Bug#705613: ejabberd: SCRAM bug in GS2 Header parsing with optional parameters

2013-04-25 Thread Konstantin Khomoutov
tag 705613 +patch +pending thanks On Thu, 25 Apr 2013 16:40:29 +0200 "Stephen Röttger" wrote: > > Stephen, could you please help us and look at modifying your patch > > so that it applies on 2.1.10? My own Erlang skills are not up to > > this task. I'm referring to this Debian bug report [1].

Bug#705613: ejabberd: SCRAM bug in GS2 Header parsing with optional parameters

2013-04-25 Thread Stephen Röttger
On 25.04.2013 14:27, Konstantin Khomoutov wrote: > Stephen, could you please help us and look at modifying your patch so > that it applies on 2.1.10? My own Erlang skills are not up to this > task. I'm referring to this Debian bug report [1]. And the release > time is unfortunately very close.

Bug#705613: ejabberd: SCRAM bug in GS2 Header parsing with optional parameters

2013-04-25 Thread Konstantin Khomoutov
On Wed, 24 Apr 2013 14:48:44 -0400 Joey Hess wrote: > > Do you know of any conventional XMPP client (I mean something other > > than git-annex) which supports SCRAM-SHA-1 so that I could test > > that the patch did not break things for other clients? > > > > I'm asking because > > 1) I asked a f

Bug#705613: ejabberd: SCRAM bug in GS2 Header parsing with optional parameters

2013-04-24 Thread Joey Hess
Konstantin Khomoutov wrote: > Do you know of any conventional XMPP client (I mean something other than > git-annex) which supports SCRAM-SHA-1 so that I could test that the > patch did not break things for other clients? > > I'm asking because > 1) I asked a fellow Process One developer what he th

Bug#705613: ejabberd: SCRAM bug in GS2 Header parsing with optional parameters

2013-04-17 Thread Joey Hess
Package: ejabberd Version: 2.1.9 Severity: important This version of ejabberd added support for SCRAM-SHA-1 authentication. Unfortunatly, it rejects RFC-compliant GS2 headers, containing the "a=" parameter. Here is an upstream bug report with a test case and a patch against current upstream git,