main/dovecot: patch CVE-2024-23184 & CVE-2024-23185

This MR fixes #16381 (closed)

assigned to @ncopa

Wouldn't it be better to update to 2.3.21.1 as recommended by the issue? That has the CVEs fixed, and some other changes as well.

I'm completely fine with directly merging 2.3.21.1 instead. Depends on @ncopa what he prefers i think...

If wished, please let me know, then i create a new MR.

2.3.21.1 is probably better, yes.

Then let me do it really quick

closed

mentioned in merge request !70705 (merged)