projects / dovecot.git / commit
? search:
summary | shortlog | log | commit | commitdiff | tree
(parent: 8d4c712) | patch
[PATCH 09/24] auth: passdb sql - Fix escaping for set_credentials()
authorTimo Sirainen <timo.sirainen@open-xchange.com>
Tue, 24 Feb 2026 10:24:37 +0000 (12:24 +0200)
committerNoah Meyerhans <noahm@debian.org>
Mon, 18 May 2026 20:03:51 +0000 (16:03 -0400)
commita7fadea5e01e0805fd6ec60e2b6ace3974c976f2
treea7e938e3638a512e8fd855d77a1fab96f02dbcb2tree | snapshot
parent8d4c71207b333f085bd060c34e2106fa0ded199fcommit | diff
[PATCH 09/24] auth: passdb sql - Fix escaping for set_credentials()

This was only used by OTP SASL mechanism after successful authentication, so
it practically couldn't be used for SQL injections.

Broken by ef0c63b690e6ef9fbd53cb815dfab50d1667ba3a

Gbp-Pq: Name CVE-2026-24031-27860-6.patch
src/auth/passdb-sql.c diff | blob | history
Unnamed repository; edit this file 'description' to name the repository.