From 930ad0c05b3351fae0049e78a50e72994dce51d8 Mon Sep 17 00:00:00 2001
From: Yvain Giffoni <yvain.giffoni@gmail.com>
Date: Tue, 4 Jun 2024 14:52:54 +0200
Subject: [PATCH] Fix filter vulnerability against potential username DoS
 injection

---
 Fail2Ban-Setup.md | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/Fail2Ban-Setup.md b/Fail2Ban-Setup.md
index 302d1e9..bb3a599 100644
--- a/Fail2Ban-Setup.md
+++ b/Fail2Ban-Setup.md
@@ -119,7 +119,7 @@ Create and fill the following file
 before = common.conf
 
 [Definition]
-failregex = ^.*Username or password is incorrect\. Try again\. IP: <ADDR>\. Username:.*$
+failregex = ^.*?Username or password is incorrect\. Try again\. IP: <ADDR>\. Username:.*$
 ignoreregex =
 ```