Ana Guerrero
86b8ae6c88
- Update to version 0.5.17:
* Added `MUNGE_OPT_IGNORE_TTL` and `MUNGE_OPT_IGNORE_REPLAY`.
* Added `unmunge --ignore-ttl` and `--ignore-replay` cmdline opts.
* Added configure `--with-systemdsysusersdir` opt.
* Changed logrotate config to drop privileges to munge user.
* Changed test suite to bail out immediately on munged startup failures.
* Fixed encode/decode payload limit asymmetry.
* Fixed cross-compilation support in configure script.
* Improved mlockall error diagnostics and documentation.
* Improved origin address configuration warnings.
This release is backwards-compatible to 0.5.
- Remove tempfiles settings. This is handled by `RuntimeDirectory`
in the `munge.service`.
- Remove tests for having systemd and sysusers: we no longer support
stuff that's so old that this is required.
- Use sysuser file the package comes with.
- Update to version 0.5.18:
* Fix buffer overflow in message unpacking that allows local users
to leak the MUNGE cryptographic key and forge credential.
credentials (bsc#1257651, CVE-2026-25506).
* Fixed out-of-bounds read in credential decoding.
* Fixed build failure on legacy macOS without `clock_gettime()`.
- Update to version 0.5.17:
* Added `MUNGE_OPT_IGNORE_TTL` and `MUNGE_OPT_IGNORE_REPLAY`.
* Added `unmunge --ignore-ttl` and `--ignore-replay` cmdline opts.
* Added configure `--with-systemdsysusersdir` opt.
* Changed logrotate config to drop privileges to munge user.
* Changed test suite to bail out immediately on munged startup failures.
* Fixed encode/decode payload limit asymmetry. (forwarded request 1332316 from eeich)
OBS-URL: https://build.opensuse.org/request/show/1332317
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/munge?expand=0&rev=23
The file /etc/munge/munge.key is created from /dev/urandom at installation time via the command dd if=/dev/urandom bs=1 count=1024 so it might differ from host to host, one might to replace by identical one (pick one from a host) and copy it to all hosts.