cyrus-sasl-digestmd5-2.1.27-150300.4.6.1 >  A bp9|,'NWQ.Yf?q, ;N}z( @PGJ%jdƔpZO=mX, C4hzn?;yŪeMR&^!gPPʊޠr^7O=Eďp} "^'k!~,L,kP 1B9lA<@3 L-Mt{'UipUl7Ct|0m%y={qRZ9%433RBm5E F9Ot<|pA?d + S6C Yw     DTh| 4 h (8 9 : F&G<HLI\X`Yl\]^bcd2e7f:l<uPv`wx yz<LPVCcyrus-sasl-digestmd52.1.27150300.4.6.1Plugin for the DIGESTMD5 SASL mechanismThis is the Cyrus SASL API implementation. It can be used on the client or server side to provide authentication. See RFC 2222 for more information.bxs390zp368SUSE Linux Enterprise 15SUSE LLC BSD-4-Clausehttps://www.suse.com/Productivity/Networking/Otherhttp://asg.web.cmu.edu/sasl/linuxs390x8Abwbwbwbw2ed6436690c5062bfecee1f34dc862992abf0317aa89272fa97c53e0ecd06bc2libdigestmd5.so.3.0.0libdigestmd5.so.3.0.0rootrootrootrootrootrootrootrootcyrus-sasl-2.1.27-150300.4.6.1.src.rpmcyrus-sasl-digestmd5cyrus-sasl-digestmd5(s390-64)libdigestmd5.so.3()(64bit)@@@@@@@    cyrus-sasllibc.so.6()(64bit)libc.so.6(GLIBC_2.2)(64bit)libc.so.6(GLIBC_2.3)(64bit)libc.so.6(GLIBC_2.3.4)(64bit)libc.so.6(GLIBC_2.4)(64bit)libcrypto.so.1.1()(64bit)libcrypto.so.1.1(OPENSSL_1_1_0)(64bit)rpmlib(CompressedFileNames)rpmlib(FileDigests)rpmlib(PayloadFilesHavePrefix)rpmlib(PayloadIsXz)2.1.273.0.4-14.6.0-14.0-15.2-1cyrus-sasl-bdb-digestmd54.14.3b~a@_I@_j^;]߶\X)@Y@@Xg@XVhT@Tw@varkoly@suse.comvarkoly@suse.comvarkoly@suse.comvarkoly@suse.comscabrero@suse.demichael@stroeder.comvarkoly@suse.comvcizek@suse.commichael@stroeder.comvarkoly@suse.combwiedemann@suse.comvarkoly@suse.comjengelh@inai.de- CVE-2022-24407: cyrus-sasl: SQL injection in sql_auxprop_store in plugins/sql.c (bsc#1196036) o add upstream patch: 0001-CVE-2022-24407-Escape-password-for-SQL-insert-update.patch- postfix: sasl authentication with password fails (bsc#1194265) Add config parameter --with-dblib=gdbm - Avoid converting of /etc/sasldb2 by every update. Convert /etc/sasldb2 only if it is a Berkeley DB- CVE-2020-8032: cyrus-sasl: Local privilege escalation to root due to insecure tmp file usage. (bsc#1180669) Use /var/adm/update-scripts/ instead of /tmp. Clean up temporary files.- Remove Berkeley DB dependency (JIRA#SLE-12190) The packages cyrus-sasl and cyrus-sasl-saslauthd are built without Berkely DB support. gdbm will be used instead of BDB. The packages cyrus-sasl-bdb and cyrus-sasl-saslauthd-bdb are built with Berkely DB support. - Update to 2.1.27 * Added support for OpenSSL 1.1 * Added support for lmdb * Lots of build fixes * Treat SCRAM and DIGEST-MD5 as more secure than PLAIN when selecting client mech * DIGEST-MD5 plugin: Fixed memory leaks Fixed a segfault when looking for non-existent reauth cache Prevent client from going from step 3 back to step 2 Allow cmusaslsecretDIGEST-MD5 property to be disabled * GSSAPI plugin: Added support for retrieving negotiated SSF Fixed GSS-SPNEGO to use flags negotiated by GSSAPI for SSF Properly compute maxbufsize AFTER security layers have been set * SCRAM plugin: Added support for SCRAM-SHA-256 * LOGIN plugin: Don’t prompt client for password until requested by server * NTLM plugin: Fixed crash due to uninitialized HMAC context - Replace references to /var/adm/fillup-templates with new %_fillupdir macro (boo#1069468) - bsc#983938 `After=syslog.target` left-overs in several unit files - added patches: fix_libpq-fe_include.diff for fixing including libpq-fe.h - removed patches obsoleted by upstream changes: * shared_link_on_ppc.patch * cyrus-sasl-2.1.27-openssl-1.1.0.patch * 0002-Drop-unused-parameter-from-gssapi_spnego_ssf.patch * 0003-Check-return-error-from-gss_wrap_size_limit.patch * 0004-Add-support-for-retrieving-the-mech_ssf.patch * 0001-Fix-GSS-SPNEGO-mechanism-s-incompatible-behavior.patch * cyrus-sasl-fix-logging-in-gssapi.patch- Added support for retrieving negotiated SSF in gssapi plugin (bsc#1162518) * Add 0002-Drop-unused-parameter-from-gssapi_spnego_ssf.patch * Add 0003-Check-return-error-from-gss_wrap_size_limit.patch * Add 0004-Add-support-for-retrieving-the-mech_ssf.patch - Fixed GSS-SPNEGO to use flags negotiated by GSSAPI for SSF (bsc#1162518) * Add 0001-Fix-GSS-SPNEGO-mechanism-s-incompatible-behavior.patch- added backport-patch cyrus-sasl-bug587.patch which fixes off-by-one error in _sasl_add_string function (see CVE-2019-19906 bsc#1159635)- bnc#1044840 syslog is polluted with messages "GSSAPI client step 1" By server context the connection will be sent to the log function. Client content does not have log level information. I.e. there is no way to stop DEBUG level logs nece I've removed it. * add cyrus-sasl-fix-logging-in-gssapi.patch- OpenSSL 1.1 support (bsc#1055463) * add cyrus-sasl-2.1.27-openssl-1.1.0.patch from Fedora- added cyrus-sasl-issue-402.patch to fix SASL GSSAPI mechanism acceptor wrongly returns zero maxbufsize #402 (see https://github.com/cyrusimap/cyrus-sasl/issues/402)- bnc#1026825 saslauthd: :set_auth_mech : unknown authentication mechanism: kerberos5- really use SASLAUTHD_PARAMS variable (bnc#938657)- bnc#908883 cyrus-sasl-scram refers to wrong RFC- Make sure /usr/sbin/rcsaslauthd existss390zp36 16455207602.1.27-150300.4.6.12.1.27-150300.4.6.1sasl2libdigestmd5.solibdigestmd5.so.3libdigestmd5.so.3.0.0/usr/lib64//usr/lib64/sasl2/-fmessage-length=0 -grecord-gcc-switches -O2 -Wall -D_FORTIFY_SOURCE=2 -fstack-protector-strong -funwind-tables -fasynchronous-unwind-tables -fstack-clash-protection -gobs://build.suse.de/SUSE:Maintenance:22965/SUSE_SLE-15-SP3_Update/f31563e28dd2787f23e8d4a931ea78b6-cyrus-sasl.SUSE_SLE-15-SP3_Updatecpioxz5s390x-suse-linuxdirectoryELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, BuildID[sha1]=e510da464f0f8313430485a1d1398e0e976d8619, strippedPRRRRRRRt{Gyputf-8305ffa5fbb8a538b9a2222ecfbd6e21df0ee6346f4694f0040b3fb0313d35f47?7zXZ !t/RD] crt:bLL ɳ̍1f޷QdLcjs=đ;W YgWE4s:\!+ߒG,/ۣ7s1>1j/ tl^#AD% G!CfJ`Q:{ף_B2N 0-7'W^D9Y+?*dl:e:!Z7pf !%S3?rx%}/d^b56uò M.} Y"n)TСN&2`<$kĆY.~ =TrЩ5 `q0wgUK&AB^ .36jUx6cc[w 6UFOc8QY_ O dauطdvKkFEG#=Ab_.4dTϔ:{lN4yI+#n:pd9xwLV,RSg>cr~Lr:eխYε7NaehRͬMǶÀ4M[M?XNiSdջ}*8, \c_U 1#x rgfyLJ:An'vV/ܳ OO;SkBaD1 C5 f"lB+,ER{I^’26p'=Z {mnn0(udW:sus+M3ԡ'k+zSe+l#1]@%~XV9="Rf8 ~Y}Xw:Ĵlj@eD%ޒF:^Xe9$vUə\6}ېh>@B`fvoFʝYàTS'Cjx6>TKw4D~ADsB+i֖}6܀:˕@D:xHNzBV7Ӈ  57bbinN#O} ռl>c!ίZ`%91s,fo]{i"}%iF:F~ /JsRMO; #7@f!qQp)O;( Vtoյdcjb;e$x}ϳS_[n0Xr &7M/); f pO2}F|I+Jd4+ EDMlN#HcFRmvV PeIHWxc#arw!^JE^0d?j&q&w$ou?9Ab+y.&̮ƑR\F̙҄sxV i'Pvan|,9RQHd|; njS4QNwȡPUx@?&*ijh iDV l w)~Ff <Z|ӃmlW秸o X8(fzq$a֩naIkg覥C)ȷ'CY vP71kee9K̠a\&N\¤ k[ỒKK+õ$ =xڠn[ԩS9.۲%DQ~7{A4K[*>&CTw,[sZmްGםWi;=7sw# V!XYϨ?'V]:,(&lFp nO6mz^)y &"1mI}^m}*x}k*B^K luSr] úo^Om{Me9xb8N&{F@${`NОڜj($sZS8uTin~|tL)kPaa./5k9Ϩ[;/X;`ڽ> Bhr8G{}xo 9tiՠSEι4Os2sKaϞ3HH|tnbʻJTl h@K1uQ4cG;FhHWfFPzZ>n.BN< 7 w ,(썸nO`1fB7e}XƏo&|2-qo$r}^.~jRRpj8f/DU,Ȭ% b @iHZS SbtX:繻t (;b):pٻnCӢ:J&5fL]@ 7֨V ̄{&m } w!@?Izް1 R>;:Xc+cJHؾFrMkߜ_g!f4bloU@a|0qQՊJW\yS# =GT>4޿7*'?27`svj}:kwJx øF4TIeZSj+nB*A95p݅Mn +Qхv"| ]RB?QFΊ,a& -cJ"rJ=pv;ۖ(.f*j+nU=[LS)G|`u0qLz캷7כqpdPцQľIEǚۤ~|# )Ў]ݟPD.Ay![hZD$!B{(~Y.odx.HhƭTpu?WIi{XvCo@V>VU#iŐ4m5O/+&݋e?{|N^FZ&D9f|*-T|+H%2 \}f`G?dߏKxUէ̄eH $}^3o3㗑{D5zi)ZBsǿN y;.B)A"G5j8j D*y:'YK䞜;jͼ!鬅B{Z,Ed; ܅\؁8JtlVy%%[~.SMyGx#}RI ;.6Mိ͞g2js6Mz8eEkw\_-ATӋ]꾀9f΀$ډ';,9Q۰:|cEp>9=\Dû C\J76|Bа  )ܹ9>E| JV( ٞ*jXGr9ߋIsz/z"v/ >}%JМ$u; ܱ"S,>ۜB8BZN?j<6堶)e9#N)a ц:OX % LtXLmDzk> p}^1\|óB),\ Oۆi~[C]D[{ C"t#u-rhFGcg ti"׿4o;ކ-o^:^1T/2 GZU S̈JE4 sdh<WI8#+܃?(6A8 a$f!z_*FbryW)aÍz26hed1ZNI2$,% 5ӆ=3%ƨt-`5XQM8/W7.9tkc0P_ `6grsyT lͿݵT?1}~Zs9 6 Q4~+ XMɁ|C̀f &SEoUIB\Oڣi'M / hL;/탡M~a%J|.jmNb7Rvm]O$_Thr9ts#hL~B\-g ziktjV=cUQj jF+% LJZ俺n)шkdi/F谲?!x ^fNvN&]%~\nGxm[14)i305-%8a<2Sʏaw's㤫 [āʧ-ZHlf`[J4W'8A?7obV&X {b&]-Zt PsC P]> f'hGF!cL GfV @:vHʿ7r4V9kZ!_:Z,,N9Wɇk@/Δ/NN3vm=ᥫK3F9DyMɿ"SKJ;AoX0UP'_xE:N1:ےi[.(n;rbGX .mPIzI5),[|xچթ]::F30f#ɰ]O^_fpyzLP0Fck[dGD)?f4.:`֒y%t#>{`<4QCL)S; MrﶳNB ~9[>*J\ W|'0Ǚ Kp?O/*d&%& |-li*A/# ز>fʾy1i4jrڅ89<+AP;eEɿ{hbL=-kl_R®/F5w[}oFP,.5/"$ UTCpvW@hu^Eߓkq(xɥ@jmLͤ.7kSaR,=ފhzd'R_"qQzZJ_7 5 Y(ټd_J+$V2v % >;Z&u27("kfHOD]!G~̝u\ᑕUm+\x0Yj+dFspe gr3 uzHO^ nBMƘ*Dp}&;U=9ob oQVmݟޤG)i"IGmCSzˋ6M~rhݎ2;CdurG |+Ҩis!w$1J4rON2OLG?ykkM\|kn_BexW>jK5vW[úmL@^mnKV8ϲ1=c-1* OR*a*1hY^G7*c;|J~WL\=62T'&v٩bPy>rbdeZ,a.,;^ #I?O/ghpG<y 9>mؿo`\ho½{G)0)=ttOK0;d BRV D*vY<mF  7̭ϫ2Tֽ^%f+ٰ@ŘJ);D WEb2/%6y"E'.n$k:D EMby{vo>&ՠmΊ5nN5E с%^kк&6Bz^us48 m^Su uIп%j/ɷ?]#3C ~gcۛrp[XȄqsCаR 5 ׶m |ý%}du|AlazՆ;*RC?0\UKD,et[irp1٬"pmz~oII;^+| z`sdOcbJ_@QesySPQ$&CO|E5C"E{:qc:os2"*N7?(K2 V`# t7$E! 6B.}7-Kփ>{K 7 8alyok򰫵KߥcǮ9D`:qȸ>B&U&gQ\cX7H`g)k|M?5fėSwSr\cx 1 l+DP (iƼzk<'凇F+.C|q?Ha|>jI5lcs_eqs-74MQMǽCs5$I{c:@"K64)v8l\pg)#GѦ`I0̫yd!`yJ܁g;XAP5@5N.BIVA.IlD`" }g4aO+]rEB"jY$WK9wIph) `oٹ>/1@S\7 ɭe%lD]( 2@)6B.󎺁ͅ$&&X8-2 Z'j7E 4£CMJ֣X8*URc59Pߙ* 45yURъdZҩLNEѣeL" `"j[t}-i${)K(Wэb} d'?k̯Z==ta.|"c/`b/#2|J|9񒚩"ȳT=_!O}l7 p;nPpU]{f;iIk_nޤ0no*4ɱ}Q(gl?NW!dK錏 xzQ=4#Y7h^`Cڿ_Ss`)[}_Q1Pa` xbJK$|(r "f;F4z UF{7Tr4 )I|_CXhVxskUwW,Qޫ<.c(CWsD"^,y/,h\s<jc+_ ?h(D/E)QQ3's;R᎜etQ3d'3"ޑQ]Rj_\Hk%.'n}T3ć-C(D`ԒQ3 x&b7! H&64S hh? 8b* OkaN.ɘ^;2T/|웫}&gּA4r7+0$K&qʅc08P.n9܏W?҆ӇAU|Ms%LRm$~ԅ^kW7V~.x3}jkb&+8V@+)JW?9)m+f%PG.SgqkQH\.xKz{L!q3.u3L򆸲 ,;r):=G-:,Gئs%xnD@+*3^dfB8|e!-[^g9tMU$`'?|I polʣ9po=3Ԛ݈Y~VE/ѳfP EBL{XovfH;GK { _d^%HgƾA#̐ $Һچ0~Ylȕ^< דaK&If$T֍zuZ jFvܡiHZFV,)lhHf'ϿL~Ϋx[]M+ j;枳Sc9nՍ6 뎺7YK\" Zzh@ɫHR6j24KsItdO+"$Dׇ0rN^%VP}\@ewZ :Y5 ?f3^Y:bT 2~ #Qz)g >ikաD_ p<Bd?;iEVdhñX% hw)ӦO P@g_yJIK9R0^['__1d>W}S1'?KgY 8QK*^%ChqsuIDJNٸG("nmH4v]f7V7jt'T,ݒ98e.U!6C򳜶DYy;K۫d;/o!i؜S{~f 뤍H*ICBܹNqIT.c,H8!ࠠ}ȇSALZCDǀBdE%ݨ~5MƩ+lF/ހo{ۗvRc_Ioײ_U7[ EJ;G(Z^]'3$fy# q[Ѭ<ٿ6mz`j>)ynwr!XGdaoY0:֘eLۇe4|CW-]d~o|i$~!DZ(!c.ͿFS&sbo>JlEeQ,#uCʷm~>+EiH=V#ubv0W:x>m/! x̬3zZG@ VTl*qӄxt+bn8hbk)#L' ]Zʀ1Ҳ=F=\,*Deu؎45XSe?v5N0)kpCAX$ ON߆#Oc77jvvJ|q4`pH1~>-ʞ vT2IEJ7Il1*lN0Z&ˆ~%5٫Πλeӥq%2^f ՇLR`Ԫ< 0Ev5@qm1ީ\gJl7:Y?33]ίel$ b?jȊvX‰hexqTPiu %臅MH5) =ح_{2f]gO"LC/ՄjUu)/;%{nIq2QƬ6#?p#d[@܃%aCzGގGqIc,*fw[cLkaqg#F͎:!75+ tKT;Ux\B+8B#qJw;> J$ƬrZ,}Re(>Jв8t|DMcBĸw Y\s Na.0J3GA0~`L] Q,heKrQsp3oY{n[yɆ2燎]g47_w6dβZLٰw~UZiQ;XWk 8C#ŸߛVU]`CoG}CېV8ԛ 1~N ." C7_JEA]@>ƾRONS{B$' Yop~5俴LBU=FY:7gXf||3-#a)QB̜2%8 Æ4_J,(+0dgM#Hf E?*[F眡z SD[-gFݣ :ls I(#gDL̄ZL+.vN\6S̼-]8nn% U$BY/B r吕.Wə*;*@2fQYvĝpd%UeUW̩ftUKçCʞcfH}3 N!Ry:5k{D^UP|{Ax@x4xUz[H,Bc&l#w8T&V&kIDDj:b\`5頑Q5*Ee7!!1aocW?:qb ^zV6!᷇wjN`Tֻ]Q7Rj/T)f5ytmpvɯ;%ADIM뺖} u3jPHY/[5I'jzbS;W?A^z۸K=3l<栕jUCfǙӋ6.'/]t#t@^)Kd=7 .σ,d+i!^%f0rg+ew&{lHف JHڸ֫*g<o=F,Y@JLh-@P-Q߸>z(?:)WSHAbvOL~9˼ooRZ ZeEzԙ RuuXuqDyo'h{ิf>F?K(Oji%C*3p>?T4bc¦L{t%D`i pQ0qm}wa)zplUc>>D ]6e_¡IȬT{bWD_!;RAIaj\4B/#tj( -# ia0v4׵ k2ݮ*!KIZlR3ǾoV9"r ! ,4U$mO{lo+T.X'? ŏ^mmlY D8m\Sd rk'RƓpo1 p'X?Co;8:п%`dπȋea5҃h\Fj1#1cOT cnt&xvni\p˗lofLf k6̸!16v!n3xߙǞ/9GwC/!sYPs )36\"S8:Ku'~hWlq;N7B2U.~dk4Dcqm]CIsF͆lq;$ [˽|Ѳ)5XUB5/1Ao y4XVj=^0axʒȨnL2OD'!0\vmmC?^Omt*n.KpX9Md 5;"h2 .ȀRyQ#&s<6&>( N>X~rv1?*phX=2NݳOGd`1*Ɋ@oB]^++I`ۼ*7NIQwP :DD5JpyTݽep/̀墇h>H)[wd TGJNfT0dOFC+m³;7/ )|(oЗW9wPttWL1/ҶUlP+]Z%h'V ͓cnwÈ كˏ=򺧒1%JծYvNm:{Z31h7۲ z\ǐɳGH7 go#}Ԇ͂rS8& Xi?orUtm돲]!h `V0tÓ;$̌A,*8a3yXa"q%q^ݡ:MGՄ9B0J@:VT*a CGCSbYi6R|%f5bCn O܉(qhUcR*q̐:+X:_:q:x ֳD bdB6~kwq1j\:X}AC@_cV,|dH }o9%:ew He1j+3 3֙TQx_,C!6wZ%$uς?NQ`&uӭ*vR^0&_6ڟ=y\\"tB{[,(u59BnM[Χ|Q]LQLa2sPZފ,q w)m G[ă95H&VD'l إu7LLKhg:V+X=`8nÐ5xG;0LO'}nSڥI*B%0g?Gt]8yT0$ O\w8>-]5_뾿Y;J"5vEl=0C\|-r`F?]l{mQ1P6;+`86~K'e(Pap<24作Gg}/vGz"cO<8ۺၵ$)?ET3#cR#ϰx0Ek:=8s)à bgsU$^?Ģi^Z(oپf-~)d 4>;CKT~N7XW ˖Bk~Z5Jr!Q ahmя2k$6j@#=(FαIsNI4! py&x- v}F(_GDN.OB}+vLN}J1Y]Xq6u$M7dKB`j'o ɚG$#" Mwʖseb < g͡>|0x!+ˆwo(2~oOpY%aƭurJUcFmOB8X{l+ԑL1Vݟ7gga$>6jeLp@SabtqJ,qC`: 5ʏQUcYB2݆eL, _7djsnS{6#9=rǿ5 P􂖮ySMENJyCקk4ϱfػ/tHH_~y\^sMNk>Wg W e} {2fMYdG BP@|,ݷŏ/kP7&wyC+5ؙ;fjT cʦO#&}dxA++ ^6bZfdfj! F}"v v7.NbU)0*+H\@p^Y_aIVdd}IU,Ζ2Q~}OaexhnM$z(y<mj8 EC2Rq~D$^`. X5V@O].oCIEՄ5o|37].ڑH tx#|Vftg}qV]\jTJD?` [rl.ɺY]$"fb'g, a<چN@}*dnx +?=ѳ˔?i&mBXyD cӳDzQNl]r6J5:ԡD0LGQҏ`7}*DJ˦|,8%#w"F'7a5/ϵYpLa XDX%_,it6Hmә'83D"&Jx1;R֮ ^S E'rьvrA bWS1 Feq9Ch_xLI\>-񣄢uU>8No#Z4ʐ7f8Foc Di\iQ )n%yp z9ȖfOZJ&EUY}oHguS^s=cZ qBAB|ty ^Sh0ĤfL[#s*ز(ՖFb\*-#baqʥSFr" ?zF|#M8(U-!m{KPk)X‚"K6/)B $Ҋr0~'Kk0P{1era>mR窙:Q\Uho]ëE՜#08ĩヨŧTl UC7V=?tV> W 24lRyE_UI*srp|)xN!Amw@eE `OG% zSa$֥,Q&Ǒ6ۂ/ݙM#cC&+.ݿY4ǘJa͋h::_b&C2pJrڭ`ό`RJG'Ys">!^1ma]Gr]}zJ^in~jCB8r6<:i,LH3Wk^!S DXD'eϤ):t0sV@9N_`^MNw}Gx3a ~d"r;+5ĄϾA]}Y11!hDR>Ou-^B;3 _Ɓ€n ,'җّGGkPyȪ oQ<9_ٟL?mO]D1U*XwaR6L*{H.齅xё9Dd5^ȍ"1t`h YwƵ2G`v'%߀TZؿ3Km-vC74Hz4pB0"$ΤHV\ɬJ6Tc>{?!AP%loqho!@@>bщjE)疉TI2MbW b'7\sHz&d`P9TGfrَ2"UЦe߉ȅh0Yhp_&än$rzY1g ` ~ gFؔA&@XտltCF7v0L9M47Qӧ$bQ9˃9įRHMwMo_VGpPq[q_쇛HtqsP|(wP\iW9]14@RD4=SX=ݬIx50s7UXw|0_8āФqT|rjLwǫ'Ç` N;H"ڱĀ|f[jm S[pwQa,<> =luI}6&-Q<|My[!Eqy0.CI AE\1bolc[mzO=kYVѹJN,}z\{ʴiz KS/{n[k2Mw7S1