cyrus-sasl-scram-2.1.27-150300.4.6.1 >  A bp9|Ժ  4d6x2a@6{CLOK52IכUV6!o8G'X MsQkS12&q̱D|Ԭ&p; >`7S:9nQ >㠠,$ThX8XK$9 ?ת ӵˀ4L~$mdI.@poH}f^pTNꖆ0 ک ow~ыjߎd18023ff7c57cd6198ae847d3e88709866a819a7a223906d7f9e2f3086040be2433d73f560aedb48412b9c386ee6654744894b0c^$bp9|W؆:j QU6/5oZC@ hphbIW\HoC$v|$0^Mao5#_ZQ50 9tŀ^)E8 m>!gl5DvɘG~misт>qm tz8mR(7K$B~H9$FiS9f'TQ 9Sv- /0h MgU ki|O-߰6g <>pA0? d ' K2? Us     <L`t    5(68@ 9t :Z FGHIXY\ ]0^bbc)defluvwxyzCcyrus-sasl-scram2.1.27150300.4.6.1Plugin for the SCRAM SASL mechanismThis is the Cyrus SASL API implementation. It can be used on the client or server side to provide authentication. See RFC 5802 for more information.bibs-power9-13 hSUSE Linux Enterprise 15SUSE LLC BSD-4-Clausehttps://www.suse.com/Productivity/Networking/Otherhttp://asg.web.cmu.edu/sasl/linuxppc64le hAbbbb5bc17f044d9f40ac936f6c3a1e5a2d917716362890d30dee56d773659fe18675libscram.so.3.0.0libscram.so.3.0.0rootrootrootrootrootrootrootrootcyrus-sasl-2.1.27-150300.4.6.1.src.rpmcyrus-sasl-scramcyrus-sasl-scram(ppc-64)libscram.so.3()(64bit)@@@@    cyrus-sasllibc.so.6()(64bit)libc.so.6(GLIBC_2.17)(64bit)libcrypto.so.1.1()(64bit)libcrypto.so.1.1(OPENSSL_1_1_0)(64bit)rpmlib(CompressedFileNames)rpmlib(FileDigests)rpmlib(PayloadFilesHavePrefix)rpmlib(PayloadIsXz)2.1.273.0.4-14.6.0-14.0-15.2-1cyrus-sasl-bdb-scram4.14.3b~a@_I@_j^;]߶\X)@Y@@Xg@XVhT@Tw@varkoly@suse.comvarkoly@suse.comvarkoly@suse.comvarkoly@suse.comscabrero@suse.demichael@stroeder.comvarkoly@suse.comvcizek@suse.commichael@stroeder.comvarkoly@suse.combwiedemann@suse.comvarkoly@suse.comjengelh@inai.de- CVE-2022-24407: cyrus-sasl: SQL injection in sql_auxprop_store in plugins/sql.c (bsc#1196036) o add upstream patch: 0001-CVE-2022-24407-Escape-password-for-SQL-insert-update.patch- postfix: sasl authentication with password fails (bsc#1194265) Add config parameter --with-dblib=gdbm - Avoid converting of /etc/sasldb2 by every update. Convert /etc/sasldb2 only if it is a Berkeley DB- CVE-2020-8032: cyrus-sasl: Local privilege escalation to root due to insecure tmp file usage. (bsc#1180669) Use /var/adm/update-scripts/ instead of /tmp. Clean up temporary files.- Remove Berkeley DB dependency (JIRA#SLE-12190) The packages cyrus-sasl and cyrus-sasl-saslauthd are built without Berkely DB support. gdbm will be used instead of BDB. The packages cyrus-sasl-bdb and cyrus-sasl-saslauthd-bdb are built with Berkely DB support. - Update to 2.1.27 * Added support for OpenSSL 1.1 * Added support for lmdb * Lots of build fixes * Treat SCRAM and DIGEST-MD5 as more secure than PLAIN when selecting client mech * DIGEST-MD5 plugin: Fixed memory leaks Fixed a segfault when looking for non-existent reauth cache Prevent client from going from step 3 back to step 2 Allow cmusaslsecretDIGEST-MD5 property to be disabled * GSSAPI plugin: Added support for retrieving negotiated SSF Fixed GSS-SPNEGO to use flags negotiated by GSSAPI for SSF Properly compute maxbufsize AFTER security layers have been set * SCRAM plugin: Added support for SCRAM-SHA-256 * LOGIN plugin: Don’t prompt client for password until requested by server * NTLM plugin: Fixed crash due to uninitialized HMAC context - Replace references to /var/adm/fillup-templates with new %_fillupdir macro (boo#1069468) - bsc#983938 `After=syslog.target` left-overs in several unit files - added patches: fix_libpq-fe_include.diff for fixing including libpq-fe.h - removed patches obsoleted by upstream changes: * shared_link_on_ppc.patch * cyrus-sasl-2.1.27-openssl-1.1.0.patch * 0002-Drop-unused-parameter-from-gssapi_spnego_ssf.patch * 0003-Check-return-error-from-gss_wrap_size_limit.patch * 0004-Add-support-for-retrieving-the-mech_ssf.patch * 0001-Fix-GSS-SPNEGO-mechanism-s-incompatible-behavior.patch * cyrus-sasl-fix-logging-in-gssapi.patch- Added support for retrieving negotiated SSF in gssapi plugin (bsc#1162518) * Add 0002-Drop-unused-parameter-from-gssapi_spnego_ssf.patch * Add 0003-Check-return-error-from-gss_wrap_size_limit.patch * Add 0004-Add-support-for-retrieving-the-mech_ssf.patch - Fixed GSS-SPNEGO to use flags negotiated by GSSAPI for SSF (bsc#1162518) * Add 0001-Fix-GSS-SPNEGO-mechanism-s-incompatible-behavior.patch- added backport-patch cyrus-sasl-bug587.patch which fixes off-by-one error in _sasl_add_string function (see CVE-2019-19906 bsc#1159635)- bnc#1044840 syslog is polluted with messages "GSSAPI client step 1" By server context the connection will be sent to the log function. Client content does not have log level information. I.e. there is no way to stop DEBUG level logs nece I've removed it. * add cyrus-sasl-fix-logging-in-gssapi.patch- OpenSSL 1.1 support (bsc#1055463) * add cyrus-sasl-2.1.27-openssl-1.1.0.patch from Fedora- added cyrus-sasl-issue-402.patch to fix SASL GSSAPI mechanism acceptor wrongly returns zero maxbufsize #402 (see https://github.com/cyrusimap/cyrus-sasl/issues/402)- bnc#1026825 saslauthd: :set_auth_mech : unknown authentication mechanism: kerberos5- really use SASLAUTHD_PARAMS variable (bnc#938657)- bnc#908883 cyrus-sasl-scram refers to wrong RFC- Make sure /usr/sbin/rcsaslauthd existsibs-power9-13 16455205642.1.27-150300.4.6.12.1.27-150300.4.6.1sasl2libscram.solibscram.so.3libscram.so.3.0.0/usr/lib64//usr/lib64/sasl2/-fmessage-length=0 -grecord-gcc-switches -O2 -Wall -D_FORTIFY_SOURCE=2 -fstack-protector-strong -funwind-tables -fasynchronous-unwind-tables -fstack-clash-protection -gobs://build.suse.de/SUSE:Maintenance:22965/SUSE_SLE-15-SP3_Update/f31563e28dd2787f23e8d4a931ea78b6-cyrus-sasl.SUSE_SLE-15-SP3_Updatecpioxz5ppc64le-suse-linuxdirectoryELF 64-bit LSB shared object, 64-bit PowerPC or cisco 7500, version 1 (SYSV), dynamically linked, BuildID[sha1]=6c91c37c3400622a9aaf02444744cdd26ee8a89f, strippedPRRRR]H utf-8eb73e5b3c3f6d87f11c2a7a21de21155ca6ed81aa2668933d2383d3e3759119e?7zXZ !t/ ;B|] crt:bLL ɳ (A$" UP 4ÙBzeZm ,,p{5t>FYܙڎ!kf+`^ɆY0g f0&]?̊S 2j_[=!ĶdlI.=иuj.(NktSwp"Ofw.0tߞwⓩqN# N3a(qZjEb&ېߕclfELb,eѴN7 xcJ~Akj2A6:~mmӸzF|Krb㥂aGn=YEʐ+dnI fӐgK/A"NƓѵ1ԝS0Dm U!|W I I?k-x7j^sF=}iC(0 ׂpf Aᾬ?%ev 6c|y/DS8}~1.Tg8_eAuv^a+(Œ$b/#$h5KE5Ɲnؼ_~ƃv1EMvA^P 40;'׵㋚:S. '?CX BtNoai|mYs(D'o?PьU94OFg>w?&j= V_{ #wC#{Z η yW|Kqv "5IPФO!&R/Ƶ w7h#5y2#Ea;`Bޮ;)[㿠ergÖ#m:cF(D)p@IS_Y1-+rUvDX2s՝ W4,7Ǫ-4 MnjZ"̩jV=YaDh4\e{+PppbM96mH]cΓ=V-Dr!^o:`@W.NNQo{sen9)*#r6͢іjl>y#+Uh1]\ܯ2-l2b/}zGgP.^;rk]dգ\kf,[O ?IZn46>ڼA:ZrdfAs{]`up8ῢ<SVr*YekqH?; ɻ/'$U-VmI4gSHg0tR]`ߓ|wÕ7ioߍi@͉-lWq̓SE)`"z/!1#p 0Kc'P=l1ڦnޏRk Ɲ]X2T"]h,t B#TmMGZml?Bsn7Dxd}dOTEo sњ) RU|^dR怢ִmb姬l}"rB)'!5JI,޽ nsؙp)5Vz2(a|;si}dS⫤ӯ2 npwaHB#>{/>X%_|ìqY#RŠP=gf%l`#MtIˑ}?S8jU$.MN󰉒p͎e5 >SS69RdMEO/_ӝG]{- BWSb CX귶U JFY(2Buw7OD+PH;W׬WT!&Uxd N31ٰ>vSe))\Gլ展T=8Lh2%ӈX)d; /mHE"wPN(N= Y<Awk ה#, ٶqIcO5-6.AdC.& vެV]I|Zxυ;Ľs_ICМH;' ǝmc>n2[0gY:sP:K#8*_3b+žz Nf^$5`$mUQZ匂dA™D|ɰ*IFE[MxklHՐXU^s(_ \<շ(Oe>\^R)y62 -H'VWP7fCP[\bS:֝¤F][=sv0 **ԪVzošN΍wr$[d*7PRx.Q_eP؛2 s3S~d \^;|ʓw'ߢALS~BN'ܝ1\91, k੶"־?GmWN7@"һ6~8Syߤy=^rr5şd%l&U+owzL9Dˢ\?9'ZL=n:O"՗T9?`+jV8+~CgF#kn/ ^5~i%[27!X, ĦxR7Zexi&Ҁ̖f>Xߕ-ݑ1F bz"G/h9[zoDW_[F&6G'V.QRBz76p?+A& \XbZ71SVY͘ry! |'YQKm˴<@wW2ڱeL/~_G eu=g{rzqѾ9aHd j;?\zp`<E;,ƨ̞9?kY Ɓ('/.Q*'pTƫ1eǹ#A)pu2)$ܯk. fruU1V4V*fQ#cri;҅l4=tx*Nlv҈ŬYQ _@f7˴\K]U 5l,rX:@ %"Evv+C`\ַAwπE]$|=ykS[ߕ(nh:S||@LUTkt4{I0CrIz-8S B= 9ګǦTB cdzm:ly}qSq*~cFkYKYGc3A詙Yg;Ûf8bxX#-{ɷ+UH_kiPץ@zU8|N >Zɵ~ Gׁ O vQ$o6ϬƞmU:3~Hƒ@t= h 8hq?fD {'0,[3.A[$쪅%Cw#(Ҿ/SD1S %a^Xpu }-[ f6]x1B |C=9% HVvV܎])lK [xM c 'kq0gTsF$ pR\ddT{k[d GMjӸCLJ3bP89K|{CoE b'=flD\sõLGe8S CԝρI Ӄ:%#؏OMs΄z^Ok^ʼn_!a(V3\-_x!+rH67V)ҫżغdp5!olxR.k_urK-mj.ۏR))!I Tj1/6v:|Kq6Xt[w ߸kҘkt۶PԈ!B}p,Lґ@Gr%㠺Ԕ#Ȁ㞥k<%>@. ~TJa G-5SVvY1mlr+8Gx3leX֢fvOEoa"Ԅf/w)sPן(JW CE׊r ^A\)Q 5fJh(vꛗpO4\VϐR#3uO<!}uFBr L͆&~F@#0z6竅w^P-P$_yhkXN{ָu)<&iwz [{:c3Q!y2 A/p<_24Gf% ~,>RNVnXMwd"hFwhfs9\U!,07;u|fP~62fÿgضAW6)pτ 6I/y+}Q 8Sn/ 7ʔJ v;?:dv i_L[N lX*0t.MT\TM=C}fR2ؽ#0ͺJ񲫮MF {Tj7kee76_ΆJ7xʨMz흾^>{5e0t;9^.G3[v4Z{c{mx1bm5  i+fٯs''5&pqy; { 1)#'21+ @i1( yk AF11K{b? y ,H1A|dƿI66t8,}[l&.G(,ݙk-,V%_YS̖t87JW}bL{GBehUt@,yod2.'v>VgK#K-h(h86Re-f۰1 i")54270BHU FV7_} 7P٢ȖIIv 6^:>gH)B s`4i[aEt CݰlkyP-v3@]'U;ZGŠw{i͑l#>; {>:,;DFHd QsaCEE2Ch,D$, lmb_G4{Jh ,Ո+=~~n^R mw*UTëw8 ` JݛZSfg mc4ْ1W3 3{i i;DV}"+? `cxmL؊L`7Y i(I.r5bQ6K Xgǹ|-hKA5t5 .vULv,|S b'.yF5orV8}h/-^z?`=[l9\gBHY1,&e<=~#{=ڼד027e)+ė|˱!_a6lT~4;x\xwˇ]FEVt'87`,Ex":57}@e$a[I8cтa:`b0dGQP}JgkCfKwU4S`+.0Rv<7r; @RD[s_>*˸̑JȀT|k7kMd}b]Dd$M>-YwSRtW3F.4t ?4a}h= z7]">u/ʴ*=688pOw»VD \(GRRwfj?ؠKL:&%R巐ij˰g. pm.Ӎ.wZ!kکt(!?ԟJ&nH>$[ NK,XY-ꩼ4!?|ߙ65dXۀJh:TVvPY#y9])Y\:2%"г?4AAwPPAk@Ր۲ΝaDMs#f4f^" ؠ>)NCi^b'R&%Le;n2-G 4VL, /U4;QA;6PSTZMܼ'Hj :܊ծm#WʫnO۸&рPY6@W)Pa/ͳV4`pGf7~vP~(Ϛu5v\X-!c! 8n=zɉ)0lP:*anrNE?I-*vzƠlTɠ(8 }#lړ,s%|dFbD" t9\Foߌ{Y XG:'[S ({1neXYbsX8@7?'T[Lk.GnH|_-}h3͂ H!S7]űk>z@S@@:+ _MNhV$K?vKڌ1ꈱWi3b샯&ifI2 sDJdL]o|DNx. i:KYa>G]NlOPmm|-F"{0`Xߧx9]~VZ ;O;eܵd $ ZhO T7Y"ۿ)S'V>/;k&8}fУ3IL9Wl6+@P/w<-ca[VҢEqlo >#Pc1<{C-LiCvw5"iӇDnhكx[YtFѥISbcgΪ:n><#f v` K?5Law"DG/yg(d45ISxfO>6 =z̐tex_tw'Alܚ]0KKFA l{ s@yN""g3M]- _\Dr$L=yVŰEp tnئz `5V=8V|2xI OSqhޟScɷͶpXqsG;*d{' 6%dO^Pˣ)({O5#e a0(D;':k;n0Z.D ޴)pRxi\7]BO/s%+:(0ۤ^@ pulbIױ1pb6>]*;Cf"@UE[n c%Ss'Ȱѿ^ O4Տ~4Rv}:q)RW:kQB6N6S0XfR(b/mMɥ6UJTW3jZ %,$_Al>{/x]t>8^\Jή>Slh/ dfPvJV*c.,{kś2kz kT67+h=Ц`?l}菕uT_FѮ,ɵdfust D%mLp~YY{W f3Rymalq|`N7mΖ 9#ei0us!\)8Y4(%)]a3D6*Ych~p54foƞ %ڂ1aYZ/?}ٛ/ gc1*Hi#^Kc 7/Xy}mE5kWJ >dPVF2  h/uZ]oBWj)7S d/J5p1c@2#ѳ+Y1-5n*?'G‚tFТ #P P25E9E}6ywXibΖuX Q=5̒Cj:P1L7uҺ s%{lww|SX}CmDz"6+ձY2%Ӹ$3մo6HvdA3VE* x% I4`݆.ZעveX>ڿ]c*9-L>{< ˋ +gۭ͢(/W}t)dflW GJ+Z/j(! M6 Ќw?;g ~`>M/V;RXŹpXGoEBPm\ Q[]!b"=Ayy)lx}4U5UG9e`-BijT5ր$hmAD(rTOA\5D>b*8뼵SżOC& }k4I\HtLzs`V,p}8Dq}*ҁJYю}+lz7-ϯ|Os(O$sfOsdUeaA,?&|ْ=ӌXwON ; d:ʦ.?]#5"T6`V|vZ9|\La)BJBk6KU%VːBû'TlWi 5^J{5rXyè<3yʏ~HgΉ=,+(1ʰlVTO_Dl^Z֌?a.F/ez;͑lXXzQ42ԫA*e^(~mÐ(Ncuo2NѠ7^463X nc xG鶨JCe$Gok?Ța* !!ȩE.ؒyY;=:یdP{iEG[r:8gv?CKjEoAL% ~C ڒA.R䀰qƏC,hPS~dCgh8RtAjNӞ4~GSr,=ks4^゚`i^bVPmz\vPMiѯ"'> Ftbwe8wL.6_ ٧h8Tc"l7Bsal5r[ qcyN@Q>-j C. A;9q3vkuFJ[ƇЛ/czmX::.u ,C-bh%a|t*,%S4q k:>qN۪P}4F@C&8 >'~zĠJzȴ?*R# ǩW \mp +k`DrJk<@>Te,}hR.ü>ܕQгGtjs{ ϭsf| ,ڵKCi;ü*/'(+("ݑ(0lO5ȶ"LBl56dv%й ʙJGd(Kvfh%2aGzhrur mצ@\lsL:fwL+pҰ!R&A$Mls/#ɽ RPB)< Ų2h"z@`5QV+AsBVށlq=;ܼyLbbRp i(iQG} #2Ql/h: $Ć龒`/2],6"ׁBtLzY\"'!/'7P-=y[#ѧl9 ~u+σ!F9T\-0PhY9EAԇBO+k:I ,dm1Oڐk8mqlP{ l1ucUu>GvTQt@W[չWK>"<*Gڄ՝lHš-XLe+7K^$==烛LHIfZV?l+ԙxHt!A_p+1YAu[ WRe5p {DqԋBm!<݁ 7{1?XϢLʞOa&)y 5ygKȫJd|؞d~(zΝ U8:XNXe:^?F' I{hZowm6}6ǂ"\_ƕCJ鼈0O[D*#}] kQQIY<1S 2PG!FyARڈj#aXE:└pRA1=kò %-nj=hlt)XIE5j̤! ^BVQ_KZB[Luk.:hG*m0϶e0M`gGEEgV.&>^0b|A4iX]z*SݘN*yU5$ `xV沷@fRB:flEԍqvX^n//qT˹^`Ibkn^CX7@Eu4"(5!IUpƜxu;]ء e[Jo7`3 2(:W*׵ݦ}@h̾T#ؓ bJI߭xwc>(/BX h"z›fƁe#ؿOezj0Tvբ .YŘ& o*h44nKع.u[! Y{q _b_ѻS͌pPn"skQ1ՙ8_d0 ]J~liPq`KJEζZA3e#&P{Wyqm̺`|P gO<K.Wb%c_6N;.J`]}BL_B3ɰq/, pbJ3# Aʖèׄ f8Mn`G?Ī{/O4sgOL0֑dd, LCU2w._Qq))t}NWy{Zd&"Gcw;s\lsm t<Մ =?f(.`)f/v9cv,N)x\RhJork P^[%foǙ{Z3oo<7S C4s)mo%K3³(  eTu)egdKQǵO xNGߜ@dMyLq) IVR&h&rz2Ais!nìFQQP2,&E?=D,*Lbt9(N/\OJȔ.-|3%]EU_RjנfB/MQWMp7A2A˯*ņx^Pp1"0׸s폍7 gU(\O,,P-9|BrV7V7uUT {wjj0GQYffq,tCQE%%&DQ3iOMi P30RN PG}yCb_0T(F ܲ\c4ZӾ~R9Zf - ' ƜþXr!J(ʝRQ͙w%kIDUҮ7-R T%ffC*=]E>L0gZQ5*$G%< %PU0/>b5BtP.?^'(eO*T~)R͵LRTAQ$l(B,RC:VFp6\g ÕmySK:S+KwNقQ[ ToNKo0`ӶPи yL$4kFyxx̫RSlI^Sdo~Dm%=P_F:?cBmf/"Z9 9!+k*>t;w M)Ux*>줾'nFVq&— ХdDڙTsۡv*KxT|x [ztm_(z a,[SPEpQ M9*tg1LRAպj5\%m !v_t4䞧8y3w!ӱUz0eϼCo%Ǩ87g%jRZk9Cu˳qrkgzU`׶+M9~PI3+M][w,'"^1'ŢV5Ag Z쟤礻L8b)tpO$1-@YMIiݚ.ұ]js-Щ;a9r3nK5k+!z^2ӫZA]]H}gd1.^,1#@hӪ3)i]+B*5?tϏlvK%"{PD8텡O_Qx3Jt1L&8zyU|2t.,@͆w)i+M$l?θP' %I3- !D[o%q5JH{+:IwG>X YZ