libmunge2-32bit-0.5.15-150600.25.6.1 < > , /H iEp9|cO
9 # :>rN~tmCjQ$ssLDS3iPV̸x>͝Eh2
ֺщc^ H8# s~0/J@ʽ`
X90qa^3-7WiY)KEeپPy KpPu}i͝+nSyw"3 ǦHY8T
ä8a3WPJEѩm*# 8
gx^TA *P9
> > ! ? ! d ' N
# 4 Q W ^ p x |
( ` ( 8 9 d : G > G H I X Y , \ X ] ` ^ b c H d e f l u v w x y
! C libmunge2-32bit 0.5.15 150600.25.6.1 Libraries for applications using MUNGE A shared library for applications using the MUNGE authentication service. iEh01-ch3a SUSE Linux Enterprise 15 SUSE LLC GPL-3.0-or-later AND LGPL-3.0-or-later https://www.suse.com/ System/Libraries https://dun.github.io/munge/ linux x86_64 /sbin/ldconfig iEiE 9d40561fdf2c36101ef9bc3c473e3fdee00429c6ccddb28c354a096dcfd4c962 libmunge.so.2.0.0 root root root root munge-0.5.15-150600.25.6.1.src.rpm libmunge.so.2 libmunge2-32bit libmunge2-32bit(x86-32) @ @ @ @ @ @ @ @ @
/bin/sh libc.so.6 libc.so.6(GLIBC_2.0) libc.so.6(GLIBC_2.1) libc.so.6(GLIBC_2.1.3) libc.so.6(GLIBC_2.28) libc.so.6(GLIBC_2.3.4) libc.so.6(GLIBC_2.33) libc.so.6(GLIBC_2.38) libc.so.6(GLIBC_2.4) rpmlib(CompressedFileNames) rpmlib(FileDigests) rpmlib(PayloadFilesHavePrefix) rpmlib(PayloadIsXz) 3.0.4-1 4.6.0-1 4.0-1 5.2-1 4.14.3 i@h@by@aaim@a^@aV@^^y@^8 @^r]µ[.[(@[$ZZ'Z@XXXk@Xk@XN@XIK@XAb@X`@X@X@X@X eich@suse.com eich@suse.com nmoreychaisemartin@suse.com eich@suse.com eich@suse.com eich@suse.com eich@suse.com eich@suse.com aguerrero@suse.com dimstar@opensuse.org eich@suse.com eich@suse.com eich@suse.com eich@suse.com eich@suse.com cgoll@suse.com eich@suse.com rbrown@suse.com eich@suse.com eich@suse.com eich@suse.com eich@suse.com vetter@physik.uni-wuerzburg.de vetter@physik.uni-wuerzburg.de eich@suse.com eich@suse.com eich@suse.com eich@suse.com eich@suse.com eich@suse.com - Fix buffer overflow in message unpacking that allows local users
to leak the MUNGE cryptographic key and forge arbitrary
credentials (bsc#1257651, CVE-2026-25506)
Added:
* munge-0001-oob-read-fix.patch
* munge-0002-buffer-overflow-fix.patch. - Make logrotate work on munge log as user munge. This prevents
a local privilege escalation (bsc#1246088). - Update to version 0.5.15:
- Added support for OpenSSL 3.0.
- Fixed "make install" conflict with systemd RuntimeDirectory.
- Fixed big-endian bug causing failures on s390x.
- Fixed systemd service unit conf to wait until network is online.
- Fixed excessive logging of "suspended new connections".
- Fixed gcry_check_version(GCRYPT_VERSION) bug reported by Debian.
- Fixed sending repeated SIGTERMs to signal stop. (dbe6dcc)
- Fixed failure to clean up socket or create seedfile having relative path.
- Fixed test suite to clean up errant processes from failed tests.
- Re-enable build for s390* - Disable s390*-builds. On s390x the test suite fails. - Typo fix to sysuser file. - Restore tmpfiles.d handling which was deleted for no good
reason.
- Make sure the product specific run-directory is used which
is taken from the RPM macro %_rundir (bsc#1191336). - Utilize sysuser infrastructure to set user/group munge. - Use 'mungekey' to generate munge key,
Change permission of 'mungekey' from 0400 to 0600
- Remove munge key on uninstall
- Add a bit of QA by running 'make check'
- Consolidate 'rundir'-handling:
* fixed the location using %_rundir
* %ghost-ed %_rundir/munge
- Pinned down configuration by adding more configure options
- Consolidated the file attribute setting
- Consolidated handline of /etc/sysconfig/munge
- Remove tmpfiles.d/munge.conf: the runtime directory is created
by systemd itself. - Update to version 0.5.14, most relevant changes:
* Added mungekey command for key generation via HKDF.
* Added negative caching of user lookups for processing supplementary groups.
* Added munged --origin and --stop cmdline opt.
* Added unmunge --numeric cmdline opt.
* Added several new configuration options.
* Added systemd EnvironmentFile to set sysconfig options.
* Added systemd RuntimeDirectory to replace tmpfiles.d conf.
* Changed logging of non-existent users to only log once for a given user.
* Changed default name of munged seedfile.
* Fixed pidfile corruption when starting new daemon while socket still in use.
* Fixed munged signal handlers to be async-signal-safe.
* Fixed "Logging stopped due to error" behavior for transient errors.
* Fixed misleading "Lockfile not found" error message.
* Fixed conversion-specifier / argument mismatch in error message.
* Removed autotools-generated files from version control.
- Update patch:
* Make-SUSE-specific-adjustments.patch
- Spec cleanup
- Update package description to match upstream's
- Add logrotate file and Requires in logrotate
- Run bootstrap to create autotools files. - BuildRequire pkgconfig(systemd) instead of systemd: allow OBS to
shortcut through the -mini flavors. - Add Provides for 'munge-libs' to package libmunge for
compatibility with the upstream spec file (bsc#1160075). - Fix possible LPE during installation (bsc#1155075,
CVE-2019-3691).
- Remove special %license treatment for SLE-12 as this
has been fixed. - Add coreutils to the Requires(post/postun). - Handle license file using %license where applicable. - Package sysconfig.munge only on non-systemd systems.
- Fix group settings for non-systemd systems in spec file:
group 'munge' is used there as well.
- Some macro cleanup. - added README.SUSE file (bsc#1085665) - Update to 0.5.13:
* Added support for OpenSSL 1.1.0.
* Added support for UID/GID values >= 2^31.
* Added support for getentropy() and getrandom().
* Added --trusted-group cmdline opt to munged.
* Added --log-file and --seed-file cmdline opts to munged.
* Changed default MAC algorithm to SHA-256.
* Fixed autoconf installation directory variable substitution.
* Fixed all gcc, clang, and valgrind warnings.
* Improved resilience and unpredictability of PRNG.
* Improved hash table performance.
* Removed libmissing dependency from libmunge. - Replace references to /var/adm/fillup-templates with new
%_fillupdir macro (boo#1069468) - Fix BuildRequires for zlib-devel. - Replace group/user add macros with function calls.
- Make sure we update the user/group of files/directories correctly
when updating - in case they have changed. - Use user 'munge', group 'munge' for systemd and user 'daemon', group 'root'
for non-systemd by setting the appropriate macros '%munge_u' and '%munge_g'.
- Create user/group munge if they don't exist.
- Add 'BuildRequires: libbz2-devel'
- Fix typo. - Add 'Recommends: munge' to libmunge:
This library requires the munge service to run on the
local system to be useful. - Fix typo in init script (SLE11) introduced by last change
- Fix rpm preun/postun-scripts (SLE11)
- Fix empty /etc/sysconfig/munge after update (SLE11) - change USER from munge to daemon for non-systemd OSes - Switch to user 'munge', group 'munge'. - Adding to SLE12 SP2 FATE#321706. - Setting 'download_files' service to mode='localonly'
and adding source tarball. (Required for Factory). - Add baselib.conf as Source to spec file.
- Remove tar ball of version 0.5.11. - version 0.5.12
* Changed project homepage to .
* Changed RPM specfile from sysvinit to systemd. (#33)
* Added --max-ttl cmdline opt to munged. (#28)
* Added --pid-file cmdline opt to munged. (#41) - Add source service to download sources.
- Remove static libraries: If they are needed, they should be packaged
separately.
- Add a %define have_systemd to clearer identify systemd relevant parts.
- Add define of lversion insead of hard conding this.
- remove README.MULTILIB: Package is built already.
- Add BuildRequires: for bzip2-devel, systemd-rpm-macros.
- Spell out files under %{_sysconfdir}/
- Fix symlink to %{_sbindir}/rcmunge for initV and systemd. /bin/sh 0.5.15-150600.25.6.1 0.5.15-150600.25.6.1 libmunge.so.2 libmunge.so.2.0.0 /usr/lib/ -fomit-frame-pointer -fmessage-length=0 -grecord-gcc-switches -O2 -Wall -D_FORTIFY_SOURCE=2 -fstack-protector-strong -funwind-tables -fasynchronous-unwind-tables -fstack-clash-protection -g obs://build.suse.de/SUSE:Maintenance:42629/SUSE_SLE-15-SP6_Update/05d11a5f3dedff66282fc7d0dfa4d3a3-munge.SUSE_SLE-15-SP6_Update drpm xz 5 x86_64-suse-linux ELF 32-bit LSB shared object, Intel 80386, version 1 (SYSV), dynamically linked, BuildID[sha1]=70652cfea686022b036ff9affdf266ff8a7cee65, stripped
P R R R R R R R R R utf-8 9275e2a72ebc232747fd4d567160a10d5957ab2e1abf12ae45151c67b1cf9313 ? 7zXZ
! t/ ] "k%+ЭTǭ@.}O{'%N/]{;%pxikΤ%Gi6B^5_mJ!jF a,Ej4{G{%*d *f컓
C;$H]ԴG.5Hwqܩ|ǎ`_MF2٠TCc:YeTP}[Tr='*kPM2h5E Һu/2A8
na8?pQXOWiaI#{ U:]ef·vgVMgAٲw;`n 2 ;K4Vap"k[`'Tlډsi?df\XѤH~W9 |⮈"5Rؗ⺵ ,W,αV0_zό 8׳s%S%dݏ~@aff JUcdi%kF>\t}rezHW..~^r
Zg)kMÕ,CxUS *Q1ځt'_O*v"/v
9Dג"5-:yem_?Ã8 |>~g,Θlt=yc tdE4ymÇT]B(XU~({Oua5`֩W=|'W>wWD~_WKupbF$ rCUhgY$m`&>¹ xTh;P R$D O?#N i!_˳h\03Tq6rĆ 3obEb5^o̭ f6qh ֹ=I2ypIxģt&x[
[?`w
d:#У2R(^ W_摂;y^(-=]ױ0 V .Z 96F}*$}1 ū > pvT :Uv%_e(F
- 0V
YZ