From: Aki Tuomi <aki.tuomi@open-xchange.com>
Date: Wed, 4 Mar 2026 12:39:43 +0000 (+0200)
Subject: [PATCH 18/24] doveadm: client-connection - Get API key from per-connection settings
X-Git-Tag: archive/raspbian/1%2.4.1+dfsg1-6+rpi1+deb13u6^2~15
X-Git-Url: https://dgit.raspbian.org/?a=commitdiff_plain;h=9c0994cf21740ad9f6065054668b54b3e4908e4b;p=dovecot.git

[PATCH 18/24] doveadm: client-connection - Get API key from per-connection settings


Gbp-Pq: Name CVE-2026-27856-3.patch
---

diff --git a/src/doveadm/client-connection-http.c b/src/doveadm/client-connection-http.c
index 5d927d1..dfbc352 100644
--- a/src/doveadm/client-connection-http.c
+++ b/src/doveadm/client-connection-http.c
@@ -987,7 +987,7 @@ doveadm_http_server_auth_api_key(struct client_request_http *req,
 				 const struct http_auth_credentials *creds)
 {
 	struct client_connection_http *conn = req->conn;
-	const struct doveadm_settings *set = doveadm_settings;
+	const struct doveadm_settings *set = conn->conn.set;
 	string_t *b64_value;
 
 	if (*set->doveadm_api_key == '\0') {