Your message dated Mon, 27 Apr 2015 12:49:42 +0000
with message-id <[email protected]>
and subject line Bug#782725: fixed in ejabberd 14.07-5
has caused the Debian Bug report #782725,
regarding ejabberd: Authentication failure with trailing newline in Base64
string
to be marked as done.
This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.
(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact [email protected]
immediately.)
--
782725: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=782725
Debian Bug Tracking System
Contact [email protected] with problems
--- Begin Message ---
Package: ejabberd
Version: 14.07-4
Severity: normal
Tags: patch upstream
Hi,
after upgrading ejabberd from Wheezy to Jessie one of our bots using
python-xmpp could not login anymore. This is caused by a long-standing
bug in python-xmpp which appends a newline to the Base64 LOGIN string,
see http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=782707 . Possibly
other client libraries are affected as well.
There is a upstream commit most likely fixing this issue
https://github.com/processone/ejabberd/commit/2399aba67d2e50318f7f7cbd22af04dc2b9eadea
which has been in several upstream releases since.
Given the possible widespread usage of this broken library I think this
could be something for the next point update.
Bernhard
--- End Message ---
--- Begin Message ---
Source: ejabberd
Source-Version: 14.07-5
We believe that the bug you reported is fixed in the latest version of
ejabberd, which is due to be installed in the Debian FTP archive.
A summary of the changes between this version and the previous one is
attached.
Thank you for reporting the bug, which will now be closed. If you
have further comments please address them to [email protected],
and the maintainer will reopen the bug report if appropriate.
Debian distribution maintenance software
pp.
Philipp Huebner <[email protected]> (supplier of updated ejabberd package)
(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing [email protected])
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512
Format: 1.8
Date: Mon, 27 Apr 2015 14:23:48 +0200
Source: ejabberd
Binary: ejabberd
Architecture: source amd64
Version: 14.07-5
Distribution: unstable
Urgency: medium
Maintainer: Konstantin Khomoutov <[email protected]>
Changed-By: Philipp Huebner <[email protected]>
Description:
ejabberd - distributed, fault-tolerant Jabber/XMPP server written in Erlang
Closes: 782725 782794
Changes:
ejabberd (14.07-5) unstable; urgency=medium
.
* Drop debian/ejabberd.8 as there is no "ejabberd" executable anymore
* Add --enable-transient_supervisors build-flag (Closes: #782794)
* Accept trailing newline characters in Base64 strings (Closes: #782725)
Checksums-Sha1:
6adce53d5c96547f1bb9512d13c51552a8b82822 2405 ejabberd_14.07-5.dsc
eec76cd86f5b03e55d34f6588ce06a3df8a52a56 48644 ejabberd_14.07-5.debian.tar.xz
15a7ea88f1b6b441e760bbfe9d7bc70f954c8824 4148180 ejabberd_14.07-5_amd64.deb
Checksums-Sha256:
3ecba523c621f608b27d77a6332a29c9df3f4fac89d6d1fb174fa442295309aa 2405
ejabberd_14.07-5.dsc
c8884133d045ec179796943bcaca7f0f41cbe4f108416e74eeef2131125b9831 48644
ejabberd_14.07-5.debian.tar.xz
f9c3b292ab6d92348d8faf89baab46ca7a69aa0001d6e5ea9dba45eafc2b1be3 4148180
ejabberd_14.07-5_amd64.deb
Files:
bb09b8227550f61eef71d0d0f8f0aecb 2405 net optional ejabberd_14.07-5.dsc
f8c15077c303065e28e601305a016415 48644 net optional
ejabberd_14.07-5.debian.tar.xz
1c7cae8422bf1487aa90eb1235e4f2fd 4148180 net optional
ejabberd_14.07-5_amd64.deb
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1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=Sf8q
-----END PGP SIGNATURE-----
--- End Message ---
