{"push_id":1281596671,"size":1,"distinct_size":1,"ref":"refs/heads/stable","head":"a7f0776713b5cfc14e7249e80e902c11f81fd79d","before":"029685cf6aee010549f6ec38a2a1373a5dd925b3","commits":[{"sha":"a7f0776713b5cfc14e7249e80e902c11f81fd79d","author":{"name":"Cadey Dodrill","email":"b4a5ea001e047040e8c9075b67a268293138da2c@christine.website"},"message":"SASL: Disallow beginning : and space anywhere in AUTHENTICATE parameter\n\n> This is a FIX FOR A SECURITY VULNERABILITY. All Charybdis users must\n> apply this fix if you support SASL on your servers, or unload m_sasl.so\n> in the meantime.\n\nSpecifically, this is an issue in how SASL is handled in\nCharybdis-derived IRC daemons. The only practical attacks so far are\nto fraudlently log in as other services accounts using SASL EXTERNAL.\nThere might be other vulnerabilities as a result of this, so it is best\nto apply this patch ASAP.","distinct":true,"url":"https://api.github.com/repos/Elemental-IRCd/elemental-ircd/commits/a7f0776713b5cfc14e7249e80e902c11f81fd79d"}]}
{"actor":{"display_login":"Xe"}}