[PATCH 01/24] auth: Don't disconnect auth client when invalid base64 SASL input is...
authorTimo Sirainen <timo.sirainen@open-xchange.com>
Tue, 4 Nov 2025 09:34:30 +0000 (11:34 +0200)
committerNoah Meyerhans <noahm@debian.org>
Wed, 6 May 2026 19:18:43 +0000 (15:18 -0400)
commitfd587105470f09fcea8e5d0ffd111fc6d4270db1
treedffe9d0254a848dcc97e3112940316883f478023
parentf7642f6b579741ba78333929074b48dc80fff00a
[PATCH 01/24] auth: Don't disconnect auth client when invalid base64 SASL input is received

The base64 input comes from untrusted client. It shouldn't cause the auth
client to disconnect, which causes other concurrent logins to be aborted.

Broken by 1486c30e191ff079bfa78e7950173bb33d8073d9

Gbp-Pq: Name CVE-2025-59028.patch
src/auth/auth-request-handler.c