cyrus-sasl-sqlauxprop-2.1.27-150300.4.6.1 >
A bp9| f Z3{ -v5֮ϓpXgu_a) m }T 4ve)yUՀ^]:Q}
H\W :r Ρ%)UbI-Os#F 3g?AS!x08YZw b!{ A_]䑠"y\$ه$#
&J+a78~W#!v磡+VqTlIx (t% ~oe7728b3f5bf53f0689913fac8bdc4a4fdbc95b43 77476b3e033c39c02d5d0bd7d5a82c3681ee430b2141cd562db754c743508d0e Eh bp9|[V$R85?-NFĄ& "=س" \7.>ɀ4Vx[mnO0²M" Hrp X3 d 2
6 `0 ?`x p A ? d , N 6 < D T \
d t
H X < @ Z ( [ 8 d 9 : T F G H I X Y \ ] ^ 4 b R c d e f l u v w X x h y x z C cyrus-sasl-sqlauxprop 2.1.27 150300.4.6.1 SQL auxprop plugin for cyrus-sasl The SQL auxprop plugin supports PostgreSQL and MySQL bibs-centriq-3 SUSE Linux Enterprise 15 SUSE LLC BSD-4-Clause https://www.suse.com/ Development/Libraries/C and C++ http://asg.web.cmu.edu/sasl/ linux aarch64 A bbbb c53182f4f58d09e392ff1addd40d601146923532beb68f7cda906d6cae6c0ea9 libsql.so.3.0.0 libsql.so.3.0.0 root root root root root root root root cyrus-sasl-saslauthd-2.1.27-150300.4.6.1.src.rpm cyrus-sasl-sqlauxprop cyrus-sasl-sqlauxprop(aarch-64) libsql.so.3()(64bit) @ @ @ @ @ @ @
cyrus-sasl ld-linux-aarch64.so.1()(64bit) ld-linux-aarch64.so.1(GLIBC_2.17)(64bit) libc.so.6()(64bit) libc.so.6(GLIBC_2.17)(64bit) libmariadb.so.3()(64bit) libmariadb.so.3(libmysqlclient_18)(64bit) libpq.so.5()(64bit) rpmlib(CompressedFileNames) rpmlib(FileDigests) rpmlib(PayloadFilesHavePrefix) rpmlib(PayloadIsXz) 2.1.27 3.0.4-1 4.6.0-1 4.0-1 5.2-1 cyrus-sasl-sqlauxprop-bdb 4.14.3 b~_j^;]߶\X)@Y@@Xg@XVhT@Tw@varkoly@suse.com varkoly@suse.com scabrero@suse.de michael@stroeder.com varkoly@suse.com vcizek@suse.com michael@stroeder.com varkoly@suse.com bwiedemann@suse.com varkoly@suse.com jengelh@inai.de - CVE-2022-24407: cyrus-sasl: SQL injection in sql_auxprop_store
in plugins/sql.c (bsc#1196036)
o add upstream patch:
0001-CVE-2022-24407-Escape-password-for-SQL-insert-update.patch
- postfix: sasl authentication with password fails (bsc#1194265)
Add config parameter --with-dblib=gdbm - Remove Berkeley DB dependency (JIRA#SLE-12190)
The pacakges cyrus-sasl and cyrus-sasl-saslauthd are build
without Berkely DB support. gdbm will be used instead of BDB.
The pacakges cyrus-sasl-bdb and cyrus-sasl-saslauthd-bdb are build
with Berkely DB support.
- Update to 2.1.27
* Added support for OpenSSL 1.1
* Added support for lmdb
* Lots of build fixes
* Treat SCRAM and DIGEST-MD5 as more secure than PLAIN when selecting client mech
* DIGEST-MD5 plugin:
Fixed memory leaks
Fixed a segfault when looking for non-existent reauth cache
Prevent client from going from step 3 back to step 2
Allow cmusaslsecretDIGEST-MD5 property to be disabled
* GSSAPI plugin:
Added support for retrieving negotiated SSF
Fixed GSS-SPNEGO to use flags negotiated by GSSAPI for SSF
Properly compute maxbufsize AFTER security layers have been set
* SCRAM plugin:
Added support for SCRAM-SHA-256
* LOGIN plugin:
Don’t prompt client for password until requested by server
* NTLM plugin:
Fixed crash due to uninitialized HMAC context
- Replace references to /var/adm/fillup-templates with new
%_fillupdir macro (boo#1069468)
- bsc#983938 `After=syslog.target` left-overs in several unit files
- added patches:
fix_libpq-fe_include.diff for fixing including libpq-fe.h
- removed patches obsoleted by upstream changes:
* shared_link_on_ppc.patch
* cyrus-sasl-2.1.27-openssl-1.1.0.patch
* 0002-Drop-unused-parameter-from-gssapi_spnego_ssf.patch
* 0003-Check-return-error-from-gss_wrap_size_limit.patch
* 0004-Add-support-for-retrieving-the-mech_ssf.patch
* 0001-Fix-GSS-SPNEGO-mechanism-s-incompatible-behavior.patch
* cyrus-sasl-fix-logging-in-gssapi.patch - Added support for retrieving negotiated SSF in gssapi plugin (bsc#1162518)
* Add 0002-Drop-unused-parameter-from-gssapi_spnego_ssf.patch
* Add 0003-Check-return-error-from-gss_wrap_size_limit.patch
* Add 0004-Add-support-for-retrieving-the-mech_ssf.patch
- Fixed GSS-SPNEGO to use flags negotiated by GSSAPI for SSF (bsc#1162518)
* Add 0001-Fix-GSS-SPNEGO-mechanism-s-incompatible-behavior.patch - added backport-patch cyrus-sasl-bug587.patch which fixes
off-by-one error in _sasl_add_string function
(see CVE-2019-19906 bsc#1159635) - bnc#1044840 syslog is polluted with messages "GSSAPI client step 1"
By server context the connection will be sent to the log function.
Client content does not have log level information. I.e. there is no
way to stop DEBUG level logs nece I've removed it.
* add cyrus-sasl-fix-logging-in-gssapi.patch - OpenSSL 1.1 support (bsc#1055463)
* add cyrus-sasl-2.1.27-openssl-1.1.0.patch from Fedora - added cyrus-sasl-issue-402.patch to fix
SASL GSSAPI mechanism acceptor wrongly returns zero maxbufsize #402
(see https://github.com/cyrusimap/cyrus-sasl/issues/402) - bnc#1026825 saslauthd: :set_auth_mech : unknown authentication mechanism: kerberos5 - really use SASLAUTHD_PARAMS variable (bnc#938657) - bnc#908883 cyrus-sasl-scram refers to wrong RFC - Make sure /usr/sbin/rcsaslauthd exists ibs-centriq-3 1645520808 2.1.27-150300.4.6.1 2.1.27-150300.4.6.1 sasl2 libsql.so libsql.so.3 libsql.so.3.0.0 /usr/lib64/ /usr/lib64/sasl2/ -fmessage-length=0 -grecord-gcc-switches -O2 -Wall -D_FORTIFY_SOURCE=2 -fstack-protector-strong -funwind-tables -fasynchronous-unwind-tables -fstack-clash-protection -g obs://build.suse.de/SUSE:Maintenance:22965/SUSE_SLE-15-SP3_Update/d4cb4470d050342a6992a1eb94612c2d-cyrus-sasl-saslauthd.SUSE_SLE-15-SP3_Update cpio xz 5 aarch64-suse-linux directory ELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, BuildID[sha1]=fa151f17e9d85ef1eaf815fd2163caea455e5fa0, stripped P R R R R R R R +@5q < utf-8 d16f92f82c15a7196f43228655f921c4f90343cfafe968aef5e0a74d134b1859 ? 7zXZ
! t/ k*]
crt:bLL
ɳpi+CPlBgӆx@0P9fxo=eR '>1t$hcDZ =o-dw:jCIWη$qd*wETC}#塺W T2/*I ',4W47ȈVd9uBN0% Gz a)BJ3Fh9N}BIܷ۽-ָƃMoZi H\`4 >_WTl2Goex璧(]-8ƚ?~nnFb`@K?
5 h1B u!Gh= ]:pTtغzNG/ 9䂡;/6Ce3
-Ns9 ϱS{_5(/8G &(-VF kپX:OC&WΥ9I paȺKпZIu'D^AR|8ѤM 3<QU.m5nVP)po
mz ړu?
mhGT%FXtdcMk/D/mY#**Z8j(TmIݡBDU
͉G$AS XN1 ؞p
ںNˊ1+Žjr%i0QR5`yJ]U6cysGNO`Gć:27 LTKTUk"kwe#5>MMb7. AF6_WF}#pNTCx(
7isM xQi{ =}OoS1T2^2j'HFpO' {`<T2uH2#4 unJ6c*
F 2IBrIG 2v?pqVH2~)fPT> jIp:Hx# M|!/
zJ%n4K`;
6EelQXPD7f,`u [LSBaCeaW_iHm.NLI\ǰ/:~:0֯1(a
{ԣLXu z~GzpHN3Gs tjtc¶usBE}chgM1!7B`IUcOTgw1
V
IW :1!ljl!
kbɟ7j
C 2fְL†0ed^ ^eНǙK.f&Lw&'^
e X9$@TiSIPhqc} w6HL-7pVL2#oskDf <,'wż}>h ^W܈+& [6~Byx"`y 'FU զ#?PGڼSqO#*6viIf5Nʱ92O9NɥN^nƸ"1X@
D!{:dAMx§`;]ηĤcԛuihcUxD\ ~v8H=4e]` [
27A
Lh%TP?g I"yl
CDpPQR݆s8~֊M,d!ZHK4X9T&R#DvrWT#7IXh7jޏ N"y >[;ǿ'AK ]UwH2T7cz@RƷ(4Bb<[g ;Z5g aZy)EMM'$1FZd*UW1X9F?@Sj)5"]"w@9R+-K/k6w:5mD2y3I|!{> ?6:2FĞ)!X;1TD
k&(C@G+=$滊lD|
tF&'Ze eNpn}2cycO-
rqt]/Q3 +WR,DC@h IvL7 dNjB$ghyGo\7
,V[
CVf8B~Փ% }dJ0%dlKS̰ 7j '
^RB(A~,qMlZaH8ܛnhu y`VO4^ j{ Yx\`g-Bs!
u)>kFE 4!9L[`?wN UlK =c/ J~9:WFI@ =Gh?yTF"'DPB
`W Go C`\u8QP vާvRmA{ϳd^Ţ&*ӅP ª6V[Q^bR;`҅E꒽ ѡgһiU?m4 R,8dO& L5:v*5NGL=Hhp&_ÈY\jDr**x " 1Kruemd\ŕE8}
|e% .E냕5cHSP ;t~V$!֗Wh(mdH;`ڊj*55ES3} nT#, >u uKB X?n[%Rr&o Y${qXGc>J?~jW
_)p+"/;U)cۡH@TƬSPLWHg;8AO493{&PXzz h( dx\'\[/K՟^Z ks kq Diq)2*/H_ }`MbMS D˼zbϰ9C1 Ǽgkz8e+ ߹?e6\`֫Ã2}s(|KӤA C8\'s;W-l [ǢX.|/EQ %pfB9K0 U5z r<5iq [zU䵏 4)
lG KnKز0
*q*SI]t9N)TQ+w>$h S2VCT6@|X3 JME&r}sM eteVR&Z #TW>-*imw0MwBGLG>xLЄj-ڍA
d=" v$GXu,S1 4\#fܚ%x_;{|l `vX .a-ڲBKO;"`1:+S s%/~H"Q ' ڇa&ȥ:y@g?8t+~`WSZyTf0Ej㬭G~>PPJKO)}ޓsE;A-1١_&
9ބZq^L\E4ؼak#3IH. ?`cl M" .,x C2b3__E$t~S7[)M~0|r,`6rLx?k&`
D/4k ˗VȭY| n yΈò\ =2K`dDMd' ?J:Y ?GF
GprTJo&+ Ķ"X[!i ).e RMW_YiP Y xhv-azTQfM@$d?܁$ ƒ̶ raJV6u4`M,,\= /D a$q(J^)0x\ޚ`-yIDp]C|C c1#iS65n:}Z3kVv#"\"~:'?R P
ȮW28Qyk?%s=xu%>'vriYt+s̰'J0 KzXUך$2 ZQ*g(]LUu/\Q71ٻ SioʅR>QX
M}u析N%8]5;K+ n ;P1o8N襑3Zx=g [
[} '~[U@ۋٓm
=Wj/H[9}! u}Xʄf_7wnspDr-i#'Pb@ק x.$.ھX~U8tT}.$$D|#A١ˈaصڠ0AjkWƯr4.*[]HCmgYwZ6͚Sɂ(S]DRn7`üEk%F2 *QBH-9|ZuA s,e=ފ* Zm[2~ra*^Օe3FNPp8=ܒsH)<űn? z6(ZI*,Ҙn2fM+kȷiP ӱi^*}n9 T
MHLE;0| Yj,Ҩ %c-6rY7m,lz j5dZ;&O(^2~R4)wfv&.S )lޏT:^wH&XOp=hpЯ ? ?F]pCh')$ϏŶcك ] R/XJTj7Fn# ϵ7غ DPK= .D *bڋm=[yǺ3 0gó72u5+O*; "DjRSQgRs]?Bwiy:2C D 2}ta^ۂ 7 MY;i-j+asEYg2]SSdYuccԹ&)ceT5#?jd^S"H;BgZ>fnp.'S[ dN ȎC7wWj\bji2TbT,ʄ*g 4[.
ub4śAA3@Sr-L SYGE $9k)sC3 kܫ)ƷK UZqtgd@
Q2-2`t7SbhYĺj#
JC;d(^>̞%h.FjD@б4
r=*x=~C`~
8Cl$-6T =
85? ;A=Ec KƟdFn2,KjSe2,6&M| ցXy֑K7T;X I'*/ IZL-@mp' l1:͘ 2ljq>0i4UuG^ Qu`Uv(C4VKsYC@I.9<~4
fl8ohBYIErfLgz2$WpE}6zB=^es;gPH: Z?y!X ^K
?>
gf1Qw@ d&QZJG }b3~=kwʺZ M8n%1g R bGax>(Ajg{TR͐Wv6CaϞ62?j\FЮGR 6B4PhKּMw»j|[sǓ(mu[J?^K왒S0Xߧ4ۃ!d.4Os * aE[_ 4(ޱ{W܅afFo#p1"dBw j͞.;9
VlokiP\BbYDž2:1AֹRmuY&O(qA =m,L-%SFg?+hh+i;1/#/A7gqӎE;D6n_L 5mK Ye@CNty@]b ԷO
j3M%`
VRݐ`l퓙ODE?I̒֊*
-~J. ~H?{nyTN`.{,1[m3z9m |^t iT"}a%m$@l|Ɗ 0Twa9)Ǥd)T@E N/ApUөg_hD!aL2$_T{C%oT '/II@I i3iF,1!UY,ZY{$V&R#
LPM~fJ솄_[yy\Ia"Hw%'FtOH]A7xrϛjj\ؾ y,g@yj1$MhR4+*1 m=4[vH7(; ͢U䩜XxKEE 6l{>Mlæ,EPÇ-Y uZG*F s<
WoM-U Hnɉk/Xa yt|`:UM=#
J tG' n;AZ>zl-n &C SD3dR] cq_LsO{H
mJuۑ+m D^WbtnĊ(֤4p9q4$Z
YnF kk|A~yS<O9T ?ׇϢP)EF ֈt4w kF
Ds>Pgm(gړO 09G6Ω|K|ĩq^f
}W#GJ=[gw%ơQl\- B&u Gj mSۏE/N V**mNMSi.? bb~9~W7|5RmI@}9ҁ;YtbN/SoZeVO1oX) V=ix)yGFC1*,^c˷"k+0q_"[I'U y
=cUovr蘏J