cyrus-sasl-sqlauxprop-2.1.27-150300.4.6.1 >
A bAp9|0 d8 $9J&:]EGp@Dp~LZ3˺KY达gYxhIl؏4&2ڈB ߭
LoW+2
^1y4~$l[2/ Cxei&xFЩKs1xTRW[_rédF9;f-;)?@ s-uZ jǮj`3BǶ`
Dq?c6 Ifd27b5c0ea302f036cab6fca7db439b9ff12cae52 5e93c7b804f8ad8f24199f81a99dcdc50a9cb1a508aa7761cdb301fb15255805 A bAp9|kԧ 5$H݊
3 \ut_eӴc+\~;ZAG63};x@gG0U hfr6` =';jbM.`fYӝGۅRBR)vT( - WlTKHqSzA oͣ1io;=I9Œ]T]E"a r ' # 7:{N2,|i3 Klfc'!JgyH.W1c |D > p A ? d , N 2 8 @ P X
` p
D T
L P j ( k 8 t 9 : d F G H I X Y \ ] ^ @ b ^ c d e f l u v w ` x p y z C cyrus-sasl-sqlauxprop 2.1.27 150300.4.6.1 SQL auxprop plugin for cyrus-sasl The SQL auxprop plugin supports PostgreSQL and MySQL bs390zp37 ySUSE Linux Enterprise 15 SUSE LLC BSD-4-Clause https://www.suse.com/ Development/Libraries/C and C++ http://asg.web.cmu.edu/sasl/ linux s390x yA bbbb 618bb339d5fdd798cb7cf623c71517dc2376c303041a81f38e9645fa39601a61 libsql.so.3.0.0 libsql.so.3.0.0 root root root root root root root root cyrus-sasl-saslauthd-2.1.27-150300.4.6.1.src.rpm cyrus-sasl-sqlauxprop cyrus-sasl-sqlauxprop(s390-64) libsql.so.3()(64bit) @ @ @ @ @ @ @ @
cyrus-sasl libc.so.6()(64bit) libc.so.6(GLIBC_2.2)(64bit) libc.so.6(GLIBC_2.3)(64bit) libc.so.6(GLIBC_2.3.4)(64bit) libc.so.6(GLIBC_2.4)(64bit) libmariadb.so.3()(64bit) libmariadb.so.3(libmysqlclient_18)(64bit) libpq.so.5()(64bit) rpmlib(CompressedFileNames) rpmlib(FileDigests) rpmlib(PayloadFilesHavePrefix) rpmlib(PayloadIsXz) 2.1.27 3.0.4-1 4.6.0-1 4.0-1 5.2-1 cyrus-sasl-sqlauxprop-bdb 4.14.3 b~_j^;]߶\X)@Y@@Xg@XVhT@Tw@varkoly@suse.com varkoly@suse.com scabrero@suse.de michael@stroeder.com varkoly@suse.com vcizek@suse.com michael@stroeder.com varkoly@suse.com bwiedemann@suse.com varkoly@suse.com jengelh@inai.de - CVE-2022-24407: cyrus-sasl: SQL injection in sql_auxprop_store
in plugins/sql.c (bsc#1196036)
o add upstream patch:
0001-CVE-2022-24407-Escape-password-for-SQL-insert-update.patch
- postfix: sasl authentication with password fails (bsc#1194265)
Add config parameter --with-dblib=gdbm - Remove Berkeley DB dependency (JIRA#SLE-12190)
The pacakges cyrus-sasl and cyrus-sasl-saslauthd are build
without Berkely DB support. gdbm will be used instead of BDB.
The pacakges cyrus-sasl-bdb and cyrus-sasl-saslauthd-bdb are build
with Berkely DB support.
- Update to 2.1.27
* Added support for OpenSSL 1.1
* Added support for lmdb
* Lots of build fixes
* Treat SCRAM and DIGEST-MD5 as more secure than PLAIN when selecting client mech
* DIGEST-MD5 plugin:
Fixed memory leaks
Fixed a segfault when looking for non-existent reauth cache
Prevent client from going from step 3 back to step 2
Allow cmusaslsecretDIGEST-MD5 property to be disabled
* GSSAPI plugin:
Added support for retrieving negotiated SSF
Fixed GSS-SPNEGO to use flags negotiated by GSSAPI for SSF
Properly compute maxbufsize AFTER security layers have been set
* SCRAM plugin:
Added support for SCRAM-SHA-256
* LOGIN plugin:
Don’t prompt client for password until requested by server
* NTLM plugin:
Fixed crash due to uninitialized HMAC context
- Replace references to /var/adm/fillup-templates with new
%_fillupdir macro (boo#1069468)
- bsc#983938 `After=syslog.target` left-overs in several unit files
- added patches:
fix_libpq-fe_include.diff for fixing including libpq-fe.h
- removed patches obsoleted by upstream changes:
* shared_link_on_ppc.patch
* cyrus-sasl-2.1.27-openssl-1.1.0.patch
* 0002-Drop-unused-parameter-from-gssapi_spnego_ssf.patch
* 0003-Check-return-error-from-gss_wrap_size_limit.patch
* 0004-Add-support-for-retrieving-the-mech_ssf.patch
* 0001-Fix-GSS-SPNEGO-mechanism-s-incompatible-behavior.patch
* cyrus-sasl-fix-logging-in-gssapi.patch - Added support for retrieving negotiated SSF in gssapi plugin (bsc#1162518)
* Add 0002-Drop-unused-parameter-from-gssapi_spnego_ssf.patch
* Add 0003-Check-return-error-from-gss_wrap_size_limit.patch
* Add 0004-Add-support-for-retrieving-the-mech_ssf.patch
- Fixed GSS-SPNEGO to use flags negotiated by GSSAPI for SSF (bsc#1162518)
* Add 0001-Fix-GSS-SPNEGO-mechanism-s-incompatible-behavior.patch - added backport-patch cyrus-sasl-bug587.patch which fixes
off-by-one error in _sasl_add_string function
(see CVE-2019-19906 bsc#1159635) - bnc#1044840 syslog is polluted with messages "GSSAPI client step 1"
By server context the connection will be sent to the log function.
Client content does not have log level information. I.e. there is no
way to stop DEBUG level logs nece I've removed it.
* add cyrus-sasl-fix-logging-in-gssapi.patch - OpenSSL 1.1 support (bsc#1055463)
* add cyrus-sasl-2.1.27-openssl-1.1.0.patch from Fedora - added cyrus-sasl-issue-402.patch to fix
SASL GSSAPI mechanism acceptor wrongly returns zero maxbufsize #402
(see https://github.com/cyrusimap/cyrus-sasl/issues/402) - bnc#1026825 saslauthd: :set_auth_mech : unknown authentication mechanism: kerberos5 - really use SASLAUTHD_PARAMS variable (bnc#938657) - bnc#908883 cyrus-sasl-scram refers to wrong RFC - Make sure /usr/sbin/rcsaslauthd exists s390zp37 1645520886 2.1.27-150300.4.6.1 2.1.27-150300.4.6.1 sasl2 libsql.so libsql.so.3 libsql.so.3.0.0 /usr/lib64/ /usr/lib64/sasl2/ -fmessage-length=0 -grecord-gcc-switches -O2 -Wall -D_FORTIFY_SOURCE=2 -fstack-protector-strong -funwind-tables -fasynchronous-unwind-tables -fstack-clash-protection -g obs://build.suse.de/SUSE:Maintenance:22965/SUSE_SLE-15-SP3_Update/d4cb4470d050342a6992a1eb94612c2d-cyrus-sasl-saslauthd.SUSE_SLE-15-SP3_Update cpio xz 5 s390x-suse-linux directory ELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, BuildID[sha1]=219ed9e86134cc8816d96e37db54574aef036666, stripped P R R R R R R R R W*e utf-8 83fe64b9e1101607744f36a0759f580c431c625c3b848c4bb174649c7cf15001 ? 7zXZ
! t/|C'2]
crt:bLL
ɳ՚.u(i'-!4lXrxy>RJU)uCMg"I@X c̿K_6 P ނ'8kjD.r,_ F{C<$dyLD,j6g 0uKLvnh1 ~3E'm(6nN{>vR?ɖ>s6!W#֎:ϑOp 0\`V*"&u/"J 6#i:ٕb"VOZ {[Z4P\Tr cd?XfrX\%0 [r;
!c;j\~Qt kRZf'wjo=0q{2~ HwansR9m>XBvx_#W4+~,G
>*@ej]ro 1B# g Av splê;q7
^h{-ciuQI N'_1
g_sPMg[Q^.AtT0\ p @Ut8_ճZ N@ϧ: a6O^C,gׯজ}bb65l-:FTL
7HwY,ts{CEb~ȞB,b9֘v뤆_i',7u6ނvS{[rZI> ϙqu'_ٰvq ۂ@ߟ{ςA7UqM¿]")?1l
R&7gӸA&Zxø
)^8H=&P[.mVִ+y[gH N[g4+D A_q6b^C~N,ɸЫcV
OZ~tu Z \k ^T_}9 !;zCòz@h#P"ĹˏVt܃Gx}jK]nmb? +*
|Yr'βvFCwFҟmZJ
!fOgERw/aS';}$iJk_!x t y@b)^Vʼ,O Hk|ocJH,m/9a0VMlژ8 zt
^5E`brzXTSt>St mԌ @0.`BDxh8GMN[k,˕FyD q>1R 6LHր.Ԭ֭5y1B~p
]@:$Lf`28Q?v|\J!TrhO{#oMLk
D9Ī_pv|F iR[^(gڻlݘ%M0}\ !Vr5 I^1hCSp<Ş|Vdp} CVs0U2ܜpi ް| `ڏ/T ӧ@ܢ3 y:@ìw@o,A"t#>̈qn]*O5i \"#Y (2|15 4J3 h Y5iW,Ռ{] ?2;?}OglEWK^lЈȆqU aU3"]AR+ΜW/QCs ?$ hU^'hOVk 5v 4bN%] ђ}.<ڴ!\,YB.gQ)~q-HMvbgշ}>BZʠ$8Ü<8j7w5A6Ƣ@~A)m ;UNj{|
%
eBJ ¸Q>.bkfjm% z.]cWeET$Zr WjR_(3z0L :K_yi2yM H ž!z@q#iiKjX D g@W~Dgo_k /i7e|ꚡ = 60dөG^ y 5
;;^os̳1.q3Br4_M^d~FVڢr澞!F&&w! }[a8{J{Z nIMpd * udk )~d3Mg$Ø P,! FGt>N^xS
y)G]eqr(vn0#6Dū}#t!>G Y?^Ԕ )9'4^/0P oBjtPwz*>4ȑZ f .X_# ߺ[T0Z4 M1h6Z =+B}Zb/`!aR Hd-fagH>9,n}㔳`7WgQfyH4l:NխǎCx4OKevdbJꗧ
)~W\OlKb}p=BW 1v3,Di!ZQ!XbR8# v @e̶UjRa0z/7tse2_\5 ڗ페M_3N[2f8 ʙ@s
#?ϴ,"y{-w=:| ҡw 1H{ wq=X4{I.QTk%c_&4Ƒd8Vbʵ n b Yc!7͗8tazU[CKAOѿ1 2 C
can4q{(m/㩨]qaGҘ!:J.U$;) Y$pNUoI@>5%wE
@5̚Q!H8,ݸt
'| =U31dȎP˖*R!q:q+wOg T*ASiFS3♻d~[%
n]9w*;)r@l*
[phYe ߱G}g:G9$Cof9佸'c c~˽OݰSvݰ- kq/)P 2z+z~{*zB,#}ՙmWX eBNPm8
Ͷ 9c-O>}_% $B Nö\Tώ0]t}f&^X;uP a!1V }e-% _b6=Ŭ-mJ x]k;,a ,& Fd X,.sEi
0YZ Fe M8B04D9>iшbG)^gKg[o
d{+>/)N8v7D7 ~U )k]]\
,(D jvmnVb.i#jOoZy_`nNh1nx'g= 03Ytl̓A|*rs4#y
l1d4KƅقHr G= )dvr1tܶ'!K ܻ1aئ
R#6
b?Me psɢʏ^sԪ[xw@Fь)(K7y↉]e )dClV8- 3!iؑ]pɠ:Kr sxs `}Vajs #>{0e>vsN0qޣt Hx%Q-ʇ13ӖIEKh-6[|2dVz?7w+&LVOkDF'R}D!G #:wք"[$Kkz m-% Rqcwzw"އCg߅s
IvMTkNc$cla2A
ڈtz=S( *"g8c|%Ics6.O H5|ϖ8? % 73D7Et!b8jZ rw˶m}AH
%i$5?p,^1:7n! h(Mmrܑ\cglAP ~KW oj
TN˃k;3d AX9 r' ß"ġK;7O5H
\ؐ(b!Kkx.V 0CB>- !7tpܟYW
⍺
$bNV% }$8}uYf;m ʻwC`ťO=-& q8MjZlȼFLbZY$̩/ghZ R:ڰ}p$VEar0p^ž䧻bS p6cب # %R-Q}.vUle0}4ݷdCj쨋o9? &CـG寸@H +}o@HU0|K= >R²Y٦J/ DG5># ? EL2ӊP!Lۨ ^%cTߎOOX>{:2(y:B37L܍qLLkꪏ73t7BRȵ"nK$*'Z$č2/P=ծdx4?:JvL s Y?&$d6dÔ C;%ב Cqg^J?F%w2h hBu7.% 2ALX Ut.z||k@*
(B;el|e I!e{K nI+L EWL3+e_ i{, Y>uxlxwSN o^( Yw PCLY
!ir1[߯mj]Fe2^aM9S Lrwº
6ф8 .j6ECsCaN|ڼXu V[ utMq
9w(CL,oH`dctک` |Q-Q
gEl"o
q
{A.ֻc(nTP WB@\)MU1U0t{*!x!VhG}~elY1 K04@ rł GQyIFizfؔ 3Y#Tj 0h]UJn}@Y{XSWg zՑţ kV&)zpnX{ f'C+j:J :|mNE/nײ( ӭHfrŷ z,smb?ՔT?]sĎtX N;i )>ي QϻCaF
ZQxFVw,&.t4&{+Q݂i?9 i[c m-gq]'DwNҟ:X
#%8AbSf)~&>eZJ+ F'F מĕ7+%4=.#8b,r@ b4[$Le4yэ$d&\ڼXvEVƿ&Nˉ'jΈ %C=MufXzràe =S2b):$ Ne V{ G+)ЅL~\eф /rP)p-e73 27 &[
Nn!p_9yRR w /]F"N}@@2 M}xXy!u Q z!3s)п`XEt&$7~&. çs\[yEK+5w:t,/>zm$>ǟI
4 n ڶH_-:"C+Dy=mf# Yu~ip/@RSBS!H* Q9i Ey QAw5(w 4{Ɂ;s3 oUgɞ!K1"dLHUì_¸W
H]%\X$s l6@j)ar Ϙ`,w X9h Sc$Fh7_jNb*-%ofdOjCٍ& Ej"3 W8
;q^,mzTB~ i Nc_kXP'߭! & F> %%hWNDb$zv<YiZ`^P,r^A 5n>k**/5. Re0-$6H1ץ z9=XO`,>_aWGò 0 AK`BkY~A4߶ 8Q1# "{,뙊. VhL.7ڈ-k]e\}&φ ˣ} ;˸!
טm kvNxig,v`8/yV$Rvv36D Lط\6HWܖq[y!leiN¬9nG&Ug-~\:,ΖRڕl$,Wi @Z̎cGcm^עH>ƹC N h
YZ