Tags

munge-0.5.18

MUNGE Uid 'N' Gid Emporium 0.5.18

Security Release:
- CVE-2026-25506 (GHSA-r9cr-jf4v-75gh)

Release Notes:
- Fixed buffer overflow allowing key leakage and credential forgery.
- Fixed out-of-bounds read in credential decoding.
- Fixed build failure on legacy macOS without clock_gettime().
- Fixed configure script failure when built with pkgconf-2.5.1.

This release has been built and tested on the following systems:
- AlmaLinux 10, 9, 8
- Arch Linux
- CentOS Stream 9
- Debian sid, 13, 12, 11
- Fedora 43, 42
- FreeBSD 15.0, 14.3
- NetBSD 10.1, 9.4
- OpenBSD 7.8, 7.7
- openSUSE Leap 16.0, 15.6
- Ubuntu 25.10, 24.04, 22.04

RPMs built directly from the dist tarball have been installed and tested
on the following x86_64 systems:
- AlmaLinux 10, 9, 8
- CentOS Stream 9
- Fedora 43, 42

This release is backwards-compatible to 0.5; however, credentials
encoded with the current default of MUNGE_MAC_SHA256 cannot be decoded
by releases prior to 0.5.5.

munge-0.5.17

MUNGE Uid 'N' Gid Emporium 0.5.17

Release Notes:
- Added MUNGE_OPT_IGNORE_TTL and MUNGE_OPT_IGNORE_REPLAY.
- Added unmunge --ignore-ttl and --ignore-replay cmdline opts.
- Added configure --with-systemdsysusersdir opt.
- Added support for macOS.
- Changed logrotate config to drop privileges to munge user.
- Changed test suite to bail out immediately on munged startup failures.
- Fixed encode/decode payload limit asymmetry.
- Fixed cross-compilation support in configure script.
- Improved mlockall error diagnostics and documentation.
- Improved origin address configuration warnings.

This release has been built and tested on the following systems:
- AlmaLinux 10, 9, 8
- Arch Linux
- CentOS Stream 9
- Debian sid, 13, 12, 11
- Fedora 43, 42
- FreeBSD 14.3, 13.5
- macOS 15
- NetBSD 10.1, 9.4
- OpenBSD 7.8, 7.7
- openSUSE Leap 16.0, 15.6
- Ubuntu 25.10, 24.04, 22.04

RPMs built directly from the dist tarball have been installed and tested
on the following x86_64 systems:
- AlmaLinux 10, 9, 8
- CentOS Stream 9
- Fedora 43, 42

This release is backwards-compatible to 0.5; however, credentials
encoded with the current default of MUNGE_MAC_SHA256 cannot be decoded
by releases prior to 0.5.5.

munge-0.5.16

MUNGE Uid 'N' Gid Emporium 0.5.16

Release Notes:
- Fixed connect failure retry for full socket listen queue.
- Added --listen-backlog cmdline opt.

This release has been built and tested on the following systems:
- AlmaLinux 9.3, 8.9
- Arch Linux
- CentOS Linux Stream 9, Stream 8, 7.9.2009, 6.10
- Debian sid, 12.5, 11.9, 10.13, 9.13, 8.11, 7.11, 6.0.10, 5.0.10, 4.0
- Fedora 39, 38, 37
- FreeBSD 14.0, 13.3, 13.2
- NetBSD 9.3
- OpenBSD 7.4, 7.3
- openSUSE 15.5, 15.4
- Ubuntu 23.10, 22.04.4, 20.04.6, 18.04.6, 16.04.7, 14.04.6

RPMs built directly from the dist tarball have been installed and tested
on the following x86_64 systems:
- AlmaLinux 9.3, 8.9
- CentOS Linux Stream 9, Stream 8, 7.9.2009
- Fedora 39, 38, 37

This release is backwards-compatible to 0.5; however, credentials
encoded with the current default of MUNGE_MAC_SHA256 cannot be decoded
by releases prior to 0.5.5.

munge-0.5.15

MUNGE Uid 'N' Gid Emporium 0.5.15

Release Notes:
- Added support for OpenSSL 3.0.
- Fixed "make install" conflict with systemd RuntimeDirectory.
- Fixed big-endian bug causing failures on s390x.
- Fixed systemd service unit conf to wait until network is online.
- Fixed excessive logging of "suspended new connections".
- Fixed test suite failure for origin addr on Debian kfreebsd-i386.
- Fixed gcry_check_version(GCRYPT_VERSION) bug reported by Debian.
- Fixed sending repeated SIGTERMs to signal stop.
- Fixed bugs where unlink() could be interrupted by signals on FreeBSD.
- Fixed failure to clean up socket or create seedfile having relative path.
- Fixed test suite to clean up errant processes from failed tests.
- Fixed rpm not creating "/run/munge" directory on CentOS 7.

This release has been built and tested on the following systems:
- AlmaLinux 9.0, 8.6
- Arch Linux
- CentOS Linux Stream 9, Stream 8, 8.5.2111, 7.9.2009, 6.10
- Debian GNU/kFreeBSD bookworm/sid [amd64, i386]
- Debian GNU/Linux sid, 11.3, 10.12, 9.13, 8.11, 7.11, 6.0.10, 5.0.10, 4.0
- Fedora Linux 36, 35, 34
- FreeBSD 13.1, 13.0, 12.3
- NetBSD 9.2, 9.1, 9.0
- OpenBSD 7.1, 7.0, 6.9
- openSUSE Leap 15.4, 15.3, 15.2, 15.1
- Raspbian GNU/Linux 10.12 [armv7l]
- Ubuntu 22.04, 20.04.4, 18.04.6, 16.04.7, 14.04.6, 12.04.5

RPMs built directly from the dist tarball have been installed and tested
on the following x86_64 systems:
- AlmaLinux 9.0, 8.6
- CentOS Linux Stream 9, Stream 8, 8.5.2111, 7.9.2009
- Fedora Linux 36, 35, 34

This release is backwards-compatible to 0.5; however, credentials
encoded with the current default of MUNGE_MAC_SHA256 cannot be decoded
by releases prior to 0.5.5.

munge-0.5.14

MUNGE Uid 'N' Gid Emporium 0.5.14

Release Notes:
- Added mungekey command for key generation via HKDF.
- Added negative caching of user lookups for processing supplementary groups.
- Added munged --origin cmdline opt.
- Added munged --stop cmdline opt.
- Added unmunge --numeric cmdline opt.
- Added configure --with-logrotateddir opt and logrotate config.
- Added configure --with-munge-socket opt.
- Added configure --with-pkgconfigdir opt.
- Added configure --with-runstatedir opt.
- Added configure --with-sysconfigdir opt.
- Added configure --with-systemdunitdir opt.
- Added configure --with-sysvinitddir opt.
- Added systemd EnvironmentFile to set sysconfig options.
- Added systemd RuntimeDirectory to replace tmpfiles.d conf.
- Added GPG verification of source to RPM specfile.
- Added "make check" test suite.
- Changed logging of non-existent users to only log once for a given user.
- Changed default name of munged seedfile.
- Fixed pidfile corruption when starting new daemon while socket still in use.
- Fixed munged signal handlers to be async-signal-safe.
- Fixed "Logging stopped due to error" behavior for transient errors.
- Fixed misleading "Lockfile not found" error message.
- Fixed conversion-specifier / argument mismatch in error message.
- Fixed installation directory variable substitution.
- Fixed manpage variable substitution.
- Removed autotools-generated files from version control.

This release has been built and tested on the following systems:
- Arch Linux
- CentOS 8.0.1905, 7.7.1908, 6.10
- Debian 10.2, 9.11, 8.11
- Fedora 31, 30
- FreeBSD 12.1, 11.3
- NetBSD 8.1, 7.2
- OpenBSD 6.6, 6.5
- openSUSE Leap 15.1
- Ubuntu 19.10, 18.04.3 LTS, 16.04.6 LTS

This release is backwards-compatible to 0.5; however, credentials
encoded with the current default of MUNGE_MAC_SHA256 cannot be decoded
by releases prior to 0.5.5.

munge-0.5.13

MUNGE Uid 'N' Gid Emporium 0.5.13

Release Notes:
- Added support for OpenSSL 1.1.0. (#54)
- Added support for UID/GID values >= 2^31.
- Added support for getentropy() and getrandom().
- Added --trusted-group cmdline opt to munged.
- Added --log-file and --seed-file cmdline opts to munged. (#57)
- Changed default MAC algorithm to SHA-256.
- Fixed autoconf installation directory variable substitution. (#47)
- Fixed all gcc, clang, and valgrind warnings.
- Improved resilience and unpredictability of PRNG.
- Improved hash table performance.
- Removed libmissing dependency from libmunge. (#49)

This release has been built and tested on the following systems:
- CentOS 6.9
- CentOS 7.4.1708
- Debian 9.1
- Fedora 26
- FreeBSD 11.1
- NetBSD 7.1
- OpenBSD 6.1
- Ubuntu 16.04.3
- Ubuntu 17.04

RPMs have been built and tested on the following systems:
- CentOS 7.4.1708
- Fedora 26

munge-0.5.12

MUNGE Uid 'N' Gid Emporium 0.5.12

Release Notes:
- Changed project homepage to <https://dun.github.io/munge/>.
- Changed RPM specfile from sysvinit to systemd.
- Added --max-ttl cmdline opt to munged.
- Added --pid-file cmdline opt to munged.
- Added support for "make dist" and "make distcheck".
- Fixed group-writable permissions error for logfile on Ubuntu.
- Fixed packaging with missing pkgconfig munge.pc file.
- Fixed packaging with missing systemd service & tmpfiles.d config.
- Fixed recursive make command in makefiles.

This release has been built and tested on the following systems:
- CentOS 7.2.1511
- Debian 8.3
- Debian GNU/kFreeBSD 7.9
- Fedora 23
- FreeBSD 10.2
- NetBSD 6.0
- OpenBSD 5.8
- Ubuntu 15.10

RPMs have been built and tested on the following systems:
- CentOS 7.2.1511
- Fedora 23

munge-0.5.11

MUNGE Uid 'N' Gid Emporium 0.5.11

munge-0.5.10

munge-0.5.9

munge-0.5.8

munge-0.5.7

munge-0.5.6

munge-0.5.5

munge-0.5.4

munge-0.5.3

munge-0.5.2

munge-0.5.1

munge-0.5

munge-0.4.3