cyrus-sasl-bdb-gssapi-2.1.27-150300.4.6.1 >  A bp9|-=)ǴB yzYKyx`Ի^K AS8 6. `J/-.0M$+MD@y)Ɯ=h1ւ4z,4J3SO\2 Kn|O oKESOڮ~naXpD+F/c&{^ TMDG fTaV pAsBxLA 5PYAMt=1nؕ?(m,Zws7bcd62515c36fe50567ad97fdd44e11d0392fda9e138a89e4a9e34750db755b84eeb81a470e109cbf949e8b4a3ed09ec55387cfeP|bp9|HJBͷ%r#c>ZiWL0dFAxIY\ _?pvc]`urwlc~s.Z iOImPk_|Q X8pP 7<"b"). @}8211Y=*=f ${ݸY / 'IDA}c(x{*SCUC@-5lX`dVd.PnW>L;Wu5v90Ke hcLӔlJY(>pA?d , Q2? Us     @Pdx 8  (8 9 : FJG`HpIXY\]^b%cdWe\f_lautvwx,y< z`ptzCcyrus-sasl-bdb-gssapi2.1.27150300.4.6.1Plugin for the GSSAPI SASL mechanismThis is the Cyrus SASL API implementation. It can be used on the client or server side to provide authentication. See RFC 2222 for more information.bKsheep63HSUSE Linux Enterprise 15SUSE LLC BSD-4-Clausehttps://www.suse.com/Productivity/Networking/Otherhttp://asg.web.cmu.edu/sasl/linuxx86_64HAbIbHbHbI1b6c64876e56eab6bb391553640d637495d27e5a521c6ea83040d508f7e84505libgssapiv2.so.3.0.0libgssapiv2.so.3.0.0rootrootrootrootrootrootrootrootcyrus-sasl-bdb-2.1.27-150300.4.6.1.src.rpmcyrus-sasl-bdb-gssapicyrus-sasl-bdb-gssapi(x86-64)libgssapiv2.so.3()(64bit)@@@@@@@@    cyrus-sasl-bdblibc.so.6()(64bit)libc.so.6(GLIBC_2.14)(64bit)libc.so.6(GLIBC_2.2.5)(64bit)libc.so.6(GLIBC_2.3)(64bit)libc.so.6(GLIBC_2.3.4)(64bit)libc.so.6(GLIBC_2.4)(64bit)libgssapi_krb5.so.2()(64bit)libgssapi_krb5.so.2(gssapi_krb5_2_MIT)(64bit)rpmlib(CompressedFileNames)rpmlib(FileDigests)rpmlib(PayloadFilesHavePrefix)rpmlib(PayloadIsXz)2.1.273.0.4-14.6.0-14.0-15.2-1cyrus-sasl-gssapi4.14.3b~`7@_j^;]߶\X)@Y@@Xg@XVhT@Tw@varkoly@suse.comvarkoly@suse.comvarkoly@suse.comscabrero@suse.demichael@stroeder.comvarkoly@suse.comvcizek@suse.commichael@stroeder.comvarkoly@suse.combwiedemann@suse.comvarkoly@suse.comjengelh@inai.de- CVE-2022-24407: cyrus-sasl: SQL injection in sql_auxprop_store in plugins/sql.c (bsc#1196036) o add upstream patch: 0001-CVE-2022-24407-Escape-password-for-SQL-insert-update.patch- Fix build: Do not build libsasl2-3 in the bdb package. This will not be linked to berkely db. libsasl2-3 is now defined as %BuildRequires and %Requires- Remove Berkeley DB dependency (JIRA#SLE-12190) The packages cyrus-sasl and cyrus-sasl-saslauthd are built without Berkely DB support. gdbm will be used instead of BDB. The packages cyrus-sasl-bdb and cyrus-sasl-saslauthd-bdb are built with Berkely DB support. - Update to 2.1.27 * Added support for OpenSSL 1.1 * Added support for lmdb * Lots of build fixes * Treat SCRAM and DIGEST-MD5 as more secure than PLAIN when selecting client mech * DIGEST-MD5 plugin: Fixed memory leaks Fixed a segfault when looking for non-existent reauth cache Prevent client from going from step 3 back to step 2 Allow cmusaslsecretDIGEST-MD5 property to be disabled * GSSAPI plugin: Added support for retrieving negotiated SSF Fixed GSS-SPNEGO to use flags negotiated by GSSAPI for SSF Properly compute maxbufsize AFTER security layers have been set * SCRAM plugin: Added support for SCRAM-SHA-256 * LOGIN plugin: Don’t prompt client for password until requested by server * NTLM plugin: Fixed crash due to uninitialized HMAC context - Replace references to /var/adm/fillup-templates with new %_fillupdir macro (boo#1069468) - bsc#983938 `After=syslog.target` left-overs in several unit files - added patches: fix_libpq-fe_include.diff for fixing including libpq-fe.h - removed patches obsoleted by upstream changes: * shared_link_on_ppc.patch * cyrus-sasl-2.1.27-openssl-1.1.0.patch * 0002-Drop-unused-parameter-from-gssapi_spnego_ssf.patch * 0003-Check-return-error-from-gss_wrap_size_limit.patch * 0004-Add-support-for-retrieving-the-mech_ssf.patch * 0001-Fix-GSS-SPNEGO-mechanism-s-incompatible-behavior.patch * cyrus-sasl-fix-logging-in-gssapi.patch- Added support for retrieving negotiated SSF in gssapi plugin (bsc#1162518) * Add 0002-Drop-unused-parameter-from-gssapi_spnego_ssf.patch * Add 0003-Check-return-error-from-gss_wrap_size_limit.patch * Add 0004-Add-support-for-retrieving-the-mech_ssf.patch - Fixed GSS-SPNEGO to use flags negotiated by GSSAPI for SSF (bsc#1162518) * Add 0001-Fix-GSS-SPNEGO-mechanism-s-incompatible-behavior.patch- added backport-patch cyrus-sasl-bug587.patch which fixes off-by-one error in _sasl_add_string function (see CVE-2019-19906 bsc#1159635)- bnc#1044840 syslog is polluted with messages "GSSAPI client step 1" By server context the connection will be sent to the log function. Client content does not have log level information. I.e. there is no way to stop DEBUG level logs nece I've removed it. * add cyrus-sasl-fix-logging-in-gssapi.patch- OpenSSL 1.1 support (bsc#1055463) * add cyrus-sasl-2.1.27-openssl-1.1.0.patch from Fedora- added cyrus-sasl-issue-402.patch to fix SASL GSSAPI mechanism acceptor wrongly returns zero maxbufsize #402 (see https://github.com/cyrusimap/cyrus-sasl/issues/402)- bnc#1026825 saslauthd: :set_auth_mech : unknown authentication mechanism: kerberos5- really use SASLAUTHD_PARAMS variable (bnc#938657)- bnc#908883 cyrus-sasl-scram refers to wrong RFC- Make sure /usr/sbin/rcsaslauthd existssheep63 16455207152.1.27-150300.4.6.12.1.27-150300.4.6.1sasl2libgssapiv2.solibgssapiv2.so.3libgssapiv2.so.3.0.0/usr/lib64//usr/lib64/sasl2/-fmessage-length=0 -grecord-gcc-switches -O2 -Wall -D_FORTIFY_SOURCE=2 -fstack-protector-strong -funwind-tables -fasynchronous-unwind-tables -fstack-clash-protection -gobs://build.suse.de/SUSE:Maintenance:22965/SUSE_SLE-15-SP3_Update/d4cb4470d050342a6992a1eb94612c2d-cyrus-sasl-bdb.SUSE_SLE-15-SP3_Updatecpioxz5x86_64-suse-linuxdirectoryELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=8a6fc162d51b93aa55c77f0ce4a230d91fbc2ae3, stripped PRRRRRRRRd4Wa;|outf-8f7c98015d46a07c927a5353350fb67c64acc50d1824617b043ec0f369daf78d3?7zXZ !t/'53] crt:bLL ɳx>;1nv´|TdUZPVB@8LϖvCO1{sCJxgw|@(MPlS2yRcbsYr@fzBQFZqv'ճw|2͔Jל9s8ugeD1z$Snt@a;|bCJPT ?z Jepǯ ڿ|Yz FH*>-jnf}M[S`UJ-&Y oӻMVU6G0IR'2~Z<"W%&ޕԪ͆x̋Nlݗ#_xt<|ǧ8_4]=UgwD$g|^$dLN6h;} @.ݪchVx$\m^16a}) Xęv#FtDfՃRFhKtNuW\;9meKoT\xИ^-aP釼@J z=ܝyS33I)9`"#0Q9΄RARt`0(\88"MZ^ <0UbZpʁ3O-,!>aJ-,vr3$؈xz ,d˜km7/,Odsx_0%:}bvlQ~G`SzҶ? JZ*YR^H>{u䖸̧#=zkK G , mF ˍ_zb|:a ù^@Xrny[Ϟs٠`rv&\Oɏ8^Ư 2>e‘r3- 쎚/(7>Ye[a2HN'1!d߫*).>9,EMUEY $q ֛dю%ܪkM4fAE98Kĥħr*~ZV>P=s'hK)Tf43 7 DN[ n AIjک]z^'_ |͘2+h„ٌcMN-)Dz)̎b-qe;֙'룖ީ>^H%2n$CoRFkǯ@MM ܃UBXZE9 ٣8fJs}H.J'iؘHVn:Dq>\Z&WBK׀޼eSG7,6˼ +>3 bT:5@I.Аa!^'{Rӱ ԥ8b񵐽hMBU(G cl$żoݞN(H_7Ő\I&3ylұR_^ik;r~ i3 ]VG--6pJ_LsвЃ?70+!PRDVb7r(It|G_ۈ*L!׽,/? .Cy8Hk9&Jkjaߢ_ fL%Al>}LǏ%28n\ ]Irz,((4/[XHBtm&TvMcv=^ϵʨP0y/GWSʮ>'Nǰ{Zb`#/+/MjNl@cjz'$=YؽLx!n]`Vu*/IvF-35`)<\Y'nP(D)uW)]iAy ~bJ۟B L[PM#v_RГ}9љ B!! aCm%3Dyz A,[#3%ji5Y`Ɔh71} hss(Ag"k 麟lűuT@W,]Npq S6x؂R۳ X\oS#0c;G)~Fox>阃8x`؃>5vLD$y߾Ӥ0r> R,I?88 '5цXG Ut9F%4eU-ь[UY=Qf^^N1ұ%ꨇXY5V,wݍv3$9!NwC6k]"hѸs~k& :NC.Sx} {R/Omm?jEO+Ir84k&^ux˗yUlÅHn65ֻVsp @iQqm=7Ո|AAPZ^j~O3T풳Ķ{Ŕ9G|W۠Yh>-ɦXЫ#}Usz^y.̥ɱ 9o2Wrii]=֝Q,h|ЂB%Jצ^_~?W:`_ٜ,;"0]1jdMF4 ˝OS8 vՄnHg$Pn<1 '/oٔ$$uV8|AN؍"^T0pSgs Pa2&nٳ͠V9echs1B^r`3?G8_G,es?A:|:@r;& v9Ym["byhA׵-F[ #L?q scN0f¡ qխ=u V528EB'K"4O4^pTc"9V\y*?>tp6;`aYaY꽒Hʥ;Eb3Hh xOd,|-{ry]%hbi`K,>Nӥs w|n*335YP=b<^`jp"[lϫ L)~(Hb@ݨ{ ⠷𽵓 c+=r<զ :5ND\zG>OfFtHlSSݹfOiᤑԟn% ^raζsxG"|eoaN㗱7 L^ŇX%'7Qϣ1—VZF\ϑ[+s‹N -պ {xwEG~v arCwS6K( Ec؊$T 7^/Dc:7D0MpKFl!PK]c׉|G~u2Q*!LΈk>"2/Ǡ/&@I zQtpAt_F}rQZ/nl1VJ3jF(_jJv*fR ͈IkLsfc~j]0 UU%i{Ϙ-~b0nC0&+IgRr~+6e|p!D*M6s_+\?)sj Hi,?'9=:tp>D$6M1[a Bp37ݴƼD+[_Zci;uK{ubLEfwVwNk`}˙iNP| *Dw$I' D3hK:%9GZBA6V`s(J 8Rwp0D{!q ڤoڞś`R;Qw<6V:AoЗ v?GD qZJn9?1&3 (/]PITI^6a{GXvT!KmD7QF^ՉMm z. "OtuU 7O+`1YXCoc_wE0twW6#}hɦxc#N~[o)!5lSA&&,VeNjo[Sk6 Jt&݈4N0{OKo?pfKG'IC ?Ew'qkٿIʏ F9?cۑhLFf CڹtEͤ>7 CIGR]iiBw 2ժcϹRoqbKUgm{Njacls䍷1δ~"b\Esd3)W{ODSzD#"W h'.;|1vxCX*M1ypFn-ٯ {yUMA8|(R-on QiKb8XiUYf_i/I j Nibakb21\r3,Ӻ^INqs!4:)aAa؝e/ 6UHI6 sm;jC5 m#BxWdo Vʅ`mjZhN#tYgBϕ) w3%;s cX"'ӚP^Wfn(WuST $)9&k%a?OXĐ8_#KXv$,cc'm”"" c-15QRWJN Z~ >p)c )]l7?yڳ@j7kE?<؈oY2 "#ʬJ;e.=/6밨Ӄ#i4`A2C7%/ 3q4sz)L_mw ƐQJ PUC*jwc34 TjCܑý[(f[WO Wgf#`-E0y'1k3@ i5/L& 5[3}';L!aKF}̱c3nJ2Z۪peۓr;9ݒBN}m7ބlsk y4y~O!'H*\ D{eEo%‚dHl)o6z*A]j6-kũ-덑yB(QG7j] ':$ Ui8:0uU88Ǐ #J) ؓ82ϹхһlndD(.ߜ.LŖGoxnѹ\4,!MG]QI%{ᔻ3nveسny!YfAq>-{p}'&(f \r0|8!5mL:5Z׵nK) rm}%.FLONe5Ng{G]sʁʫpw;pgTXK ,u".h"K3AZK<|1"q#H@0Q FiwG)-;јz=6;X6]NƹMQvbmRNcAr%rQ$[s^2@vd&Oe9uIdɃ|[J =*0Ff1^| aϙm8E)h92 ?I 8bK 卨a{Ro+87cƺF%I}rU?Q0@fs'\j?ĥ'E27陭xx.jC:i f&:,so2(}ybw+ǀ jDT+bQ,FbPo,97I"}Ph}%]>'GThDjSnrwJ=-XJ$\QJ!NB+gS  .oII7.GJXLF<8Y^_i`Z O `㼫c7rKgp>̧N?vAg3JmKfRNk3:@4Sx>>=e\s:uUZUƛ'AO MQ[ upiVf;V65Il$/S\f6>zG,=T1ǃGADIH[r]jzWKG~weəQ"S'p#H@h5ֻV81xPá~)6Ȧ'ȱx2Γc,4Z>;fp?=\ װ=hmd׎cuc'D'W\ !.^w޶ɪ˅t)%DۺHQs{`"o#z8^2 KZsOiaӤ7l4׫UҰuGvɆ.D4P\ĠKGIXT&/1*ʺf/I4iEhsD|Y.9Hgv>/2%pp)P(2ׄR6yg>9iLhH~)>Z0Eż+*QZeo {d1 oL(uJCkOf=G&Y& .8V0t5jԡR9zM .[tZ?{8_]7͇߯>CBo@j"a/\o [LD;:^ܬg$7s.CQMQ_׌} UezISW8ΗFZϟ]YMD%)i: &o:5+@kʯm9$(CavTwLOc,_&)h> 9vWA@r)5D#4˦x魺 m1Car1)aujwltAxvBU!x}RX!r͔0⧔qP L7%skȊacQJrw.F#lF4\mK Z+ kʲ6\9=F1mPJʞ.yCW>}xR^[?']HKʏojKi[pAz)Jdf]E0[Fqkj7^ā) n_kgvѐ0sEv o]ui5 rbY& i(Z*]Hj :urz#?Ei+hcHH€&2n vMxH;ln|LnD l,QflѩhpW ¬ôx9/|XJ!.[KS,"]}mK]a_U Qbတhy~Ɗ:WVL1qSݦ61I736NBI `&! !w:<0|^s Bpݘ-ԕ*hGrqWʄW>:2❴O5m(HKGe\Gjesm|}wpPX$Ra[ b1z 4[Ql I9ĘW٧QTqE;s JhNY;c2 *F 0hz}[.QThQ2Oµuv)ǻ;ZHEk}#eHb].+k*wq?!ezwU\)Ѵ1\<2L`$ E+iR7'3PgH< 8 K axh2.i>rQ8Y2T` kF*{JX#Aq1P\c3G6toz' \斠+弟_#LWqsҺ?(.>O ?ȤzsoT_ ;Fm ѕLb£H޻TϜ̕es =ĠV–X- m/N0ΦcgGv~C0y8j? A{t!z}m5 !bY3Vw` AuAqZ$QܒȊ{v{971 'q{jaUB@1q'8tHnbs[bKc{RxFi00{ָ=91KƚAM5w4*%>Kot%+:1\mmR/!hRe2 *i'U p@?`vj;8{plIя.>\T|k;ĺjþN3K/j2'EY M)&豩qQwF LJ|cO `!< \E}.SKBF)g e]2=~Ȯ+E+%4ߑ YzN/kZ(?++8hkA[xZ_On;Jن)gaB jIňr7Q., .:.P,fܰ:h5]+ >pR*+G,͐)*᢭;m;:ӈ~žJlyYLxz2V{IcZlJа69pvT"a˶ .Ug6fbpHӮG+Oh|l }"y0sPΖ6WS!vʙ},F+Q)Q͸PLC1.+;$UVܰPY8\8VPDS|Źҳ.YhFka:=>1bz2ʚdRcRsNn8`Sk DG#\K,d 8kp"!Y:s :Ǚ7_ie'ԣH?4$] ¿B3Snj̟*݌5HS"} -Ra6PTIۉMh68J6' %3?_uOL1_"Ei!ѳWFWi!!+w]"4 1fmIkJɑ>5F<\ NB ĝ:z~Z^(.Y8z @L =i6/*e{~Bφ*8HdR'L\n+ڨRSݾL@eH$%GM ic_*9 R/Kv]`YZ?ƃ ׻r."3 0\t"#39~ʍ*oO= Uc{E*ѮSv`gQ)vl$"ݰDI<ܮ] 蓹ʱN=x"l[a18YfIpMwqw ~Br9xm#XLfI{9'NY\m%6'T sKqEC g\;qr`->8(UYMWIrfubNOG(^V4>Ͽ?#2atlBO-(̧[\%͸:{xDPEfyPEf h؎(nJ~#L?'IM&G3yZ9s `THC7oTK &va:݂j;MHc_}@ZRG/t7l].? C@|$UO%h4Җ 7h~!YaЩO 3.ND"L_y>U*nTk:Nα3K&Qי' 5G"+ I,&q -Dz֊]9fM~D@N1\n v#Ş x Y3u"'H+cYw (SoIR"1~ r9/_^@cF`&չ~ؚ]jNBdwf_"Wί󏺷s6X⟳f򱅖l&1KkҦdjde7 ;Eu~y{<;6]hy(P:]\gxHG7&xנ,CBkBիej d1cg_ɏ[D-ʶLQEQ|}_# 2Ik#zv;nbR+C'8V.LU^f[ FbfOaH.dBI?[xe[zmgP+e xU_2[5ٱVe(t+ۯs6i iQ\nli{ݞ!RG. ¾1>^f׆6Txti6=8UрAY5@a-h;4}Y&; ctEI/c:PU>vⰻ8x2*8ٶZR>z+NSU?A֩Z#6^Hg5/:mѯ΁l(-z_@ڥp-k{6JhPGc/-@RWׂ}2glf[:3$ F͕S&,vZq^G5{nJ~8pE+~*{jGR@7upVh}:ľ99nV{JrT[>rhd$?%Yƿ)f8SC3cB8`Ÿ|/\-o5s߹5e&,"]%J-^~޺Y#:[|ސ/^:MFLMםQ 䙸z^\rgb}޽ƥ9\}{Hq]K+طBĈbT]կ;@SP{]ՄzU*P6gv9j)2lw^A޿7SgU䠯BպP"eQ9c}9@~ G}-`$vTY~jїF)L8v+8$X{ՈaKS;l5fڭ޵O-\XYfeT`Q( ^:ۦ ě`G3ڞ;m[wre9CeMPfkMLv7OWkY~l-Q^xDZR ?JJ/?5?A`13!ʷP0V7s$oUlzbc kO~POǗItYi8AlFܢQYØKx )OR@j7|0X+UrBY ʡf(Is o{wYMŘmg0jjvU YZ