projects / dovecot.git / commit
? search:
summary | shortlog | log | commit | commitdiff | tree
(parent: 11d48b1) | patch
[PATCH 01/24] auth: Don't disconnect auth client when invalid base64 SASL input is...
authorTimo Sirainen <timo.sirainen@open-xchange.com>
Tue, 4 Nov 2025 09:34:30 +0000 (11:34 +0200)
committerNoah Meyerhans <noahm@debian.org>
Mon, 18 May 2026 20:03:51 +0000 (16:03 -0400)
commitadb024ff0e217c6acd0477baeeaaf3d791b38029
tree54fa5e15f2551242f3a75a44b12aa83007fcbecftree | snapshot
parent11d48b1f19b454ad1dede69cc865a8621a210261commit | diff
[PATCH 01/24] auth: Don't disconnect auth client when invalid base64 SASL input is received

The base64 input comes from untrusted client. It shouldn't cause the auth
client to disconnect, which causes other concurrent logins to be aborted.

Broken by 1486c30e191ff079bfa78e7950173bb33d8073d9

Gbp-Pq: Name CVE-2025-59028.patch
src/auth/auth-request-handler.c diff | blob | history
Unnamed repository; edit this file 'description' to name the repository.