libmunge2-0.5.15-150600.25.6.1 < > , / i(p9|~0%ʦlف#3
&XU Btf/
yl^ d~CK3h;Chk(ԿtXGl`sf{,|@Ng 4PWyaIh=.XG*gH:(&U+oX2[װHۢORk*IP@:c3bS)̏hCJ(N(z4ȘX겘߉ 8x=aI''8
DYRe > C !0 ? ! d ! H 0 M S \ d h
l t
T ( 8 9 L : / > @ F G H $ I , X 0 Y @ \ t ] | ^ b c Q d e f l u v w x y z ! C libmunge2 0.5.15 150600.25.6.1 Libraries for applications using MUNGE A shared library for applications using the MUNGE authentication service. i(s390zp37 SUSE Linux Enterprise 15 SUSE LLC GPL-3.0-or-later AND LGPL-3.0-or-later https://www.suse.com/ System/Libraries https://dun.github.io/munge/ linux s390x ii 9c67d51c159d31eeae710c60761a2497419ac6ce4ea66bbe171f296476cd905a libmunge.so.2.0.0 root root root root munge-0.5.15-150600.25.6.1.src.rpm libmunge.so.2()(64bit) libmunge2 libmunge2(s390-64) munge-libs @ @ @ @ @ @
/sbin/ldconfig /sbin/ldconfig libc.so.6()(64bit) libc.so.6(GLIBC_2.2)(64bit) libc.so.6(GLIBC_2.3.4)(64bit) libc.so.6(GLIBC_2.33)(64bit) libc.so.6(GLIBC_2.38)(64bit) libc.so.6(GLIBC_2.4)(64bit) rpmlib(CompressedFileNames) rpmlib(FileDigests) rpmlib(PayloadFilesHavePrefix) rpmlib(PayloadIsXz) 3.0.4-1 4.6.0-1 4.0-1 5.2-1 4.14.3 i@h@by@aaim@a^@aV@^^y@^8 @^r]µ[.[(@[$ZZ'Z@XXXk@Xk@XN@XIK@XAb@X`@X@X@X@X eich@suse.com eich@suse.com nmoreychaisemartin@suse.com eich@suse.com eich@suse.com eich@suse.com eich@suse.com eich@suse.com aguerrero@suse.com dimstar@opensuse.org eich@suse.com eich@suse.com eich@suse.com eich@suse.com eich@suse.com cgoll@suse.com eich@suse.com rbrown@suse.com eich@suse.com eich@suse.com eich@suse.com eich@suse.com vetter@physik.uni-wuerzburg.de vetter@physik.uni-wuerzburg.de eich@suse.com eich@suse.com eich@suse.com eich@suse.com eich@suse.com eich@suse.com - Fix buffer overflow in message unpacking that allows local users
to leak the MUNGE cryptographic key and forge arbitrary
credentials (bsc#1257651, CVE-2026-25506)
Added:
* munge-0001-oob-read-fix.patch
* munge-0002-buffer-overflow-fix.patch. - Make logrotate work on munge log as user munge. This prevents
a local privilege escalation (bsc#1246088). - Update to version 0.5.15:
- Added support for OpenSSL 3.0.
- Fixed "make install" conflict with systemd RuntimeDirectory.
- Fixed big-endian bug causing failures on s390x.
- Fixed systemd service unit conf to wait until network is online.
- Fixed excessive logging of "suspended new connections".
- Fixed gcry_check_version(GCRYPT_VERSION) bug reported by Debian.
- Fixed sending repeated SIGTERMs to signal stop. (dbe6dcc)
- Fixed failure to clean up socket or create seedfile having relative path.
- Fixed test suite to clean up errant processes from failed tests.
- Re-enable build for s390* - Disable s390*-builds. On s390x the test suite fails. - Typo fix to sysuser file. - Restore tmpfiles.d handling which was deleted for no good
reason.
- Make sure the product specific run-directory is used which
is taken from the RPM macro %_rundir (bsc#1191336). - Utilize sysuser infrastructure to set user/group munge. - Use 'mungekey' to generate munge key,
Change permission of 'mungekey' from 0400 to 0600
- Remove munge key on uninstall
- Add a bit of QA by running 'make check'
- Consolidate 'rundir'-handling:
* fixed the location using %_rundir
* %ghost-ed %_rundir/munge
- Pinned down configuration by adding more configure options
- Consolidated the file attribute setting
- Consolidated handline of /etc/sysconfig/munge
- Remove tmpfiles.d/munge.conf: the runtime directory is created
by systemd itself. - Update to version 0.5.14, most relevant changes:
* Added mungekey command for key generation via HKDF.
* Added negative caching of user lookups for processing supplementary groups.
* Added munged --origin and --stop cmdline opt.
* Added unmunge --numeric cmdline opt.
* Added several new configuration options.
* Added systemd EnvironmentFile to set sysconfig options.
* Added systemd RuntimeDirectory to replace tmpfiles.d conf.
* Changed logging of non-existent users to only log once for a given user.
* Changed default name of munged seedfile.
* Fixed pidfile corruption when starting new daemon while socket still in use.
* Fixed munged signal handlers to be async-signal-safe.
* Fixed "Logging stopped due to error" behavior for transient errors.
* Fixed misleading "Lockfile not found" error message.
* Fixed conversion-specifier / argument mismatch in error message.
* Removed autotools-generated files from version control.
- Update patch:
* Make-SUSE-specific-adjustments.patch
- Spec cleanup
- Update package description to match upstream's
- Add logrotate file and Requires in logrotate
- Run bootstrap to create autotools files. - BuildRequire pkgconfig(systemd) instead of systemd: allow OBS to
shortcut through the -mini flavors. - Add Provides for 'munge-libs' to package libmunge for
compatibility with the upstream spec file (bsc#1160075). - Fix possible LPE during installation (bsc#1155075,
CVE-2019-3691).
- Remove special %license treatment for SLE-12 as this
has been fixed. - Add coreutils to the Requires(post/postun). - Handle license file using %license where applicable. - Package sysconfig.munge only on non-systemd systems.
- Fix group settings for non-systemd systems in spec file:
group 'munge' is used there as well.
- Some macro cleanup. - added README.SUSE file (bsc#1085665) - Update to 0.5.13:
* Added support for OpenSSL 1.1.0.
* Added support for UID/GID values >= 2^31.
* Added support for getentropy() and getrandom().
* Added --trusted-group cmdline opt to munged.
* Added --log-file and --seed-file cmdline opts to munged.
* Changed default MAC algorithm to SHA-256.
* Fixed autoconf installation directory variable substitution.
* Fixed all gcc, clang, and valgrind warnings.
* Improved resilience and unpredictability of PRNG.
* Improved hash table performance.
* Removed libmissing dependency from libmunge. - Replace references to /var/adm/fillup-templates with new
%_fillupdir macro (boo#1069468) - Fix BuildRequires for zlib-devel. - Replace group/user add macros with function calls.
- Make sure we update the user/group of files/directories correctly
when updating - in case they have changed. - Use user 'munge', group 'munge' for systemd and user 'daemon', group 'root'
for non-systemd by setting the appropriate macros '%munge_u' and '%munge_g'.
- Create user/group munge if they don't exist.
- Add 'BuildRequires: libbz2-devel'
- Fix typo. - Add 'Recommends: munge' to libmunge:
This library requires the munge service to run on the
local system to be useful. - Fix typo in init script (SLE11) introduced by last change
- Fix rpm preun/postun-scripts (SLE11)
- Fix empty /etc/sysconfig/munge after update (SLE11) - change USER from munge to daemon for non-systemd OSes - Switch to user 'munge', group 'munge'. - Adding to SLE12 SP2 FATE#321706. - Setting 'download_files' service to mode='localonly'
and adding source tarball. (Required for Factory). - Add baselib.conf as Source to spec file.
- Remove tar ball of version 0.5.11. - version 0.5.12
* Changed project homepage to .
* Changed RPM specfile from sysvinit to systemd. (#33)
* Added --max-ttl cmdline opt to munged. (#28)
* Added --pid-file cmdline opt to munged. (#41) - Add source service to download sources.
- Remove static libraries: If they are needed, they should be packaged
separately.
- Add a %define have_systemd to clearer identify systemd relevant parts.
- Add define of lversion insead of hard conding this.
- remove README.MULTILIB: Package is built already.
- Add BuildRequires: for bzip2-devel, systemd-rpm-macros.
- Spell out files under %{_sysconfdir}/
- Fix symlink to %{_sbindir}/rcmunge for initV and systemd. /sbin/ldconfig /sbin/ldconfig s390zp37 1770714664 0.5.15-150600.25.6.1 0.5.15-150600.25.6.1 0.5.15 libmunge.so.2 libmunge.so.2.0.0 /usr/lib64/ -fmessage-length=0 -grecord-gcc-switches -O2 -Wall -D_FORTIFY_SOURCE=2 -fstack-protector-strong -funwind-tables -fasynchronous-unwind-tables -fstack-clash-protection -g obs://build.suse.de/SUSE:Maintenance:42629/SUSE_SLE-15-SP6_Update/05d11a5f3dedff66282fc7d0dfa4d3a3-munge.SUSE_SLE-15-SP6_Update drpm xz 5 s390x-suse-linux ELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, BuildID[sha1]=f3fef068f12eab14301a93360869f83fa325273b, stripped P R R R R R R ͍IOIՄ munge utf-8 71923490c8cb919da895e53a3b369cac6ccaef18551bc0f61223347b46618af0 ? 7zXZ
! t/u ] "k% dM B O*F~ک}~ uq<!'%W[{ NF[
ͩ@;+ ^2b)|+F$kMA} G+ϭKaZn*p5FB4̭b(P⤉דhgCPC6 +*OI~GHe0?!ED^6'_V>`Gå:z f \7 ŕ+ʮ|1mmQfV !
.? K=r'HꦪaI!J.+1@"zPel ഼CT>݇ýfOźΥ|S1MA1u)lnjm}a:pL"p"dmduQ#%rw TnK kDw{ ۊ )Dafbvmw#̬ݨM*?V삚O}:fG
!": ҫ}n#ug*-(B7> I:{{Asϕ~-D%s p\p n&|*0^!{
1U4!5o(ȣoIḏL1JpD ! ]G(y[
ZI<& }3\0%Ebܩw; aƁB,E{qHTI
[ JIi/*xŨ|q9pX,_!ǑQq?M^P{v1(XМ/bt5<٭`~Z2x܌7YAˁ}3:ޙסuH: ZJ^<R&3ɘ*!vNRСhBUPmLG;O:wS~xsRxad_%Bz74!3'y( =%97j?\X 4hUHpPZbwō\, f5"Lj5L!E@ўh찠?^Wǽ5Fړyf*:jcT on(^j
prTٖU1aC 3^ \vE^W躶b>| Gp' ^]S AAw UQL~wcR!٤Ȅ
YTZ:P^|,\`2jQ؇Ό&Fpc}h1AHpj$ lĕSkT>| V{)&yWL #߸AW }(QOaQ!@PYK},UR#
-63-( IygRzQhQ73Tvd9 E~%7dgw"p$ZHd/8N]Pϱ&' 1l2Yk^zHa8o271\Z{m.x
bp%.xL_]RY8FqUԪr4Ik
kyox[- ^nvKAza_ưmc> B8
s[( z4|VJ* گ.4 Z
kӔ#U!un5U
K+g%ZhG]5 U6͕B^K^`rmmH<ܞwV4v/ N!xI<&R.N[ϽQn:# 3crm.{aBH`]G Ҙ-% c2'ǕИQM @ L# &eyk ӻ\ ^sOct ̊"pw:!@ZWֲ$u>F|Ba Wb"j0pl<[ 滖NV,,' ;=g~!T E!l!s@jx
yi[{^) Y їOv_ I Ҿ]vQBT]~e"N=2MzD[4_;^PrڜD_Qvw^+fRP# {B%(QU`q$ZAܑvӱbL#FyPsxD
v7w7l,(:M yzF
_>g[% ){u|!BAxc=DK0bTK6BFZ6&|QcY!$Y1'mRq\Rs%rJ'̬`h(~nDWfLnAV=4Q `?1dwdS ?q77--6k}C
91|W^]bn?ͣFc.ǜvȚd+EA F
]Ӡ?!] PNƴLn ϣ , G3
YZ