]> dgit.raspbian.org Git - dovecot.git/commit
projects / dovecot.git / commit
? search:
summary | shortlog | log | commit | commitdiff | tree
(parent: dd48162) | patch
[PATCH 01/24] auth: Don't disconnect auth client when invalid base64 SASL input is...
authorTimo Sirainen <timo.sirainen@open-xchange.com>
Tue, 4 Nov 2025 09:34:30 +0000 (11:34 +0200)
committerNoah Meyerhans <noahm@debian.org>
Wed, 16 Sep 2026 19:06:35 +0000 (15:06 -0400)
commitcb3937b8d441487799ded6e2262e7827b0a9b2a0
tree019123ad55cdd62eeb03b54bcd046d62b8da1136tree | snapshot
parentdd48162f3d07ca282d821df109f3bcd320198c81commit | diff
[PATCH 01/24] auth: Don't disconnect auth client when invalid base64 SASL input is received

The base64 input comes from untrusted client. It shouldn't cause the auth
client to disconnect, which causes other concurrent logins to be aborted.

Broken by 1486c30e191ff079bfa78e7950173bb33d8073d9

Gbp-Pq: Name CVE-2025-59028.patch
src/auth/auth-request-handler.c diff | blob | history
Unnamed repository; edit this file 'description' to name the repository.