cyrus-sasl-bdb-otp-2.1.27-150300.4.6.1 >  A b*p9|L#kĮC$%7pă}h"?SCja''#ͼ, PAM5w2]Nml:'ơct @N+<,^FtЌQAII sWNw>Z&p\İQ 18gcύTۄ%v D0dpъdۮLLA$T%v(׆ ]=Mߤhs QF6L98cf69be69c7e3ecd19765f5c4fc55bb1df9f561c9198877bc16567fea822a7966a2920f972bc9a098b4e8ec0a47f092ac8b03c4fhb*p9|]ҙ-˷ qv.#Κj(uPROR"h<|Lٞ%|? |-֦}E+߇wЦ/`"s?L0voil]d=XGnJxB^ONoqg&Űi5{Z~G5-,eW`pMG*L@-WF2 Lfib,hoL0 <+%W L1(!ձdO!}<>pAt?dd ) K .; Qo      0@Th  P |(8 9 : FGH$I4X8YD\p]^bcsdefluv(wxyz`Ccyrus-sasl-bdb-otp2.1.27150300.4.6.1Plugin for the OTP SASL mechanismThis is the Cyrus SASL API implementation. It can be used on the client or server side to provide authentication. See RFC 2222 for more information.bs390zl36xSUSE Linux Enterprise 15SUSE LLC BSD-4-Clausehttps://www.suse.com/Productivity/Networking/Otherhttp://asg.web.cmu.edu/sasl/linuxs390xxAbbbb891076d6754e0a11743709e4bf6ce4c7f9b48c93023cfaf1e48b6362ba41289blibotp.so.3.0.0libotp.so.3.0.0rootrootrootrootrootrootrootrootcyrus-sasl-bdb-2.1.27-150300.4.6.1.src.rpmcyrus-sasl-bdb-otpcyrus-sasl-bdb-otp(s390-64)libotp.so.3()(64bit)@@@@@@@    cyrus-sasl-bdblibc.so.6()(64bit)libc.so.6(GLIBC_2.2)(64bit)libc.so.6(GLIBC_2.3)(64bit)libc.so.6(GLIBC_2.3.4)(64bit)libc.so.6(GLIBC_2.4)(64bit)libcrypto.so.1.1()(64bit)libcrypto.so.1.1(OPENSSL_1_1_0)(64bit)rpmlib(CompressedFileNames)rpmlib(FileDigests)rpmlib(PayloadFilesHavePrefix)rpmlib(PayloadIsXz)2.1.273.0.4-14.6.0-14.0-15.2-1cyrus-sasl-otp4.14.3b~`7@_j^;]߶\X)@Y@@Xg@XVhT@Tw@varkoly@suse.comvarkoly@suse.comvarkoly@suse.comscabrero@suse.demichael@stroeder.comvarkoly@suse.comvcizek@suse.commichael@stroeder.comvarkoly@suse.combwiedemann@suse.comvarkoly@suse.comjengelh@inai.de- CVE-2022-24407: cyrus-sasl: SQL injection in sql_auxprop_store in plugins/sql.c (bsc#1196036) o add upstream patch: 0001-CVE-2022-24407-Escape-password-for-SQL-insert-update.patch- Fix build: Do not build libsasl2-3 in the bdb package. This will not be linked to berkely db. libsasl2-3 is now defined as %BuildRequires and %Requires- Remove Berkeley DB dependency (JIRA#SLE-12190) The packages cyrus-sasl and cyrus-sasl-saslauthd are built without Berkely DB support. gdbm will be used instead of BDB. The packages cyrus-sasl-bdb and cyrus-sasl-saslauthd-bdb are built with Berkely DB support. - Update to 2.1.27 * Added support for OpenSSL 1.1 * Added support for lmdb * Lots of build fixes * Treat SCRAM and DIGEST-MD5 as more secure than PLAIN when selecting client mech * DIGEST-MD5 plugin: Fixed memory leaks Fixed a segfault when looking for non-existent reauth cache Prevent client from going from step 3 back to step 2 Allow cmusaslsecretDIGEST-MD5 property to be disabled * GSSAPI plugin: Added support for retrieving negotiated SSF Fixed GSS-SPNEGO to use flags negotiated by GSSAPI for SSF Properly compute maxbufsize AFTER security layers have been set * SCRAM plugin: Added support for SCRAM-SHA-256 * LOGIN plugin: Don’t prompt client for password until requested by server * NTLM plugin: Fixed crash due to uninitialized HMAC context - Replace references to /var/adm/fillup-templates with new %_fillupdir macro (boo#1069468) - bsc#983938 `After=syslog.target` left-overs in several unit files - added patches: fix_libpq-fe_include.diff for fixing including libpq-fe.h - removed patches obsoleted by upstream changes: * shared_link_on_ppc.patch * cyrus-sasl-2.1.27-openssl-1.1.0.patch * 0002-Drop-unused-parameter-from-gssapi_spnego_ssf.patch * 0003-Check-return-error-from-gss_wrap_size_limit.patch * 0004-Add-support-for-retrieving-the-mech_ssf.patch * 0001-Fix-GSS-SPNEGO-mechanism-s-incompatible-behavior.patch * cyrus-sasl-fix-logging-in-gssapi.patch- Added support for retrieving negotiated SSF in gssapi plugin (bsc#1162518) * Add 0002-Drop-unused-parameter-from-gssapi_spnego_ssf.patch * Add 0003-Check-return-error-from-gss_wrap_size_limit.patch * Add 0004-Add-support-for-retrieving-the-mech_ssf.patch - Fixed GSS-SPNEGO to use flags negotiated by GSSAPI for SSF (bsc#1162518) * Add 0001-Fix-GSS-SPNEGO-mechanism-s-incompatible-behavior.patch- added backport-patch cyrus-sasl-bug587.patch which fixes off-by-one error in _sasl_add_string function (see CVE-2019-19906 bsc#1159635)- bnc#1044840 syslog is polluted with messages "GSSAPI client step 1" By server context the connection will be sent to the log function. Client content does not have log level information. I.e. there is no way to stop DEBUG level logs nece I've removed it. * add cyrus-sasl-fix-logging-in-gssapi.patch- OpenSSL 1.1 support (bsc#1055463) * add cyrus-sasl-2.1.27-openssl-1.1.0.patch from Fedora- added cyrus-sasl-issue-402.patch to fix SASL GSSAPI mechanism acceptor wrongly returns zero maxbufsize #402 (see https://github.com/cyrusimap/cyrus-sasl/issues/402)- bnc#1026825 saslauthd: :set_auth_mech : unknown authentication mechanism: kerberos5- really use SASLAUTHD_PARAMS variable (bnc#938657)- bnc#908883 cyrus-sasl-scram refers to wrong RFC- Make sure /usr/sbin/rcsaslauthd existss390zl36 16455206622.1.27-150300.4.6.12.1.27-150300.4.6.1sasl2libotp.solibotp.so.3libotp.so.3.0.0/usr/lib64//usr/lib64/sasl2/-fmessage-length=0 -grecord-gcc-switches -O2 -Wall -D_FORTIFY_SOURCE=2 -fstack-protector-strong -funwind-tables -fasynchronous-unwind-tables -fstack-clash-protection -gobs://build.suse.de/SUSE:Maintenance:22965/SUSE_SLE-15-SP3_Update/d4cb4470d050342a6992a1eb94612c2d-cyrus-sasl-bdb.SUSE_SLE-15-SP3_Updatecpioxz5s390x-suse-linuxdirectoryELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, BuildID[sha1]=2e1f8ce4e44b0a7ff7b61781210c417a32509242, strippedPRRRRRRR/8'#"W:utf-8a5d647c800611dcaaef232cd43c8f21fdd19590c76b7ed299fb90917b31a01a8?7zXZ !t/;K|] crt:bLL ɳv/tԈu_]l(?[sEB!<<(.{ϓu.1$v@,GjCQ XӳP2L[wRPYkYQKe/@4.fo畔 OT@+iܙ0Pw.B=W9>ݼإ̦$p"|gEe>~z/هcָ>_Ts=X&X,`wpԹUGX hHmEFۀAdwgq\FE+c-T=sP~O4eGE3J8qz';|%nn([yc:)6yF뻃a7Y9 ^s| Š@ԡ|[#?t^]kB9J#r m-W_ eq|t+7`3sFR3v%;!Ua{yJ?=)\骯-DS҆iDn4 4mʏdx҈1z`Q3r_4ap~T&a-*VTc;Ef Q8<%u֮\?aH1F{L䂫PFx j=n:.S.GFdt|t53? 'KwA8/*F0LPsS $iLLؽ {b..Y " 6 ΧƳs'`=%{MĀF'Y]^Rh4mPɇ6e10Kx.Il⩀6QoWvq\e|UOp8Who>~q-/}}Ga^{(@dS]"_ 均呔3qN*{d1V5< DXx=b.mq8{}۵cM hmdYe(3n֜E,-#{6]_'&xf%ԬW,e4}Mda0q(cWVf$HU3uCZŰ4c88ch܍ AQ_ݥ]em-×v?(q_Tp?k󳔃I;n/R`|dʅe '0*<KVhIZhQP,Җ_E^$gt!zGHnX&st#(q yAdg"GX Ⱦ+)؍?8jv3nps/"z:V W'FI=ZvJ>3ύ) d̤j 0k2h]jG5J|NJ0Wvv~iDs>v槠9SVb (Ghv|.G*mI:Mہ2Oۛ&!)ނ>Wv^)% 7>AEaZfx~+dD_]#砄J w\KZA()9⏳*-56n(ēGANMk_ xԝQ`ߞ `fq2_LUsǹ'An2.kASuɝH"xj,ڛQJn+L5u츔 e mMl㵢.w#wTL8[ 7# qé "iz OboáѮx~pLV#; 8ft4x+$"&!#} V#?)R|nzm ֆѲ—=שA||'EMμuCNj2?F/]Kۨu"$¸bۙڮ\XM2bWQ{ 85 ."#v'i` 0*4kt;v7X ĝ ?HLh(P9 C& 2=TN9Όb3 \U97t d:T)"zڇ鬭W}~mS*{m:)8h]Dx9~16z-z' `Zt'>A,}(a<1^MGݬw|=FmBc[QG?y5!w_@#VdXH ,xBΜCݓHP awYjAkCϓF%U}直->ċҊ\ЈKDO`þc%_'bYijFL 8kzF(uthe4C.R[pKo &6Q}^tFߛq"w癝~3MГK #&J;2ec˟Y(I־ 86^$7F6P3(5`FzdZy~?G8-1[ReƼ 5X0F*?D窤V Y+~[D{A&<:3Cfx|4}Bbi~B;)nGGp$ ~؉ȋrl`4cxM;1_,>@\ֆ:XC/Fև @hdv˴og|:S\ ѱm|PkXwk}.m*a>"T?o ],ђFEŲU2v`)$5u-s _64ƕs2It @7MV д")")Q6 a bl*#Y+=xTD " ؐuVPDaPC]5cm'O|zv[vWܡL_0tbmes`r+fȒAu]؇if W'yJÏ'R歘Q=Jefa|(F;Kvm%(S/ <TBm[1ɉ𔠟87iӑ_ZY ۙپ뗮r=I'بֵoE P6|dc[w4-YjCmW5zV~#kJ H\4o45H}c`X<ǿpQD*?73Ѻ#zN*QNbG4o?>- C/jP1iۣP û|<ݙ 2Y/8КϪ=wyfHVc:#κC3`tk+C8BR K.`{A[+\F X%rю bs HD"e2X3(V6 Ո線?<ϙ A)Xr

(_!Q="v_T ! 9Er++AeIZrbzMC0'㊹++xqŀ a8tUL ĝy7l_r[1¶*P?j)L~%O ?:"(ˢW M<$ym'?A{iPS{D!%"lE]7 EJ_V8^LF9K $nt] LP9ֺʫϩ)"t';w+g:+=#pc934uݓ_`7#Q^Kq $VQ' P3Q>AB]=Wp51mٞGG-N梌J^vzHvlmmPN/|VwQS{I 8NIQi j6*.6`^fc$P,~E`V#l>?9qmGΘH2;۵z@3%4<#QV"$a_#/ȓM9:b7^~A0Oh[ QgäF)i@4A+#/2%,r (&e1 (Yh4,;{D\Tu[ՐHunQ}6HC 9Zf.H "%5kL*tF#|]ầ.[id^ǻ(B_ȩkw9X{7#``O- FL>SS].uBzS[ǗH=1HBV3YaP}=0hۼ0s񑉞g"'@m@jJA*_kAiOPX.c!V Rl_RML`Ly!Un$;-B#:l8ɗM_2T/ Sq[ć'{D( "ߚ?%+ߥA9>U#ě ;I2ZeH`6gy,AIJT„BblNi ⷠWOrr ߉2E;TŊb)4*u8זoT&eԌHT7iV ; AQoŮz7i@"d!ӶbBȕN&tH?uYd9N`,JNbzjk,*iuɽyLLvey[}d!Jy,ˎ0"}4'əl;Իʹ#Sj3;  k2t܎;#bʅEij=֏4lXf(1z=cTڊU`GA9<m6omJCdFӚKE?`x]*P^sJN($J̡J+R.#7`WΨe'u ] RC$8ng,ݜPƭ4a Nr yUQ #$Aba+wGN":/4Tkz㝔ѥ1=;}XO)|˴­~u:*\_5C|ׇYGoL$;bQR1W+EYuF#B< Am5p BǙGió>:G"|ݔ&9qv:_!#!(y369csOL?HÑi @> -1y9i8`tct~Sb\R e[ zm}nI+Bh)3ojP̄m",yU IzAwJ6!*͢l`+4 #r ^H ,cjNHlv~RAsc`6.2ftIEQ EI(Q$./@rۖOR2G0^ z 80X&IMlU}/qD>2 a?>50N(#s0\ro0UJFcdYHn-=7QraT9d{DMuӋ',%{Vł) &YzDX%= fdW4R$ ܮ[8)e 0^u5~nj}1PksWTBRfr OեE7 2f(A:n6рsH ΀Z. K`1&ANs`\ĔS]e9Ź S?kUAjи.-&xc~vk|(o5wT]le= ݡ#Mۊr,[sq5A$':7+}MJp!/aPhj?\dEζod/#ktR[{O= IF97y#L` kI|ߟ în-s~Fth^ iz~#2tWx\@'ٳ?۰t^yX z~::RKr?5[I@DZ}]Qqnš<=IvcHx<t$4M:-%ړq8#rhzUN"JĈ1!M ^JBybsUlPu.}"553ג NQ yq>kOَ݉RD2g]^O<&j݌5agpALpsUQSiZbby`:ʴ)yGnڋ gX@̮`<#Y Đ!}u7TRڅߗҢj)l Ea7$s}W̦vkR'{6 ]cWB6mEP62[P1v/>[g N~sWק!䥂&2 /"a> "c`tVnH1O"f#eQ{N׏.F}\CeS;;6Q_a얪dWslc҃2!Ee=I:s -0ys$Smߋ+JJQ'?U!֤TX1ϥXtc6:ȱ7߆SO Pj/ͷy(7v/9%K+1A-ܟL&LbG'iK]WD6=h_;UǛ4V;H 6@s=Q7} ۪ FŸSfHn8#~_[O&CPl^b}JUx1i5H($*ȯl'Eip}%<RVQo-5Tatdzєv+^ޓTtf7-T:vvK g֖DG^ƒ_xguGq1X v&f y~d^s~3l~U3}jǽƸyu]+6zA';*D$ү62'YEΊe&~m5`O=>I[FTTKy^?Y(ٷlRv<:> /t`k` \3\Ɍ}:*EYu-($w* Va44pp l /ⵄvpߊ#CT3L.tK3,%gl~D֌zR /4`kc]<4SP8BTC9ktK0B /O?l.8%Bҷ)Z'iMc˭i&=|+rN=02M>Fy׍rpanW 0O\^_%mJ9Ԑ4v[xE6yaW1D>!Rn|w Q5CD Gs7brH))_sek);c0epPjjpi8/UCnIhKK"̉VWw4]_Ͱzč1`*Q̼b3 .F~UyK HGh:`xkl7/vXLwJx7q4/U.Co$^\ڎi GmYzKL;6A$aH:K2u=(@6G=pc q]gʥKcú _|rO&* ƴMp+Gy eK&a)g3Q)+V@zC=f~ZX K֟O9fo{]lCrj6mQ [0@4rG=Wpe,W4 ,7]ʥziN]ȡZ li >1v_K3RaMK3Ufo;/%Ѳ ՊoQL72~sz13ɺcU'٫>a޹kW#:PwAEmw=;DJkc~`c(Cbl+_Q@##4~ԛˠÍwՋNEٚr>KaNՠN@&EqZ˵V#ΞMlx9Cg#gmU-XH&fZg* =g t2@v;~"vZ_mt<k1j[e$Ե<`4 Bz7x#Y J?td }}CS{v/ZEI?&]6`3by),ǎp7D }>?cwQnb"׍H ,=Բ~ߝH{~3>elZIE'=SY(Dx/c?#QZъ Bc $$ OggW=f>){nrjTЬ ;/5~rJb¶!kLʫe>ݦW#X%2'QZ*/T$,YNtF`G"'P8%I"FtߗA 72v] Z䛟9l،igi|"1I!n4 ?A蠽qf$سw(V'cq[Ι))vl$Em&bGW˜Bx RD*궦6{G7{bZ1*NrwN6OUp B"̎ѝ5k_YȆ!0Ɋ?bM;.X4`~2pNl Ozsϟ>UBQ Ie H ݕסcN綾*5AZ^l-ɗO\&7-˻^M% p00i|Ie'4tY2?1J'g0hs5nKue?Cb+wH>;/oiu Û=<]HԣqIn/1l)'R`D +83oW6AFoi4{\twk5c4Μ(h.·jQAy2̇H%k!^pUL .dJ'w2x/5Vzԕw^>wB@?`<'2Cqޡqwp9"-zNyG߷_%Ys;:tkjM+FئW8CIM4АɹP{7HZSä?6Tˆgs5n^r/ș{@`h|F{Ryn4"@vS47Q]golAME,c4QP '\o_Z՜9Qިa:0̷1}e˩E?E=V %h sHf.APVh>AÜ4|p"sWiE{o%bR7Ry/`x.WuQ7m>o۠ }SmrS٠Wmr8\a6{R5}?q{ȯ LZGVP:G8_!]q ;]do__^O4 ޠ̦*m|a>teY#fׅwUKMo|͎KA%!f`x|mt "M;Pڏ# TE[浙nǞO){C 7hbK8 Zj\V@HK?N1`|r/<&+ fzheZ"~gYY}x7ayMKE7oFgЍgBvZc/'AE^1 a&DLG e<ѹ,g7`ug#]% BjӨl83{'TJz*XyU%1@ @|+h(4Ϫ#RvyJI[ Y=/.m%Qƫh{jmS!!s7Y-O}$ES2w5յGe!g.g*D%Zɬ6ѨRDdFx2.c'E˚n @86,V!+"B<͍<h3ZV<͚ n/|+2nrĻ|L F}eW_5=R)OWncg@c~s Ȯj"`~z+3M1&ժ'eHbqhKӏeBb6 2pƮPj71v&ݽ[ A1/30R };/b/mELHŶT f<j{|ΏTe5 P}HSffS q".&(t(^}+zOv=۠u+=jAL*H}&x>j)Vh‹OH\ v360 ҷ8ڭ' MnKd$Yg ["<#*34҉gOMUZcM櫆Ia҃plXFJ/G79ibp@6 , yD@8du4D}lMTB;SCmX x,q)g׬+sA{P_m<'~[9 &֘W^c_]ͻu \9+?HiWX{_;,HPo}yaŤ]:\SP#uw(QbMq.!B:5B j0J(:Z}z;:"<,* AS#:@ D{A!B3Zk^4CЪ"8 s7:Z!Q'<* ʐ-~rghc O$: /EBMJ6K(SƒoOtuYlӧD-W2Y@k$<.WxcԵMTy0vnSb ^ZGs9V՛2_qlOg!&IT 𙑉V܈t0ƨ4í"\َ` ";n$c?$Z5 g/ qKG!O KJ\P1k6]-orh!< %kűH80mJ%OˆGs#PPD )*sR)l UorK[XRiӇJ>6zMN='3\H@@Hu)XᵰY\U}<-Wz ]\#Ic䟷(a )ԏM' G%$՜ =Șwx#^%*4CA6n*-@[r^uf% KR.P֩q,U*y'>;^q1˵if;MlO|_6:za;ɾ.]:=X Z'nϠ*ôPSY=L,d \?b5 LHK?E+y0+tƸ6/*bt#ڈO'0cgnw˚bݵN~[Z30q)6Zhpҳw+C^6}#` *Q}O~ SCyƀEϊց#6QxT4Rݻ?.-쪓ԗ\l;JZWPZG((&:o(qT:mlm5d-lwn,Pz]d޹%bQ݉N!B3A;S(gOmjh2aT8Kp( UfR:Oosouk'INNΑf5V'6OP|Q{GJb" B{W TK65- YZ