libmunge2-0.5.15-150600.25.6.1 < > , . ip9|;=k$[
@c
lৡtÈV? YlѮRFHaMF,kC$j+p.X5Cϕ F T z|7>,t e۵l=/hI-UZS`/ 'A%i'{B]
)Wh_E#:/BѸRG"@\Z16d# gX\Y7o Tf["uqA\ҤfX< vHE > C !H ? !8 d ! H 0 M S \ d h
l t
T ( 8 9 \ : ? > @ F G 0 H 8 I @ X D Y T \ ] ^ b c e d e f l u v w x y z !4 C libmunge2 0.5.15 150600.25.6.1 Libraries for applications using MUNGE A shared library for applications using the MUNGE authentication service. ih04-armsrv2
SUSE Linux Enterprise 15 SUSE LLC GPL-3.0-or-later AND LGPL-3.0-or-later https://www.suse.com/ System/Libraries https://dun.github.io/munge/ linux aarch64
ii 7e7338536b4b792ac3751473419eff52f24ebac32ea34adbf0c6e8b00fb73efc libmunge.so.2.0.0 root root root root munge-0.5.15-150600.25.6.1.src.rpm libmunge.so.2()(64bit) libmunge2 libmunge2(aarch-64) munge-libs @ @ @ @ @ @
/sbin/ldconfig /sbin/ldconfig ld-linux-aarch64.so.1()(64bit) ld-linux-aarch64.so.1(GLIBC_2.17)(64bit) libc.so.6()(64bit) libc.so.6(GLIBC_2.17)(64bit) libc.so.6(GLIBC_2.33)(64bit) libc.so.6(GLIBC_2.38)(64bit) rpmlib(CompressedFileNames) rpmlib(FileDigests) rpmlib(PayloadFilesHavePrefix) rpmlib(PayloadIsXz) 3.0.4-1 4.6.0-1 4.0-1 5.2-1 4.14.3 i@h@by@aaim@a^@aV@^^y@^8 @^r]µ[.[(@[$ZZ'Z@XXXk@Xk@XN@XIK@XAb@X`@X@X@X@X eich@suse.com eich@suse.com nmoreychaisemartin@suse.com eich@suse.com eich@suse.com eich@suse.com eich@suse.com eich@suse.com aguerrero@suse.com dimstar@opensuse.org eich@suse.com eich@suse.com eich@suse.com eich@suse.com eich@suse.com cgoll@suse.com eich@suse.com rbrown@suse.com eich@suse.com eich@suse.com eich@suse.com eich@suse.com vetter@physik.uni-wuerzburg.de vetter@physik.uni-wuerzburg.de eich@suse.com eich@suse.com eich@suse.com eich@suse.com eich@suse.com eich@suse.com - Fix buffer overflow in message unpacking that allows local users
to leak the MUNGE cryptographic key and forge arbitrary
credentials (bsc#1257651, CVE-2026-25506)
Added:
* munge-0001-oob-read-fix.patch
* munge-0002-buffer-overflow-fix.patch. - Make logrotate work on munge log as user munge. This prevents
a local privilege escalation (bsc#1246088). - Update to version 0.5.15:
- Added support for OpenSSL 3.0.
- Fixed "make install" conflict with systemd RuntimeDirectory.
- Fixed big-endian bug causing failures on s390x.
- Fixed systemd service unit conf to wait until network is online.
- Fixed excessive logging of "suspended new connections".
- Fixed gcry_check_version(GCRYPT_VERSION) bug reported by Debian.
- Fixed sending repeated SIGTERMs to signal stop. (dbe6dcc)
- Fixed failure to clean up socket or create seedfile having relative path.
- Fixed test suite to clean up errant processes from failed tests.
- Re-enable build for s390* - Disable s390*-builds. On s390x the test suite fails. - Typo fix to sysuser file. - Restore tmpfiles.d handling which was deleted for no good
reason.
- Make sure the product specific run-directory is used which
is taken from the RPM macro %_rundir (bsc#1191336). - Utilize sysuser infrastructure to set user/group munge. - Use 'mungekey' to generate munge key,
Change permission of 'mungekey' from 0400 to 0600
- Remove munge key on uninstall
- Add a bit of QA by running 'make check'
- Consolidate 'rundir'-handling:
* fixed the location using %_rundir
* %ghost-ed %_rundir/munge
- Pinned down configuration by adding more configure options
- Consolidated the file attribute setting
- Consolidated handline of /etc/sysconfig/munge
- Remove tmpfiles.d/munge.conf: the runtime directory is created
by systemd itself. - Update to version 0.5.14, most relevant changes:
* Added mungekey command for key generation via HKDF.
* Added negative caching of user lookups for processing supplementary groups.
* Added munged --origin and --stop cmdline opt.
* Added unmunge --numeric cmdline opt.
* Added several new configuration options.
* Added systemd EnvironmentFile to set sysconfig options.
* Added systemd RuntimeDirectory to replace tmpfiles.d conf.
* Changed logging of non-existent users to only log once for a given user.
* Changed default name of munged seedfile.
* Fixed pidfile corruption when starting new daemon while socket still in use.
* Fixed munged signal handlers to be async-signal-safe.
* Fixed "Logging stopped due to error" behavior for transient errors.
* Fixed misleading "Lockfile not found" error message.
* Fixed conversion-specifier / argument mismatch in error message.
* Removed autotools-generated files from version control.
- Update patch:
* Make-SUSE-specific-adjustments.patch
- Spec cleanup
- Update package description to match upstream's
- Add logrotate file and Requires in logrotate
- Run bootstrap to create autotools files. - BuildRequire pkgconfig(systemd) instead of systemd: allow OBS to
shortcut through the -mini flavors. - Add Provides for 'munge-libs' to package libmunge for
compatibility with the upstream spec file (bsc#1160075). - Fix possible LPE during installation (bsc#1155075,
CVE-2019-3691).
- Remove special %license treatment for SLE-12 as this
has been fixed. - Add coreutils to the Requires(post/postun). - Handle license file using %license where applicable. - Package sysconfig.munge only on non-systemd systems.
- Fix group settings for non-systemd systems in spec file:
group 'munge' is used there as well.
- Some macro cleanup. - added README.SUSE file (bsc#1085665) - Update to 0.5.13:
* Added support for OpenSSL 1.1.0.
* Added support for UID/GID values >= 2^31.
* Added support for getentropy() and getrandom().
* Added --trusted-group cmdline opt to munged.
* Added --log-file and --seed-file cmdline opts to munged.
* Changed default MAC algorithm to SHA-256.
* Fixed autoconf installation directory variable substitution.
* Fixed all gcc, clang, and valgrind warnings.
* Improved resilience and unpredictability of PRNG.
* Improved hash table performance.
* Removed libmissing dependency from libmunge. - Replace references to /var/adm/fillup-templates with new
%_fillupdir macro (boo#1069468) - Fix BuildRequires for zlib-devel. - Replace group/user add macros with function calls.
- Make sure we update the user/group of files/directories correctly
when updating - in case they have changed. - Use user 'munge', group 'munge' for systemd and user 'daemon', group 'root'
for non-systemd by setting the appropriate macros '%munge_u' and '%munge_g'.
- Create user/group munge if they don't exist.
- Add 'BuildRequires: libbz2-devel'
- Fix typo. - Add 'Recommends: munge' to libmunge:
This library requires the munge service to run on the
local system to be useful. - Fix typo in init script (SLE11) introduced by last change
- Fix rpm preun/postun-scripts (SLE11)
- Fix empty /etc/sysconfig/munge after update (SLE11) - change USER from munge to daemon for non-systemd OSes - Switch to user 'munge', group 'munge'. - Adding to SLE12 SP2 FATE#321706. - Setting 'download_files' service to mode='localonly'
and adding source tarball. (Required for Factory). - Add baselib.conf as Source to spec file.
- Remove tar ball of version 0.5.11. - version 0.5.12
* Changed project homepage to .
* Changed RPM specfile from sysvinit to systemd. (#33)
* Added --max-ttl cmdline opt to munged. (#28)
* Added --pid-file cmdline opt to munged. (#41) - Add source service to download sources.
- Remove static libraries: If they are needed, they should be packaged
separately.
- Add a %define have_systemd to clearer identify systemd relevant parts.
- Add define of lversion insead of hard conding this.
- remove README.MULTILIB: Package is built already.
- Add BuildRequires: for bzip2-devel, systemd-rpm-macros.
- Spell out files under %{_sysconfdir}/
- Fix symlink to %{_sbindir}/rcmunge for initV and systemd. /sbin/ldconfig /sbin/ldconfig h04-armsrv2 1770714312 0.5.15-150600.25.6.1 0.5.15-150600.25.6.1 0.5.15 libmunge.so.2 libmunge.so.2.0.0 /usr/lib64/ -fmessage-length=0 -grecord-gcc-switches -O2 -Wall -D_FORTIFY_SOURCE=2 -fstack-protector-strong -funwind-tables -fasynchronous-unwind-tables -fstack-clash-protection -g obs://build.suse.de/SUSE:Maintenance:42629/SUSE_SLE-15-SP6_Update/05d11a5f3dedff66282fc7d0dfa4d3a3-munge.SUSE_SLE-15-SP6_Update drpm xz 5 aarch64-suse-linux ELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, BuildID[sha1]=f42f52e18d6d4aba2d0692b76c4dfd3d34fcde01, stripped P R R R R R R 6L LgE5b` munge utf-8 6f2804c14ea8b24c579313ec0651c79cf9de96afd3adec0584fa8d035d9623d7 ? 7zXZ
! t/2] "k%]dM B O*F~ aSYTa
3];!,nu .۬/7$2*y iSMo t4 SUt}sR &Uh(z;.%$5d7|c6Y(h$z r'0C"S8Y
[&W³"7ywq:g{,3[ =]`U;.0) } tO_ m/B!噀bLnU ) ,΅)0 [RgPX{".'x_9([+|sut&+$W
3y anJѤCud$< $ѵ 4;TacS۵Ok|n ًrrԋW:ɣRu>l:YzfI6:wvR%Lx ѽ(m%~8C; 3М9=ч~{9 $_ɺ*"9<(6j-峚bA*"Q˓n^heSX[~1 bj0
qO4-ju40˩a#E%'UtLj иZ ǁ &s%N
m1u^lr W5㾧/`HIVCoVw 9x&Y[jtJ_[~`n5q)n^#
<OphdOW*1!_!w[?|oD1'[I0@*ޘp9 `RMGN5|%'Mx\-H"LFR^2ګOW
ϟODZh̓l@jMeE
g ;?9 ϘF9cGGqaY%K9gYJ}U$"?k1 VI*9_%p_Gvn 1ևR7DqTF
>`1,LD ޜSf֍q QD 0Dwam!: 4,I jg \\LrcO 6{Y){ :" ` Wע%2
zt0h1VAӳQ *yFd͎لRhM], k ,HϪ p6J"{At.R}z)G5b'py
;$%eu*.c?tS{xx ^j~SD#ދUW5w@ 絠N N.@>p5oNaT3@M GO:W²-_qD{Qچ,RqK=Ӳ,h[ҪWȼ|; mj/NOz 4.b˗u{5MyhePz;x@v!&$T
sFz{"ti %%U.v"i"~V88"_4>s{&_ܻe$? fȳƖ
?2j6Mǎ{]L* Oiǜ ŷo! ? l-#/`ՐzB3w2 a[ih!2},3;f
HA
]"'Ru
#!-U/Fڶ{ 9 *ܽ$Ng %U:ƚgM=`g/ǚs OȧTt> j`5"g0 \]"=%յ]s cL? ޭg{'KuB5}wegtk1kغү}TD 3w$+"sC-vB)pLС?xưIí0lFV0hj}}ɋVVrP\ \S( xaT}2jhj<@5I@-̉Pt5~44w^ yytIUߔ]˺ID >+>jfe OCHAƒ?{ɛ c|ؽ赌"tx S>`N>C`e~t ) K
YZ