]> dgit.raspbian.org Git - dovecot.git/commit
[PATCH 14/24] imap-login: Limit the number of open IMAP parser lists
authorTimo Sirainen <timo.sirainen@open-xchange.com>
Fri, 6 Mar 2026 13:35:12 +0000 (15:35 +0200)
committerNoah Meyerhans <noahm@debian.org>
Wed, 16 Sep 2026 19:06:35 +0000 (15:06 -0400)
commit620a5faab9c3d2d2eddda8e3d0c60a76b9b4e56d
treedd49a521ff9bf0056fe18d060e6b47982f47405b
parentcdebe26b78f3882c19d8df04a65fdf6fdd769956
[PATCH 14/24] imap-login: Limit the number of open IMAP parser lists

This prevents attackers from using a large number of '(' in a command to
grow memory usage excessively.

Gbp-Pq: Name CVE-2026-27857-4.patch
src/imap-login/imap-login-client.c
src/imap-login/imap-login-client.h
src/imap-login/imap-login-cmd-id.c