projects / dovecot.git / commit
? search:
summary | shortlog | log | commit | commitdiff | tree
(parent: eace6dd) | patch
[PATCH 09/24] auth: passdb sql - Fix escaping for set_credentials()
authorTimo Sirainen <timo.sirainen@open-xchange.com>
Tue, 24 Feb 2026 10:24:37 +0000 (12:24 +0200)
committerNoah Meyerhans <noahm@debian.org>
Wed, 6 May 2026 19:18:43 +0000 (15:18 -0400)
commit1becac51ef54c4582fc7596ac0fa17814bcb8cb3
treee7bf09b163ad4ee21517a8c5eafd30c9431bf728tree | snapshot
parenteace6dd56055e4c657599117dfe302c81d3ce417commit | diff
[PATCH 09/24] auth: passdb sql - Fix escaping for set_credentials()

This was only used by OTP SASL mechanism after successful authentication, so
it practically couldn't be used for SQL injections.

Broken by ef0c63b690e6ef9fbd53cb815dfab50d1667ba3a

Gbp-Pq: Name CVE-2026-24031-27860-6.patch
src/auth/passdb-sql.c diff | blob | history
Unnamed repository; edit this file 'description' to name the repository.