libpsx2-2.63-150400.3.3.1 >  A dp9|vaU5/M9y#9G% h/AԜ*$U fqy75&Bf5Q2zV8C{ ik6^6l.)aԩ[:x{p]RbI(Kؿtm)(r'ORu$oVH}( 7Rt!a|Q~D0ωj$>YvlgEMT*]5?;#OT-\ـW$pi0323cccee2c73616cd51da9177bf6cf8abe5256c7e410b3f1071e85bfa075d37eeac53c2bb0c5a6f027e8b022a51ed61628333d9hdp9|yf- /T l(}]:?!KӤ&t h=P1s!odT掏Ϣ 6 kJryѨf^Y4̄Mge\lTމ#?$Oܢ ԅOkRa} _q*%TaeѭaC`ͳh7P/jS-FQrj ZiylvhAW>p@1|?1ld   K7 M^    L `p , a (89:>-@-F-G-H-I-X-Y.\.0].@^.kb.c/Rd/e/f/l/u/v0w0x0y0z1 11 1&1hClibpsx22.63150400.3.3.1Library for Capabilities (linux-privs) SupportCapabilities are a measure to limit the omnipotence of the superuser. Currently a program started by root or setuid root has the power to do anything. Capabilities (Linux-Privs) provide a more fine-grained access control. Without kernel patches, you can use this library to drop capabilities within setuid binaries. If you use patches, this can be done automatically by the kernel.dribs-arm-6XySUSE Linux Enterprise 15SUSE LLC BSD-3-Clause OR GPL-2.0-onlyhttps://www.suse.com/System/Librarieshttps://sites.google.com/site/fullycapable/linuxaarch64 XO!A큤dkdldq`*aaf785d39ebf0a48ed8187f1eaa15b8c92486e047d7491286daf972d8a497889f58c80bcce8c929db39a23c32e924876e3311f3ffa54f66076c38056d38fa59blibpsx.so.2.63rootrootrootrootrootrootrootrootlibcap-2.63-150400.3.3.1.src.rpmlibpsx.so.2()(64bit)libpsx2libpsx2(aarch-64)@@@@@@    /sbin/ldconfig/sbin/ldconfigld-linux-aarch64.so.1()(64bit)ld-linux-aarch64.so.1(GLIBC_2.17)(64bit)libc.so.6()(64bit)libc.so.6(GLIBC_2.17)(64bit)libpthread.so.0()(64bit)libpthread.so.0(GLIBC_2.17)(64bit)rpmlib(CompressedFileNames)rpmlib(FileDigests)rpmlib(PayloadFilesHavePrefix)rpmlib(PayloadIsXz)3.0.4-14.6.0-14.0-15.2-14.14.3dcp@ba@a͟@a4aS`@`r`y|@`X`"y@`U_@__O@_+^G@^0"@^[^]qZX|@Xh@W#Tabergmann@suse.commeissner@suse.comdmueller@suse.comdmueller@suse.comandreas.stieger@gmx.deinfo@paolostivanin.comdmueller@suse.comchristophe@krop.frtiwai@suse.dedmueller@suse.comdmueller@suse.comdmueller@suse.comdmueller@suse.comdmueller@suse.comdmueller@suse.cominfo@paolostivanin.comtiwai@suse.detiwai@suse.dempluskal@suse.commpluskal@suse.commatthias.gerstner@suse.comfvogt@suse.commatwey.kornilov@gmail.comjengelh@inai.dedimstar@opensuse.orgp.drouand@gmail.com- Fixed improper memory release in libcap/psx/psx.c:__wrap_pthread_create() (bsc#1211418 / CVE-2023-2602) CVE-2023-2602.patch - Fixed integer overflow or wraparound in libcap/cap_alloc.c:_libcap_strdup() (bsc#1211419 / CVE-2023-2603) CVE-2023-2603.patch- Use "or" in the license tag to avoid confusion (bsc#1180073)- update to 2.63: * restore errno to zero by the time main() is executed * Consistent psx handling (a panic) for syscalls that return thread dependent status Inconsistend behavior noticed by Lorenz Bauer * Add a test case for a deadlock under investigation in golang * Trim some of the #include file use to make the tree compile more efficiently- update to 2.62: * Bug fix for Go package "cap" and launching * Build cleanups * Documentation updates: cap_max_bits has a man page entry * Recognize default securebits as a libcap mode: HYBRID- libcap 2.61: * Better error handling of the numerical arguments for capsh and setcap * Fix executable mode for all of the .so files. There were two situations where this was failing (with a hard to debug SIGSEGV inside libc) * Added an example of a shared library object with its own file capability * Fix the top-level include for Make.Rules in the contrib/sucap example application * Add support for running constructors at libcap.so start up time when running as stand alone binary. - includes changes from 2.60: * Some build, code linting fixes, the addition of the cap_fill_flag() API and a memory latency optimization * General improvement in thread safety for libcap and cap package * Minor API change replacing libcap:cap_launch_*() void returning functions with int + errno status returns. * Added a cap_iab_dup(), and (*cap.IAB).Dup() to API * New features for capsh: --quiet, -+ and =+ arguments - add upstream signing key and verify source signature- update to 2.59: * Fixed a potential libcap memory leak by adding a destructor * Major improvement is that there is a path for Linux-PAM compliant applications to support setting Ambient vector Capabilities via pam_cap.so now * Added libcap cap_proc_root() API function * Added color support to captree * Fixed contrib/sucap/su to correctly handle the Inheritable flag * capsh enhancements * getcap -r / now generates readable output * The shared library objects: pam_cap.so, libcap.so and libpsx.so, are all now runnable as standalone binaries * The module pam_cap.so now contains support for a default= module argument * Enhanced capsh --suggest to also compare against the capability value names and not just their descriptions * Added capsh --current support * Added a contrib/sucap/su.c pure-capabilities PAM implementation of su * Fix for a corner case infinite loop handling long strings * Added libcap cap_iab_compare() and cap_iab_get_pid() APIs * Added a Go utility, captree, to display the process (and thread) graph along with the POSIX.1e and IAB capabilities of each PID{TID} tree.- update to 2.51: * Fix capsh installation * Add an autoauth module flag to pam_cap.so * Unified libcap/cap (Go) and libcap (C) default generation of external format binary data * API enhancement cap_fill() and (*cap.Set).Fill() - to permit copying one capability flag to another. * --explain=cap_foo: describe what cap_foo does * --suggest=phrase: search all the cap descriptions and describe those that match the phrase * Add "keepcaps" module argument support to pam_cap.so (reported by Zoltan Fridrich. Bug 212945) * extend libcap to include cap_prctl() and cap_prctlw() functions to regain feature parity with Go "cap" package. These are only needed when linking against -lpsx for keepcaps POSIX semantics. * this likely requires substantial application changes to make Ambient capability support usable in general, but doing our part for the admin. * Add a test case for recent kernel fix * Go pragma fix for convenience functions in "cap" module- Fix a broken symlink. libcap-devel installs libpsx.so but didn't install the library it's pointing to.- Add explicit dependency on libcap2 with version to libcap-progs (bsc#1184690)- update to 2.49: * Implement cap_func_launcher() and cap.FuncLauncher(). * More robust "psx" redirection for nocgo compilation - the documentation for the cgo implementation is now included in the nocgo one because the go.dev automated documentation builds the docs from the nocgo version. * Lots of documentation cleanups and added a few man pages: for IAB and Launching. * Some general no-op License changes that might cause folk to notice but only for formatting reasons. These were initially inspired by some lawyerly interactions, but I ended up rolling back half of them because they confused automated software infrastructure.- update to 2.48: * More uniform use of $(MAKE) in Makefiles * No longer include symlinks in the git tree * Provide support for make GOLANG=no ... * Provide support for pointing at a specific build of the go binary * camelCase the contrib/seccomp/explore.go program * A number of documentation fixes to man pages and source code comments * Last use of GO major version 0- update to 2.47: * Restructured gowns to default to uid base of getuid(). * Augment NOPRIV libcap mode with the sticky NO_NEW_PRIVS prctl bit. * Improve the usage and diagnostic message for setcap * Documentation fixes, license declarations, example updates- update to 2.46: * The bulk of this release concerns fixes and improvements to libpsx * Fix the capsh == argument handling and add a test case * Added build support for systems that do not support libpthread * Added build support for not building shared libraries- update to 2.44: Generally, this is a release to help package builders: no functional change to any of the generated code just documentation and make related fixes.- update to 2.43 * Linus' kernel tree defines CAP_CHECKPOINT_RESTORE (40) so support it. * Fix the creation of the $(FAKEROOT)$(LIBDIR) for split install targets * Clean up a binary from the distribution * Added some more release time checks for non-git tracked files. * Fix a deadlock in libpsx that surfaced with a set of compiler optimizations by removing the psx wrapping harder.- Update to version 2.42: * Closed a potential issue with "libcap/psx" Go package and errno * Documentation updates * Minor optimization for cap_to_text() and (*cap.Set).String() * Discovered and added a missing function (*cap.Set).SetNSOwner() to achieve parity with libcap * Multiple fixes * Support Go module abstraction * A new kernel capability: CAP_BPF * Better support for cross-compilation * pam_cap now honors PAM_REINITIALIZE_CRED * implements cap_launch functionality- Update to version 2.32: * Bug fix for fakeroot incompatibility (boo#1162014) * Slight perf improvement for cap_get_bound(). * C++ support for psx header inclusion. * Some new testing features for capsh- Update to version 2.31: * primarily a documentation update * fix libpam.pc to not require libpsx.pc * changed the text format of the default output of getpcap- Build using -ffat-lto-objects for static library- Update to version 2.30 (jsc#SLE-17092, jsc#ECO-3460): * BUGFIX: arm and i386 fixes C and Go setgroups choice - used wrong syscall in 2.29. * cleaned up make clean and make install to actually work as intended * updated Gentoo libpsx.pc file from Lars Wendler * refactored the way libpsx linkage with libcap performed mutual discovery. * Previously (2.28) libpsx had an API call overridden by libcap using weak linkage function in libpsx. In 2.30 this is reversed, namely libpsx provides the stronger function and libcap has a weak "no-op" version. * a bit more consistency in handling the 'all' sets in libcap (C) and libcap/cap (Go). Namely, they both dynamically discover the number of capabilities named by the kernel and use this as the definition of 'all' for the current runtime. + libcap (C) exports cap_max_bit() to export the number of supported capabilities + libcap/cap (Go) exports cap.MaxBits() for this same value. - For changes for older releases see: * https://sites.google.com/site/fullycapable/release-notes-for-libcap - Add glibc-static-devel as build requirement as tests need it - Install libpsx.a as it seems to be needed in some cases: * https://bugs.gentoo.org/703912- Remove pam_cap (bsc#1150522) since this PAM module is a bad idea, security wise.- Use %license (boo#1082318)- Enable PAM pam_cap.so module- RPM group association fix- Update to versison 2.25: + Recover gperf detection in make rules. + Man page typo fix. + Tweak make rules to make packaging more straightforward. + Fix error explanation in setcap. + Drop need to link with libattr. It turns out libcap wasn't actually using any code from that library, so linking to it was superfluous. - Drop libcap-nolibattr.patch: fixed upstream. - No longer add %{buildroot} to all variables for make install the Makefile learned about the meaning of DESTDIR.- Update to version 2.24 * Fix compilation problems (note to self, make distclean && make, before release) * Some make rule changes to make uploading a release to kernel.org easier for me. * Tidied up some documented links. - Update libcap-nolibattr.patch - Add pkg-config build requirement; libcap now provides a pkgconfig file - Clean up specfile - Move libraries and binaries to /usr because of #UsrMove/sbin/ldconfig/sbin/ldconfigibs-arm-6 16877919862.63-150400.3.3.12.63-150400.3.3.1libpsx.so.2libpsx.so.2.63libpsx2License/usr/lib64//usr/share/licenses//usr/share/licenses/libpsx2/-fmessage-length=0 -grecord-gcc-switches -O2 -Wall -D_FORTIFY_SOURCE=2 -fstack-protector-strong -funwind-tables -fasynchronous-unwind-tables -fstack-clash-protection -gobs://build.suse.de/SUSE:Maintenance:29616/SUSE_SLE-15-SP4_Update/acc1a57c9c21449596cf148fbbfeb63b-libcap.SUSE_SLE-15-SP4_Updatecpioxz5aarch64-suse-linuxELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, interpreter /lib/ld-linux-aarch64.so.1, BuildID[sha1]=8c0c97b644790b5ba2a3c67fd3686c8b841b38c6, strippeddirectoryASCII textPRRRRRR ѐj}hOutf-8ebf4313822f8c0480b965b02afaeb80841a67a6b91ad630e476c0f06f6500fe5?7zXZ !t/[;2] cr$x#H!%66*msТ"і=vH >=Uu)ց-Y5|gʥZ!L-Ս/B f8KFUwOݓ@ٽ9Ac8PCh{e9iok!Tm{ $S_Nc)k'mBnDuH\^6u>lePh]xdT"PKc}ȢHzx^^{(mҘZhocqT4%3 `-MR: y 5קmGQ{@3;?ֈLTq/ʭP9d$N9Mzo5rafc|°ڳ逺zs'" u2kZ: 9'I U`N ʣdI2ՠO˛DĐTzV˜V?SGmͤ;>bI`Y_ճH'\ne&FǪvh{$GoZe [5Sg,_R*3lRi|Z}+П4fB%>1ڢV;"q1_TJ%QZޙfK.4:d g.(Ә,W޹b$ߔQi\ ӤzywCl߀S88dв y Hǀ hP}+= û; Ǐ} 7ȖMjAV8~'^vy4PAy?k po3a]uߑE(-2/#aШayhJ]*l! xfNTf]~ՂofDg&~u_ w,31;bC׸%Ԗ$ K{,8BWU*+Lw=IxGV4BY!x`eC}!Z 6UxsCX<x#B7|`_ Y|$P% ?<=Z|{*&$. ee(O_%-!O}{#@9o#0fR/p'e k&G4A'o1R0:sΌo|UԁmTٹZ%໅A "+~DK[ W? Z30mSWnBGtbjO-8HSAԑ3REcdVJ1=$"Is8]]xfVSߍɾ2c(*ےZ ;0v''|]b->EoȻ{FBA >+l?3O*'tFlS]gLF@xy'o]w2~DnGZEFhȄ]_ʧCYnP Amwʀ$ XIQ5 3 { %"yPidR`)^9ur#t4uO t抲>BI;nQ|BBkm |S1ü5m]}t*J;73YVeϛL,OB96ɷlu5^YC{\bpHW>_CCFݣ$Fh͗ }[" ?tgwZBH#}2C_S}YB?ߖzǝȿ㘔栓kvZ: *$ `)岺|O8zfŸ)v:=Oa\OUqsEY2r;_28{ݷ _'HJXi^!QUr!o|ؓE61"QEq$F.IKL qLaS|r<4~CEz0˪O>fF$fI6jˌ,$4c(e+|+>  AyɴE[֒Z5ܱ'FrT|n$Ǵ#nx3kS>5 D#./xq0kR=M]Tfc([ثrٌ$޹&cwRp[*kdց ~^w G`bމQW}U bb413[W(JQW44&s֟L։71}N:p7>PA8MbkRra=|/0a)l;8~2"$v9,au瓒b*;e/,ߨCa~\{{U`SXp.vteǔڮXlTí+<"✼֫@(с}Ճ4+k/MCHVdˀcaeX8fO^B N)Oy嵤iC"7_B__FGSiBm;JҌDP҈kZǘ`62;6K/ 'yͳk#g٫NaQa(uf_ˢgt7,0zIL42.sHh8$]?K Noزa 1. o! ~k*9}|OT-}n0EJ2 *#&*:X71g78>sbks)[˝ k7(6zlRUHSwȵ2Bun56&'F+IAԣ}JvvNJ1 ZIAZך%bŠr<Ώ5Gz /u]i\ȶXg3m0<|lU:rҽǬ>n⏁C5!= 6j={+yrf+B >RWxA>jƱ>*0Kߺe?` m` ݩ?Cб3ʱ=_xuծ@5 /HvԠ{Dd`}ؘ xP&eR8Ӊ h )GPGTw<HscngsǺn&YeO揯eU@ T?2L'biZI]FSǵZр`8%`HMpKo,#i#e\9=hoxQEFɺ$ĎH.̓V1Had 7ƍ3%DdvH!5Iy`l0P);QHaX5I\H,%(ɵ6j7h/A&ljj2GcA-+#{pVK4y`Bk=DC8ZY !Vᘼ:Jrvt,\QǴVbWG*&(Ny078GC[^Ku{^ZF[kq Ruɼ)%BdA/{z2NY^YX⺄VA B 9}H:J8\S qwxuoIn:#XwB ԑ/al3kx'k8nY@Û/?WjC$:i%#rb"Gecv77""8xviQNj,Ώ4h7 Lʂ^c,OX.%Ԝ籚%vE~[IxwKƓ?-Jh3Tݶxd!gU#ȋ6Unӿv#3z}0P{iUkOPK@ViLcT{ٹr`RַnZE1j_q"/Vatyԋ#!4hP;Fݫ=䙹Fgx[u>ʣDK8ٮ> 'бU x">Tuz$^beݷױu-"cqbjiR@ǿT/UnVʅA~sGµv<Ȣb =XP&Ȳ@iu)X&gى*㟪Po?}7Q iZBsR# QU#A$?NM(;D'Թ.oaLI`2SELm^rO"GJ8tlnzP)oŒE ­Zf~`I24F&}2Vwh}xp#cf(0dիԯyo(ttOXeԃF1[)C!=<Iz*I SeR&NtiWRI,A\r>I% cA|,M@TeHE~H?u<69)h1(} ;塸aGf^ < ];P/2pMeӁ .4-۴GG_Cr;Eo_ux|'e9SvwqYGHWZ  A+(QK%Ċ#@ru;Ekç>O9"+UZ𤚙5`ؚys%#Xlg-)*.w)i_UJ829aAsddYߞj9ܸi"SغSʀ17' 84bps%Ny]tslzpcgDPrTgwZCEsԕSy.tPg ;Ѵ^w'ٿ o -`=3;8y+yR Tղ9s 4҆ 2vsCDskcM-ﻛElvqbMS,IW0m@yEAX-H[Sȹ82 ijcQK?"+تh ?$=n0W7,r_MĚ|D-Zf^3l-hOezERw,\g g!<<Rvf&Q-#xpշ}vvr#%sdP]+:gۇU~MmvLwJxFwayF t_L.L}Sʖ̫mc__9o5\ք.^̌u4=\B~SZ h=a4HE WG 6]mNrɐh[~5;SDgEWۤ߳y496ԗ C`EWi=HknC~6[2`] 52a$t, 7N,/p=MP%bnȊK:$4:BHG µSU:s2'^yx[겣8mW­z[Z[psD%6 H\K|YgߊlE:LW]-YC{j&6W=m E ?ݟ!3cmI0M/n|l ;rQʷ P9UZ' :-n1!sb"`%=&" 0}"%],2N9f բᓔG]N/&d*O!<~D3'Լe;w C?dL%ћ54(w'3Jo h~ONutn Dw/W+mys+ 0ɢU, ڷz{P١Q~hmE8RlBoe>b( s ?뒒 QhV(<J5}º&߅̚,NmRMs77B`SV,VWӜĔj#HPm~m+۽ լHP~\U)B2˂!$ڮ9ήrLv`5ޕ/.~UO>~XQϼB}R4ln&9^+4< KqlKԏ>UKjQDZjޤkItjܤ"NНgYe(z l>TNGt]W>j:l_`5Z05;#9D55eE)67#B%zy:Zi5VO%@.!Slt.5oVɔT[م'͂C\VoÃoe;u/A,JyږkD;d,BO JeF@rW.,&II]E ZBzy j c!eNGVt8٧S^{b LN"9|maꦄcS/ Tkh=  ?տ-#B~[ouP,z@g/k[E2g5F }\Zn_pM̈́)-lĊ>9rl(ps59yIx=dr3cޗGM`mlgڇ<~r<(:Dx~ʵn4+|MkTY,{$T+cD%ؿ7Y(uC3uT6{ob$^qYFekL(ʤjLZ؟mK WgL5;ŒlqO0nښjc1Q) z:끺B3G' @p0jmrPȮwR(bWϷ]i0[(gW$m}XOdꄸlɵ+s0p^Csu`gI'0)*Yv6Ģ4AGJX0/m!>;c }se1 fQIA& XTgZZ;Ԕu80xgͰǵ s]5lٽ V TiCJ &>N"!ӂ^6,Uccݍ ,]ْp:F톢:3e{䆴A!v`ϼAwOZ^{hKd1$x:*` ?zŶ)"پb\!Lw7(NG\s>K#pkuIQ5GvI68v ~2ib'o/N ELz d"^ZTRd;[PۢQ)i莏w1Iy,8ynaVm|t-N}(eTUJeqYF QrZU-c.p*ǁq!QU|u^,ʿLVbP:DQЁޢ3 tV3QGBƹ};4'5zHt8'v{,vSoݨIu]N_{{˙3=K sV\틆%̹ճ]F}5JCōp"GuYVܥ2ҙ;_ze)Ljwɔ@H7 yxCVa0@&X̾QfSäxqS*@=)Ur q:½>̝; ~8Ub n o(9(@մe ml= {ۥeP>?N08;&L3T%3`C.7FN:b)at'ʑYv,a:D(׀P3${/zu u%5C,}rDi4X(Y1#i7 2|c f?!prHwdP^cαݤ2-L݋gVcB˿(jU݇ [05Kb΄!WY>z)I&fAb:pl= Fh}͈a%dH|3TNXJJ 1%Ut!M\c:_Ն oC]z͛"Ίiǭ; lyBj3nYW: ۿ*Ҩ2.޼B|9 /4)b tp c֏\|W3Hep~(-8 f{A|SZ-&Lsn}vx'4 DI_c$I[B}3|Wni~/W`U7d۔I?C}+Qx}y,sB1~VQW;|+Tò+բo'c= W4)vG{8#^mjeýV w'@1[>[G5(ےLNs{FOl ̰ѝ A94(9J-dA<O +);9;BQ#NB:2!$IJmre?f.Y2TE(Q^nh K c6>qoO]'~\>.#펙w.0I ^mHD"c$8r)!^=_]s٣]yH(\ OePɬ'ȣҿ]F*I0 靼] QR;X{T N  ch1,%f2ÏpprsǖgT-G("Kj,E5Uᨔ̒$إUPaFU8C\HZ_HK#a0%g[jGMB`%tX?T4 b*-OJqTf#Ro؟{AbIՋg[ϕv*%Sl :}KWFByn!eMjɉ޴ZoC._OPCBǤK[zX]n)k>'@Wƚ3In8+_zi>@{iB,Mv80#^I@Hs5 ayc#GE}.)Bn^H% +=kCHyu\@oU_d8,~Sç9iWלS$J6 X;PB *{W  eQR3ߘ\NN`2+Qu–¡B0p :8*Jظe%)c&oy*c#/Rot,2\lS@/iõ >S`ne2?(<(e'O֐-ŶH+G]Q#,%QX.4.IC'!/IqPo*2TTq!<{T5NjhnYгȧDvɶ~0iUσ^[Dݺl85{=;5왗vI;#yoL9x9ʻ!nW!+σ+/%~!S VrЙiҹ?~$%?٩ Ƿ\̷}]לO_RX?Z&eK_N.ķ;2vܢYJLh0nYX4 Sp4J9Nuךz-nf`f(7pqb}f{s!.R,jT@FNӪ*I+gF+AuU=c -[+ *ɀՖ6ŘHnƌ<زdiM#Hn:k\,= QAzqԂE{dMж YZ