github/xrdp
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

Merge pull request #3811 from matt335672/fix_cve_2026_42218_regression

Browse Source 
sesexec: Fix CVE-2026-42218 regression
This commit is contained in:
matt335672
2026-06-17 10:08:51 +01:00
committed by GitHub
parent 6cb996e355 d4d20fc82d
commit 21d38d0c1e
1 changed files with 2 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files
sesman/sesexec/login_info.c
+2 -2
View File
@@ -108,7 +108,7 @@ authenticate_and_authorize_connection(const char *supplied_username,
/* Call the auth stack anyway. On some systems (e.g. linux-pam),
* a fixed delay is built in to the stack for an unsuccessful
* login, and this delay may exceed FAILED_LOGIN_CONSTANT_TIME */
auth_end(auth_userpass(username, password, ip_addr, NULL));
auth_end(auth_userpass(supplied_username, password, ip_addr, NULL));
}
else if (g_getuser_info_by_uid(uid,
&username,
@@ -116,7 +116,7 @@ authenticate_and_authorize_connection(const char *supplied_username,
{
LOG(LOG_LEVEL_ERROR, "Can't reverse lookup UID %d", uid);
status = E_SCP_LOGIN_NOT_AUTHENTICATED;
auth_end(auth_userpass(username, password, ip_addr, NULL));
auth_end(auth_userpass(supplied_username, password, ip_addr, NULL));
}
else
{