]> dgit.raspbian.org Git - dovecot.git/commit
[PATCH 09/24] auth: passdb sql - Fix escaping for set_credentials()
authorTimo Sirainen <timo.sirainen@open-xchange.com>
Tue, 24 Feb 2026 10:24:37 +0000 (12:24 +0200)
committerNoah Meyerhans <noahm@debian.org>
Wed, 16 Sep 2026 19:06:35 +0000 (15:06 -0400)
commitd3a23c19629d8f74806698e376f56f41e1cfc4c3
treed4291cf124c9e3603716acfd4babbccc361a93ce
parent52c744b34671c5e7efd930a3f765dd676ccadb1a
[PATCH 09/24] auth: passdb sql - Fix escaping for set_credentials()

This was only used by OTP SASL mechanism after successful authentication, so
it practically couldn't be used for SQL injections.

Broken by ef0c63b690e6ef9fbd53cb815dfab50d1667ba3a

Gbp-Pq: Name CVE-2026-24031-27860-6.patch
src/auth/passdb-sql.c