cyrus-sasl-scram-2.1.27-2.2 >  A `KHp9|;'1(rN>-LȕeE"ie04$J;b[JeEF: eD))WYƓ+fK"/s"(eaFMmOuNFD9pvjz/?J*PCsJVx>@egSIL#tX-vn )dfQy0^ @ڟJi9*|ʍ0}#mkd Z85df7a7828037321b67bb53dd69d7e819b471da004e003db83ff09cb87338a7d55aa69b3627ef5960e76eb61094c7fd8079532e65faR`KHp9|s.fZ$*gB뀻 D>RnJ &?}} V<-<!"fzE (sc5C+P?;4pSL -KQZ>.)2m;AYEXH@0[e.'~ c3,Ϡ:smSACVvyPi*KjŲSUф,7˰ɱ`N yΊW=^|%+G9` D>pAx?hd  B&3 Ig     ,<Pd  < hl(8 9 :| F=GTHdItXxY\]^bcdef l uv,wxyz"dCcyrus-sasl-scram2.1.272.2Plugin for the SCRAM SASL mechanismThis is the Cyrus SASL API implementation. It can be used on the client or server side to provide authentication. See RFC 5802 for more information.`Ks390zp34pSUSE Linux Enterprise 15SUSE LLC BSD-4-Clausehttps://www.suse.com/Productivity/Networking/Otherhttp://asg.web.cmu.edu/sasl/linuxs390xpA`Kݿ`Kݽ`Kݽ`Kݿ8b4eb2e923491636c42dad40e27e8f99d5149b192002128f8cabc96d8bd99243libscram.so.3.0.0libscram.so.3.0.0rootrootrootrootrootrootrootrootcyrus-sasl-2.1.27-2.2.src.rpmcyrus-sasl-scramcyrus-sasl-scram(s390-64)libscram.so.3()(64bit)@@@@@@@    cyrus-sasllibc.so.6()(64bit)libc.so.6(GLIBC_2.2)(64bit)libc.so.6(GLIBC_2.3)(64bit)libc.so.6(GLIBC_2.3.4)(64bit)libc.so.6(GLIBC_2.4)(64bit)libcrypto.so.1.1()(64bit)libcrypto.so.1.1(OPENSSL_1_1_0)(64bit)rpmlib(CompressedFileNames)rpmlib(FileDigests)rpmlib(PayloadFilesHavePrefix)rpmlib(PayloadIsXz)2.1.273.0.4-14.6.0-14.0-15.2-1cyrus-sasl-bdb-scram4.14.1_I@_j^;]߶\X)@Y@@Xg@XVhT@Tw@varkoly@suse.comvarkoly@suse.comscabrero@suse.demichael@stroeder.comvarkoly@suse.comvcizek@suse.commichael@stroeder.comvarkoly@suse.combwiedemann@suse.comvarkoly@suse.comjengelh@inai.de- CVE-2020-8032: cyrus-sasl: Local privilege escalation to root due to insecure tmp file usage. (bsc#1180669) Use /var/adm/update-scripts/ instead of /tmp. Clean up temporary files.- Remove Berkeley DB dependency (JIRA#SLE-12190) The packages cyrus-sasl and cyrus-sasl-saslauthd are built without Berkely DB support. gdbm will be used instead of BDB. The packages cyrus-sasl-bdb and cyrus-sasl-saslauthd-bdb are built with Berkely DB support. - Update to 2.1.27 * Added support for OpenSSL 1.1 * Added support for lmdb * Lots of build fixes * Treat SCRAM and DIGEST-MD5 as more secure than PLAIN when selecting client mech * DIGEST-MD5 plugin: Fixed memory leaks Fixed a segfault when looking for non-existent reauth cache Prevent client from going from step 3 back to step 2 Allow cmusaslsecretDIGEST-MD5 property to be disabled * GSSAPI plugin: Added support for retrieving negotiated SSF Fixed GSS-SPNEGO to use flags negotiated by GSSAPI for SSF Properly compute maxbufsize AFTER security layers have been set * SCRAM plugin: Added support for SCRAM-SHA-256 * LOGIN plugin: Don’t prompt client for password until requested by server * NTLM plugin: Fixed crash due to uninitialized HMAC context - Replace references to /var/adm/fillup-templates with new %_fillupdir macro (boo#1069468) - bsc#983938 `After=syslog.target` left-overs in several unit files - added patches: fix_libpq-fe_include.diff for fixing including libpq-fe.h - removed patches obsoleted by upstream changes: * shared_link_on_ppc.patch * cyrus-sasl-2.1.27-openssl-1.1.0.patch * 0002-Drop-unused-parameter-from-gssapi_spnego_ssf.patch * 0003-Check-return-error-from-gss_wrap_size_limit.patch * 0004-Add-support-for-retrieving-the-mech_ssf.patch * 0001-Fix-GSS-SPNEGO-mechanism-s-incompatible-behavior.patch * cyrus-sasl-fix-logging-in-gssapi.patch- Added support for retrieving negotiated SSF in gssapi plugin (bsc#1162518) * Add 0002-Drop-unused-parameter-from-gssapi_spnego_ssf.patch * Add 0003-Check-return-error-from-gss_wrap_size_limit.patch * Add 0004-Add-support-for-retrieving-the-mech_ssf.patch - Fixed GSS-SPNEGO to use flags negotiated by GSSAPI for SSF (bsc#1162518) * Add 0001-Fix-GSS-SPNEGO-mechanism-s-incompatible-behavior.patch- added backport-patch cyrus-sasl-bug587.patch which fixes off-by-one error in _sasl_add_string function (see CVE-2019-19906 bsc#1159635)- bnc#1044840 syslog is polluted with messages "GSSAPI client step 1" By server context the connection will be sent to the log function. Client content does not have log level information. I.e. there is no way to stop DEBUG level logs nece I've removed it. * add cyrus-sasl-fix-logging-in-gssapi.patch- OpenSSL 1.1 support (bsc#1055463) * add cyrus-sasl-2.1.27-openssl-1.1.0.patch from Fedora- added cyrus-sasl-issue-402.patch to fix SASL GSSAPI mechanism acceptor wrongly returns zero maxbufsize #402 (see https://github.com/cyrusimap/cyrus-sasl/issues/402)- bnc#1026825 saslauthd: :set_auth_mech : unknown authentication mechanism: kerberos5- really use SASLAUTHD_PARAMS variable (bnc#938657)- bnc#908883 cyrus-sasl-scram refers to wrong RFC- Make sure /usr/sbin/rcsaslauthd existss390zp34 16155847052.1.27-2.22.1.27-2.2sasl2libscram.solibscram.so.3libscram.so.3.0.0/usr/lib64//usr/lib64/sasl2/-fmessage-length=0 -grecord-gcc-switches -O2 -Wall -D_FORTIFY_SOURCE=2 -fstack-protector-strong -funwind-tables -fasynchronous-unwind-tables -fstack-clash-protection -gobs://build.suse.de/SUSE:SLE-15-SP3:GA/standard/fc8dc71b5e1c2fd0cd5ad72c2c5e91e9-cyrus-saslcpioxz5s390x-suse-linuxdirectoryELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, BuildID[sha1]=ed359ee24501c40fba2cdfdff122b0f67eb6cb9f, strippedPRRRRRRRcX{F(Autf-8c926f852fc75f8365f5e25993e5bf647aa68d3ef2554ba6bafb52f16676b5ef9?7zXZ !t/C8] crt:bLLW2nNQgld8/&Ic%fU cGTwʴ`I8Eɤ^%IT'0LDFEQ Hwy)}ܷ&9ܢlNg)_{(Wd~,%4t8r#gn%UbUw t6Ķ!fG녧 ail)t\Ƴf̶O ܩ5#~ju~;$}U4ݡ] .S㘙mv-uPNUKYVQYU Q`5*J[qܣ>:q6[|c* =^뛫2T ; ڋCDJWߧyHX.ב4[[DxJnjI.Os]J2f>Y뼂>BdN^ZoϷɕʆx ʟC$֨Omdƃ[”U fn$ 7Dn 靮Sq«D|7zK(w.qĞNr81BxA}NHwRڽA;aL}@m!q<7E4#VS:!Hw㨈7$ =l7k yQsIeO"[{I."$Kge?{l_>մ*1RbVYcVvRP՞5D;ͧ mNFɻҡ-4&!8m M xRC~#C1{ V# b`!lIi Ĵ#}UM;HlN7{I-ZLiS#{2oƘAe$o3pؙNޛsx/M?N cp#/&u=JKrkc\4p4ЫW8^ ܢg9.\ k/2WĖ)0~_@o% -{g^$T:\ʭbco)\]Qx[3[ړg ? 04/͏ /l3LǮo/LJoQq*->l$HϡU)g XI7HCG3=/n(L(NlA&(a',K.h{U a72#A ~O2k(]xkIp&q{txx9HJ (VAft7TPW^]dyjv="%VL2R0?T>/+$.`ғ^<#d^r z0~0 N\L ]qq<\.s8}vn9~>WFU'c]:SY~a3?.KWrЌ 1Fg2!GzgRӃ" xӞ@:hb5z0d-|J' }v^lpcVd)0,vuðh|)O6~3Ke",\ yw[>g69E*yF|āun;RƂEAm],C4xR-Նkg]jݓLw Yߜe,hjS JNW.ׂC.I1"O!__+O}k[q@:qg <@V86<}aTZJ?* ^l_18-VQ_^[Cs@*x8cu0i4׾ⱖKrqVx4[bգjSA,?lpSǿ/jB䁏O_֯@MFA6 QFo[ca:Ζ:~cl1:S ** <#9S%Ү)yG'{~Dij1*V{^sL<;=eAST:)tȻAËXX@Q>%+Q{5X5v'߯ I.*/ mkբɪJ#0/oa943w+[ 81qS%"ÞHwK+?o&kC3=*ќ\u\劶qDU wB$:H%r̎HEB `¯amyד8f{-T S&LQ`F4!ݐ k'Y0ilZ-7 S|Jj3G;CeB>L2yMWCC~Sr9ni6;d7\=j קG6nä9BGٙ,{9",988a,w(h9Df\==[x:~ήު%GsÛ:׺m;WHMYK[ԗ5jv|S.LP̡Q$? sҋprP(wSFgl_VV%`N 9VRz<ƕ >4zEӛvpr'n;A8IvP6O? pۡ!j70"ҫW'9GAo~/I?ej F3"^ ]YBoϹb&18^}lAh {+4Pߦ팗i]θ5lfIۅ:AlNL96!4odi94|uQ$0U)mTOzl!dG!de̐WqڀPϛ5ol Bsb3N?c]+w3cn~@%Ef^MƢ[nE1?ө<~\ ͔Mƻ\wr]@@"zB'k;@lm+*?ۨ@*]  No'(3ij5mE@$7o渒6D?r\q[\)88ཤ[oۥLDiJ:s;OX%w;<%}nʀGFܫZNMUv -B@(k"k9`1!HG2UMD)@W,tЧtNڸkvBj{@ۢpTQRq;.@|81 " WpR;_৘Vms i%3P,k=W-k*ωnJ]Vh6btePⰢܙL騳'x i)GcrZːFSBL -BY.oz KXb&ِZ6%՘+Yh1'ySگюvrBB2ExI5[V;K#N4s캦\iIp+7O]hڤj6q̨>@oIGŊ0%YKҎ_IB~ TICɲtZV8LHoXͲ`z[a:ϠC,2-EKdp>Ojfn)(xpf;T4^l9343b<Eا jk1`dR;(ZbNʭDIisP =κ_ײB_3 b !^G}v&_~x3>^tS^ D1Vݎtxuso)97V^`o4sMGEG&鈚o*k.G $jdn0i~FߠA?Awuw8:&w%uСII o_K޸81x>dt.s~T9ЍajJ_x$Rr8f|N}6Ӯ(dF-RO@r eGWAx6w\ U»6?WMf/Z䋺b9NYGγ'8tͳwtp"Y{zoT2o@/ƍ]-b/aƱG&aҮЦ7 2c,uCnEMe7'ygtO_^ o az)NTC%sv^׃tp5c^[ڀ\/仸#n2<$E .ߺmK1H DvA~r)o]Vf)Da\n]aR;z9W#x|^!c':y E5!r@=5C\1תRu# Ik!$&QGD~XhhC7 aHPIi->4hEjDE%`vyMihK*VU1ۃJVf7F/Y;5aU*d}]!{ke T,MKLO~$ "{'WgA7g癸{F֬pζBf1Qtwdi[a[ r' V} />/%?_'i,g!IrCiIZleld{4>n81􃷾}'*w3g&D90tx=wKKUƇᆋ42 ԃ#LqA:Uj pKg_0> ch<`ߡ~k38A2(s*Xݛ߭l,C)T()|Ւn :̕t#-t]v.6I{&رm2N`TöMe6=E` PuCUL`{L.*FL>DznwDQ5},8]Vv\hP_T) Tbߊ. VAҊ[Y퍵յu9˂EHamq`!vV~!AM˫* vZ'0 دX,]vg) 8GA`1>"wVzz n:0n+b7ĘYhv1m| 4E )_OdLjLa@4-sqQg\ F0Eï|p_r a=!8k6?5§HAQC]tѡloƮoB2lXKd|A$\?`y{mAhA[]81aV5%@TV.fРi|Kg4WEV)C²퍲isE d,o5`@2h;STXJZ 5,b7Y@E$eqծDx \9p9^ dw_d><Rh;ʵdLNcT 7jYwtٯ#׌v[nSk/cl<V1/GSϤ*(XnT479c{C˟zSEr^Q*%<$j?@Wb<^Yzp w଄i&K\a+|f"FtBmD'ps߻(E>MXO͒SAZZdwߵ4\PK]ceixy@W3,yhkp (C xe 5`=E<aAY4 ȃ#v/ܦ[Rnr`h#p{;O7f|F!޿-@F47FrC`2 Ux䭖8G:b9e<} yLk+qҼg?!$Wuqv{SlVUs[ѥXy$_@/`z#3]m)v@v#8/ ApcL]C.*\hvu8O+4px8!wd|ѱKT6ZͅQ͒#뉞؂ERgDrW(~)ᇤ$5mmLY4tkP>(Qi3T#ߐIb>JBHIGLVTv^k>Kngm;_e@T3;Խj)U#`m>>.2i d"L$u+:{WsGep<Ӄnѫ:m emnfI|L}v-#={5v1uEe",kkJ }۵v"asĂF?m晎,;B4ËMkaM)tƠ5$MqR~>W. _ +1j۴QW9`S͚S!PqQ Rśrh$DAD͐&cMJ3@H㝕em&^`iB 'h7Kۺ  cET[u"3(G͝*;w lA22W=e;MHhGظ?ˠ eu|祆.IxPKsrC{*r'ik~>=2lB!4hoT>*AGuHux(3/\4޻CKqkzVlIu#9U=ܻ"xXBht4:XB B 7rE"s&u% WKV(lWʢJfnh?L&2R-n6"npegw#Yglr|5,g~d.sրWnd$,x>=?!PMy5>&`IJl舠n^ETQP޳zt?`<(N(oi'^0^${{VAJ8O ZձdYYOC؛YvMF[r B< ḿpWЃris2}j8Ary@J4Qھ| 3J[ʸkΌ؊_>D$iXi}saB=B9N"R6A A)QϿVqi΀`=i <šPdړ$ݻa C+ǿI|> MܲU6r_F$|jponՅmLz݉.=3ilx}%ՂA+Q8WJ>1繂TcKKlvtO˂~ꬕ3NºG@ZXo29k(G/.:ρ/ + Wcl@AP(x 傚zɦkwUz-aȲ:Iq^Pci.}S˶ #}1pR0|*ՈPSc+(B=2kH!B4`˺!'فBĸRg=-4 b:ʷ;h |OD$9,pCBD̺^z:񜘜&[ᔱ }&-LKR=4gǑa^>D 4M*!ǎ~O5Av^|Il'v3egL|sJF@*zHV5VOАe H;d ԃǎ6zVQ.{i+DiiڧEZń&> [7TYҦuEtl*na0;58=Vlo`8F`{xx:Ab k%~|@]Dΰ 1-q_MCjIUÑ#Cjx`[#J =УJܽu}+$|V;wo;X4# [+9D{A_ޡ@تipTOgO :Xv+h&U({j7Ո9cQa MU:Sjb0&ݡ*>` Dgl&)U11:E-t^n y1 ԘyFZ8ߥ.|SM])]=c,,eCPG-KCR!-nQ ց;{1k`z'u˭}U U/ӈ)]`a;#+f?oƬ] %,t0uLDM>^"њ!NK!D__Gf!1S$C[v-0j[#މ,3ͫ:@7Ӆ%Dæk{)3~X)GίE˶Wܱq_Oo;ЩP, 1Di`1"(,ts*e얏mۅE@W5XU4f -:InMsq˷]&b}p? r-ѾGڔz'>,mfVE`@+`tjAj&sѤCB M2ɲ2zv['f#>wxhVD_f% Fnf7U| .0/5- Lh?u& U! ƣïL [czCKՔL{ˮ(g#]M;DޏK~hŲk4Nl]~鴩.q̛5fyM-+, U(ƶKNd;=nEۡ_Bcr,.WbMo"o xDP34?-+@r?ZZB~'J`)0N~O]t3nlN=Meadi k!)Z U:!Y)dދCEvVseq : u鑝:>\N9XD r73:~d\X B]!`R,?=_jv ~\w\#T 3J٫ށ@#kI/bE~σݽ fg+efCqx- $]H}Bgo^xEn@o22aKeݾ6,gI~ VK}tFH]Bd%Odf2 zք뵾an6mILi@P-r!v~޵0D,Γ#G;%j=NLԂ(/ b[VbOG=烢 th^'ieA*{RdcP<]wT q8FIO@8l]38 3wmh1WTGicg~$˜DF Kb^zB~e㼑}!NeYۇ;]-V,|J5U/Zl [)( x;;չqqUcxMV ^KX+2^3XzqTM@A?-tJ9vLIXF';Pp  Gaj|aq& ^]ذӁX3DJw@5pI].^EFUAF EU5mMĽRAE{g:?yJ6v:|ZG7y R]%8^XD91MW5o⏘C>k|êt2<{\;҄fj.0GZ\!h ሿF`EA|/LȜ2fkIIGJ!vVoh7rk^j]Hyo"ZWQ0BRV0GS@M 2%DEc&-R1Y?[ww[_M~: )0Ą_Fn+&(}5;`k<2d9ii"_x3b #. 5@ZK(HeRFJRe dڄ엩6Ÿ/PS5?149 ӃEr!=[^w3:[*g1;F+Wt>  +1"Be}.? ! zD;ٙ&cAj1buAeUdH*P2}RB7pvyeqbqnFt