---------- Forwarded Message ----------- From: "Nagy Elemer Karoly" Sent: Sun, 19 Feb 2012 23:00:11 +0100 Subject: Re: libmd5-perl I updated the libmd5-perl_0fake deb and I created a i386 deb as well (untested, unoffivial, QaD). I also attach the documentation on how to rebuild them. I am also attaching a QaD "how to install OWM 2.53" on Debian Squeeze. Also, please find a patch attached - it will make auth_unix.pl use /usr/bin/chpasswd if available (and fall back silently to the old method, if not) so that changed passwords will be SHA-512 encoded instead of the broken DES or half-broken MD5. I think this is to be considered as a security fix as presently changing the password in OWM 2.53 downgrades the user's password encoding from SHA-512 to DES. You might want to clean it up as I don't know how to code PERL, I just needed this fix to work.