* Added `MUNGE_OPT_IGNORE_TTL` and `MUNGE_OPT_IGNORE_REPLAY`.
* Added `unmunge --ignore-ttl` and `--ignore-replay` cmdline opts.
* Added configure `--with-systemdsysusersdir` opt.
* Changed logrotate config to drop privileges to munge user.
* Changed test suite to bail out immediately on munged startup failures.
* Fixed encode/decode payload limit asymmetry.
* Fixed cross-compilation support in configure script.
* Improved mlockall error diagnostics and documentation.
* Improved origin address configuration warnings.
This release is backwards-compatible to 0.5.
- Remove tempfiles settings. This is handled by `RuntimeDirectory`
in the `munge.service`.
- Remove tests for having systemd and sysusers: we no longer support
stuff that's so old that this is required.
- Use sysuser file the package comes with.
- Update to version 0.5.18:
* Fix buffer overflow in message unpacking that allows local users
to leak the MUNGE cryptographic key and forge credential.
credentials (bsc#1257651, CVE-2026-25506).
* Fixed out-of-bounds read in credential decoding.
* Fixed build failure on legacy macOS without `clock_gettime()`.
- Update to version 0.5.17:
* Added `MUNGE_OPT_IGNORE_TTL` and `MUNGE_OPT_IGNORE_REPLAY`.
* Added `unmunge --ignore-ttl` and `--ignore-replay` cmdline opts.
* Added configure `--with-systemdsysusersdir` opt.
* Changed logrotate config to drop privileges to munge user.
* Changed test suite to bail out immediately on munged startup failures.
* Fixed encode/decode payload limit asymmetry.
OBS-URL: https://build.opensuse.org/package/show/network:cluster/munge?expand=0&rev=57
- Update to version 0.15.4:
- Added support for OpenSSL 3.0.
- Fixed "make install" conflict with systemd RuntimeDirectory.
- Fixed big-endian bug causing failures on s390x.
- Fixed systemd service unit conf to wait until network is online.
- Fixed excessive logging of "suspended new connections".
- Fixed gcry_check_version(GCRYPT_VERSION) bug reported by Debian.
- Fixed sending repeated SIGTERMs to signal stop. (dbe6dcc)
- Fixed failure to clean up socket or create seedfile having relative path.
- Fixed test suite to clean up errant processes from failed tests.
- Re-enable build for s390*
OBS-URL: https://build.opensuse.org/request/show/987005
OBS-URL: https://build.opensuse.org/package/show/network:cluster/munge?expand=0&rev=44
- Use 'mungekey' to generate munge key,
Change permission of 'mungekey' from 0400 to 0600
- Remove munge key on uninstall
- Add a bit of QA by running 'make check'
- Consolidate 'rundir'-handling:
* fixed the location using %_rundir
* %ghost-ed %_rundir/munge
- Pinned down configuration by adding more configure options
- Consolidated the file attribute setting
- Consolidated handline of /etc/sysconfig/munge
- Remove tmpfiles.d/munge.conf: the runtime directory is created
by systemd itself.
OBS-URL: https://build.opensuse.org/request/show/854203
OBS-URL: https://build.opensuse.org/package/show/network:cluster/munge?expand=0&rev=38
- Update to version 0.5.14, most relevant changes:
* Added mungekey command for key generation via HKDF.
* Added negative caching of user lookups for processing supplementary groups.
* Added munged --origin and --stop cmdline opt.
* Added unmunge --numeric cmdline opt.
* Added several new configuration options.
* Added systemd EnvironmentFile to set sysconfig options.
* Added systemd RuntimeDirectory to replace tmpfiles.d conf.
* Changed logging of non-existent users to only log once for a given user.
* Changed default name of munged seedfile.
* Fixed pidfile corruption when starting new daemon while socket still in use.
* Fixed munged signal handlers to be async-signal-safe.
* Fixed "Logging stopped due to error" behavior for transient errors.
* Fixed misleading "Lockfile not found" error message.
* Fixed conversion-specifier / argument mismatch in error message.
* Removed autotools-generated files from version control.
- Update patch:
* Make-SUSE-specific-adjustments.patch
- Spec cleanup
- Update package description to match upstream's
- Add logrotate file and Requires in logrotate
- Run bootstrap to create autotools files.
OBS-URL: https://build.opensuse.org/request/show/789036
OBS-URL: https://build.opensuse.org/package/show/network:cluster/munge?expand=0&rev=34
* Added support for OpenSSL 1.1.0.
* Added support for UID/GID values >= 2^31.
* Added support for getentropy() and getrandom().
* Added --trusted-group cmdline opt to munged.
* Added --log-file and --seed-file cmdline opts to munged.
* Changed default MAC algorithm to SHA-256.
* Fixed autoconf installation directory variable substitution.
* Fixed all gcc, clang, and valgrind warnings.
* Improved resilience and unpredictability of PRNG.
* Improved hash table performance.
* Removed libmissing dependency from libmunge.
OBS-URL: https://build.opensuse.org/package/show/network:cluster/munge?expand=0&rev=16
- Fix BuildRequires for zlib-devel.
- Replace group/user add macros with function calls.
- Make sure we update the user/group of files/directories correctly
when updating - in case they have changed.
- Use user 'munge', group 'munge' for systemd and user 'daemon', group 'root'
for non-systemd by setting the appropriate macros '%munge_u' and '%munge_g'.
- Create user/group munge if they don't exist.
- Add 'BuildRequires: libbz2-devel'
- Fix typo.
- Add 'Recommends: munge' to libmunge:
This library requires the munge service to run on the
local system to be useful.
OBS-URL: https://build.opensuse.org/request/show/455346
OBS-URL: https://build.opensuse.org/package/show/network:cluster/munge?expand=0&rev=13
- version 0.5.12
* Changed project homepage to <https://dun.github.io/munge/>.
* Changed RPM specfile from sysvinit to systemd. (#33)
* Added --max-ttl cmdline opt to munged. (#28)
* Added --pid-file cmdline opt to munged. (#41)
- Add source service to download sources.
- Remove static libraries: If they are needed, they should be packaged
separately.
- Add a %define have_systemd to clearer identify systemd relevant parts.
- Add define of lversion insead of hard conding this.
- remove README.MULTILIB: Package is built already.
- Add BuildRequires: for bzip2-devel, systemd-rpm-macros.
- Spell out files under %{_sysconfdir}/
- Fix symlink to %{_sbindir}/rcmunge for initV and systemd.
OBS-URL: https://build.opensuse.org/request/show/435621
OBS-URL: https://build.opensuse.org/package/show/network:cluster/munge?expand=0&rev=5
- version 0.5.11
* Added --mlockall cmdline opt to munged.
* Added --syslog cmdline opt to munged.
* Added --uid and --gid cmdline opts to munge.
* Added numeric timezone to unmunge timestamp output.
* Added timer to munged for periodically stirring PRNG entropy pool.
* Added support for pkg-config.
* Added support for systemd.
* Changed timer thread to better accommodate misbehaving system clocks.
* Changed behavior of munge --string cmdline opt to not append newline.
* Changed init script chkconfig priority levels to start after ntpd/ntpdate.
* Changed init script so munged runs as munge user by default.
* Fixed HMAC validation timing attack vulnerability.
* Fixed bug with munged being unable to restart if daemon not cleanly shutdown.
* Fixed bug with large groups triggering "numerical result out of range" error.
* Fixed bug causing high CPU utilization on FreeBSD when processing group info.
* Fixed bug causing IPv6-only hosts to exit due to failed hostname resolution.
* Fixed autoconf check that was not portable across shells.
* Fixed init script LSB Header on openSUSE.
* Replaced perl build-time dependency with awk.
- add systemd support openSUSE >= 12.1
OBS-URL: https://build.opensuse.org/request/show/242495
OBS-URL: https://build.opensuse.org/package/show/network:cluster/munge?expand=0&rev=2
