cyrus-sasl-bdb-gs2-2.1.28-150500.1.1 >
A d
yp9| /w6{,xظE
BdY64䶕OG/1@|+8vX/_\Se% *aCN
QO4G(֗T3w0DH0XU &394@cGJ-|)䧙F]B {î7waY[YMlE/ƕ
W?m
xm_Ntl45
.Dak:/ H o25B/ф*
S9]!ʹ&t`W ZG\bW36ed47b308913b905be324feb260512743b1c430 965fb20d1a7fdc440c7eb734841de59bd2a9060cd0c9998179523261333ce6f1 ST d
yp9|v8mq$)|-0e&5*I sb{<'P2(JC_=FEC)2Em7PՈWT[ l- wF ̩B~=>%((FzJfi5 :ےQS~&Ʋ6ۅ Tp[?|# PՃcZcv] Sz ΒV;PS/JfF; oHHbbsyȑ d > p A , ? d ' I * 7 M k
8 H \ p
$
( 8 9 : + F G H I X Y ( \ P ] ` ^ b c S d e f l u v w x x y z C cyrus-sasl-bdb-gs2 2.1.28 150500.1.1 Plugin for the GS2 SASL mechanism This is the Cyrus SASL API implementation. It can be used on the client
or server side to provide authentication. See RFC 2222 for more
information. d
Dsheep02 SUSE Linux Enterprise 15 SUSE LLC BSD-4-Clause https://www.suse.com/ Productivity/Networking/Other https://github.com/cyrusimap/cyrus-sasl linux x86_64 A d
?d
>d
>d
? 3a792f33a96a606049c8b5def3a35c2559ee8164cfcead99958231a42ee09444 libgs2.so.3.0.0 libgs2.so.3.0.0 root root root root root root root root cyrus-sasl-bdb-2.1.28-150500.1.1.src.rpm cyrus-sasl-bdb-gs2 cyrus-sasl-bdb-gs2(x86-64) libgs2.so.3()(64bit) @ @ @ @ @ @ @ @
cyrus-sasl-bdb libc.so.6()(64bit) libc.so.6(GLIBC_2.14)(64bit) libc.so.6(GLIBC_2.2.5)(64bit) libc.so.6(GLIBC_2.3)(64bit) libc.so.6(GLIBC_2.3.4)(64bit) libc.so.6(GLIBC_2.4)(64bit) libgssapi_krb5.so.2()(64bit) libgssapi_krb5.so.2(gssapi_krb5_2_MIT)(64bit) rpmlib(CompressedFileNames) rpmlib(FileDigests) rpmlib(PayloadFilesHavePrefix) rpmlib(PayloadIsXz) 2.1.28 3.0.4-1 4.6.0-1 4.0-1 5.2-1 cyrus-sasl-gs2 4.14.3 c@b(a@a@`7@_I@_j^;]߶\X)@Y@@Xg@XVhT@Tw@dimstar@opensuse.org dmueller@suse.com dmueller@suse.com varkoly@suse.com varkoly@suse.com varkoly@suse.com varkoly@suse.com scabrero@suse.de michael@stroeder.com varkoly@suse.com vcizek@suse.com michael@stroeder.com varkoly@suse.com bwiedemann@suse.com varkoly@suse.com jengelh@inai.de - Do not set directories inside doc/ mode 644; otherwise the
directories are set 644 as well, which means no files inside are
accessible. This resulted in the past in doc/ actually not being
added to the devel package. - update to 2.1.28 (bsc#1196036, CVE-2022-24407):
* https://www.cyrusimap.org/sasl/sasl/release-notes/2.1/index.html#new-in-2-1-28
- drop cyrus-sasl-bug587.patch (upstream) - cyrus-sasl: prevent fail of %pre when berkely db utils are
not installed (seems like we want to use this only for upgrade
so no Prereq added)
- move license to licensedir
- remove use of RPM_BUILD_ROOT
- minimal spec cleanups
- avoid bashisms - postfix: sasl authentication with password fails (bsc#1194265)
Add config parameter --with-dblib=gdbm
- Avoid converting of /etc/sasldb2 by every update. Convert
/etc/sasldb2 only if it is a Berkeley DB - Fix build: Do not build libsasl2-3 in the bdb package. This will
not be linked to berkely db. libsasl2-3 is now defined as
%BuildRequires and %Requires - CVE-2020-8032: cyrus-sasl: Local privilege escalation to root
due to insecure tmp file usage. (bsc#1180669)
Use /var/adm/update-scripts/ instead of /tmp. Clean up temporary
files. - Remove Berkeley DB dependency (JIRA#SLE-12190)
The packages cyrus-sasl and cyrus-sasl-saslauthd are built
without Berkely DB support. gdbm will be used instead of BDB.
The packages cyrus-sasl-bdb and cyrus-sasl-saslauthd-bdb are built
with Berkely DB support.
- Update to 2.1.27
* Added support for OpenSSL 1.1
* Added support for lmdb
* Lots of build fixes
* Treat SCRAM and DIGEST-MD5 as more secure than PLAIN when selecting client mech
* DIGEST-MD5 plugin:
Fixed memory leaks
Fixed a segfault when looking for non-existent reauth cache
Prevent client from going from step 3 back to step 2
Allow cmusaslsecretDIGEST-MD5 property to be disabled
* GSSAPI plugin:
Added support for retrieving negotiated SSF
Fixed GSS-SPNEGO to use flags negotiated by GSSAPI for SSF
Properly compute maxbufsize AFTER security layers have been set
* SCRAM plugin:
Added support for SCRAM-SHA-256
* LOGIN plugin:
Don’t prompt client for password until requested by server
* NTLM plugin:
Fixed crash due to uninitialized HMAC context
- Replace references to /var/adm/fillup-templates with new
%_fillupdir macro (boo#1069468)
- bsc#983938 `After=syslog.target` left-overs in several unit files
- added patches:
fix_libpq-fe_include.diff for fixing including libpq-fe.h
- removed patches obsoleted by upstream changes:
* shared_link_on_ppc.patch
* cyrus-sasl-2.1.27-openssl-1.1.0.patch
* 0002-Drop-unused-parameter-from-gssapi_spnego_ssf.patch
* 0003-Check-return-error-from-gss_wrap_size_limit.patch
* 0004-Add-support-for-retrieving-the-mech_ssf.patch
* 0001-Fix-GSS-SPNEGO-mechanism-s-incompatible-behavior.patch
* cyrus-sasl-fix-logging-in-gssapi.patch - Added support for retrieving negotiated SSF in gssapi plugin (bsc#1162518)
* Add 0002-Drop-unused-parameter-from-gssapi_spnego_ssf.patch
* Add 0003-Check-return-error-from-gss_wrap_size_limit.patch
* Add 0004-Add-support-for-retrieving-the-mech_ssf.patch
- Fixed GSS-SPNEGO to use flags negotiated by GSSAPI for SSF (bsc#1162518)
* Add 0001-Fix-GSS-SPNEGO-mechanism-s-incompatible-behavior.patch - added backport-patch cyrus-sasl-bug587.patch which fixes
off-by-one error in _sasl_add_string function
(see CVE-2019-19906 bsc#1159635) - bnc#1044840 syslog is polluted with messages "GSSAPI client step 1"
By server context the connection will be sent to the log function.
Client content does not have log level information. I.e. there is no
way to stop DEBUG level logs nece I've removed it.
* add cyrus-sasl-fix-logging-in-gssapi.patch - OpenSSL 1.1 support (bsc#1055463)
* add cyrus-sasl-2.1.27-openssl-1.1.0.patch from Fedora - added cyrus-sasl-issue-402.patch to fix
SASL GSSAPI mechanism acceptor wrongly returns zero maxbufsize #402
(see https://github.com/cyrusimap/cyrus-sasl/issues/402) - bnc#1026825 saslauthd: :set_auth_mech : unknown authentication mechanism: kerberos5 - really use SASLAUTHD_PARAMS variable (bnc#938657) - bnc#908883 cyrus-sasl-scram refers to wrong RFC - Make sure /usr/sbin/rcsaslauthd exists sheep02 1678621764 2.1.28-150500.1.1 2.1.28-150500.1.1 sasl2 libgs2.so libgs2.so.3 libgs2.so.3.0.0 /usr/lib64/ /usr/lib64/sasl2/ -fmessage-length=0 -grecord-gcc-switches -O2 -Wall -D_FORTIFY_SOURCE=2 -fstack-protector-strong -funwind-tables -fasynchronous-unwind-tables -fstack-clash-protection -g obs://build.suse.de/SUSE:SLE-15-SP5:GA/standard/1ec60b33aba4d4fee20f00e86d643254-cyrus-sasl-bdb cpio xz 5 x86_64-suse-linux directory ELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=e8b01547a70e16983ef5ac01cf3e95296bd2fc2d, stripped P R R R R R R R R {lvG,\Z+|R utf-8 99ae7fb13891f1b3660551e74cfc570a3ad99681fe9eccb8e47cbc8283ff442c ? 7zXZ
! t/c4]
crt:bLL
Vs̋G_ nnݍ@ i& yOOӎFX&x4IHTT
22gC0s;;F
c/[\^#}Q*^ҙnG I* ^fًA .(UUxzt#gY|>Սy\L{)ՍyOk̪3p҉
p06a(186| J-ې,q3d; T ~d|gճ92ߢ,mn0}B\~Ft uqBq|Gͳ A:g+-Gjv?HSGp q W$}- /}#'GFzrK<>&W8A+("aV7vW
ˇJ x*VSh]r×Y=ŘnMڰFhtz+G Bai.KAv#QX1@Ws7 ЎNjC M:fQe ӕyr@V>
.Y jrQ 5ؼ4 ycAXd'ߢ&wd &KW')T Ց WEH4w]\kӼV>'I%-|Ų6Nn3]61U+Tt%k B9^v\qNTN S[ۑM0* eU,#g&-5 @9:\g`f
A "Ež|9L)rtobd`Vݸ^`܂om
pBdu1-Ɨ =}t5O,ǎ΅Iw14Oh<r_IJ+nPV,ng`fJx:,
&Oj@R`W0WA? x9 pEH^f.@O 1.$8 (4ɤُ_:>>0DN
sg֠oMkMW\?Z7)%+|ݹ @69U5XH}[` >O%RBU:}2 1rL̈́.
4y Q{9!z>oUUQ'H7Q(_,:$βuSD8t.~q&LgrTܢ_>"`
&}K_*T 4 SȬn* !\}s3SpQMR ~Ia˞E*Jc^1n qI{ n/jF-!c D-d>}kyo=e" (MOǰRP^
{~Za/\c3y_C4y Oe+WҐK3U^TGW< W}- Fn N &XMKY["1 \O7T#yxkKtoFb]Dt!0 7A`[`B{ )YE4xD-r
ǣkƮMvMױ`bgm UB|> 4Vd,= Q3qrs>!12ŷ(̉q*ةe\:-j7@dXGV (76z LyRNO:y<(mcA'ZO!eޖ٧f8 nJAXQ)JA]ʺx $Ab-wEU&߄ȓta*hvuÈJzX۰9ˉ!nTF H/Ug裮T5ņTbU Y"ԐO9,u Hn5 k
A;~z34究1n?
^<*lwpNtnrƿs?c >X"֫q9aF~Mu` R/jJYn%Eg9E#a@1X*y sp94%wѺ ٙ$zvw]
!Sjy]?xR=TmklQK(*G٥} {W(\̈vs/7 C1a^ȉK#;\bsfl ?NLZ JXrbl7nzonlx)x7O+YjlJ-7r=I D,7%! rE>un.[exdӉ@C#vp#|"ĹRwzEg!?XņNЍD
J 2oӋΙ1onW^7vIu cT<d!6q @jglj{
y/YKR´\(]J3~wGp/2V{. #hKv|^_ooɤxP8]F-]>fo9o0҉ aMa;^8?j͟*Kty+Ly% *1 } )3T! i*E 0=QmxJV;j^ 7PE\Ǯ D]?NlehlwNGruR>pJ})=XXSY6uYM;[uGEpG9ѦuW
w±=vH=%FSv 6ETvD,e)|!r "p/^>Yx[xbM7}w7vԗ'*c1s ,@SھUf G
'eX3[HwFQ俛$sCǵQBxlMп_#/$QyvW%pzd RڀظEs8jk_!+4bͅߗsʼn $lۑėЏLX[&v+Eϓ3j4/M_P LڱGK%ʈ_rK+SV[j\7yOD$Q<,L趾.$x[ fI1R v:lt⨣|WA١<; b" g^Zdl=4G:>û &Swdi8 O ] RʣCLͅ4^}ι {D0*K| =続~.kL\ mY9zۣ[C tE;7)IG eӼ*!` \: ں*s$3#[ 9WԀAFҸ9ظ|֘
QS ^f(hٙ,Gz7 %Q:4q"ܝ Vm(DQlj: 鸀SX ګh[+Pv=Kڱ
6{ zxqlf{d߱>?]F 6#I2j& w&k7ɨ?O+ҁZ!`tr3G [q4?&Bһ2O7Sqb]R ܒL Aex ӶOc"igW峄iWn7 6EYyvH<ӆҬq5_+9hh)kl_[Ww`q[O[ L6[/;GPKS /?H,+$ݭ\{}A8 P 8
?o%e(YlǠ&
[hA!T"7M `Sqw&cxb{0G}Rhq fJXIN8p;j)2q] Sए,Oiu% % wgcLE#V ~@)\ N^pPRHٺ|Lbbehpܓ IBz7mr/+R \[hs+}nRoAؚ"E~axEEl>N9z[jL
:{7 WR/yWF:+<",kƜ0fM8>Av+Å|{duCk+=ӴAlUڵ(h)-[a_+٭̀ r#w*c 1C{B:X7yF-0)Uo=) I :mWĬq濙 (nEc0%6B `ߧ5bPCTiL;\!/"W=
вpt!l
jIU(' ;xG70ÕD 4M^0U?Èo&hyP
ZF6\OG R:k+ Ж9gZ q]w7vTg1s@nO@az0+ w XP nq4}jݮgsOjDgeaF~qhb
sU;8u7β|r"4y ҵ5;1!ƙ / Bd[9:6I7 wMX.~)1lkx}o؋
d@h#_4\IM3(X-R ځ6M6>V*"{z'ggO+1֝o57ߙNزϯvx_ܭs[qK|`
2JGw~Q)}]1NE:tfgo{NqlةY?GLDOaOEQ=8&ِQS)!j' :'R_b*jݹSo@fwdoo6'"&Wb.hnGYۅ~k("QC0E^>Uԭ bȨ] cS>GƔ o{S
[U I*'g6״_o?hoZg&#r ^oj|&J )=TNAMb3̏7ZA+ Hhv!˙|8ܻDP-ovg판Ld{qO RW^;) hBIP3I5iDKT-Fz˼Vw#}`}D\HUÑ:&Q1۪&3PM15" j>q8
5 Kh`<_NM'J2hH&B < DNUWRuhZ& |}n2Yynkqt^f@^*5oxO@dx 芓+ק/ 3) 1\[W92hӠ~Fq3-0-J =9{tAs-` a9 t#pT.B
4Y9Wmx2R
uR%ЈQ u"~
3Xn2 /gDHA2
#T{cIȋ5I 7Nj(,p)CyhF7 !pxUukGrGPmF@zJsM D3AQ R2@ |3[j7~0wt%;ҔV
F'pnPB
5ПQ<૾(B۸ S4u o˨# hsYKNjЯ ]TH8=%z?́ϭ\|\*HUr?IӹHD$J:z/sý@ %"'$F4Lfki>t>MԑL~GlzDG r (Л?,y|b
TR}A ty6 +],0/dt|s$f`Y0/D˫uVQS*Mh yL?}~oY8jA䀪@R8r)y)/!w3ʊ?M=9gsSJ"FNǓZ)WKqdh[{l~Joӱ阮O8r̟ϑQFK7#;. :umzOiP}'%L5|4^kMWcj]iX? ~ GGlW[<,Bs?
W{C-~k.܄Vi-SEW[S]*{od[M++R,QtRKsSاn|-?>:EBv#^Eх-b50@{ l {4OL WXjh~n/bxEq;I0Y3\p:yb@rq^h
3kfuCN웳Gb1%BV ߆tr=[Y*'ߗ ḳj3=sq3+T+ BQPgA(Y`W^X
l$Or
t*Sc$ 4Qw$۵} ?\S5Np 1$1se@ҳFfzf FSp1B:^RXFϯiB:D.[ +W0nn=㒷LڅPj(&8ɟλUrg}6_w®SYio+e-ǡxȽfzE9Asڰ$hmR˞r92H:~̃]6V" sQM=̬9 Ne 2tNJ2S+Π !0X0
YOnvQϠw8\7N*f=Qt"SЬ0ǃ_{RDI1=Ƀ hRhy 2
.)YQX4Û^>mDxo"RCpen[;
HU`(k3AG Kb]&F3"k/:::ܓ)pv98I
kZ ubqH"rU ^spaɻfYJԽy&LէZc̳j \>R٦%'dkTm+-IX5 vgZO +?? 4B#@p .8xtܫN8;7]_Ě7qr%;"HsrU /خ)^J*I/.LrNI )<#b[ ΆCqy#==NZ ̝{E/f<(p1L)BG2D+ސi 'C0HU8-t=b'P ST :h@{ .' 3ɒ1UeGE\Lj
h_
$~m\~R[gsg7 l|JCA-z)2;b6ņ'KIJڮ8WX8DeY3GcS%ZOX4T&}Ý ˸lODgHT|YzE
jvw dS,ml8lh¾3Lڟ![kq_08nm^H8Bg LXasA?}
~ÚP 5)%kRP> S5q
D#:>_hJ6 H+P0?B -f# ŵoMc@}
B7t FƵ"JC'o ߢp21kXJlnEYӿOaG)SҺ?i Yib}ɕ(./QЪ\AKϰ
(whsG =MG?uVsd/L(*K$&e_P[a*Ֆ)N0 PV& Yv7s9Q7)kkJQ
:
r%lnj1*ڟ7m:> 1ز ~90;R^k565 $0>,j).[yZvɺk6aNz'Ap ! xdA˃Z$~Cu]CdZkËn/CZ?\h
"Q.wnwؼsĐ' KF`b^E̵KUvx(G̅z*"zC[e)$
0KFpbOx,mZ. v T
yU n'
`a"տk|&#&m gC0X@f %OSn!TCB Ckn۪]\yfbFiYҽKy
[Uյ˞Y|OBس{ qכ2M=n 9B{K.)@ljo&ۑV%k P ֩ c"6iHl7X~QG+_GnKc,C# qdA7v;J&?M阡c+⏌8i
b@E-p
-><R[RBkv3ػ~u\!j]#{% \
轿~M0m3NgG~kp~e'bBd6E
Jm}'M =6]#YTƯKȯQ(#.xd7!$-E>kE%Gk)G2p@sەTU؛06Y'B]0 uSqӓ|}EYx2ݜ $Y4dE/aR
>笚݄ o^čX0݈LH
#m+֗>'0*C ,~¹A??+\3LGwsfXWki tlOYLIsPcn}9O/BvZ %:9ÝHb`+ݴb.6YQ",fPbwUqiSNN GE5 >W1h5 (6f&w8EB?-I= ;HC87%L/ր}$;yw+Ck@x\dV2hao!gܠ,Iڗ0fUd
EJ4e(h)S#BElUț.l0U+?Z'\E/7a2@8
PɋW ?e[CcMKA(zAENU6=S91uOKUI&WqK n2MgM0ʾtȋ H^(_mk,>^@lj}tnYkgf_0=L1o_$:Mm@yӑ,3X9!;[