libmunge2-0.5.15-150600.25.6.1 < > , .H ip9|3n Jrx2dY^(:~fm 6bMP
g;\G]'?\WQ!yvG ;ҍz#A x G|YL3â*i" !(r b5IK0$9ّ ѕP)~ ,?4 0RkeR%=jVnNtu.ANz
A yqGm Ѕ
{Fw^Yd--,7 4̣]ٚ GnN<^,, @m > C !H ? !8 d ! H 0 M S \ d h
l t
T ( 8 9 \ : ? > @ F G 0 H 8 I @ X D Y T \ ] ^ b c e d e f l u v w x y z !4 C libmunge2 0.5.15 150600.25.6.1 Libraries for applications using MUNGE A shared library for applications using the MUNGE authentication service. ih04-armsrv2
SUSE Linux Enterprise 15 SUSE LLC GPL-3.0-or-later AND LGPL-3.0-or-later https://www.suse.com/ System/Libraries https://dun.github.io/munge/ linux aarch64
ii 7e7338536b4b792ac3751473419eff52f24ebac32ea34adbf0c6e8b00fb73efc libmunge.so.2.0.0 root root root root munge-0.5.15-150600.25.6.1.src.rpm libmunge.so.2()(64bit) libmunge2 libmunge2(aarch-64) munge-libs @ @ @ @ @ @
/sbin/ldconfig /sbin/ldconfig ld-linux-aarch64.so.1()(64bit) ld-linux-aarch64.so.1(GLIBC_2.17)(64bit) libc.so.6()(64bit) libc.so.6(GLIBC_2.17)(64bit) libc.so.6(GLIBC_2.33)(64bit) libc.so.6(GLIBC_2.38)(64bit) rpmlib(CompressedFileNames) rpmlib(FileDigests) rpmlib(PayloadFilesHavePrefix) rpmlib(PayloadIsXz) 3.0.4-1 4.6.0-1 4.0-1 5.2-1 4.14.3 i@h@by@aaim@a^@aV@^^y@^8 @^r]µ[.[(@[$ZZ'Z@XXXk@Xk@XN@XIK@XAb@X`@X@X@X@X eich@suse.com eich@suse.com nmoreychaisemartin@suse.com eich@suse.com eich@suse.com eich@suse.com eich@suse.com eich@suse.com aguerrero@suse.com dimstar@opensuse.org eich@suse.com eich@suse.com eich@suse.com eich@suse.com eich@suse.com cgoll@suse.com eich@suse.com rbrown@suse.com eich@suse.com eich@suse.com eich@suse.com eich@suse.com vetter@physik.uni-wuerzburg.de vetter@physik.uni-wuerzburg.de eich@suse.com eich@suse.com eich@suse.com eich@suse.com eich@suse.com eich@suse.com - Fix buffer overflow in message unpacking that allows local users
to leak the MUNGE cryptographic key and forge arbitrary
credentials (bsc#1257651, CVE-2026-25506)
Added:
* munge-0001-oob-read-fix.patch
* munge-0002-buffer-overflow-fix.patch. - Make logrotate work on munge log as user munge. This prevents
a local privilege escalation (bsc#1246088). - Update to version 0.5.15:
- Added support for OpenSSL 3.0.
- Fixed "make install" conflict with systemd RuntimeDirectory.
- Fixed big-endian bug causing failures on s390x.
- Fixed systemd service unit conf to wait until network is online.
- Fixed excessive logging of "suspended new connections".
- Fixed gcry_check_version(GCRYPT_VERSION) bug reported by Debian.
- Fixed sending repeated SIGTERMs to signal stop. (dbe6dcc)
- Fixed failure to clean up socket or create seedfile having relative path.
- Fixed test suite to clean up errant processes from failed tests.
- Re-enable build for s390* - Disable s390*-builds. On s390x the test suite fails. - Typo fix to sysuser file. - Restore tmpfiles.d handling which was deleted for no good
reason.
- Make sure the product specific run-directory is used which
is taken from the RPM macro %_rundir (bsc#1191336). - Utilize sysuser infrastructure to set user/group munge. - Use 'mungekey' to generate munge key,
Change permission of 'mungekey' from 0400 to 0600
- Remove munge key on uninstall
- Add a bit of QA by running 'make check'
- Consolidate 'rundir'-handling:
* fixed the location using %_rundir
* %ghost-ed %_rundir/munge
- Pinned down configuration by adding more configure options
- Consolidated the file attribute setting
- Consolidated handline of /etc/sysconfig/munge
- Remove tmpfiles.d/munge.conf: the runtime directory is created
by systemd itself. - Update to version 0.5.14, most relevant changes:
* Added mungekey command for key generation via HKDF.
* Added negative caching of user lookups for processing supplementary groups.
* Added munged --origin and --stop cmdline opt.
* Added unmunge --numeric cmdline opt.
* Added several new configuration options.
* Added systemd EnvironmentFile to set sysconfig options.
* Added systemd RuntimeDirectory to replace tmpfiles.d conf.
* Changed logging of non-existent users to only log once for a given user.
* Changed default name of munged seedfile.
* Fixed pidfile corruption when starting new daemon while socket still in use.
* Fixed munged signal handlers to be async-signal-safe.
* Fixed "Logging stopped due to error" behavior for transient errors.
* Fixed misleading "Lockfile not found" error message.
* Fixed conversion-specifier / argument mismatch in error message.
* Removed autotools-generated files from version control.
- Update patch:
* Make-SUSE-specific-adjustments.patch
- Spec cleanup
- Update package description to match upstream's
- Add logrotate file and Requires in logrotate
- Run bootstrap to create autotools files. - BuildRequire pkgconfig(systemd) instead of systemd: allow OBS to
shortcut through the -mini flavors. - Add Provides for 'munge-libs' to package libmunge for
compatibility with the upstream spec file (bsc#1160075). - Fix possible LPE during installation (bsc#1155075,
CVE-2019-3691).
- Remove special %license treatment for SLE-12 as this
has been fixed. - Add coreutils to the Requires(post/postun). - Handle license file using %license where applicable. - Package sysconfig.munge only on non-systemd systems.
- Fix group settings for non-systemd systems in spec file:
group 'munge' is used there as well.
- Some macro cleanup. - added README.SUSE file (bsc#1085665) - Update to 0.5.13:
* Added support for OpenSSL 1.1.0.
* Added support for UID/GID values >= 2^31.
* Added support for getentropy() and getrandom().
* Added --trusted-group cmdline opt to munged.
* Added --log-file and --seed-file cmdline opts to munged.
* Changed default MAC algorithm to SHA-256.
* Fixed autoconf installation directory variable substitution.
* Fixed all gcc, clang, and valgrind warnings.
* Improved resilience and unpredictability of PRNG.
* Improved hash table performance.
* Removed libmissing dependency from libmunge. - Replace references to /var/adm/fillup-templates with new
%_fillupdir macro (boo#1069468) - Fix BuildRequires for zlib-devel. - Replace group/user add macros with function calls.
- Make sure we update the user/group of files/directories correctly
when updating - in case they have changed. - Use user 'munge', group 'munge' for systemd and user 'daemon', group 'root'
for non-systemd by setting the appropriate macros '%munge_u' and '%munge_g'.
- Create user/group munge if they don't exist.
- Add 'BuildRequires: libbz2-devel'
- Fix typo. - Add 'Recommends: munge' to libmunge:
This library requires the munge service to run on the
local system to be useful. - Fix typo in init script (SLE11) introduced by last change
- Fix rpm preun/postun-scripts (SLE11)
- Fix empty /etc/sysconfig/munge after update (SLE11) - change USER from munge to daemon for non-systemd OSes - Switch to user 'munge', group 'munge'. - Adding to SLE12 SP2 FATE#321706. - Setting 'download_files' service to mode='localonly'
and adding source tarball. (Required for Factory). - Add baselib.conf as Source to spec file.
- Remove tar ball of version 0.5.11. - version 0.5.12
* Changed project homepage to .
* Changed RPM specfile from sysvinit to systemd. (#33)
* Added --max-ttl cmdline opt to munged. (#28)
* Added --pid-file cmdline opt to munged. (#41) - Add source service to download sources.
- Remove static libraries: If they are needed, they should be packaged
separately.
- Add a %define have_systemd to clearer identify systemd relevant parts.
- Add define of lversion insead of hard conding this.
- remove README.MULTILIB: Package is built already.
- Add BuildRequires: for bzip2-devel, systemd-rpm-macros.
- Spell out files under %{_sysconfdir}/
- Fix symlink to %{_sbindir}/rcmunge for initV and systemd. /sbin/ldconfig /sbin/ldconfig h04-armsrv2 1770714312 0.5.15-150600.25.6.1 0.5.15-150600.25.6.1 0.5.15 libmunge.so.2 libmunge.so.2.0.0 /usr/lib64/ -fmessage-length=0 -grecord-gcc-switches -O2 -Wall -D_FORTIFY_SOURCE=2 -fstack-protector-strong -funwind-tables -fasynchronous-unwind-tables -fstack-clash-protection -g obs://build.suse.de/SUSE:Maintenance:42629/SUSE_SLE-15-SP6_Update/05d11a5f3dedff66282fc7d0dfa4d3a3-munge.SUSE_SLE-15-SP6_Update drpm xz 5 aarch64-suse-linux ELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, BuildID[sha1]=f42f52e18d6d4aba2d0692b76c4dfd3d34fcde01, stripped P R R R R R R 6L LgE5b` munge utf-8 6f2804c14ea8b24c579313ec0651c79cf9de96afd3adec0584fa8d035d9623d7 ? 7zXZ
! t/e] "k% dM B O*F~ک|<75L =Xj 5H&0Ay4"$KSc>l[K
*߯7YAah:nkc# ՒƊ
'y=F:Z Fs \ 0GUUx.3n˜5 ߂cF#H}sW4˘),!R ֚0Rv>L!" 0k4f)"Pņ!;h?UתtV{S_OC 5J̣k.e(B(7kodO *_zuvGgjԲ?lx%N36㐟G/[@7XYm5{δʓ{sa&up{Kp> 8r ETju8ȉM)^8̲X\0ػ)73(XN0 ~6!(Oϵv]^~l]
\>7Fk\bbM^ 4 Hݦ^~5KaT?O6Qޝw|z f58kC)T4@CfDjဳ )\ s7b㗁>A`W,a tD-Y\A1`P@ͪ6 NnOwI{ĥZo_,ͯL04c<ъƙnZI6I&}#¾PBԧr aX t`j?8
/){Nk)%Kr@J|hm|z
2g 4|dHek%tGd7*aL"9%Ky aAQ*%WBInIfoe wm}|^׃TcTOcw2ot='k j
p>ZEQD&o'ggk0{ IoNv#l vC,=z7=nP;VpVHzGX4 W-;coT+aެ?3bCKK60c>\)
t|RoiSyEu.`Ry&n-}H/3bݏ` ?5&SvIGo+vWJK,s@$Wpr
ovv}O*[d_6$dӯmf~#.bO_= szp.uj z#Q,b 9EdEo͢j] =lںO62"POoڑgu M*vo(<)=42,F,t!q"
38Z cYak@
> G-И7AY=ʕ ʛIAҕVb OzEm+{n6OdR* JW8靦dm:/gW@雵WX͏v` l_[D$[|JJ1Hmz/ 7L֩0m`lp|7iPթbWa`Ce@ck3ߔק7K
zz*d=a:y38|
AA$OӶhȽ:ڶtS/II7 4dK/ٞ[ˡ36]8 }Mi TGfƤ`.Y k$@BF: rz_ٱcMr [i&