https://www.dovecot.org/list/dovecot...ch/000401.html

CVE fix for both versions.