From: Aki Tuomi <aki.tuomi@open-xchange.com>
Date: Mon, 9 Mar 2026 18:04:27 +0000 (+0200)
Subject: [PATCH 21/24] auth: cache - Use translated username in auth_cache_remove()
X-Git-Tag: archive/raspbian/1%2.4.1+dfsg1-6+rpi1+deb13u4^2~14
X-Git-Url: https://dgit.raspbian.org/?a=commitdiff_plain;h=6d3aa7a7fce774e15b5876b25f07923bcaa2f1e4;p=dovecot.git

[PATCH 21/24] auth: cache - Use translated username in auth_cache_remove()


Gbp-Pq: Name CVE-2026-27855-1.patch
---

diff --git a/src/auth/auth-cache.c b/src/auth/auth-cache.c
index 360ad8b..a5732f4 100644
--- a/src/auth/auth-cache.c
+++ b/src/auth/auth-cache.c
@@ -474,7 +474,7 @@ void auth_cache_remove(struct auth_cache *cache,
 {
 	struct auth_cache_node *node;
 
-	key = auth_request_expand_cache_key(request, key, request->fields.user);
+	key = auth_request_expand_cache_key(request, key, request->fields.translated_username);
 	node = hash_table_lookup(cache->hash, key);
 	if (node == NULL)
 		return;