cyrus-sasl-gssapi-2.1.27-150300.4.3.1 >  A a p9|OAN %.Au7g?y[.|O4[^w]C _6>hI3jE4ac^S?Pw/OEP5<. і1,I, R {uHz-$&^z?azNgmܮj̨,nS(U<.~%{ IM Uҁp̖{qP&Ym )/tKQ9Mc !EciMhZĊwll}BhWd'"1A|9iF-ay=r Qmo7cIWgcArVhvUpgq>pA?d ( M2? Us     <L`t $ b (8 9 : FGG\HlI|XY\]^b!cdOeTfWlYulv|wx(y8zXhlrCcyrus-sasl-gssapi2.1.27150300.4.3.1Plugin for the GSSAPI SASL mechanismThis is the Cyrus SASL API implementation. It can be used on the client or server side to provide authentication. See RFC 2222 for more information.as390zp36SUSE Linux Enterprise 15SUSE LLC BSD-4-Clausehttps://www.suse.com/Productivity/Networking/Otherhttp://asg.web.cmu.edu/sasl/linuxs390xAaa~a~ae19919d4776a7e4b5d55ca437832e279c247443e690454777e890583e0808182libgssapiv2.so.3.0.0libgssapiv2.so.3.0.0rootrootrootrootrootrootrootrootcyrus-sasl-2.1.27-150300.4.3.1.src.rpmcyrus-sasl-gssapicyrus-sasl-gssapi(s390-64)libgssapiv2.so.3()(64bit)@@@@@@@    cyrus-sasllibc.so.6()(64bit)libc.so.6(GLIBC_2.2)(64bit)libc.so.6(GLIBC_2.3)(64bit)libc.so.6(GLIBC_2.3.4)(64bit)libc.so.6(GLIBC_2.4)(64bit)libgssapi_krb5.so.2()(64bit)libgssapi_krb5.so.2(gssapi_krb5_2_MIT)(64bit)rpmlib(CompressedFileNames)rpmlib(FileDigests)rpmlib(PayloadFilesHavePrefix)rpmlib(PayloadIsXz)2.1.273.0.4-14.6.0-14.0-15.2-1cyrus-sasl-bdb-gssapi4.14.3a@_I@_j^;]߶\X)@Y@@Xg@XVhT@Tw@varkoly@suse.comvarkoly@suse.comvarkoly@suse.comscabrero@suse.demichael@stroeder.comvarkoly@suse.comvcizek@suse.commichael@stroeder.comvarkoly@suse.combwiedemann@suse.comvarkoly@suse.comjengelh@inai.de- postfix: sasl authentication with password fails (bsc#1194265) Add config parameter --with-dblib=gdbm - Avoid converting of /etc/sasldb2 by every update. Convert /etc/sasldb2 only if it is a Berkeley DB- CVE-2020-8032: cyrus-sasl: Local privilege escalation to root due to insecure tmp file usage. (bsc#1180669) Use /var/adm/update-scripts/ instead of /tmp. Clean up temporary files.- Remove Berkeley DB dependency (JIRA#SLE-12190) The packages cyrus-sasl and cyrus-sasl-saslauthd are built without Berkely DB support. gdbm will be used instead of BDB. The packages cyrus-sasl-bdb and cyrus-sasl-saslauthd-bdb are built with Berkely DB support. - Update to 2.1.27 * Added support for OpenSSL 1.1 * Added support for lmdb * Lots of build fixes * Treat SCRAM and DIGEST-MD5 as more secure than PLAIN when selecting client mech * DIGEST-MD5 plugin: Fixed memory leaks Fixed a segfault when looking for non-existent reauth cache Prevent client from going from step 3 back to step 2 Allow cmusaslsecretDIGEST-MD5 property to be disabled * GSSAPI plugin: Added support for retrieving negotiated SSF Fixed GSS-SPNEGO to use flags negotiated by GSSAPI for SSF Properly compute maxbufsize AFTER security layers have been set * SCRAM plugin: Added support for SCRAM-SHA-256 * LOGIN plugin: Don’t prompt client for password until requested by server * NTLM plugin: Fixed crash due to uninitialized HMAC context - Replace references to /var/adm/fillup-templates with new %_fillupdir macro (boo#1069468) - bsc#983938 `After=syslog.target` left-overs in several unit files - added patches: fix_libpq-fe_include.diff for fixing including libpq-fe.h - removed patches obsoleted by upstream changes: * shared_link_on_ppc.patch * cyrus-sasl-2.1.27-openssl-1.1.0.patch * 0002-Drop-unused-parameter-from-gssapi_spnego_ssf.patch * 0003-Check-return-error-from-gss_wrap_size_limit.patch * 0004-Add-support-for-retrieving-the-mech_ssf.patch * 0001-Fix-GSS-SPNEGO-mechanism-s-incompatible-behavior.patch * cyrus-sasl-fix-logging-in-gssapi.patch- Added support for retrieving negotiated SSF in gssapi plugin (bsc#1162518) * Add 0002-Drop-unused-parameter-from-gssapi_spnego_ssf.patch * Add 0003-Check-return-error-from-gss_wrap_size_limit.patch * Add 0004-Add-support-for-retrieving-the-mech_ssf.patch - Fixed GSS-SPNEGO to use flags negotiated by GSSAPI for SSF (bsc#1162518) * Add 0001-Fix-GSS-SPNEGO-mechanism-s-incompatible-behavior.patch- added backport-patch cyrus-sasl-bug587.patch which fixes off-by-one error in _sasl_add_string function (see CVE-2019-19906 bsc#1159635)- bnc#1044840 syslog is polluted with messages "GSSAPI client step 1" By server context the connection will be sent to the log function. Client content does not have log level information. I.e. there is no way to stop DEBUG level logs nece I've removed it. * add cyrus-sasl-fix-logging-in-gssapi.patch- OpenSSL 1.1 support (bsc#1055463) * add cyrus-sasl-2.1.27-openssl-1.1.0.patch from Fedora- added cyrus-sasl-issue-402.patch to fix SASL GSSAPI mechanism acceptor wrongly returns zero maxbufsize #402 (see https://github.com/cyrusimap/cyrus-sasl/issues/402)- bnc#1026825 saslauthd: :set_auth_mech : unknown authentication mechanism: kerberos5- really use SASLAUTHD_PARAMS variable (bnc#938657)- bnc#908883 cyrus-sasl-scram refers to wrong RFC- Make sure /usr/sbin/rcsaslauthd existss390zp36 16424674602.1.27-150300.4.3.12.1.27-150300.4.3.1sasl2libgssapiv2.solibgssapiv2.so.3libgssapiv2.so.3.0.0/usr/lib64//usr/lib64/sasl2/-fmessage-length=0 -grecord-gcc-switches -O2 -Wall -D_FORTIFY_SOURCE=2 -fstack-protector-strong -funwind-tables -fasynchronous-unwind-tables -fstack-clash-protection -gobs://build.suse.de/SUSE:Maintenance:22434/SUSE_SLE-15-SP3_Update/78da2bc9d2953e74fff21a0893608866-cyrus-sasl.SUSE_SLE-15-SP3_Updatecpioxz5s390x-suse-linuxdirectoryELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, BuildID[sha1]=6b08fef58d45e7838202daedb0eb407838c89e50, strippedPRRRRRRR#Yղ**g utf-8264288b635f439111acfd1915b0730dc6ad9cb1c6133a568ce05903e9c0a6664?7zXZ !t//] crt:bLL Z@{fG AV AF"ſ|`q҉ Kcg=831·cf'jqaſɒBp73ڗo+hNEkܑi=Qތ$$Pl{ϱD/DUnS\W^۱Y{Ac{5 w 0mеE(Ca5]'lFB1p!6[P7VmVN 8τ1#%S&9we"rK\eU0w [3M'_/6b'!նk5u_uOMT |'1+n֗b Wlj1,?Oݘ=ջPH%T0/gRAחo W*kpvP 6#_\:]m!m\57>2 [^qjƙe Y2o[dw2jJٱZ?)*3$K$N.0Pȕe[w[ Oܚ3>+] 2Ҋ^Tr` 0Hy)ψ N\_B_̙DT=֣r㱮sZe?^)S_1nIuNV!M.oD!)ea|jNmp9 &3ZBMR;T49eenWȬټ"òKs*\JgPKKo|h\9 Lus8y[Cޒ9%LikE!.ArJ7Ͻxîݚ&F2%ͦtkߡM7;v7( b(m4-?X]Lo__K[@t;ꕶf\ESR4g;}"4n*_B8~v(qpOI;J>*:⒚%Clۯm$`wK4l R E/=p%suW3T0Ug@&LLK)ysu8y L?j#JȶjqxW"_7Op[D|J)pFF"?k|dt#c(~HAd6 ,2 fU/o Jg$E'M8z!ʽsUV^37\*5a:b7m|$~e36IĜH-/@h#HY;0=p;r@'/w e[ݎxGzm~V ~IU䮻jŭ.əӯ {m!&hi1F P= N<  +?8,v @y*;;XN7DԞXf?:!B/:atU"}Z`^\\?Ö-W:&3;a}N2zg wTC0\? q >"o RHU?кy<2 fKG{#KR0q5ׅW-@ }@Lr^Vm=d {}[ 'XRa͕)ll]mrgɑaܒY9R;(ˆeX(.|ȇ|5Ckݮ>OR6!B`-Z1lMH hZ=i];cwrDG UYT@@NGbUǕF aAZ6ʢ4+R1]ƪ$zG<r k7UU|A8>.%ɤ|%f#kvO4;k0j!`6y#cOB\2I Qsج(g46GV͕~RkO){֌P-ZZx{í<pКп(Vr,![Ӡh]UqBRk#$bxi_O 4H#`ujiE*X08^ڡiIJÔNŏ]ёN|wP~~/N/Bw9)'ETpS߫eX(%$U& U>-KA&_mI,{A}4ƊЎ4&nukmÅc@qX?.RLxIh=M R3r%it{ˊ,V85U=@oEw c- Jod>p34#bEDʳW2ax2184"m2ߞQ[ "ISB@0A:>T3{K6חܛcJKq-4P~^:~jSBc+0ڻK& LNiw&F<1f AE:pʿ58"&Es2ۯf/E.U6Lx<4ed%T p2 ؛VJ[+3Rsn3D&Yl 1S>* 6;1Amo'b5pl-51}.W`T~EM}+6W6| Wa!VL,@3^}}TT3ʢ$K>;q *@)_Oa]p˄TĔH%"5 #(bH/UQϚ wl^Rix}&Dk.d$.90vbsxaBD>1w?n3A37~IEG:{wʹV&+Ưp><ߌSeMlDU7O##';?ߗ&@ }WQF?*E/ #UVsn'vE2_leJ !mkoA5IT[NC!uJU\Rx}'-筟#aQsU~HR-2Noc|=)WPorGc}3JI}F7%GJT@pKe_1\i u$O2cϴY+JYY ꡫPȱ:jְ/@צ\l r#qץʤԗMO:[nRݧD'C^X{&F 5X5cĎ8BN)ˀVMPk"zw kUvWJ~$ ?% ւd?nM,޿8,ܸ|ZѝbBHZդ\KYh^ ]&eGx"*` F hT>]n5ͮX|X矶}II ěa)(T-O2z#]ՅŸ,Js/*(DnsF4{6l5X#&+2g<$|'b_uz^?$A.20=E'V;=w饜>P*cdqlsGگտy/+,c\O,6vaU+j?G{(ߩXnPoMT?*Dޱ%79v l ^}Bsh 1Ξ-eVn^:OvOkOGb;= u4m!U ٔnXdF<̳ WP,)Qݐ6V6%Z ,K6t̝MX_%<θdJ O{|+SKjmGvmJ +pz\-u 'jŁP@D)fs8M{ɓs3k51w|e"·d \,t wY_g&\9]fhA%tvZ\wnh@=`;sdՓ Wm*n{!138 O x CMYA`t"9Srag:|DDq"2m5s@̊jڋ~3W~'3֭h!'>tqD5}lX!oʡo O ~,tp\Z;/'K\?F粚:)'ח/RQc~YJsLl] nUuvfG1uOi]@`aL{:%I,.d%ZC[:n,QTg4+:{( #.&5rh{;,*o9]TVIt!qqljnD7ؾ =:Sqd`oΛ_|0)Eyb:md㡒pmseb-CR3-rǡN*_8+ưqCW_"i(s5).S]kFEBzLR-O 'ˏ5gjhV*)nTߟ/=?sxe̎>v(HnwRXw@HbT䎛ghlXJl[z72c9Bni'oDztN; NG:}i"[d;o\)vQ ͲCX2bAE˴{? }/׬ (-k Jd Ĉc&':,Db{̯+у^eS ¹ǣ1&HSrs e *4a,j l1:\k#z{ɷ2tmSiL 7e!a.Ex`bƷѰ'/RgbBzU0X\J8wZ nE*9!POPc}4 n(̐^x|3qWQ%D/v/[ޣX ; )BiSwh#E _/=ģI& Iԯ cz?[=.a-Bf'Mx2u- &VFIJ_ŮwIggf}?G1μ1J¦%]Vĭm-p QHbCQTAsA.kK~F bgGcx+{50]JEo^."F?"ѤTZ )>ڈ8Q;ss ( c,r2}B41G=t W~ڪ/{ijBΩ/>M]n)@{$N]5CNIP.ٓa,c54#3,~8jT-@K9QWNb8t{A%]Ld{ecM*;Q)t/:NVّ9 Ri?Y LszkkTψqWʈߪ~S~=>^ԱkXHG'{ Q7M eAN6CRɪ`#R'B+)'çxܰMD,/? |fvjuKԎ]DhQ*_&iӹ+C-Pb''/~٠aBՔzF,Vos k49!>snpu!}8 @7 J5zJk{vPc ʍ>:오ZDf isH~-N"cՎGOI( U q3 H\wSRI7ƈIKϣ6Gsk9t_0Ҝ{7G1X&\;9k/^IL"¨9P0CG=bN=!Q#cˌލ6=\~;ǂ:;` Upt]jV`>F8^%XC}(J7#sbF\̽ }J6֭p"6Pn2vrab;N-"z*?Ϣ9W)G ?R]x :]y$E]8"4iӈIHYzﱣ-eC}-^Jɧgv p[rR8"^F&/vPU6!ơ{q"8&z YV w g4N#)Q#J/%E/AF .Sj'#X֘`:."u=pld35p$0T>=`f+'角1}J%fe^Vƪ0 5A>7a*))hc(uKk=pr5 8Rl iCAR9xݯ0GkRCe ޺X@J['ݏFXβYf A'#jR9` RzWz[0QĬաV ^'t|)f0Lb`+Oog!:_3ݥ$r$(:)0*XR_Ia23NJ@p!Pt&`i鱖㲫Y4-Wʸs~hC\Zu?ÑȥEM'WP3WHϜ0p0 ~QzW C=≾ D4/@ϴ˒;yN:hFP 7gNrHЄ=.WeIwM\: f8IgJQ%Zy˜ g12G̃R[\p,#CxI +ݭ&~\~U8{E˅9nqd2玂WFH>FIAꖮ_h }(b-I pbd`N/+v0~x^ϖY;xI P6 !8q뎠Wrr`㠧|U rxs0` "J$i$ 4-C_̌7D`h߸MI-lUXiC(%PWDn'VR5~H̰ ߭H J:b]YzGlb /aJ6EŖ32OӜH?/Ei~ay\8YYk-?BgDK8W:nVaG:uIm:xizﴐu%ԥ?f6{꤫zt{ţ7)WiY׵S  T^`$c˟ ǤCn9)#=FX˓W]a4% {:(GT䣝RZ {hlX, f/9Ǘ`DGN#EdCİG<0gfRh9Zquά"Ñk]SRq_u OjbM2Z9/AZoil`6uf>ܙߨIU#kmEt$ӍWÈZ ,bwJؗLxƁ `pV6)=GZ_'"E<'y'/bS"ٹtt\gˋ I ܑ"ǐlbYp O:Rg3$=Vcr!$ꛯ?9_ZSkc3<#\jDzrOUCm,ּU6>DXۜCXzL/Xg r cR _t&F#+~J]FM٠j%)lͫjVp̹͞N12st|]!o;pcQ8^\D+e\,".t=g}wWX&G5)rU-8?% F_WhTcU[2" Wؖ & b xJ=\ acO32@)j7+$2RxET% l?|A>.&>Rϛvq,D{ ff'ybe ڤnXs] 4CDZ*NMse*6yC7 Q|mc!}x|Z. 6k/ۢ&lO,s<4| C7%Vb>+gptcCQZO⾩+K(OG7(P2ĢrB[ %r͊'Vc BIVEO$t\ [ArlwFa9x2VF hd<ʆ4"4^L?tA>l"$@-5IiNQDm4 EsY.­ 1|ïNanRfc2e_tm ]B_ aA RA#YҞ3STtA 6sI,“0RW%٩d~_R<۷&dj.pwɖIO#" ,8[Mi4!S8Ÿնh{u#'Q 7gtl"UnJj6b4*-G oWZ/h@9"f{7 t-2pV,zKbj6WB2bLDvu=Ryo^Pv1:- ᯮšcR"'Bgn< i2_dXFw6|ݮz?)Lt_0h6rUKgSPXv.O(ICwWpN@ n,%1KFDU=c}G.Db Rwqi{Mb]/GEZd蔼 lHH[DCQ#}<5:GӶkBS@mڮNF1{o)PfDO~?%xJSWl!D` YZ