Package: ssmtp
Version: 2.61-3

Hi guys,

as I pointed out _one_ year ago, there's a bug in ssmtp in handling MD5 autentication:

The changelog states

ssmtp (2.60.10) unstable; urgency=low
...
Logic to choose cram-md5 authentication is backwards (Closes: #249907)

But this bug is still in 2.61-3!

        if(auth_method && strcasecmp(auth_method, "cram-md5") == 0) {
                outbytes += smtp_write(sock, "AUTH CRAM-MD5");
                ...
        }

IMHO it has to be

        if(auth_method && !strcasecmp(auth_method, "cram-md5") == 0) {

as we want to execute this branch if auth_method _is_ "cram-md5"!

--
Steven



--
To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org

Reply via email to