Implementation of the SASL framework and a few common SASL mechanisms

Edit Package libgsasl

GNU SASL is an implementation of the Simple Authentication and
Security Layer framework and a few common SASL mechanisms. SASL is
used by network servers (e.g., IMAP, SMTP) to request authentication
from clients, and in clients to authenticate against servers.

Refresh
Refresh
Source Files
Filename Size Changed
0001-Fix-build-issues-with-GCC-12-s-Werror-address.patch 0000001826 1.78 KB
boundary-check-CVE-2022-2469.patch 0000000834 834 Bytes
build-fix-old-gcc.patch 0000000950 950 Bytes
libgsasl-1.10.0.tar.gz 0001854755 1.77 MB
libgsasl-1.10.0.tar.gz.sig 0000000488 488 Bytes
libgsasl.changes 0000009877 9.65 KB
libgsasl.keyring 0000085035 83 KB
libgsasl.spec 0000003805 3.72 KB
Latest Revision
Yuchen Lin's avatar Yuchen Lin (maxlin_factory) accepted request 1031077 from Dirk Mueller's avatar Dirk Mueller (dirkmueller) (revision 3)
- refresh keyring

- add build-fix-old-gcc.patch for older dists 

- add boundary-check-CVE-2022-2469.patch (bsc#1201715)
- avoid duplicate packaging of license

- add 0001-Fix-build-issues-with-GCC-12-s-Werror-address.patch 

- update to 1.10.0:
  * SCRAM-SHA-256 and SCRAM-SHA-256-PLUS (RFC 7677)
  * New SCRAM crypto helper APIs
  * SCRAM server: Support for password-less usage
  * SCRAM: Sets SCRAM_ITER/SCRAM_SALT/SCRAM_SALTED_PASSWORD
  * SCRAM, GS2, and GSSAPI no longer retrieve the TLS channel
    binding data (property GSASL_CB_TLS_UNIQUE) during
    gsasl_client_start() or gsasl_server_start()
  * A number of legacy and less secure interfaces deprecated
  * New APIs for hex encoding/decoding
- add upstream signing key and validate source signature
- refresh spec file
- build with all warnings and treat them as errors

- Re-enable GSSAPI by explicitly choosing mit kerberos.

- Update to version 1.8.1:
  * gsasl: IMAP client code now permits empty SASL tokens prefixed
    with '+'. Normally servers should send '+ '. Buggy servers
    include Microsoft Exchange.
  * GSSAPI client:
Comments 0
openSUSE Build Service is sponsored by