tree 854d428a0b8d8ae7a62744c4ab99c341ad6dd0c6
parent af83bd4d2f1990892b75c53e3de689d06e8ec48f
author Benoit TELLIER <btellier@linagora.com> 1648705129 +0700
committer GitHub <noreply@github.com> 1648705129 +0700
gpgsig -----BEGIN PGP SIGNATURE-----
 
 wsBcBAABCAAQBQJiRT5qCRBK7hj4Ov3rIwAAdn8IABCbLEhP4DeIJ2M+uFLMw30G
 gqL3MSORhX2T6xtywb3KBQZ8OfhQaFGsyVaR9TlMQbbTTCGpFABEhr4myIToPeX2
 ZIO4V+P7wBbN4nHkSWrXB6JrvPOAOp0UB1lMqdGtMaf+9riJ8my2RL3W8AaruQJm
 bHggbB5q23JRKi5/7p1Sp48YYvePD1IsYBzn6uZRXLhQQDNX9cuYMWO7Ij0BHlnu
 t+V6gidBOLby8q4d8XP+/wVKy2Z6eoKzYH2dm3sPVfwkWEMq3tIIDdFxawgkDThs
 Lbo+ml0WUZCkmIrIObEFTHpTZXrWq+cwg0+DM6+2yYe97OafB+g4ktB87eMhysc=
 =FZj8
 -----END PGP SIGNATURE-----
 

JAMES-1862 Fix STARTTLS command injection detection [BACKPORT 3.6.x] (#944)

Original PR: https://github.com/apache/james-project/pull/919

 - Parser differential for IMAP STARTTLS
 - Concurrency could lead to injected plain commands to be run as SSL encrypted