munge-0.5.16

Release Notes:

• Fixed connect failure retry for full socket listen queue. (f528358)
• Added --listen-backlog cmdline opt. (#139)

This release has been built and tested on the following systems:

• AlmaLinux 9.3, 8.9
• Arch Linux
• CentOS Linux Stream 9, Stream 8, 7.9.2009, 6.10
• Debian trixie/sid, 12.5, 11.9, 10.13, 9.13, 8.11, 7.11, 6.0.10, 5.0.10, 4.0
• Fedora 39, 38, 37
• FreeBSD 14.0, 13.3, 13.2
• NetBSD 9.3
• OpenBSD 7.4, 7.3
• openSUSE 15.5, 15.4
• Ubuntu 23.10, 22.04.4, 20.04.6, 18.04.6, 16.04.7, 14.04.6

RPMs built directly from the dist tarball have been installed and tested on the following x86_64 systems:

• AlmaLinux 9.3, 8.9
• CentOS Linux Stream 9, Stream 8, 7.9.2009
• Fedora 39, 38, 37

This release is backwards-compatible to 0.5; however, credentials encoded with the current default of MUNGE_MAC_SHA256 cannot be decoded by releases prior to 0.5.5.

munge-0.5.15

Release Notes:

• Added support for OpenSSL 3.0. (#110)
• Fixed "make install" conflict with systemd RuntimeDirectory. (#82)
• Fixed big-endian bug causing failures on s390x. (#91)
• Fixed systemd service unit conf to wait until network is online. (#93)
• Fixed excessive logging of "suspended new connections". (#94)
• Fixed test suite failure for origin addr on Debian kfreebsd-i386. (77ff682)
• Fixed gcry_check_version(GCRYPT_VERSION) bug reported by Debian. (0c37cc0)
• Fixed sending repeated SIGTERMs to signal stop. (dbe6dcc)
• Fixed bugs where unlink() could be interrupted by signals on FreeBSD. (be183e2)
• Fixed failure to clean up socket or create seedfile having relative path. (1245cd3)
• Fixed test suite to clean up errant processes from failed tests. (7baed04)
• Fixed rpm not creating "/run/munge" directory on CentOS 7. (5f3b1bf)

This release has been built and tested on the following systems:

• AlmaLinux 9.0, 8.6
• Arch Linux
• CentOS Linux Stream 9, Stream 8, 8.5.2111, 7.9.2009, 6.10
• Debian GNU/kFreeBSD bookworm/sid [amd64, i386]
• Debian GNU/Linux bookworm/sid, 11.3, 10.12, 9.13, 8.11, 7.11, 6.0.10, 5.0.10, 4.0
• Fedora Linux 36, 35, 34
• FreeBSD 13.1, 13.0, 12.3
• NetBSD 9.2, 9.1, 9.0
• OpenBSD 7.1, 7.0, 6.9
• openSUSE Leap 15.4, 15.3, 15.2, 15.1
• Raspbian GNU/Linux 10.12 [armv7l]
• Ubuntu 22.04, 20.04.4, 18.04.6, 16.04.7, 14.04.6, 12.04.5

RPMs built directly from the dist tarball have been installed and tested on the following x86_64 systems:

• AlmaLinux 9.0, 8.6
• CentOS Linux Stream 9, Stream 8, 8.5.2111, 7.9.2009
• Fedora Linux 36, 35, 34

This release is backwards-compatible to 0.5; however, credentials encoded with the current default of MUNGE_MAC_SHA256 cannot be decoded by releases prior to 0.5.5.

munge-0.5.14

Release Notes:

• Added mungekey command for key generation via HKDF. (5fc870e)
• Added negative caching of user lookups for processing supplementary groups. (#26, d51fec8)
• Added munged --origin cmdline opt. (#69, #23)
• Added munged --stop cmdline opt. (06306b8)
• Added unmunge --numeric cmdline opt. (171abe2)
• Added configure --with-logrotateddir opt and logrotate config. (2d35713)
• Added configure --with-munge-socket opt. (565db69)
• Added configure --with-pkgconfigdir opt. (9abebcd)
• Added configure --with-runstatedir opt. (25eef52)
• Added configure --with-sysconfigdir opt. (9abebcd)
• Added configure --with-systemdunitdir opt. (9abebcd)
• Added configure --with-sysvinitddir opt. (9abebcd)
• Added systemd EnvironmentFile to set sysconfig options. (#68, #64)
• Added systemd RuntimeDirectory to replace tmpfiles.d conf. (3eed37e)
• Added GPG verification of source to RPM specfile. (5bb8912, 24f18a1)
• Added "make check" test suite. (wiki)
• Changed logging of non-existent users to only log once for a given user. (#26, 7b00d81)
• Changed default name of munged seedfile. (df8c22a)
• Fixed pidfile corruption when starting new daemon while socket still in use. (258b67e)
• Fixed munged signal handlers to be async-signal-safe. (be39512)
• Fixed "Logging stopped due to error" behavior for transient errors. (6176b42)
• Fixed misleading "Lockfile not found" error message. (34fcdb6)
• Fixed conversion-specifier / argument mismatch in error message. (0079630)
• Fixed installation directory variable substitution. (2affe07)
• Fixed manpage variable substitution. (a8ff2fe)
• Removed autotools-generated files from version control. (46dd77b)

This release has been built and tested on the following systems:

• Arch Linux
• CentOS 8.0.1905, 7.7.1908, 6.10
• Debian 10.2, 9.11, 8.11
• Fedora 31, 30
• FreeBSD 12.1, 11.3
• NetBSD 8.1, 7.2
• OpenBSD 6.6, 6.5
• openSUSE Leap 15.1
• Ubuntu 19.10, 18.04.3 LTS, 16.04.6 LTS

This release is backwards-compatible to 0.5; however, credentials encoded with the current default of MUNGE_MAC_SHA256 cannot be decoded by releases prior to 0.5.5.

munge-0.5.13

Release Notes:

• Added support for OpenSSL 1.1.0. (#54)
• Added support for UID/GID values >= 2^31. (a202c67)
• Added support for getentropy() and getrandom(). (4e16253)
• Added --trusted-group cmdline opt to munged. (7996f7c)
• Added --log-file and --seed-file cmdline opts to munged. (#57)
• Changed default MAC algorithm to SHA-256. (3b37cfa)
• Fixed autoconf installation directory variable substitution. (#47)
• Fixed all gcc, clang, and valgrind warnings.
• Improved resilience and unpredictability of PRNG.
• Improved hash table performance. (174d662)
• Removed libmissing dependency from libmunge. (#49)

This release has been built and tested on the following systems:

• CentOS 6.9
• CentOS 7.4.1708
• Debian 9.1
• Fedora 26
• FreeBSD 11.1
• NetBSD 7.1
• OpenBSD 6.1
• Ubuntu 16.04.3 LTS
• Ubuntu 17.04

RPMs have been built and tested on the following systems:

• CentOS 7.4.1708
• Fedora 26

munge-0.5.12

Release Notes:

• Changed project homepage to <https://dun.github.io/munge/>.
• Changed RPM specfile from sysvinit to systemd. (#33)
• Added --max-ttl cmdline opt to munged. (#28)
• Added --pid-file cmdline opt to munged. (#41)
• Added support for "make dist" and "make distcheck". (#45)
• Fixed group-writable permissions error for logfile on Ubuntu. (#31)
• Fixed packaging with missing pkgconfig munge.pc file. (#25)
• Fixed packaging with missing systemd service & tmpfiles.d config. (#34)
• Fixed recursive make command in makefiles. (#40)

This release has been built and tested on the following systems:

• CentOS 7.2.1511
• Debian 8.3
• Debian GNU/kFreeBSD 7.9
• Fedora 23
• FreeBSD 10.2
• NetBSD 6.0
• OpenBSD 5.8
• Ubuntu 15.10

RPMs have been built and tested on the following systems:

• CentOS 7.2.1511
• Fedora 23

munge-0.5.11

• Added "--mlockall" cmdline opt to munged. (#22)
• Added "--syslog" cmdline opt to munged. (#14)
• Added "--uid" and "--gid" cmdline opts to munge. (#17)
• Added numeric timezone to unmunge timestamp output.
• Added timer to munged for periodically stirring PRNG entropy pool.
• Added support for pkg-config.
• Added support for systemd. (#11)
• Changed timer thread to better accommodate misbehaving system clocks. (#15)
• Changed behavior of munge "--string" cmdline opt to not append newline.
• Changed init script chkconfig priority levels to start after ntpd / ntpdate.
• Changed init script so munged runs as munge user by default.
• Fixed HMAC validation timing attack vulnerability. (#24)
• Fixed bug with munged being unable to restart if daemon not cleanly shutdown. (#13)
• Fixed bug with large groups triggering "numerical result out of range" error. (#16)
• Fixed bug causing high CPU utilization on FreeBSD when processing group info. (#18)
• Fixed bug causing IPv6-only hosts to exit due to failed hostname resolution. (#20)
• Fixed autoconf check that was not portable across shells. (#12)
• Fixed init script LSB Header on openSUSE. (#9)
• Replaced perl build-time dependency with awk.

This release has been built and tested on the following systems:

• AIX 5.2
• Debian 7.1
• Fedora 19
• FreeBSD 9.1
• GNU/kFreeBSD 8.1
• NetBSD 6.0
• OpenBSD 5.3
• openSUSE 12.3
• RHEL 6.4
• SunOS 5.10
• Ubuntu 13.04

munge-0.5.10

• Changed project homepage to http://munge.googlecode.com/.
• Fixed bug where munged could deadlock if clients blocked. (#1)
• Fixed bug where munged could crash while processing supplementary groups. (#2)
• Fixed bug with CFLAGS at configure-time nullifying "--enable-debug". (#3)
• Fixed bug with VPATH builds failing to install init script. (#4)
• Fixed RPM spec file for openSUSE & SLES. (#5)

munge-0.5.9

• Changed license to GPLv3+ / LGPLv3+.
• Fixed bug with failed Linux builds under glibc-2.8+.
• Fixed bug with failed daemon starts after clearing /var/run.
• Moved selection of authentication method into configure script.
• Added support for LOCAL_PEERCRED authentication (Darwin, FreeBSD, GNU/kFreeBSD).
• Added support for SHA-512 message digest.

munge-0.5.8

• Fixed bug causing stack corruption on amd64 when using Libgcrypt.

munge-0.5.7

• Improved performance of caching supplementary group info.
• Added munged sighup handler to update supplementary group info.
• Added "--group-check-mtime" and "--group-update-time" cmdline opts to munged.
• Made errors at exit nonfatal to work around Debian libc6 bug #400960.