On Tue, Jun 03, 2014 at 03:26:03PM +0200, Joachim Breitner wrote: > sorry, I don’t understand. What exactly needs to be done? And what needs > to be patched? Those packages need to be upgraded, and at least authenticate-oauth[0], happstack-authenticate, hOpenPGP, hopenpgp-tools, and sandi[1] need to be patched. [0] https://github.com/yesodweb/authenticate/pull/32 [1] https://github.com/magthe/sandi/commit/17489830f5e6ee1270976a34c9a30fbc489a75b9