Changes for version 2.1900 - 2025-08-05

  • Fixed
    • CVE-2025-40918 (Insecure source of randomness), required addition of dependency on Crypt::URandom
  • Changed
    • Modules Authen::SASL::Perl::CRAM_MD5, Authen::SASL::Perl::DIGEST_MD5 and Authen::SASL::CRAM_MD5 marked as deprecated based on the respective RFC documents; thanks to @robrwo for the suggestion and @neustradamus for the pointers to the documentation
    • Update module metadata to point to the new 'perl-authen-sasl' org on GitHub to which the modules moved
    • Use VERSION declarations in 'package' statements, since our minimum Perl version is 5.14 anyway

Modules

SASL Authentication framework
Perl implementation of the SASL Authentication framework
Anonymous Authentication class
(DEPRECATED) CRAM MD5 Authentication class
(DEPRECATED) Digest MD5 Authentication class
External Authentication class
GSSAPI (Kerberosv5) Authentication class
Login Authentication class
OAUTHBEARER Authentication class
Plain Login Authentication class
XOAUTH2 Authentication class

Provides

in lib/Authen/SASL/CRAM_MD5.pm
in lib/Authen/SASL/EXTERNAL.pm