CVE-2025-59032

Publication date 27 March 2026

Last updated 27 March 2026


Ubuntu priority

Description

v2.4/v3.1 regression: Pigeonhole: ManageSieve panic occurs with sieve-connect as a client. ManageSieve AUTHENTICATE command crashes when using literal as ASL initial response. This can be used to crash ManageSieve service repeatedly, making it unavailable for other users. No publicly available exploits are known.

Status

Package Ubuntu Release Status
dovecot 25.10 questing
Vulnerable
24.04 LTS noble
Vulnerable
22.04 LTS jammy
Vulnerable
20.04 LTS focal
Vulnerable
18.04 LTS bionic
Vulnerable
16.04 LTS xenial
Vulnerable
14.04 LTS trusty
Vulnerable

Patch details

For informational purposes only. We recommend not to cherry-pick updates. How can I get the fixes?

Package Patch details
dovecot

Access our resources on patching vulnerabilities