cyrus-sasl-bdb-plain-2.1.28-150500.1.1 >
A d
zp9|\U "AH]1!q@~_ߡ`XnSK U}utʔP CϮm
iuզ,!l&s۩ !2P-NI}NBik3*gɐqܷuXL&E), 1҆pԣӿ± GQ-uSŲk/)qeI,T?G^ {\pbz
?4Gqa05a920da87ac7ab97ab7d56db62a32b20e45a98 c71fef488e9ea3086cf4f9b238a64ed114e29a41ee8ce1c103209a0c10194470 ;x d
zp9|Gyj8v: u1l]|饒Z=4PiI3
ʒ^(Tp8_? +8#H2 Sƀ56 !ik_s0W$*Id|5'Z\g;}Ou&S˗;̏?Yki4 v5e)u paWl"RUnBLCϪ
̱Ѷ>ëo+n;#| :j-͟t+, d=4R wS.}~Td# KT > p A ? d ) M
. ; Q o
@ P d x , B l p ( 8 9 : F G H I X Y \ ] ^ R b p c d y e ~ f l u v w @ x P y ` z | C cyrus-sasl-bdb-plain 2.1.28 150500.1.1 Plugin for the PLAIN SASL mechanism This is the Cyrus SASL API implementation. It can be used on the client
or server side to provide authentication. See RFC 2222 for more
information. d
Dsheep02 HSUSE Linux Enterprise 15 SUSE LLC BSD-4-Clause https://www.suse.com/ Productivity/Networking/Other https://github.com/cyrusimap/cyrus-sasl linux x86_64 HA d
?d
>d
>d
? 36e013ab94d75438662bbe7ba583f442bdb8e8e3d05db2630fe8c18e2a8d0ea8 libplain.so.3.0.0 libplain.so.3.0.0 root root root root root root root root cyrus-sasl-bdb-2.1.28-150500.1.1.src.rpm cyrus-sasl-bdb-plain cyrus-sasl-bdb-plain(x86-64) libplain.so.3()(64bit) @ @ @ @ @ @
cyrus-sasl-bdb libc.so.6()(64bit) libc.so.6(GLIBC_2.14)(64bit) libc.so.6(GLIBC_2.2.5)(64bit) libc.so.6(GLIBC_2.3)(64bit) libc.so.6(GLIBC_2.3.4)(64bit) libc.so.6(GLIBC_2.4)(64bit) rpmlib(CompressedFileNames) rpmlib(FileDigests) rpmlib(PayloadFilesHavePrefix) rpmlib(PayloadIsXz) 2.1.28 3.0.4-1 4.6.0-1 4.0-1 5.2-1 cyrus-sasl-plain 4.14.3 c@b(a@a@`7@_I@_j^;]߶\X)@Y@@Xg@XVhT@Tw@dimstar@opensuse.org dmueller@suse.com dmueller@suse.com varkoly@suse.com varkoly@suse.com varkoly@suse.com varkoly@suse.com scabrero@suse.de michael@stroeder.com varkoly@suse.com vcizek@suse.com michael@stroeder.com varkoly@suse.com bwiedemann@suse.com varkoly@suse.com jengelh@inai.de - Do not set directories inside doc/ mode 644; otherwise the
directories are set 644 as well, which means no files inside are
accessible. This resulted in the past in doc/ actually not being
added to the devel package. - update to 2.1.28 (bsc#1196036, CVE-2022-24407):
* https://www.cyrusimap.org/sasl/sasl/release-notes/2.1/index.html#new-in-2-1-28
- drop cyrus-sasl-bug587.patch (upstream) - cyrus-sasl: prevent fail of %pre when berkely db utils are
not installed (seems like we want to use this only for upgrade
so no Prereq added)
- move license to licensedir
- remove use of RPM_BUILD_ROOT
- minimal spec cleanups
- avoid bashisms - postfix: sasl authentication with password fails (bsc#1194265)
Add config parameter --with-dblib=gdbm
- Avoid converting of /etc/sasldb2 by every update. Convert
/etc/sasldb2 only if it is a Berkeley DB - Fix build: Do not build libsasl2-3 in the bdb package. This will
not be linked to berkely db. libsasl2-3 is now defined as
%BuildRequires and %Requires - CVE-2020-8032: cyrus-sasl: Local privilege escalation to root
due to insecure tmp file usage. (bsc#1180669)
Use /var/adm/update-scripts/ instead of /tmp. Clean up temporary
files. - Remove Berkeley DB dependency (JIRA#SLE-12190)
The packages cyrus-sasl and cyrus-sasl-saslauthd are built
without Berkely DB support. gdbm will be used instead of BDB.
The packages cyrus-sasl-bdb and cyrus-sasl-saslauthd-bdb are built
with Berkely DB support.
- Update to 2.1.27
* Added support for OpenSSL 1.1
* Added support for lmdb
* Lots of build fixes
* Treat SCRAM and DIGEST-MD5 as more secure than PLAIN when selecting client mech
* DIGEST-MD5 plugin:
Fixed memory leaks
Fixed a segfault when looking for non-existent reauth cache
Prevent client from going from step 3 back to step 2
Allow cmusaslsecretDIGEST-MD5 property to be disabled
* GSSAPI plugin:
Added support for retrieving negotiated SSF
Fixed GSS-SPNEGO to use flags negotiated by GSSAPI for SSF
Properly compute maxbufsize AFTER security layers have been set
* SCRAM plugin:
Added support for SCRAM-SHA-256
* LOGIN plugin:
Don’t prompt client for password until requested by server
* NTLM plugin:
Fixed crash due to uninitialized HMAC context
- Replace references to /var/adm/fillup-templates with new
%_fillupdir macro (boo#1069468)
- bsc#983938 `After=syslog.target` left-overs in several unit files
- added patches:
fix_libpq-fe_include.diff for fixing including libpq-fe.h
- removed patches obsoleted by upstream changes:
* shared_link_on_ppc.patch
* cyrus-sasl-2.1.27-openssl-1.1.0.patch
* 0002-Drop-unused-parameter-from-gssapi_spnego_ssf.patch
* 0003-Check-return-error-from-gss_wrap_size_limit.patch
* 0004-Add-support-for-retrieving-the-mech_ssf.patch
* 0001-Fix-GSS-SPNEGO-mechanism-s-incompatible-behavior.patch
* cyrus-sasl-fix-logging-in-gssapi.patch - Added support for retrieving negotiated SSF in gssapi plugin (bsc#1162518)
* Add 0002-Drop-unused-parameter-from-gssapi_spnego_ssf.patch
* Add 0003-Check-return-error-from-gss_wrap_size_limit.patch
* Add 0004-Add-support-for-retrieving-the-mech_ssf.patch
- Fixed GSS-SPNEGO to use flags negotiated by GSSAPI for SSF (bsc#1162518)
* Add 0001-Fix-GSS-SPNEGO-mechanism-s-incompatible-behavior.patch - added backport-patch cyrus-sasl-bug587.patch which fixes
off-by-one error in _sasl_add_string function
(see CVE-2019-19906 bsc#1159635) - bnc#1044840 syslog is polluted with messages "GSSAPI client step 1"
By server context the connection will be sent to the log function.
Client content does not have log level information. I.e. there is no
way to stop DEBUG level logs nece I've removed it.
* add cyrus-sasl-fix-logging-in-gssapi.patch - OpenSSL 1.1 support (bsc#1055463)
* add cyrus-sasl-2.1.27-openssl-1.1.0.patch from Fedora - added cyrus-sasl-issue-402.patch to fix
SASL GSSAPI mechanism acceptor wrongly returns zero maxbufsize #402
(see https://github.com/cyrusimap/cyrus-sasl/issues/402) - bnc#1026825 saslauthd: :set_auth_mech : unknown authentication mechanism: kerberos5 - really use SASLAUTHD_PARAMS variable (bnc#938657) - bnc#908883 cyrus-sasl-scram refers to wrong RFC - Make sure /usr/sbin/rcsaslauthd exists sheep02 1678621764 2.1.28-150500.1.1 2.1.28-150500.1.1 sasl2 libplain.so libplain.so.3 libplain.so.3.0.0 /usr/lib64/ /usr/lib64/sasl2/ -fmessage-length=0 -grecord-gcc-switches -O2 -Wall -D_FORTIFY_SOURCE=2 -fstack-protector-strong -funwind-tables -fasynchronous-unwind-tables -fstack-clash-protection -g obs://build.suse.de/SUSE:SLE-15-SP5:GA/standard/1ec60b33aba4d4fee20f00e86d643254-cyrus-sasl-bdb cpio xz 5 x86_64-suse-linux directory ELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=de8777938813d82dfc863fb8d08f349181dd838c, stripped P R R R R R R {lvG,\Z+|R utf-8 02f8962fb1e2280196747091cb313400dcf3290fd42c70f40bf58ee536fac752 ? 7zXZ
! t/KS ]
crt:bLL
Vs̋G_ nnݍ@ i& yOOީ 0Q4l4{h+m$0o'ėm90=w$=?;hra]|#(Z8=~7(eʋuk&, ;fqYypa¯c38sm
v.oHn Y_LB{tIUpJM0xF`pcV
PXjNC\ #}fl[TE:2>]R ,Cz˵'UӵU,$1wMВgdw9SO[} ?ye7QUvtjGpF8Lx1Yq2a
U|Oۭ$.s< r7NQ_?y Y@'G|EXة4"r!Z-2n ޠqE$X[,_XᢥKQV(x:&E]
H=￫ d l3#ZvCL݄Fݍq4/C {}^
^60yԮ`$PT cqˉ
|dDEFcr5a3/{2/ C+QOCGﱫQ ?|AyA!Iy
`DE- "Ǚ,WUq&
*@)
;~
B 5|vV [ [,X5gei;!W#m;:GU#IReOanG"81ss%rp R_ldFk ;[E!=:tp~ RG|(IV2 =gӠm賄&l8~es !s1 0jרoKK6 r:t#K5MҰWsC s`Nei26oJƦd(ZHfU - -hqESSj)"em%i[0:(4 Q8삺 > `N< *X'QiZyd\ :LM Mxm OqPx܇o/ ʜJ Eyr}C!kELV_]:&O!Ϝ@vяXfpnL6w4{I 2&WxMȢ9:+1֛dKqIU&t9'49bwiM&\Q%{W4ġHXx1-t -f
mӹQt9VIe0`ƌ w}hϕڥp@4?_;߆KH4\Ɖto-Eإ<
(YaCKKQ ef͖3&h@k.?t
љ<[ B+ʴNՓ|&\k)\V=Mдʂvʠb vh y [oqere &rG&,|40Nk% Ȭx)F1K3;$Krd+e D+3?j=Wq R>7|-YlҲ Y3w(&mbF`:SH[I*|x<[zD哜4W+qk٬ᯏQH CϪG \3y u k/G Zq*4 m*I(}Omj^y/m`mdY'Za Ɨ_C1M{K~{1g&QӹZ8 4z
jz6
YV%N:;.
y 5 !KpRvjt3*S[r]f Ig![[j\q&n=|7}~`Ժw%tU4FNq2D9()TN9gܮp"Χ^ۍb6 =H IXk#(ETl|7C)
k'ss$$+{&u8 =UJ٢aOԘkІV1l&zwWCR^lE{U]w k`& GL] rdC9$K:QCPj M7(S
=8pQ -G {}](9`s?))( >N#Bb #pAѮVޣQm:8+fi [cz 2)pn,mP P8,0TqHaAeV A Aʇi<{
&a`sVJbW"AHTffis0-W
F(d W}p/K#37H 1zoFwKs܂o'Z)8F%sgVݪ)zZ~W tqHt׆{f rpzQL}
\6pȦ~5ᝏ* Rlw)$hWNz%2=e'¬#[䷐ QݸG.ëQ!o֧ m Ƹ QU@ _9JuTהMp<4]4 *jX/İi, mR
{^Ah~ J,B(.8`|p ˕PR Js>ߍ %;E&[6Ý{gKxbLorB1m>p馘 ˩:MjJғicx'>" 0?b\#%.z9ML䅓
(LbK26S[DgY%CLJr՟kDGdRcNtzw,9Yvpm[LPZ:~aC|\d81֟D!=o֥vy9i[ ،SnDWmlw
8=X-ۆ~M7=$ö5i*x~tkOޑؿ0̵w5OAh.\Ne:9 bGTHj:!Р8WJ=Rȶځf%#B|v |"/=Em6ŝ0Pt ظU^u:┸ $A,)mT6
fL~ӤR8Vk4LB˔1u }Z_$r܁jRLpF[ N7;YuIr#Q~bOc:6k7ƛ)Qj3sDKSLH{rVֲy 3߅5+ՔK 7:X&倶`jku 0ANΚ^6k Ԝ'
n {8ccfWz-N6iޕYb40jd+F C;:ڗ}6Zb;a#RI*[g#R[#ʦ_A_3[Tޱ!9w^=c)Yu22d|-?
Yz?Bnʧ.I|#[+uF!!>Y"B<;gzkzv N 㡹O XAD 9ـV -ll& i2G|Z,ee'¼
Si?)^55
I]RHʟ j|S+T3 LQyPEym8
>+0AYo\Po3lxPɮZ^me
G8l;wqC85df's"_=ѳT K(v/i\rxΝ@Q H1"[v <I3 c& lOk/FM7W־C)G Y91cmgMٜ^40 g{ )p>{K\IΔn=y**U;1;ml} PބחT U: L^n-:LvɴP6J/B8~y _N55.PBȺ\
DdRtEl7eڎ LC ї^1 H0;⟝=-JA!,L tDle
U.=doJ|[0 v^h Wms(벎(m-
Y%u n-W+؍
9<= |'C
:m
\ú1:fqr,Z! ~,_`d\m$
c_R++º{
7-:E T\NA!F1mtH#|l(dh=Fz'el |?xS23v::knw
]9X^jx6@nMrXS8;Vїn/8NP *03.Y^W 'gT3 ;jpĜtw`7 #kݷMbA/C8g2
۟3Qٲ]_ b·H,{ v'%Z|l+-Җ0Zl,t+{ 5 7`jY(9a(ik4y?_:JNs40FQᦼ/9oyL/j4N# 0 y>#LCOU-ݍj`4[}Ozel
WĐZD$gyTqpN"ֿ, k/[5{Cq <$wN ;t" uq x݈S>WwU TULz3l3Α+fP,lQG@q+%`e^͚ C99|X
qFC6h U3tTKmt,F AٻV-T%f\D{ Q՛2ubq8Z( A^ѽkg@NFl hF hK) 5[7s&+_fndUD bkdiJr{]o0WtpkLE_HUHcLfzV j Dc4Ua}?u LŷZO.3R_{@?J] #"7 C4krFqN=pnByR%8e^HY ergF1P637n`2TO}\*<+1xʂi\^8m,
*`lVHȔU"Kmh?L
/k&JH4 A5]5)_@LjyTsvPبیVr^yKbĜCTCeg,ZiR8Ub*$0a/N_P.d =26Sw8UCR#AA#B^`:٘! gxyR{:n Z8^Oھ ~v%RkuQZ}.,joGJpv*|`y̰8Béǵo!b0AKaDic;~`j N+7X^aj"T"O^z)3Q>잀6.7Ŵf"!ZiZH)f'{{X1=9ߝ@<\)#pUVk`r"i]}i7 ݔMf=6yI MG|}%=|Yi6HK;f80HuҞȟs!sN֠2 pF]fB#cu( [I,/XloIQEC11Argho[Q~xՕ c!.k
)hkAZIC:c MxXaG̛Vp b䡂b`hYk`6 Gpsd;0 :Ԗ ;m
YZ