Dovecot vulnerabilities
Published: Tue, 02 Jun 2026 12:42
Summary
Several security issues were fixed in Dovecot.
Details
It was discovered that Dovecot incorrectly treated some variable expansion pipelines as safe in authentication filters. An attacker could possibly use this issue to perform SQL or LDAP injection attacks. This issue only affected Ubuntu 25.10 and Ubuntu 26.04 LTS. (CVE-2026-27851) It was discovered that Dovecot incorrectly verified SCRAM TLS channel binding in certain base64 exchanges. A remote attacker could possibly use this issue to obtain sensitive information in a machine-in-the-middle attack. (CVE-2026-33603) It was discovered that Dovecot incorrectly enforced Sieve script CPU limits. An attacker could possibly use this issue to cause Dovecot to use excessive resources, leading to a denial of service. (CVE-2026-40016) It was discovered that Dovecot incorrectly handled certain IMAP SETACL commands. An attacker could possibly use this issue to spam folders to other users. (CVE-2026-40020) It was discovered that Dovecot incorrectly handled excessive IMAP bracing. An attacker could possibly use this issue to cause Dovecot to use excessive resources, leading to a denial of service. (CVE-2026-42006)
Recommended actions per Ubuntu release
StackPatch playbook auto-generated per release codename and per affected package.
Ubuntu jammy
dovecot→1:2.3.16+dfsg1-3ubuntu2.9apt_upgradeStandard apt upgrade. Install 1:2.3.16+dfsg1-3ubuntu2.9 from the apt repo.
sudo apt-get update sudo apt-get install --only-upgrade -y dovecot
Most apt upgrades restart their service automatically. needrestart lists anything else.
dovecot-auth-lua→1:2.3.16+dfsg1-3ubuntu2.9apt_upgradeStandard apt upgrade. Install 1:2.3.16+dfsg1-3ubuntu2.9 from the apt repo.
sudo apt-get update sudo apt-get install --only-upgrade -y dovecot-auth-lua
Most apt upgrades restart their service automatically. needrestart lists anything else.
dovecot-core→1:2.3.16+dfsg1-3ubuntu2.9apt_upgradeStandard apt upgrade. Install 1:2.3.16+dfsg1-3ubuntu2.9 from the apt repo.
sudo apt-get update sudo apt-get install --only-upgrade -y dovecot-core
Most apt upgrades restart their service automatically. needrestart lists anything else.
dovecot-dev→1:2.3.16+dfsg1-3ubuntu2.9apt_upgradeStandard apt upgrade. Install 1:2.3.16+dfsg1-3ubuntu2.9 from the apt repo.
sudo apt-get update sudo apt-get install --only-upgrade -y dovecot-dev
Most apt upgrades restart their service automatically. needrestart lists anything else.
dovecot-gssapi→1:2.3.16+dfsg1-3ubuntu2.9apt_upgradeStandard apt upgrade. Install 1:2.3.16+dfsg1-3ubuntu2.9 from the apt repo.
sudo apt-get update sudo apt-get install --only-upgrade -y dovecot-gssapi
Most apt upgrades restart their service automatically. needrestart lists anything else.
dovecot-imapd→1:2.3.16+dfsg1-3ubuntu2.9apt_upgradeStandard apt upgrade. Install 1:2.3.16+dfsg1-3ubuntu2.9 from the apt repo.
sudo apt-get update sudo apt-get install --only-upgrade -y dovecot-imapd
Most apt upgrades restart their service automatically. needrestart lists anything else.
dovecot-ldap→1:2.3.16+dfsg1-3ubuntu2.9apt_upgradeStandard apt upgrade. Install 1:2.3.16+dfsg1-3ubuntu2.9 from the apt repo.
sudo apt-get update sudo apt-get install --only-upgrade -y dovecot-ldap
Most apt upgrades restart their service automatically. needrestart lists anything else.
dovecot-lmtpd→1:2.3.16+dfsg1-3ubuntu2.9apt_upgradeStandard apt upgrade. Install 1:2.3.16+dfsg1-3ubuntu2.9 from the apt repo.
sudo apt-get update sudo apt-get install --only-upgrade -y dovecot-lmtpd
Most apt upgrades restart their service automatically. needrestart lists anything else.
dovecot-lucene→1:2.3.16+dfsg1-3ubuntu2.9apt_upgradeStandard apt upgrade. Install 1:2.3.16+dfsg1-3ubuntu2.9 from the apt repo.
sudo apt-get update sudo apt-get install --only-upgrade -y dovecot-lucene
Most apt upgrades restart their service automatically. needrestart lists anything else.
dovecot-managesieved→1:2.3.16+dfsg1-3ubuntu2.9apt_upgradeStandard apt upgrade. Install 1:2.3.16+dfsg1-3ubuntu2.9 from the apt repo.
sudo apt-get update sudo apt-get install --only-upgrade -y dovecot-managesieved
Most apt upgrades restart their service automatically. needrestart lists anything else.
dovecot-mysql→1:2.3.16+dfsg1-3ubuntu2.9apt_upgradeStandard apt upgrade. Install 1:2.3.16+dfsg1-3ubuntu2.9 from the apt repo.
sudo apt-get update sudo apt-get install --only-upgrade -y dovecot-mysql
Most apt upgrades restart their service automatically. needrestart lists anything else.
dovecot-pgsql→1:2.3.16+dfsg1-3ubuntu2.9apt_upgradeStandard apt upgrade. Install 1:2.3.16+dfsg1-3ubuntu2.9 from the apt repo.
sudo apt-get update sudo apt-get install --only-upgrade -y dovecot-pgsql
Most apt upgrades restart their service automatically. needrestart lists anything else.
dovecot-pop3d→1:2.3.16+dfsg1-3ubuntu2.9apt_upgradeStandard apt upgrade. Install 1:2.3.16+dfsg1-3ubuntu2.9 from the apt repo.
sudo apt-get update sudo apt-get install --only-upgrade -y dovecot-pop3d
Most apt upgrades restart their service automatically. needrestart lists anything else.
dovecot-sieve→1:2.3.16+dfsg1-3ubuntu2.9apt_upgradeStandard apt upgrade. Install 1:2.3.16+dfsg1-3ubuntu2.9 from the apt repo.
sudo apt-get update sudo apt-get install --only-upgrade -y dovecot-sieve
Most apt upgrades restart their service automatically. needrestart lists anything else.
dovecot-solr→1:2.3.16+dfsg1-3ubuntu2.9apt_upgradeStandard apt upgrade. Install 1:2.3.16+dfsg1-3ubuntu2.9 from the apt repo.
sudo apt-get update sudo apt-get install --only-upgrade -y dovecot-solr
Most apt upgrades restart their service automatically. needrestart lists anything else.
dovecot-sqlite→1:2.3.16+dfsg1-3ubuntu2.9apt_upgradeStandard apt upgrade. Install 1:2.3.16+dfsg1-3ubuntu2.9 from the apt repo.
sudo apt-get update sudo apt-get install --only-upgrade -y dovecot-sqlite
Most apt upgrades restart their service automatically. needrestart lists anything else.
dovecot-submissiond→1:2.3.16+dfsg1-3ubuntu2.9apt_upgradeStandard apt upgrade. Install 1:2.3.16+dfsg1-3ubuntu2.9 from the apt repo.
sudo apt-get update sudo apt-get install --only-upgrade -y dovecot-submissiond
Most apt upgrades restart their service automatically. needrestart lists anything else.
Ubuntu noble
dovecot→1:2.3.21+dfsg1-2ubuntu6.5apt_upgradeStandard apt upgrade. Install 1:2.3.21+dfsg1-2ubuntu6.5 from the apt repo.
sudo apt-get update sudo apt-get install --only-upgrade -y dovecot
Most apt upgrades restart their service automatically. needrestart lists anything else.
dovecot-auth-lua→1:2.3.21+dfsg1-2ubuntu6.5apt_upgradeStandard apt upgrade. Install 1:2.3.21+dfsg1-2ubuntu6.5 from the apt repo.
sudo apt-get update sudo apt-get install --only-upgrade -y dovecot-auth-lua
Most apt upgrades restart their service automatically. needrestart lists anything else.
dovecot-core→1:2.3.21+dfsg1-2ubuntu6.5apt_upgradeStandard apt upgrade. Install 1:2.3.21+dfsg1-2ubuntu6.5 from the apt repo.
sudo apt-get update sudo apt-get install --only-upgrade -y dovecot-core
Most apt upgrades restart their service automatically. needrestart lists anything else.
dovecot-dev→1:2.3.21+dfsg1-2ubuntu6.5apt_upgradeStandard apt upgrade. Install 1:2.3.21+dfsg1-2ubuntu6.5 from the apt repo.
sudo apt-get update sudo apt-get install --only-upgrade -y dovecot-dev
Most apt upgrades restart their service automatically. needrestart lists anything else.
dovecot-gssapi→1:2.3.21+dfsg1-2ubuntu6.5apt_upgradeStandard apt upgrade. Install 1:2.3.21+dfsg1-2ubuntu6.5 from the apt repo.
sudo apt-get update sudo apt-get install --only-upgrade -y dovecot-gssapi
Most apt upgrades restart their service automatically. needrestart lists anything else.
dovecot-imapd→1:2.3.21+dfsg1-2ubuntu6.5apt_upgradeStandard apt upgrade. Install 1:2.3.21+dfsg1-2ubuntu6.5 from the apt repo.
sudo apt-get update sudo apt-get install --only-upgrade -y dovecot-imapd
Most apt upgrades restart their service automatically. needrestart lists anything else.
dovecot-ldap→1:2.3.21+dfsg1-2ubuntu6.5apt_upgradeStandard apt upgrade. Install 1:2.3.21+dfsg1-2ubuntu6.5 from the apt repo.
sudo apt-get update sudo apt-get install --only-upgrade -y dovecot-ldap
Most apt upgrades restart their service automatically. needrestart lists anything else.
dovecot-lmtpd→1:2.3.21+dfsg1-2ubuntu6.5apt_upgradeStandard apt upgrade. Install 1:2.3.21+dfsg1-2ubuntu6.5 from the apt repo.
sudo apt-get update sudo apt-get install --only-upgrade -y dovecot-lmtpd
Most apt upgrades restart their service automatically. needrestart lists anything else.
dovecot-managesieved→1:2.3.21+dfsg1-2ubuntu6.5apt_upgradeStandard apt upgrade. Install 1:2.3.21+dfsg1-2ubuntu6.5 from the apt repo.
sudo apt-get update sudo apt-get install --only-upgrade -y dovecot-managesieved
Most apt upgrades restart their service automatically. needrestart lists anything else.
dovecot-mysql→1:2.3.21+dfsg1-2ubuntu6.5apt_upgradeStandard apt upgrade. Install 1:2.3.21+dfsg1-2ubuntu6.5 from the apt repo.
sudo apt-get update sudo apt-get install --only-upgrade -y dovecot-mysql
Most apt upgrades restart their service automatically. needrestart lists anything else.
dovecot-pgsql→1:2.3.21+dfsg1-2ubuntu6.5apt_upgradeStandard apt upgrade. Install 1:2.3.21+dfsg1-2ubuntu6.5 from the apt repo.
sudo apt-get update sudo apt-get install --only-upgrade -y dovecot-pgsql
Most apt upgrades restart their service automatically. needrestart lists anything else.
dovecot-pop3d→1:2.3.21+dfsg1-2ubuntu6.5apt_upgradeStandard apt upgrade. Install 1:2.3.21+dfsg1-2ubuntu6.5 from the apt repo.
sudo apt-get update sudo apt-get install --only-upgrade -y dovecot-pop3d
Most apt upgrades restart their service automatically. needrestart lists anything else.
dovecot-sieve→1:2.3.21+dfsg1-2ubuntu6.5apt_upgradeStandard apt upgrade. Install 1:2.3.21+dfsg1-2ubuntu6.5 from the apt repo.
sudo apt-get update sudo apt-get install --only-upgrade -y dovecot-sieve
Most apt upgrades restart their service automatically. needrestart lists anything else.
dovecot-solr→1:2.3.21+dfsg1-2ubuntu6.5apt_upgradeStandard apt upgrade. Install 1:2.3.21+dfsg1-2ubuntu6.5 from the apt repo.
sudo apt-get update sudo apt-get install --only-upgrade -y dovecot-solr
Most apt upgrades restart their service automatically. needrestart lists anything else.
dovecot-sqlite→1:2.3.21+dfsg1-2ubuntu6.5apt_upgradeStandard apt upgrade. Install 1:2.3.21+dfsg1-2ubuntu6.5 from the apt repo.
sudo apt-get update sudo apt-get install --only-upgrade -y dovecot-sqlite
Most apt upgrades restart their service automatically. needrestart lists anything else.
dovecot-submissiond→1:2.3.21+dfsg1-2ubuntu6.5apt_upgradeStandard apt upgrade. Install 1:2.3.21+dfsg1-2ubuntu6.5 from the apt repo.
sudo apt-get update sudo apt-get install --only-upgrade -y dovecot-submissiond
Most apt upgrades restart their service automatically. needrestart lists anything else.
Ubuntu questing
dovecot→1:2.4.1+dfsg1-5ubuntu4.2apt_upgradeStandard apt upgrade. Install 1:2.4.1+dfsg1-5ubuntu4.2 from the apt repo.
sudo apt-get update sudo apt-get install --only-upgrade -y dovecot
Most apt upgrades restart their service automatically. needrestart lists anything else.
dovecot-auth-lua→1:2.4.1+dfsg1-5ubuntu4.2apt_upgradeStandard apt upgrade. Install 1:2.4.1+dfsg1-5ubuntu4.2 from the apt repo.
sudo apt-get update sudo apt-get install --only-upgrade -y dovecot-auth-lua
Most apt upgrades restart their service automatically. needrestart lists anything else.
dovecot-core→1:2.4.1+dfsg1-5ubuntu4.2apt_upgradeStandard apt upgrade. Install 1:2.4.1+dfsg1-5ubuntu4.2 from the apt repo.
sudo apt-get update sudo apt-get install --only-upgrade -y dovecot-core
Most apt upgrades restart their service automatically. needrestart lists anything else.
dovecot-dev→1:2.4.1+dfsg1-5ubuntu4.2apt_upgradeStandard apt upgrade. Install 1:2.4.1+dfsg1-5ubuntu4.2 from the apt repo.
sudo apt-get update sudo apt-get install --only-upgrade -y dovecot-dev
Most apt upgrades restart their service automatically. needrestart lists anything else.
dovecot-flatcurve→1:2.4.1+dfsg1-5ubuntu4.2apt_upgradeStandard apt upgrade. Install 1:2.4.1+dfsg1-5ubuntu4.2 from the apt repo.
sudo apt-get update sudo apt-get install --only-upgrade -y dovecot-flatcurve
Most apt upgrades restart their service automatically. needrestart lists anything else.
dovecot-gssapi→1:2.4.1+dfsg1-5ubuntu4.2apt_upgradeStandard apt upgrade. Install 1:2.4.1+dfsg1-5ubuntu4.2 from the apt repo.
sudo apt-get update sudo apt-get install --only-upgrade -y dovecot-gssapi
Most apt upgrades restart their service automatically. needrestart lists anything else.
dovecot-imapd→1:2.4.1+dfsg1-5ubuntu4.2apt_upgradeStandard apt upgrade. Install 1:2.4.1+dfsg1-5ubuntu4.2 from the apt repo.
sudo apt-get update sudo apt-get install --only-upgrade -y dovecot-imapd
Most apt upgrades restart their service automatically. needrestart lists anything else.
dovecot-ldap→1:2.4.1+dfsg1-5ubuntu4.2apt_upgradeStandard apt upgrade. Install 1:2.4.1+dfsg1-5ubuntu4.2 from the apt repo.
sudo apt-get update sudo apt-get install --only-upgrade -y dovecot-ldap
Most apt upgrades restart their service automatically. needrestart lists anything else.
dovecot-lmtpd→1:2.4.1+dfsg1-5ubuntu4.2apt_upgradeStandard apt upgrade. Install 1:2.4.1+dfsg1-5ubuntu4.2 from the apt repo.
sudo apt-get update sudo apt-get install --only-upgrade -y dovecot-lmtpd
Most apt upgrades restart their service automatically. needrestart lists anything else.
dovecot-managesieved→1:2.4.1+dfsg1-5ubuntu4.2apt_upgradeStandard apt upgrade. Install 1:2.4.1+dfsg1-5ubuntu4.2 from the apt repo.
sudo apt-get update sudo apt-get install --only-upgrade -y dovecot-managesieved
Most apt upgrades restart their service automatically. needrestart lists anything else.
dovecot-mysql→1:2.4.1+dfsg1-5ubuntu4.2apt_upgradeStandard apt upgrade. Install 1:2.4.1+dfsg1-5ubuntu4.2 from the apt repo.
sudo apt-get update sudo apt-get install --only-upgrade -y dovecot-mysql
Most apt upgrades restart their service automatically. needrestart lists anything else.
dovecot-pgsql→1:2.4.1+dfsg1-5ubuntu4.2apt_upgradeStandard apt upgrade. Install 1:2.4.1+dfsg1-5ubuntu4.2 from the apt repo.
sudo apt-get update sudo apt-get install --only-upgrade -y dovecot-pgsql
Most apt upgrades restart their service automatically. needrestart lists anything else.
dovecot-pop3d→1:2.4.1+dfsg1-5ubuntu4.2apt_upgradeStandard apt upgrade. Install 1:2.4.1+dfsg1-5ubuntu4.2 from the apt repo.
sudo apt-get update sudo apt-get install --only-upgrade -y dovecot-pop3d
Most apt upgrades restart their service automatically. needrestart lists anything else.
dovecot-sieve→1:2.4.1+dfsg1-5ubuntu4.2apt_upgradeStandard apt upgrade. Install 1:2.4.1+dfsg1-5ubuntu4.2 from the apt repo.
sudo apt-get update sudo apt-get install --only-upgrade -y dovecot-sieve
Most apt upgrades restart their service automatically. needrestart lists anything else.
dovecot-solr→1:2.4.1+dfsg1-5ubuntu4.2apt_upgradeStandard apt upgrade. Install 1:2.4.1+dfsg1-5ubuntu4.2 from the apt repo.
sudo apt-get update sudo apt-get install --only-upgrade -y dovecot-solr
Most apt upgrades restart their service automatically. needrestart lists anything else.
dovecot-sqlite→1:2.4.1+dfsg1-5ubuntu4.2apt_upgradeStandard apt upgrade. Install 1:2.4.1+dfsg1-5ubuntu4.2 from the apt repo.
sudo apt-get update sudo apt-get install --only-upgrade -y dovecot-sqlite
Most apt upgrades restart their service automatically. needrestart lists anything else.
dovecot-submissiond→1:2.4.1+dfsg1-5ubuntu4.2apt_upgradeStandard apt upgrade. Install 1:2.4.1+dfsg1-5ubuntu4.2 from the apt repo.
sudo apt-get update sudo apt-get install --only-upgrade -y dovecot-submissiond
Most apt upgrades restart their service automatically. needrestart lists anything else.
Ubuntu resolute
dovecot→1:2.4.2+dfsg1-3ubuntu2.1apt_upgradeStandard apt upgrade. Install 1:2.4.2+dfsg1-3ubuntu2.1 from the apt repo.
sudo apt-get update sudo apt-get install --only-upgrade -y dovecot
Most apt upgrades restart their service automatically. needrestart lists anything else.
dovecot-auth-lua→1:2.4.2+dfsg1-3ubuntu2.1apt_upgradeStandard apt upgrade. Install 1:2.4.2+dfsg1-3ubuntu2.1 from the apt repo.
sudo apt-get update sudo apt-get install --only-upgrade -y dovecot-auth-lua
Most apt upgrades restart their service automatically. needrestart lists anything else.
dovecot-core→1:2.4.2+dfsg1-3ubuntu2.1apt_upgradeStandard apt upgrade. Install 1:2.4.2+dfsg1-3ubuntu2.1 from the apt repo.
sudo apt-get update sudo apt-get install --only-upgrade -y dovecot-core
Most apt upgrades restart their service automatically. needrestart lists anything else.
dovecot-dev→1:2.4.2+dfsg1-3ubuntu2.1apt_upgradeStandard apt upgrade. Install 1:2.4.2+dfsg1-3ubuntu2.1 from the apt repo.
sudo apt-get update sudo apt-get install --only-upgrade -y dovecot-dev
Most apt upgrades restart their service automatically. needrestart lists anything else.
dovecot-flatcurve→1:2.4.2+dfsg1-3ubuntu2.1apt_upgradeStandard apt upgrade. Install 1:2.4.2+dfsg1-3ubuntu2.1 from the apt repo.
sudo apt-get update sudo apt-get install --only-upgrade -y dovecot-flatcurve
Most apt upgrades restart their service automatically. needrestart lists anything else.
dovecot-gssapi→1:2.4.2+dfsg1-3ubuntu2.1apt_upgradeStandard apt upgrade. Install 1:2.4.2+dfsg1-3ubuntu2.1 from the apt repo.
sudo apt-get update sudo apt-get install --only-upgrade -y dovecot-gssapi
Most apt upgrades restart their service automatically. needrestart lists anything else.
dovecot-imapd→1:2.4.2+dfsg1-3ubuntu2.1apt_upgradeStandard apt upgrade. Install 1:2.4.2+dfsg1-3ubuntu2.1 from the apt repo.
sudo apt-get update sudo apt-get install --only-upgrade -y dovecot-imapd
Most apt upgrades restart their service automatically. needrestart lists anything else.
dovecot-ldap→1:2.4.2+dfsg1-3ubuntu2.1apt_upgradeStandard apt upgrade. Install 1:2.4.2+dfsg1-3ubuntu2.1 from the apt repo.
sudo apt-get update sudo apt-get install --only-upgrade -y dovecot-ldap
Most apt upgrades restart their service automatically. needrestart lists anything else.
dovecot-lmtpd→1:2.4.2+dfsg1-3ubuntu2.1apt_upgradeStandard apt upgrade. Install 1:2.4.2+dfsg1-3ubuntu2.1 from the apt repo.
sudo apt-get update sudo apt-get install --only-upgrade -y dovecot-lmtpd
Most apt upgrades restart their service automatically. needrestart lists anything else.
dovecot-managesieved→1:2.4.2+dfsg1-3ubuntu2.1apt_upgradeStandard apt upgrade. Install 1:2.4.2+dfsg1-3ubuntu2.1 from the apt repo.
sudo apt-get update sudo apt-get install --only-upgrade -y dovecot-managesieved
Most apt upgrades restart their service automatically. needrestart lists anything else.
dovecot-mysql→1:2.4.2+dfsg1-3ubuntu2.1apt_upgradeStandard apt upgrade. Install 1:2.4.2+dfsg1-3ubuntu2.1 from the apt repo.
sudo apt-get update sudo apt-get install --only-upgrade -y dovecot-mysql
Most apt upgrades restart their service automatically. needrestart lists anything else.
dovecot-pgsql→1:2.4.2+dfsg1-3ubuntu2.1apt_upgradeStandard apt upgrade. Install 1:2.4.2+dfsg1-3ubuntu2.1 from the apt repo.
sudo apt-get update sudo apt-get install --only-upgrade -y dovecot-pgsql
Most apt upgrades restart their service automatically. needrestart lists anything else.
dovecot-pop3d→1:2.4.2+dfsg1-3ubuntu2.1apt_upgradeStandard apt upgrade. Install 1:2.4.2+dfsg1-3ubuntu2.1 from the apt repo.
sudo apt-get update sudo apt-get install --only-upgrade -y dovecot-pop3d
Most apt upgrades restart their service automatically. needrestart lists anything else.
dovecot-sieve→1:2.4.2+dfsg1-3ubuntu2.1apt_upgradeStandard apt upgrade. Install 1:2.4.2+dfsg1-3ubuntu2.1 from the apt repo.
sudo apt-get update sudo apt-get install --only-upgrade -y dovecot-sieve
Most apt upgrades restart their service automatically. needrestart lists anything else.
dovecot-solr→1:2.4.2+dfsg1-3ubuntu2.1apt_upgradeStandard apt upgrade. Install 1:2.4.2+dfsg1-3ubuntu2.1 from the apt repo.
sudo apt-get update sudo apt-get install --only-upgrade -y dovecot-solr
Most apt upgrades restart their service automatically. needrestart lists anything else.
dovecot-sqlite→1:2.4.2+dfsg1-3ubuntu2.1apt_upgradeStandard apt upgrade. Install 1:2.4.2+dfsg1-3ubuntu2.1 from the apt repo.
sudo apt-get update sudo apt-get install --only-upgrade -y dovecot-sqlite
Most apt upgrades restart their service automatically. needrestart lists anything else.
dovecot-submissiond→1:2.4.2+dfsg1-3ubuntu2.1apt_upgradeStandard apt upgrade. Install 1:2.4.2+dfsg1-3ubuntu2.1 from the apt repo.
sudo apt-get update sudo apt-get install --only-upgrade -y dovecot-submissiond
Most apt upgrades restart their service automatically. needrestart lists anything else.
Are YOU affected by USN-8365-1?
5-second check on your actual server. Reads /etc/os-release, uname -r, and dpkg-query; matches against the live USN + Debian Security Tracker feeds; tells you whether USN-8365-1 (and any other live CVE) applies. Anonymous, no signup.
curl https://mindsparkstack.com/scan.sh | bash
StackPatch runs this match against YOUR installed packages every hour
Free 1-server / $99 lifetime founder seat (50 only) / $19+/mo monthly. Indie pricing.