]> dgit.raspbian.org Git - dovecot.git/commit
projects / dovecot.git / commit
? search:
summary | shortlog | log | commit | commitdiff | tree
(parent: 522710c) | patch
[PATCH 2/2] managesieve-login: Verify AUTHENTICATE initial response size isn't too...
authorTimo Sirainen <timo.sirainen@open-xchange.com>
Mon, 2 Mar 2026 12:40:57 +0000 (14:40 +0200)
committerNoah Meyerhans <noahm@debian.org>
Wed, 16 Sep 2026 19:06:35 +0000 (15:06 -0400)
commit498e3a757002b168608db2285cc161cc6ec26767
tree102d52f4f81fd6b1a0b835ff6621134b4d3fb642tree | snapshot
parent522710cc10aaab52a2e7a6e567b4da149e32bd26commit | diff
[PATCH 2/2] managesieve-login: Verify AUTHENTICATE initial response size isn't too large

This prevents DoSing the managesieve-login by sending an excessively large
initial response size, which causes a huge memory allocation.

Gbp-Pq: Name CVE-2026-27858.patch
pigeonhole/src/managesieve-login/client-authenticate.c diff | blob | history
Unnamed repository; edit this file 'description' to name the repository.