-1",
      "provider_updated_at": "2026-02-04T03:25:34.133336Z",
      "applicability_unknown": true
    },
    {
      "name": "dovecot23",
      "distro": "opensuse",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "2.3.15-lp152.2.12.1"
            }
          ]
        }
      ],
      "release": "leap 15.2",
      "versions": [],
      "ecosystem": "rpm",
      "provider_url": "https://osv.dev/vulnerability/openSUSE-SU-2021:1225-1",
      "fixed_version": "2.3.15-lp152.2.12.1",
      "provider_source": "pypi",
      "provider_record_id": "OPENSUSE-SU-2021:1225-1",
      "provider_updated_at": "2026-02-04T03:23:04.792125Z",
      "applicability_unknown": true
    },
    {
      "name": "dovecot23",
      "distro": "opensuse",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "2.3.15-58.3"
            }
          ]
        }
      ],
      "release": "leap 15.3",
      "versions": [],
      "ecosystem": "rpm",
      "provider_url": "https://osv.dev/vulnerability/openSUSE-SU-2021:2892-1",
      "fixed_version": "2.3.15-58.3",
      "provider_source": "pypi",
      "provider_record_id": "OPENSUSE-SU-2021:2892-1",
      "provider_updated_at": "2026-02-04T03:02:15.347256Z",
      "applicability_unknown": true
    },
    {
      "name": "dovecot23",
      "distro": "suse",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "2.3.15-58.3"
            }
          ]
        }
      ],
      "release": "linux enterprise module for server applications 15 sp2",
      "versions": [],
      "ecosystem": "rpm",
      "provider_url": "https://osv.dev/vulnerability/SUSE-SU-2021:2892-1",
      "fixed_version": "2.3.15-58.3",
      "provider_source": "pypi",
      "provider_record_id": "SUSE-SU-2021:2892-1",
      "provider_updated_at": "2026-02-04T02:39:44.707567Z",
      "applicability_unknown": true
    },
    {
      "name": "dovecot23",
      "distro": "suse",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "2.3.15-58.3"
            }
          ]
        }
      ],
      "release": "linux enterprise module for server applications 15 sp3",
      "versions": [],
      "ecosystem": "rpm",
      "provider_url": "https://osv.dev/vulnerability/SUSE-SU-2021:2892-1",
      "fixed_version": "2.3.15-58.3",
      "provider_source": "pypi",
      "provider_record_id": "SUSE-SU-2021:2892-1",
      "provider_updated_at": "2026-02-04T02:39:44.707567Z",
      "applicability_unknown": true
    }
  ]
}

[Debian bug #990566]

OpenFactory catalog packages

Matching against OpenFactory catalog package versions is in progress.

[Debian 12 (Bookworm)]

  • [dovecot-auth-lua]Unknown

    Source package: [dovecot]

    Details (6)

    • 1:2.3.19.1+dfsg1-2.1+deb12u6 · amd64 · bookworm

      Fixed · Fixed: 1:2.3.16+dfsg1-1

      dsa · dovecot · debian · bookworm; dsa · dovecot · debian · 12

    • 1:2.3.19.1+dfsg1-2.1+deb12u6 · arm64 · bookworm

      Fixed · Fixed: 1:2.3.16+dfsg1-1

      dsa · dovecot · debian · bookworm; dsa · dovecot · debian · 12

    • 1:2.3.21.1+dfsg1-1~bpo12+1 · amd64 · bookworm-backports

      Fixed · Fixed: 1:2.3.16+dfsg1-1

      dsa · dovecot · debian · bookworm; dsa · dovecot · debian · 12

    • 1:2.3.21.1+dfsg1-1~bpo12+1 · arm64 · bookworm-backports

      Fixed · Fixed: 1:2.3.16+dfsg1-1

      dsa · dovecot · debian · bookworm; dsa · dovecot · debian · 12

    • 1:2.3.19.1+dfsg1-2.1+deb12u6 · amd64 · bookworm-security

      Fixed · Fixed: 1:2.3.16+dfsg1-1

      dsa · dovecot · debian · bookworm; dsa · dovecot · debian · 12

    • 1:2.3.19.1+dfsg1-2.1+deb12u6 · arm64 · bookworm-security

      Fixed · Fixed: 1:2.3.16+dfsg1-1

      dsa · dovecot · debian · bookworm; dsa · dovecot · debian · 12

  • [dovecot-core]Unknown

    Source package: [dovecot]

    Details (6)

    • 1:2.3.19.1+dfsg1-2.1+deb12u6 · amd64 · bookworm

      Fixed · Fixed: 1:2.3.16+dfsg1-1

      dsa · dovecot · debian · bookworm; dsa · dovecot · debian · 12

    • 1:2.3.19.1+dfsg1-2.1+deb12u6 · arm64 · bookworm

      Fixed · Fixed: 1:2.3.16+dfsg1-1

      dsa · dovecot · debian · bookworm; dsa · dovecot · debian · 12

    • 1:2.3.21.1+dfsg1-1~bpo12+1 · amd64 · bookworm-backports

      Fixed · Fixed: 1:2.3.16+dfsg1-1

      dsa · dovecot · debian · bookworm; dsa · dovecot · debian · 12

    • 1:2.3.21.1+dfsg1-1~bpo12+1 · arm64 · bookworm-backports

      Fixed · Fixed: 1:2.3.16+dfsg1-1

      dsa · dovecot · debian · bookworm; dsa · dovecot · debian · 12

    • 1:2.3.19.1+dfsg1-2.1+deb12u6 · amd64 · bookworm-security

      Fixed · Fixed: 1:2.3.16+dfsg1-1

      dsa · dovecot · debian · bookworm; dsa · dovecot · debian · 12

    • 1:2.3.19.1+dfsg1-2.1+deb12u6 · arm64 · bookworm-security

      Fixed · Fixed: 1:2.3.16+dfsg1-1

      dsa · dovecot · debian · bookworm; dsa · dovecot · debian · 12

  • [dovecot-dev]Unknown

    Source package: [dovecot]

    Details (6)

    • 1:2.3.19.1+dfsg1-2.1+deb12u6 · amd64 · bookworm

      Fixed · Fixed: 1:2.3.16+dfsg1-1

      dsa · dovecot · debian · bookworm; dsa · dovecot · debian · 12

    • 1:2.3.19.1+dfsg1-2.1+deb12u6 · arm64 · bookworm

      Fixed · Fixed: 1:2.3.16+dfsg1-1

      dsa · dovecot · debian · bookworm; dsa · dovecot · debian · 12

    • 1:2.3.21.1+dfsg1-1~bpo12+1 · amd64 · bookworm-backports

      Fixed · Fixed: 1:2.3.16+dfsg1-1

      dsa · dovecot · debian · bookworm; dsa · dovecot · debian · 12

    • 1:2.3.21.1+dfsg1-1~bpo12+1 · arm64 · bookworm-backports

      Fixed · Fixed: 1:2.3.16+dfsg1-1

      dsa · dovecot · debian · bookworm; dsa · dovecot · debian · 12

    • 1:2.3.19.1+dfsg1-2.1+deb12u6 · amd64 · bookworm-security

      Fixed · Fixed: 1:2.3.16+dfsg1-1

      dsa · dovecot · debian · bookworm; dsa · dovecot · debian · 12

    • 1:2.3.19.1+dfsg1-2.1+deb12u6 · arm64 · bookworm-security

      Fixed · Fixed: 1:2.3.16+dfsg1-1

      dsa · dovecot · debian · bookworm; dsa · dovecot · debian · 12

  • [dovecot-gssapi]Unknown

    Source package: [dovecot]

    Details (6)

    • 1:2.3.19.1+dfsg1-2.1+deb12u6 · amd64 · bookworm

      Fixed · Fixed: 1:2.3.16+dfsg1-1

      dsa · dovecot · debian · bookworm; dsa · dovecot · debian · 12

    • 1:2.3.19.1+dfsg1-2.1+deb12u6 · arm64 · bookworm

      Fixed · Fixed: 1:2.3.16+dfsg1-1

      dsa · dovecot · debian · bookworm; dsa · dovecot · debian · 12

    • 1:2.3.21.1+dfsg1-1~bpo12+1 · amd64 · bookworm-backports

      Fixed · Fixed: 1:2.3.16+dfsg1-1

      dsa · dovecot · debian · bookworm; dsa · dovecot · debian · 12

    • 1:2.3.21.1+dfsg1-1~bpo12+1 · arm64 · bookworm-backports

      Fixed · Fixed: 1:2.3.16+dfsg1-1

      dsa · dovecot · debian · bookworm; dsa · dovecot · debian · 12

    • 1:2.3.19.1+dfsg1-2.1+deb12u6 · amd64 · bookworm-security

      Fixed · Fixed: 1:2.3.16+dfsg1-1

      dsa · dovecot · debian · bookworm; dsa · dovecot · debian · 12

    • 1:2.3.19.1+dfsg1-2.1+deb12u6 · arm64 · bookworm-security

      Fixed · Fixed: 1:2.3.16+dfsg1-1

      dsa · dovecot · debian · bookworm; dsa · dovecot · debian · 12

  • [dovecot-imapd]Unknown

    Source package: [dovecot]

    Details (6)

    • 1:2.3.19.1+dfsg1-2.1+deb12u6 · amd64 · bookworm

      Fixed · Fixed: 1:2.3.16+dfsg1-1

      dsa · dovecot · debian · bookworm; dsa · dovecot · debian · 12

    • 1:2.3.19.1+dfsg1-2.1+deb12u6 · arm64 · bookworm

      Fixed · Fixed: 1:2.3.16+dfsg1-1

      dsa · dovecot · debian · bookworm; dsa · dovecot · debian · 12

    • 1:2.3.21.1+dfsg1-1~bpo12+1 · amd64 · bookworm-backports

      Fixed · Fixed: 1:2.3.16+dfsg1-1

      dsa · dovecot · debian · bookworm; dsa · dovecot · debian · 12

    • 1:2.3.21.1+dfsg1-1~bpo12+1 · arm64 · bookworm-backports

      Fixed · Fixed: 1:2.3.16+dfsg1-1

      dsa · dovecot · debian · bookworm; dsa · dovecot · debian · 12

    • 1:2.3.19.1+dfsg1-2.1+deb12u6 · amd64 · bookworm-security

      Fixed · Fixed: 1:2.3.16+dfsg1-1

      dsa · dovecot · debian · bookworm; dsa · dovecot · debian · 12

    • 1:2.3.19.1+dfsg1-2.1+deb12u6 · arm64 · bookworm-security

      Fixed · Fixed: 1:2.3.16+dfsg1-1

      dsa · dovecot · debian · bookworm; dsa · dovecot · debian · 12

  • [dovecot-ldap]Unknown

    Source package: [dovecot]

    Details (6)

    • 1:2.3.19.1+dfsg1-2.1+deb12u6 · amd64 · bookworm

      Fixed · Fixed: 1:2.3.16+dfsg1-1

      dsa · dovecot · debian · bookworm; dsa · dovecot · debian · 12

    • 1:2.3.19.1+dfsg1-2.1+deb12u6 · arm64 · bookworm

      Fixed · Fixed: 1:2.3.16+dfsg1-1

      dsa · dovecot · debian · bookworm; dsa · dovecot · debian · 12

    • 1:2.3.21.1+dfsg1-1~bpo12+1 · amd64 · bookworm-backports

      Fixed · Fixed: 1:2.3.16+dfsg1-1

      dsa · dovecot · debian · bookworm; dsa · dovecot · debian · 12

    • 1:2.3.21.1+dfsg1-1~bpo12+1 · arm64 · bookworm-backports

      Fixed · Fixed: 1:2.3.16+dfsg1-1

      dsa · dovecot · debian · bookworm; dsa · dovecot · debian · 12

    • 1:2.3.19.1+dfsg1-2.1+deb12u6 · amd64 · bookworm-security

      Fixed · Fixed: 1:2.3.16+dfsg1-1

      dsa · dovecot · debian · bookworm; dsa · dovecot · debian · 12

    • 1:2.3.19.1+dfsg1-2.1+deb12u6 · arm64 · bookworm-security

      Fixed · Fixed: 1:2.3.16+dfsg1-1

      dsa · dovecot · debian · bookworm; dsa · dovecot · debian · 12

  • [dovecot-lmtpd]Unknown

    Source package: [dovecot]

    Details (6)

    • 1:2.3.19.1+dfsg1-2.1+deb12u6 · amd64 · bookworm

      Fixed · Fixed: 1:2.3.16+dfsg1-1

      dsa · dovecot · debian · bookworm; dsa · dovecot · debian · 12

    • 1:2.3.19.1+dfsg1-2.1+deb12u6 · arm64 · bookworm

      Fixed · Fixed: 1:2.3.16+dfsg1-1

      dsa · dovecot · debian · bookworm; dsa · dovecot · debian · 12

    • 1:2.3.21.1+dfsg1-1~bpo12+1 · amd64 · bookworm-backports

      Fixed · Fixed: 1:2.3.16+dfsg1-1

      dsa · dovecot · debian · bookworm; dsa · dovecot · debian · 12

    • 1:2.3.21.1+dfsg1-1~bpo12+1 · arm64 · bookworm-backports

      Fixed · Fixed: 1:2.3.16+dfsg1-1

      dsa · dovecot · debian · bookworm; dsa · dovecot · debian · 12

    • 1:2.3.19.1+dfsg1-2.1+deb12u6 · amd64 · bookworm-security

      Fixed · Fixed: 1:2.3.16+dfsg1-1

      dsa · dovecot · debian · bookworm; dsa · dovecot · debian · 12

    • 1:2.3.19.1+dfsg1-2.1+deb12u6 · arm64 · bookworm-security

      Fixed · Fixed: 1:2.3.16+dfsg1-1

      dsa · dovecot · debian · bookworm; dsa · dovecot · debian · 12

  • [dovecot-lucene]Unknown

    Source package: [dovecot]

    Details (4)

    • 1:2.3.19.1+dfsg1-2.1+deb12u6 · amd64 · bookworm

      Fixed · Fixed: 1:2.3.16+dfsg1-1

      dsa · dovecot · debian · bookworm; dsa · dovecot · debian · 12

    • 1:2.3.19.1+dfsg1-2.1+deb12u6 · arm64 · bookworm

      Fixed · Fixed: 1:2.3.16+dfsg1-1

      dsa · dovecot · debian · bookworm; dsa · dovecot · debian · 12

    • 1:2.3.19.1+dfsg1-2.1+deb12u6 · amd64 · bookworm-security

      Fixed · Fixed: 1:2.3.16+dfsg1-1

      dsa · dovecot · debian · bookworm; dsa · dovecot · debian · 12

    • 1:2.3.19.1+dfsg1-2.1+deb12u6 · arm64 · bookworm-security

      Fixed · Fixed: 1:2.3.16+dfsg1-1

      dsa · dovecot · debian · bookworm; dsa · dovecot · debian · 12

  • [dovecot-managesieved]Unknown

    Source package: [dovecot]

    Details (6)

    • 1:2.3.19.1+dfsg1-2.1+deb12u6 · amd64 · bookworm

      Fixed · Fixed: 1:2.3.16+dfsg1-1

      dsa · dovecot · debian · bookworm; dsa · dovecot · debian · 12

    • 1:2.3.19.1+dfsg1-2.1+deb12u6 · arm64 · bookworm

      Fixed · Fixed: 1:2.3.16+dfsg1-1

      dsa · dovecot · debian · bookworm; dsa · dovecot · debian · 12

    • 1:2.3.21.1+dfsg1-1~bpo12+1 · amd64 · bookworm-backports

      Fixed · Fixed: 1:2.3.16+dfsg1-1

      dsa · dovecot · debian · bookworm; dsa · dovecot · debian · 12

    • 1:2.3.21.1+dfsg1-1~bpo12+1 · arm64 · bookworm-backports

      Fixed · Fixed: 1:2.3.16+dfsg1-1

      dsa · dovecot · debian · bookworm; dsa · dovecot · debian · 12

    • 1:2.3.19.1+dfsg1-2.1+deb12u6 · amd64 · bookworm-security

      Fixed · Fixed: 1:2.3.16+dfsg1-1

      dsa · dovecot · debian · bookworm; dsa · dovecot · debian · 12

    • 1:2.3.19.1+dfsg1-2.1+deb12u6 · arm64 · bookworm-security

      Fixed · Fixed: 1:2.3.16+dfsg1-1

      dsa · dovecot · debian · bookworm; dsa · dovecot · debian · 12

  • [dovecot-mysql]Unknown

    Source package: [dovecot]

    Details (6)

    • 1:2.3.19.1+dfsg1-2.1+deb12u6 · amd64 · bookworm

      Fixed · Fixed: 1:2.3.16+dfsg1-1

      dsa · dovecot · debian · bookworm; dsa · dovecot · debian · 12

    • 1:2.3.19.1+dfsg1-2.1+deb12u6 · arm64 · bookworm

      Fixed · Fixed: 1:2.3.16+dfsg1-1

      dsa · dovecot · debian · bookworm; dsa · dovecot · debian · 12

    • 1:2.3.21.1+dfsg1-1~bpo12+1 · amd64 · bookworm-backports

      Fixed · Fixed: 1:2.3.16+dfsg1-1

      dsa · dovecot · debian · bookworm; dsa · dovecot · debian · 12

    • 1:2.3.21.1+dfsg1-1~bpo12+1 · arm64 · bookworm-backports

      Fixed · Fixed: 1:2.3.16+dfsg1-1

      dsa · dovecot · debian · bookworm; dsa · dovecot · debian · 12

    • 1:2.3.19.1+dfsg1-2.1+deb12u6 · amd64 · bookworm-security

      Fixed · Fixed: 1:2.3.16+dfsg1-1

      dsa · dovecot · debian · bookworm; dsa · dovecot · debian · 12

    • 1:2.3.19.1+dfsg1-2.1+deb12u6 · arm64 · bookworm-security

      Fixed · Fixed: 1:2.3.16+dfsg1-1

      dsa · dovecot · debian · bookworm; dsa · dovecot · debian · 12

  • [dovecot-pgsql]Unknown

    Source package: [dovecot]

    Details (6)

    • 1:2.3.19.1+dfsg1-2.1+deb12u6 · amd64 · bookworm

      Fixed · Fixed: 1:2.3.16+dfsg1-1

      dsa · dovecot · debian · bookworm; dsa · dovecot · debian · 12

    • 1:2.3.19.1+dfsg1-2.1+deb12u6 · arm64 · bookworm

      Fixed · Fixed: 1:2.3.16+dfsg1-1

      dsa · dovecot · debian · bookworm; dsa · dovecot · debian · 12

    • 1:2.3.21.1+dfsg1-1~bpo12+1 · amd64 · bookworm-backports

      Fixed · Fixed: 1:2.3.16+dfsg1-1

      dsa · dovecot · debian · bookworm; dsa · dovecot · debian · 12

    • 1:2.3.21.1+dfsg1-1~bpo12+1 · arm64 · bookworm-backports

      Fixed · Fixed: 1:2.3.16+dfsg1-1

      dsa · dovecot · debian · bookworm; dsa · dovecot · debian · 12

    • 1:2.3.19.1+dfsg1-2.1+deb12u6 · amd64 · bookworm-security

      Fixed · Fixed: 1:2.3.16+dfsg1-1

      dsa · dovecot · debian · bookworm; dsa · dovecot · debian · 12

    • 1:2.3.19.1+dfsg1-2.1+deb12u6 · arm64 · bookworm-security

      Fixed · Fixed: 1:2.3.16+dfsg1-1

      dsa · dovecot · debian · bookworm; dsa · dovecot · debian · 12

  • [dovecot-pop3d]Unknown

    Source package: [dovecot]

    Details (6)

    • 1:2.3.19.1+dfsg1-2.1+deb12u6 · amd64 · bookworm

      Fixed · Fixed: 1:2.3.16+dfsg1-1

      dsa · dovecot · debian · bookworm; dsa · dovecot · debian · 12

    • 1:2.3.19.1+dfsg1-2.1+deb12u6 · arm64 · bookworm

      Fixed · Fixed: 1:2.3.16+dfsg1-1

      dsa · dovecot · debian · bookworm; dsa · dovecot · debian · 12

    • 1:2.3.21.1+dfsg1-1~bpo12+1 · amd64 · bookworm-backports

      Fixed · Fixed: 1:2.3.16+dfsg1-1

      dsa · dovecot · debian · bookworm; dsa · dovecot · debian · 12

    • 1:2.3.21.1+dfsg1-1~bpo12+1 · arm64 · bookworm-backports

      Fixed · Fixed: 1:2.3.16+dfsg1-1

      dsa · dovecot · debian · bookworm; dsa · dovecot · debian · 12

    • 1:2.3.19.1+dfsg1-2.1+deb12u6 · amd64 · bookworm-security

      Fixed · Fixed: 1:2.3.16+dfsg1-1

      dsa · dovecot · debian · bookworm; dsa · dovecot · debian · 12

    • 1:2.3.19.1+dfsg1-2.1+deb12u6 · arm64 · bookworm-security

      Fixed · Fixed: 1:2.3.16+dfsg1-1

      dsa · dovecot · debian · bookworm; dsa · dovecot · debian · 12

  • [dovecot-sieve]Unknown

    Source package: [dovecot]

    Details (6)

    • 1:2.3.19.1+dfsg1-2.1+deb12u6 · amd64 · bookworm

      Fixed · Fixed: 1:2.3.16+dfsg1-1

      dsa · dovecot · debian · bookworm; dsa · dovecot · debian · 12

    • 1:2.3.19.1+dfsg1-2.1+deb12u6 · arm64 · bookworm

      Fixed · Fixed: 1:2.3.16+dfsg1-1

      dsa · dovecot · debian · bookworm; dsa · dovecot · debian · 12

    • 1:2.3.21.1+dfsg1-1~bpo12+1 · amd64 · bookworm-backports

      Fixed · Fixed: 1:2.3.16+dfsg1-1

      dsa · dovecot · debian · bookworm; dsa · dovecot · debian · 12

    • 1:2.3.21.1+dfsg1-1~bpo12+1 · arm64 · bookworm-backports

      Fixed · Fixed: 1:2.3.16+dfsg1-1

      dsa · dovecot · debian · bookworm; dsa · dovecot · debian · 12

    • 1:2.3.19.1+dfsg1-2.1+deb12u6 · amd64 · bookworm-security

      Fixed · Fixed: 1:2.3.16+dfsg1-1

      dsa · dovecot · debian · bookworm; dsa · dovecot · debian · 12

    • 1:2.3.19.1+dfsg1-2.1+deb12u6 · arm64 · bookworm-security

      Fixed · Fixed: 1:2.3.16+dfsg1-1

      dsa · dovecot · debian · bookworm; dsa · dovecot · debian · 12

  • [dovecot-solr]Unknown

    Source package: [dovecot]

    Details (6)

    • 1:2.3.19.1+dfsg1-2.1+deb12u6 · amd64 · bookworm

      Fixed · Fixed: 1:2.3.16+dfsg1-1

      dsa · dovecot · debian · bookworm; dsa · dovecot · debian · 12

    • 1:2.3.19.1+dfsg1-2.1+deb12u6 · arm64 · bookworm

      Fixed · Fixed: 1:2.3.16+dfsg1-1

      dsa · dovecot · debian · bookworm; dsa · dovecot · debian · 12

    • 1:2.3.21.1+dfsg1-1~bpo12+1 · amd64 · bookworm-backports

      Fixed · Fixed: 1:2.3.16+dfsg1-1

      dsa · dovecot · debian · bookworm; dsa · dovecot · debian · 12

    • 1:2.3.21.1+dfsg1-1~bpo12+1 · arm64 · bookworm-backports

      Fixed · Fixed: 1:2.3.16+dfsg1-1

      dsa · dovecot · debian · bookworm; dsa · dovecot · debian · 12

    • 1:2.3.19.1+dfsg1-2.1+deb12u6 · amd64 · bookworm-security

      Fixed · Fixed: 1:2.3.16+dfsg1-1

      dsa · dovecot · debian · bookworm; dsa · dovecot · debian · 12

    • 1:2.3.19.1+dfsg1-2.1+deb12u6 · arm64 · bookworm-security

      Fixed · Fixed: 1:2.3.16+dfsg1-1

      dsa · dovecot · debian · bookworm; dsa · dovecot · debian · 12

  • [dovecot-sqlite]Unknown

    Source package: [dovecot]

    Details (6)

    • 1:2.3.19.1+dfsg1-2.1+deb12u6 · amd64 · bookworm

      Fixed · Fixed: 1:2.3.16+dfsg1-1

      dsa · dovecot · debian · bookworm; dsa · dovecot · debian · 12

    • 1:2.3.19.1+dfsg1-2.1+deb12u6 · arm64 · bookworm

      Fixed · Fixed: 1:2.3.16+dfsg1-1

      dsa · dovecot · debian · bookworm; dsa · dovecot · debian · 12

    • 1:2.3.21.1+dfsg1-1~bpo12+1 · amd64 · bookworm-backports

      Fixed · Fixed: 1:2.3.16+dfsg1-1

      dsa · dovecot · debian · bookworm; dsa · dovecot · debian · 12

    • 1:2.3.21.1+dfsg1-1~bpo12+1 · arm64 · bookworm-backports

      Fixed · Fixed: 1:2.3.16+dfsg1-1

      dsa · dovecot · debian · bookworm; dsa · dovecot · debian · 12

    • 1:2.3.19.1+dfsg1-2.1+deb12u6 · amd64 · bookworm-security

      Fixed · Fixed: 1:2.3.16+dfsg1-1

      dsa · dovecot · debian · bookworm; dsa · dovecot · debian · 12

    • 1:2.3.19.1+dfsg1-2.1+deb12u6 · arm64 · bookworm-security

      Fixed · Fixed: 1:2.3.16+dfsg1-1

      dsa · dovecot · debian · bookworm; dsa · dovecot · debian · 12

  • [dovecot-submissiond]Unknown

    Source package: [dovecot]

    Details (6)

    • 1:2.3.19.1+dfsg1-2.1+deb12u6 · amd64 · bookworm

      Fixed · Fixed: 1:2.3.16+dfsg1-1

      dsa · dovecot · debian · bookworm; dsa · dovecot · debian · 12

    • 1:2.3.19.1+dfsg1-2.1+deb12u6 · arm64 · bookworm

      Fixed · Fixed: 1:2.3.16+dfsg1-1

      dsa · dovecot · debian · bookworm; dsa · dovecot · debian · 12

    • 1:2.3.21.1+dfsg1-1~bpo12+1 · amd64 · bookworm-backports

      Fixed · Fixed: 1:2.3.16+dfsg1-1

      dsa · dovecot · debian · bookworm; dsa · dovecot · debian · 12

    • 1:2.3.21.1+dfsg1-1~bpo12+1 · arm64 · bookworm-backports

      Fixed · Fixed: 1:2.3.16+dfsg1-1

      dsa · dovecot · debian · bookworm; dsa · dovecot · debian · 12

    • 1:2.3.19.1+dfsg1-2.1+deb12u6 · amd64 · bookworm-security

      Fixed · Fixed: 1:2.3.16+dfsg1-1

      dsa · dovecot · debian · bookworm; dsa · dovecot · debian · 12

    • 1:2.3.19.1+dfsg1-2.1+deb12u6 · arm64 · bookworm-security

      Fixed · Fixed: 1:2.3.16+dfsg1-1

      dsa · dovecot · debian · bookworm; dsa · dovecot · debian · 12

[Debian 13 (Trixie)]

  • [dovecot-auth-lua]Unknown

    Source package: [dovecot]

    Details (5)

    • 1:2.4.1+dfsg1-6+deb13u6 · amd64 · trixie

      Fixed · Fixed: 1:2.3.16+dfsg1-1

      dsa · dovecot · debian · 13

    • 1:2.4.1+dfsg1-6+deb13u6 · arm64 · trixie

      Fixed · Fixed: 1:2.3.16+dfsg1-1

      dsa · dovecot · debian · 13

    • 1:2.4.1+dfsg1-6+deb13u6 · amd64 · trixie-security · Historical version

      Fixed · Fixed: 1:2.3.16+dfsg1-1

      dsa · dovecot · debian · 13

    • 1:2.4.1+dfsg1-6+deb13u6 · arm64 · trixie-security

      Fixed · Fixed: 1:2.3.16+dfsg1-1

      dsa · dovecot · debian · 13

    • 1:2.4.1+dfsg1-6+deb13u7 · amd64 · trixie-security

      Fixed · Fixed: 1:2.3.16+dfsg1-1

      dsa · dovecot · debian · 13

  • [dovecot-core]Unknown

    Source package: [dovecot]

    Details (5)

    • 1:2.4.1+dfsg1-6+deb13u6 · amd64 · trixie

      Fixed · Fixed: 1:2.3.16+dfsg1-1

      dsa · dovecot · debian · 13

    • 1:2.4.1+dfsg1-6+deb13u6 · arm64 · trixie

      Fixed · Fixed: 1:2.3.16+dfsg1-1

      dsa · dovecot · debian · 13

    • 1:2.4.1+dfsg1-6+deb13u6 · amd64 · trixie-security · Historical version

      Fixed · Fixed: 1:2.3.16+dfsg1-1

      dsa · dovecot · debian · 13

    • 1:2.4.1+dfsg1-6+deb13u6 · arm64 · trixie-security

      Fixed · Fixed: 1:2.3.16+dfsg1-1

      dsa · dovecot · debian · 13

    • 1:2.4.1+dfsg1-6+deb13u7 · amd64 · trixie-security

      Fixed · Fixed: 1:2.3.16+dfsg1-1

      dsa · dovecot · debian · 13

  • [dovecot-dev]Unknown

    Source package: [dovecot]

    Details (5)

    • 1:2.4.1+dfsg1-6+deb13u6 · amd64 · trixie

      Fixed · Fixed: 1:2.3.16+dfsg1-1

      dsa · dovecot · debian · 13

    • 1:2.4.1+dfsg1-6+deb13u6 · arm64 · trixie

      Fixed · Fixed: 1:2.3.16+dfsg1-1

      dsa · dovecot · debian · 13

    • 1:2.4.1+dfsg1-6+deb13u6 · amd64 · trixie-security · Historical version

      Fixed · Fixed: 1:2.3.16+dfsg1-1

      dsa · dovecot · debian · 13

    • 1:2.4.1+dfsg1-6+deb13u6 · arm64 · trixie-security

      Fixed · Fixed: 1:2.3.16+dfsg1-1

      dsa · dovecot · debian · 13

    • 1:2.4.1+dfsg1-6+deb13u7 · amd64 · trixie-security

      Fixed · Fixed: 1:2.3.16+dfsg1-1

      dsa · dovecot · debian · 13

  • [dovecot-flatcurve]Unknown

    Source package: [dovecot]

    Details (5)

    • 1:2.4.1+dfsg1-6+deb13u6 · amd64 · trixie

      Fixed · Fixed: 1:2.3.16+dfsg1-1

      dsa · dovecot · debian · 13

    • 1:2.4.1+dfsg1-6+deb13u6 · arm64 · trixie

      Fixed · Fixed: 1:2.3.16+dfsg1-1

      dsa · dovecot · debian · 13

    • 1:2.4.1+dfsg1-6+deb13u6 · amd64 · trixie-security · Historical version

      Fixed · Fixed: 1:2.3.16+dfsg1-1

      dsa · dovecot · debian · 13

    • 1:2.4.1+dfsg1-6+deb13u6 · arm64 · trixie-security

      Fixed · Fixed: 1:2.3.16+dfsg1-1

      dsa · dovecot · debian · 13

    • 1:2.4.1+dfsg1-6+deb13u7 · amd64 · trixie-security

      Fixed · Fixed: 1:2.3.16+dfsg1-1

      dsa · dovecot · debian · 13

Next results

Observed:

References

[CERT-Bund public advisories] · [Debian Security Tracker] · [FIRST EPSS] · [OSV Package Vulnerability Database] · [Red Hat security advisories and VEX] · [SUSE security advisories and VEX]