[pgpool-committers: 10499] pgpool: Suppress unnecessary information	upon authentication failure.
    Tatsuo Ishii 
    ishii at postgresql.org
       
    Sat May 17 15:32:19 JST 2025
    
    
  
Suppress unnecessary information upon authentication failure.
Previously a message "password size does not match" was displayed when
client authentication failed.  This could help an attacker to guess
password. Replace it just "password does not match".
Backpatch-through: v4.2
Branch
------
master
Details
-------
https://git.postgresql.org/gitweb?p=pgpool2.git;a=commitdiff;h=bc0d9ca49d7afabcbfc8e000a40075a9fac1adf6
Modified Files
--------------
src/auth/pool_auth.c | 2 +-
1 file changed, 1 insertion(+), 1 deletion(-)
    
    
More information about the pgpool-committers
mailing list