dovecot: ignore already fixed CVEs

Upstream has confirmed that these vulnerabilities are fixed,
and Debian has also identified the relevant commits:

CVE-2025-59028: https://security-tracker.debian.org/tracker/CVE-2025-59028
CVE-2025-59032: https://security-tracker.debian.org/tracker/CVE-2025-59032
CVE-2026-27859: https://security-tracker.debian.org/tracker/CVE-2026-27859
CVE-2026-27851: https://security-tracker.debian.org/tracker/CVE-2026-27851
CVE-2026-33603: https://security-tracker.debian.org/tracker/CVE-2026-33603
CVE-2026-40016: https://security-tracker.debian.org/tracker/CVE-2026-40016
CVE-2026-40020: https://security-tracker.debian.org/tracker/CVE-2026-40020
CVE-2026-42006: https://security-tracker.debian.org/tracker/CVE-2026-42006

Signed-off-by: Ankur Tyagi <ankur.tyagi85@gmail.com>
Signed-off-by: Anuj Mittal <anuj.mittal@oss.qualcomm.com>
This commit is contained in:
Ankur Tyagi
2026-09-15 07:51:55 +05:30
committed by Anuj Mittal
parent 53bbf2771b
commit 86a9ad852a
@@ -86,3 +86,11 @@ CVE_STATUS[CVE-2026-0394] = "fixed-version: fixed since v2.4.1"
CVE_STATUS[CVE-2026-24031] = "fixed-version: fixed since v2.4.3"
CVE_STATUS[CVE-2026-27855] = "fixed-version: fixed since v2.4.3"
CVE_STATUS[CVE-2026-27860] = "fixed-version: fixed since v2.4.3"
CVE_STATUS[CVE-2025-59028] = "fixed-version: fixed since v2.4.3"
CVE_STATUS[CVE-2025-59032] = "fixed-version: fixed since v2.4.3"
CVE_STATUS[CVE-2026-27859] = "fixed-version: fixed since v2.4.3"
CVE_STATUS[CVE-2026-27851] = "fixed-version: fixed in v2.4.4"
CVE_STATUS[CVE-2026-33603] = "fixed-version: fixed in v2.4.4"
CVE_STATUS[CVE-2026-40016] = "fixed-version: fixed in v2.4.4"
CVE_STATUS[CVE-2026-40020] = "fixed-version: fixed in v2.4.4"
CVE_STATUS[CVE-2026-42006] = "fixed-version: fixed in v2.4.4"