| Index | index by Group | index by Distribution | index by Vendor | index by creation date | index by Name | Mirrors | Help | Search |
| Name: munge | Distribution: openSUSE Tumbleweed |
| Version: 0.5.18 | Vendor: openSUSE |
| Release: 1.2 | Build date: Tue Feb 10 20:59:22 2026 |
| Group: Productivity/Security | Build host: reproducible |
| Size: 343048 | Source RPM: munge-0.5.18-1.2.src.rpm |
| Packager: https://bugs.opensuse.org | |
| Url: https://dun.github.io/munge/ | |
| Summary: An authentication service for creating and validating credentials | |
MUNGE (MUNGE Uid 'N' Gid Emporium) is an authentication service for creating and validating user credentials. It is designed to be highly scalable for use in an HPC cluster environment. It provides a portable API for encoding the user's identity into a tamper-proof credential that can be obtained by an untrusted client and forwarded by untrusted intermediaries within a security realm. Clients within this realm can create and validate credentials without the use of root privileges, reserved ports, or platform-specific methods.
GPL-3.0-or-later AND LGPL-3.0-or-later
* Tue Feb 10 2026 Egbert Eich <eich@suse.com>
- Update to version 0.5.18:
* Fix buffer overflow in message unpacking that allows local users
to leak the MUNGE cryptographic key and forge credential.
credentials (bsc#1257651, CVE-2026-25506).
* Fixed out-of-bounds read in credential decoding.
* Fixed build failure on legacy macOS without `clock_gettime()`.
* Mon Feb 09 2026 Egbert Eich <eich@suse.com>
- Update to version 0.5.17:
* Added `MUNGE_OPT_IGNORE_TTL` and `MUNGE_OPT_IGNORE_REPLAY`.
* Added `unmunge --ignore-ttl` and `--ignore-replay` cmdline opts.
* Added configure `--with-systemdsysusersdir` opt.
* Changed logrotate config to drop privileges to munge user.
* Changed test suite to bail out immediately on munged startup failures.
* Fixed encode/decode payload limit asymmetry.
* Fixed cross-compilation support in configure script.
* Improved mlockall error diagnostics and documentation.
* Improved origin address configuration warnings.
This release is backwards-compatible to 0.5.
- Remove tempfiles settings. This is handled by `RuntimeDirectory`
in the `munge.service`.
- Remove tests for having systemd and sysusers: we no longer support
stuff that's so old that this is required.
- Use sysuser file the package comes with.
* Fri Aug 29 2025 Egbert Eich <eich@suse.com>
- Make logrotate work on munge log as user munge. This prevents
a local privilege escalation (bsc#1246088).
* Sun May 26 2024 jun wang <jgwang@suse.com>
- Update to version 0.5.16
* Fixed connect failure retry for full socket listen queue.
* Added `--listen-backlog` cmdline opt.
This release is backwards-compatible to 0.5; however, credentials
encoded with the current default of `MUNGE_MAC_SHA256` cannot be
decoded by releases prior to 0.5.5.
* Wed Jul 06 2022 Nicolas Morey-Chaisemartin <nmoreychaisemartin@suse.com>
- Update to version 0.5.15:
- Added support for OpenSSL 3.0.
- Fixed "make install" conflict with systemd RuntimeDirectory.
- Fixed big-endian bug causing failures on s390x.
- Fixed systemd service unit conf to wait until network is online.
- Fixed excessive logging of "suspended new connections".
- Fixed gcry_check_version(GCRYPT_VERSION) bug reported by Debian.
- Fixed sending repeated SIGTERMs to signal stop. (dbe6dcc)
- Fixed failure to clean up socket or create seedfile having relative path.
- Fixed test suite to clean up errant processes from failed tests.
- Re-enable build for s390*
* Tue Nov 23 2021 Egbert Eich <eich@suse.com>
- Disable s390*-builds. On s390x the test suite fails.
* Fri Oct 15 2021 Egbert Eich <eich@suse.com>
- Typo fix to sysuser file.
* Thu Oct 07 2021 Egbert Eich <eich@suse.com>
- Restore tmpfiles.d handling which was deleted for no good
reason.
- Make sure the product specific run-directory is used which
is taken from the RPM macro %_rundir (bsc#1191336).
* Fri Oct 01 2021 Egbert Eich <eich@suse.com>
- Utilize sysuser infrastructure to set user/group munge.
* Fri Jun 19 2020 Egbert Eich <eich@suse.com>
- Use 'mungekey' to generate munge key,
Change permission of 'mungekey' from 0400 to 0600
- Remove munge key on uninstall
- Add a bit of QA by running 'make check'
- Consolidate 'rundir'-handling:
* fixed the location using %_rundir
* %ghost-ed %_rundir/munge
- Pinned down configuration by adding more configure options
- Consolidated the file attribute setting
- Consolidated handline of /etc/sysconfig/munge
- Remove tmpfiles.d/munge.conf: the runtime directory is created
by systemd itself.
/etc/logrotate.d/munge /etc/munge /etc/munge/munge.key /run/munge /run/munge/munged.pid /usr/bin/munge /usr/bin/remunge /usr/bin/unmunge /usr/lib/systemd/system/munge.service /usr/lib/sysusers.d/munge.conf /usr/sbin/munged /usr/sbin/mungekey /usr/sbin/rcmunge /usr/share/doc/packages/munge /usr/share/doc/packages/munge/AUTHORS /usr/share/doc/packages/munge/DISCLAIMER.LLNS /usr/share/doc/packages/munge/DISCLAIMER.UC /usr/share/doc/packages/munge/HISTORY /usr/share/doc/packages/munge/JARGON /usr/share/doc/packages/munge/NEWS /usr/share/doc/packages/munge/PLATFORMS /usr/share/doc/packages/munge/QUICKSTART /usr/share/doc/packages/munge/README /usr/share/doc/packages/munge/README.SUSE /usr/share/doc/packages/munge/credential_v1_format.txt /usr/share/doc/packages/munge/credential_v2_format.txt /usr/share/doc/packages/munge/credential_v3_format.txt /usr/share/fillup-templates/sysconfig.munge /usr/share/licenses/munge /usr/share/licenses/munge/COPYING /usr/share/man/man1/munge.1.gz /usr/share/man/man1/remunge.1.gz /usr/share/man/man1/unmunge.1.gz /usr/share/man/man7/munge.7.gz /usr/share/man/man8/munged.8.gz /usr/share/man/man8/mungekey.8.gz /var/lib/munge /var/lib/munge/munged.seed /var/log/munge /var/log/munge/munged.log
Generated by rpm2html 1.8.1
Fabrice Bellet, Fri Jul 24 15:27:28 2026