Bug#709552: libsasl2-2: Insecure mechanisms are prefered while more secure mechanisms are available

2013-05-23 Thread Thijs Alkemade
Package: libsasl2-2 Version: 2.1.25.dfsg1-6 Severity: important Tags: security upstream Some SASL implementations allow the server to specify a list of mechanisms it supports. The client should then pick the strongest mechanism it supports to authenticate. For example, when PLAIN and SCRAM-SHA-1 a

Bug#614928: hybserv: Uses a timeout of 200µs when waiting for input on sockets, this is wasteful and should be 200ms.

2011-02-24 Thread Thijs Alkemade
Package: hybserv Version: 1.9.2-4.1 Severity: normal Tags: upstream patch HybServ uses select() to determine if any input is received. It has a timeout so other stuff (e.g. timers) can happen in the mean time too. In src/sock.c the timer is set with a timeout of 200µs. On my server, this amounts