In an activity completely unrelated to IMAP or dovecot, I tried changing the password of an account on the same machine as my dovecot IMAP server.
As root, I typed 'passwd foo' to change the password of the foo account. As soon as I pressed <ENTER>, the system printed, "no talloc stackframe at ../source3/param/loadparm.c:4831, leaking memory", just before the line, "Enter new UNIX password:". So it seems that dovecot is getting the string from a noisy, external authentication system and passing that string along to the system log. Googling around, I find that this might be related to a recent change in samba. https://lists.samba.org/archive/samba/2012-August/168869.html -- Thomas E. Vaughan