- Update to version 0.5.17:
* Added `MUNGE_OPT_IGNORE_TTL` and `MUNGE_OPT_IGNORE_REPLAY`.
* Added `unmunge --ignore-ttl` and `--ignore-replay` cmdline opts.
* Added configure `--with-systemdsysusersdir` opt.
* Changed logrotate config to drop privileges to munge user.
* Changed test suite to bail out immediately on munged startup failures.
* Fixed encode/decode payload limit asymmetry.
* Fixed cross-compilation support in configure script.
* Improved mlockall error diagnostics and documentation.
* Improved origin address configuration warnings.
This release is backwards-compatible to 0.5.
- Remove tempfiles settings. This is handled by `RuntimeDirectory`
in the `munge.service`.
- Remove tests for having systemd and sysusers: we no longer support
stuff that's so old that this is required.
- Use sysuser file the package comes with.
- Update to version 0.5.18:
* Fix buffer overflow in message unpacking that allows local users
to leak the MUNGE cryptographic key and forge credential.
credentials (bsc#1257651, CVE-2026-25506).
* Fixed out-of-bounds read in credential decoding.
* Fixed build failure on legacy macOS without `clock_gettime()`.
- Update to version 0.5.17:
* Added `MUNGE_OPT_IGNORE_TTL` and `MUNGE_OPT_IGNORE_REPLAY`.
* Added `unmunge --ignore-ttl` and `--ignore-replay` cmdline opts.
* Added configure `--with-systemdsysusersdir` opt.
* Changed logrotate config to drop privileges to munge user.
* Changed test suite to bail out immediately on munged startup failures.
* Fixed encode/decode payload limit asymmetry. (forwarded request 1332316 from eeich)
OBS-URL: https://build.opensuse.org/request/show/1332317
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/munge?expand=0&rev=23
* Added `MUNGE_OPT_IGNORE_TTL` and `MUNGE_OPT_IGNORE_REPLAY`.
* Added `unmunge --ignore-ttl` and `--ignore-replay` cmdline opts.
* Added configure `--with-systemdsysusersdir` opt.
* Changed logrotate config to drop privileges to munge user.
* Changed test suite to bail out immediately on munged startup failures.
* Fixed encode/decode payload limit asymmetry.
* Fixed cross-compilation support in configure script.
* Improved mlockall error diagnostics and documentation.
* Improved origin address configuration warnings.
This release is backwards-compatible to 0.5.
- Remove tempfiles settings. This is handled by `RuntimeDirectory`
in the `munge.service`.
- Remove tests for having systemd and sysusers: we no longer support
stuff that's so old that this is required.
- Use sysuser file the package comes with.
- Update to version 0.5.18:
* Fix buffer overflow in message unpacking that allows local users
to leak the MUNGE cryptographic key and forge credential.
credentials (bsc#1257651, CVE-2026-25506).
* Fixed out-of-bounds read in credential decoding.
* Fixed build failure on legacy macOS without `clock_gettime()`.
- Update to version 0.5.17:
* Added `MUNGE_OPT_IGNORE_TTL` and `MUNGE_OPT_IGNORE_REPLAY`.
* Added `unmunge --ignore-ttl` and `--ignore-replay` cmdline opts.
* Added configure `--with-systemdsysusersdir` opt.
* Changed logrotate config to drop privileges to munge user.
* Changed test suite to bail out immediately on munged startup failures.
* Fixed encode/decode payload limit asymmetry.
OBS-URL: https://build.opensuse.org/package/show/network:cluster/munge?expand=0&rev=57
- Update to version 0.15.4:
- Added support for OpenSSL 3.0.
- Fixed "make install" conflict with systemd RuntimeDirectory.
- Fixed big-endian bug causing failures on s390x.
- Fixed systemd service unit conf to wait until network is online.
- Fixed excessive logging of "suspended new connections".
- Fixed gcry_check_version(GCRYPT_VERSION) bug reported by Debian.
- Fixed sending repeated SIGTERMs to signal stop. (dbe6dcc)
- Fixed failure to clean up socket or create seedfile having relative path.
- Fixed test suite to clean up errant processes from failed tests.
- Re-enable build for s390*
OBS-URL: https://build.opensuse.org/request/show/987005
OBS-URL: https://build.opensuse.org/package/show/network:cluster/munge?expand=0&rev=44
- Use 'mungekey' to generate munge key,
Change permission of 'mungekey' from 0400 to 0600
- Remove munge key on uninstall
- Add a bit of QA by running 'make check'
- Consolidate 'rundir'-handling:
* fixed the location using %_rundir
* %ghost-ed %_rundir/munge
- Pinned down configuration by adding more configure options
- Consolidated the file attribute setting
- Consolidated handline of /etc/sysconfig/munge
- Remove tmpfiles.d/munge.conf: the runtime directory is created
by systemd itself.
OBS-URL: https://build.opensuse.org/request/show/854203
OBS-URL: https://build.opensuse.org/package/show/network:cluster/munge?expand=0&rev=38
- Update to version 0.5.14, most relevant changes:
* Added mungekey command for key generation via HKDF.
* Added negative caching of user lookups for processing supplementary groups.
* Added munged --origin and --stop cmdline opt.
* Added unmunge --numeric cmdline opt.
* Added several new configuration options.
* Added systemd EnvironmentFile to set sysconfig options.
* Added systemd RuntimeDirectory to replace tmpfiles.d conf.
* Changed logging of non-existent users to only log once for a given user.
* Changed default name of munged seedfile.
* Fixed pidfile corruption when starting new daemon while socket still in use.
* Fixed munged signal handlers to be async-signal-safe.
* Fixed "Logging stopped due to error" behavior for transient errors.
* Fixed misleading "Lockfile not found" error message.
* Fixed conversion-specifier / argument mismatch in error message.
* Removed autotools-generated files from version control.
- Update patch:
* Make-SUSE-specific-adjustments.patch
- Spec cleanup
- Update package description to match upstream's
- Add logrotate file and Requires in logrotate
- Run bootstrap to create autotools files.
OBS-URL: https://build.opensuse.org/request/show/789036
OBS-URL: https://build.opensuse.org/package/show/network:cluster/munge?expand=0&rev=34
- Update to 0.5.13:
* Added support for OpenSSL 1.1.0.
* Added support for UID/GID values >= 2^31.
* Added support for getentropy() and getrandom().
* Added --trusted-group cmdline opt to munged.
* Added --log-file and --seed-file cmdline opts to munged.
* Changed default MAC algorithm to SHA-256.
* Fixed autoconf installation directory variable substitution.
* Fixed all gcc, clang, and valgrind warnings.
* Improved resilience and unpredictability of PRNG.
* Improved hash table performance.
* Removed libmissing dependency from libmunge.
- Replace references to /var/adm/fillup-templates with new
%_fillupdir macro (boo#1069468)
OBS-URL: https://build.opensuse.org/request/show/554960
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/munge?expand=0&rev=5
* Added support for OpenSSL 1.1.0.
* Added support for UID/GID values >= 2^31.
* Added support for getentropy() and getrandom().
* Added --trusted-group cmdline opt to munged.
* Added --log-file and --seed-file cmdline opts to munged.
* Changed default MAC algorithm to SHA-256.
* Fixed autoconf installation directory variable substitution.
* Fixed all gcc, clang, and valgrind warnings.
* Improved resilience and unpredictability of PRNG.
* Improved hash table performance.
* Removed libmissing dependency from libmunge.
OBS-URL: https://build.opensuse.org/package/show/network:cluster/munge?expand=0&rev=16
- Fix BuildRequires for zlib-devel.
- Replace group/user add macros with function calls.
- Make sure we update the user/group of files/directories correctly
when updating - in case they have changed.
- Use user 'munge', group 'munge' for systemd and user 'daemon', group 'root'
for non-systemd by setting the appropriate macros '%munge_u' and '%munge_g'.
- Create user/group munge if they don't exist.
- Add 'BuildRequires: libbz2-devel'
- Fix typo.
- Add 'Recommends: munge' to libmunge:
This library requires the munge service to run on the
local system to be useful.
OBS-URL: https://build.opensuse.org/request/show/455346
OBS-URL: https://build.opensuse.org/package/show/network:cluster/munge?expand=0&rev=13
