From eb0dde58b3f0fa6cd3120343094634fc8a13412d Mon Sep 17 00:00:00 2001 From: Thomas Perale Date: Mon, 29 Dec 2025 10:07:11 +0100 Subject: [PATCH] package/dovecot: add CVE trailer in patch Since Buildroot commit [1] the patches that fixes a security vulnerability needs to reference the fixed vulnerability. This patch adds the relevant information to the patch header. [1] 1167d0ff3d docs/manual: mention CVE trailer Signed-off-by: Thomas Perale Signed-off-by: Thomas Petazzoni --- ...01-auth-Fix-handling-passdbs-with-identical-driver-args.patch | 1 + 1 file changed, 1 insertion(+) diff --git a/package/dovecot/0001-auth-Fix-handling-passdbs-with-identical-driver-args.patch b/package/dovecot/0001-auth-Fix-handling-passdbs-with-identical-driver-args.patch index 04b8f5392a..99a2b83563 100644 --- a/package/dovecot/0001-auth-Fix-handling-passdbs-with-identical-driver-args.patch +++ b/package/dovecot/0001-auth-Fix-handling-passdbs-with-identical-driver-args.patch @@ -12,6 +12,7 @@ Fixed by moving mechanisms and username_filter from struct passdb_module to struct auth_passdb, which is where they should have been in the first place. +CVE: CVE-2022-30550 Signed-off-by: Peter Korsgaard --- src/auth/auth-request.c | 6 +++---