#split-protocols.patch
#fix-mail_plugin_dir-default.patch
#ssl-cert-location.patch
#tcpwrapper.patch
#default-mail_location.patch
#mboxlocking.patch
#dovecot_name.patch
#ssl-dh-params-location.patch
skip-rfc-subdir.patch
#Correct-misspellings.patch
#test-backtrace.patch
#doveadm-director.1-drop-acute-accent.patch
#Fix-32bit-sign-comparisons.patch
#Improve-cross-compile-support.patch
#Silence-LTO-related-compiler-warning.patch
#md4-md5-disable-optimization-causing-unaligned-access.patch
#Support-openssl-3.0.patch
#Debug-flaky-unit-test.patch
#auth-Fix-handling-passdbs-with-identical-driver-args-but-.patch
#auth-Add-a-comment-about-updating-userdb_find.patch
#Fix-uninitialized-read-in-doveadm-oldstats.patch
Use-_FORTIFY_SOURCE-level-3.patch
fit-32-bit-test-integers.patch
fix-man-errors.patch
work-around-test-failure-on-big-endian-architectures.patch
Correctly_handle_signed_32-bit_time_t_types.patch
test-dir.patch
settings-Use-correct-symbol-STORAGE_LDAP-in-settings.patch
32-bit-test-array-fixes.patch
openssl4-dont-call-openssl-cleanup.patch
Add-seed-to-lua-newstate.patch
security-2026-03/001-lib-sieve-sieve-binary-code-fix-single-byte-oob-stack-buffer-write-in-si.patch
security-2026-03/002-lib-managesieve-managesieve-parser-fix-handling-of-lone-cr-character.patch
security-2026-03/003-lib-sieve-util-edit-mail-fix-writing-to-freed-memory.patch
security-2026-03/004-lib-managesieve-managesieve-parser-fix-handling-of-partial-escape-sequen.patch
security-2026-03/005-lib-managesieve-managesieve-parser-return-einval-error-for-missing-end-q.patch
security-2026-03/006-lib-sieve-sieve-storage-don-t-clear-storage-error-in-sieve-storage-save-.patch
security-2026-03/007-managesieve-cmd-putscript-fix-handling-of-invalid-stream-input.patch
security-2026-03/008-managesieve-cmd-putscript-prevent-logging-most-user-caused-issues-in-the.patch
security-2026-03/009-lib-sieve-edit-mail-headers-parse-fix-info-leak-via-nul-truncated-header.patch
security-2026-03/010-managesieve-login-client-skip-line-discard-data-when-newline-is-not-foun.patch
security-2026-03/011-lib-sieve-reduce-cpu-limit-check-interval-in-contains-and-matches-matche.patch
security-2026-03/012-lib-sieve-storage-file-refuse-symlinks-escaping-personal-storage-directo.patch
security-2026-03/013-lib-sieve-storage-file-validate-script-stat-path-through-dir-fd.patch
security-2026-03/014-lib-sieve-actions-split-mailbox-creation-into-sieve-act-store-create-mai.patch
security-2026-03/015-lib-sieve-actions-create-fileinto-mailbox-without-the-autocreate-flag.patch
security-2026-03/016-lib-sieve-add-per-user-sieve-rusage-file-for-cumulative-cpu-tracking.patch
security-2026-03/017-lib-sieve-drop-binary-header-resource-usage-tracking.patch
security-2026-03/018-lib-sieve-rename-on-disk-header-rusage-fields-to-unused.patch
security-2026-03/019-lib-sieve-switch-sieve-max-cpu-time-enforcement-to-time-decayed-re-enabl.patch
security-2026-03/020-lib-sieve-file-storage-remove-orphan-compiled-binaries-on-delete-and-ren.patch
security-2026-03/021-lib-sieve-log-a-warning-when-cumulative-cpu-exceeds-the-limit.patch
security-2026-03/022-lib-sieve-log-an-info-line-when-opening-a-cpu-disabled-script.patch
security-2026-03/023-lib-mail-o-stream-dot-sendv-use-i-min.patch
security-2026-03/024-lib-mail-o-stream-dot-sendv-fix-boundary-off-by-one.patch
security-2026-03/025-lib-mail-o-stream-dot-sendv-use-enumeration-to-define-the-items-to-injec.patch
security-2026-03/026-lib-mail-o-stream-dot-sendv-do-not-send-unguarded-after-bare-r.patch
security-2026-03/027-lib-imap-imap-match-deinit-normalize-to-how-deinits-work-elsewhere.patch
security-2026-03/028-lib-add-bit64-get-bit64-set.patch
security-2026-03/029-lib-imap-imap-match-fix-excessive-cpu-usage-caused-by-backtracking.patch
security-2026-03/030-imap-stream-bodystructure-to-client-without-ostream-memory-duplication.patch
security-2026-03/031-imap-stream-envelope-to-client-without-ostream-memory-duplication.patch
security-2026-03/032-lib-mail-message-parser-from-parts-enforce-50-mb-all-headers-max-size-li.patch
security-2026-03/033-lib-mail-add-count-field-to-struct-message-address-list.patch
security-2026-03/034-lib-storage-mbox-explicitly-disable-the-header-block-size-limit.patch
security-2026-03/035-lib-mail-istream-header-filter-use-container-of-for-struct-casts.patch
security-2026-03/036-lib-mail-make-istream-header-filter-s-per-header-size-limit-configurable.patch
security-2026-03/037-lib-storage-cap-per-header-size-in-index-mail-get-header-stream.patch
security-2026-03/038-lib-mail-clamp-hdr-value-cumulatively-against-header-block-max-size.patch
security-2026-03/039-lib-mail-introduce-struct-message-part-data-limits-and-thread-it-through.patch
security-2026-03/040-lib-mail-limit-total-address-count-per-message-to-100-000.patch
security-2026-03/041-lib-mail-limit-total-content-language-tag-count-per-message-to-100-000.patch
security-2026-03/042-lib-mail-limit-total-mime-parameter-count-per-message-to-200-000.patch
security-2026-03/043-dsync-avoid-potentially-excessive-data-stack-growth-for-mailbox-attribut.patch
security-2026-03/044-dsync-fix-escaping-mail-or-attribute-value-that-begins-with-a-line.patch
security-2026-03/045-lib-add-struct-bitmap.patch
security-2026-03/046-lib-imap-imap-match-use-struct-bitmap.patch
security-2026-03/047-lib-bits-h-fix-bit64-get-bit64-set-comments.patch
security-2026-03/048-imap-hibernate-fix-out-of-bounds-read-when-parsing-done-command-tag.patch
security-2026-03/049-imap-hibernate-use-imap-parser-api-for-parsing-done-command.patch
security-2026-03/050-submission-fix-settings-leak-on-error-paths-in-client-create-from-input.patch
security-2026-03/051-auth-fix-prefixing-forward-fields-without-a-value-from-client.patch
security-2026-03/052-imap-extract-side-channel-ostream-creation-into-helper.patch
security-2026-03/053-imap-recreate-multiplex-ostream-side-channel-after-unhibernation.patch
security-2026-03/054-lib-compression-add-o-stream-deflate-reset-dict.patch
security-2026-03/055-imap-login-add-dict-reset-side-channel-command-to-imap-proxy.patch
security-2026-03/056-imap-reset-deflate-dictionary-after-every-tagged-reply.patch
security-2026-03/057-lib-add-xxh64-hash-implementation.patch
security-2026-03/058-lib-replace-str-hash-strcase-hash-with-xxh64.patch
security-2026-03/059-lib-add-str-stable-hash.patch
security-2026-03/060-lib-settings-config-use-str-stable-hash.patch
security-2026-03/061-lib-key-str-hash-strcase-hash-with-a-random-seed-to-prevent-hashdos.patch
security-2026-03/062-lib-index-rename-crc32-variables-parameters-to-hash-in-strmap.patch
security-2026-03/063-lib-index-add-keyed-xxh64-strmap-format-v2-gated-by-config-version.patch
security-2026-03/064-lib-storage-thread-avoid-excessive-data-stack-growth-with-many-reference.patch
security-2026-03/065-doveadm-fix-ubsan-unsigned-integer-overflow-error.patch
security-2026-03/066-lib-master-move-config-version-find-from-src-config-config-parser-c.patch
security-2026-03/067-lib-master-config-split-off-storage-version-default.patch
security-2026-03/068-lib-master-add-more-strict-validation-for-dovecot-storage-version-settin.patch
security-2026-03/069-login-common-fix-crash-when-xclient-forward-base64-contains-nul-byte.patch
security-2026-03/070-login-common-avoid-array-front-panic-on-empty-forward-fields-array.patch
security-2026-03/071-lib-storage-thread-limit-references-header-msgid-count-to-prevent-o-n-2-.patch
security-2026-03/072-lib-storage-thread-limit-ancestor-chain-traversal-depth-to-prevent-o-n-2.patch
security-2026-03/073-lib-add-str-equals-timing-safe.patch
security-2026-03/074-doveadm-avoid-leaking-doveadm-password-or-doveadm-api-key-lengths.patch
security-2026-03/075-lib-imap-urlauth-fix-leaking-uninitialized-memory-into-client-error-mess.patch
security-2026-03/076-login-common-client-common-add-client-disconnect-vfunc.patch
security-2026-03/077-submission-login-client-fix-panic-occurring-at-mail-max-userip-connectio.patch
security-2026-03/078-lib-smtp-smtp-server-expose-smtp-server-connection-reply-immediate.patch
security-2026-03/079-submission-login-client-authenticate-reply-421-4-7-0-on-mail-max-userip-.patch
security-2026-03/080-submission-login-submission-proxy-recognize-421-4-7-0-as-connection-limi.patch
security-2026-03/081-lib-sql-add-sql-result-new-error-helper.patch
security-2026-03/082-lib-sql-extract-sql-query-callback-delayed-helper.patch
security-2026-03/083-lib-sql-add-sql-commit-schedule-delayed-helper.patch
security-2026-03/084-lib-var-expand-change-escape-func-signature-to-return-int-with-error-r.patch
security-2026-03/085-lib-sql-make-escape-string-return-int-with-error-r-fail-instead-of-unsaf.patch
security-2026-03/086-auth-passdb-sql-connect-before-expanding-query-variables.patch
security-2026-03/087-auth-db-oauth2-reduce-nesting-in-token-in-scope-via-early-return.patch
security-2026-03/088-auth-db-oauth2-fix-scope-check-to-require-all-configured-scopes.patch
security-2026-03/089-auth-db-oauth2-add-oauth2-audience-setting-deprecate-aud-as-scope-fallba.patch
security-2026-03/090-auth-db-oauth2-add-local-validation-unit-tests.patch
security-2026-03/091-lib-sql-run-sql-statement-queries-in-their-own-data-stack-frame.patch
security-2026-03/092-lib-compression-wrap-read-in-for-loop-reindent-only.patch
security-2026-03/093-lib-compression-iterate-instead-of-recursing-on-zero-output-decompress-c.patch
security-2026-03/094-lib-compression-istream-zstd-guard-against-no-progress-loop-in-read.patch
security-2026-03/095-lib-compression-test-add-zero-len-frame-test-for-all-handlers.patch
security-2026-03/096-lib-i-close-fd-document-that-it-preserves-errno.patch
security-2026-03/097-lib-path-util-add-t-openat-safe-for-jailed-openat-resolution.patch
security-2026-03/098-lib-add-t-openat-safe-dir.patch
security-2026-03/099-acl-dovecot-acl-list-is-never-supposed-to-be-a-symlink-use-o-nofollow-fl.patch
security-2026-03/100-lib-add-comments-about-memory-allocations-and-string-functions-preservin.patch
security-2026-03/101-lib-lda-mail-deliver-autocreate-delivery-mailbox-via-explicit-mailbox-cr.patch
security-2026-03/102-lib-storage-remove-mailbox-flag-auto-create-and-mailbox-flag-auto-subscr.patch
security-2026-03/103-lib-storage-allow-null-path-in-mailbox-list-mkdir-root.patch
security-2026-03/104-lib-storage-simplify-mailbox-mkdir-using-mailbox-list-mkdir-root-null.patch
security-2026-03/105-imap-login-fix-excessive-memory-growth-with-pre-login-id-command.patch
security-2026-03/106-imap-restrict-compress-to-deflate-only.patch
security-2026-03/107-doveadm-compress-connect-don-t-hang-when-server-rejects-compress.patch
security-2026-03/108-doveadm-compress-delay-failing-if-used-compress-algorithm-is-not-support.patch
