-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Wed, 04 Feb 2026 08:10:15 +0100 Source: munge Binary: libmunge-dev libmunge2 libmunge2-dbgsym munge munge-dbgsym Architecture: amd64 Version: 0.5.15-2+deb12u1 Distribution: bookworm-security Urgency: high Maintainer: amd64 / i386 Build Daemon (x86-ubc-02) Changed-By: Salvatore Bonaccorso Description: libmunge-dev - authentication service for credential -- development package libmunge2 - authentication service for credential -- library package munge - authentication service to create and validate credentials Changes: munge (0.5.15-2+deb12u1) bookworm-security; urgency=high . * Non-maintainer upload by the Security Team. * Fix out-of-bounds read in credential decoding * Fix buffer overflow when unpacking message address length (CVE-2026-25506) Checksums-Sha1: 6248aeefaf4e15f974569298b2ad00a32fe996f5 36188 libmunge-dev_0.5.15-2+deb12u1_amd64.deb 8fbaf4e6c21c2b2af518b04e384522af2d3c2de2 61764 libmunge2-dbgsym_0.5.15-2+deb12u1_amd64.deb 48783dadfd123046e8256fb116e66586f6ba0759 19740 libmunge2_0.5.15-2+deb12u1_amd64.deb aa089720356a5bda960ad4a196d7fb2fe2a96b9e 337528 munge-dbgsym_0.5.15-2+deb12u1_amd64.deb 8d2b44d51a19a8d390b59ebe60bd0afe9f93f07a 7310 munge_0.5.15-2+deb12u1_amd64-buildd.buildinfo 2dee7f9a372b2304255236c1d219b89d148695f4 106096 munge_0.5.15-2+deb12u1_amd64.deb Checksums-Sha256: dfeb04f480438e9033953a0577d56751c6c7105c3b794be5233a7a091be65119 36188 libmunge-dev_0.5.15-2+deb12u1_amd64.deb ef236ec3f394b8812cad3b39a9e110c9c1707dab48116eab6b2046b10876a445 61764 libmunge2-dbgsym_0.5.15-2+deb12u1_amd64.deb 533a38220c7f2a38a1130f5f80033d1a07723880fa352299b22a10ba99ce826e 19740 libmunge2_0.5.15-2+deb12u1_amd64.deb 3c596017b3afe0e826eecdf72c960e0540ec7daf07894672969af21076bcc886 337528 munge-dbgsym_0.5.15-2+deb12u1_amd64.deb cf8441790bd4f8e9c566ad1e2ca218d9e49e4af91a7dbe60b1716d0a77445401 7310 munge_0.5.15-2+deb12u1_amd64-buildd.buildinfo a5d4c6eb1229dda19bb37040872edc275f581c8d8d820df4bc45cb1f82955334 106096 munge_0.5.15-2+deb12u1_amd64.deb Files: 6dedfc0f51cd366ecaea275a6c3cf0e3 36188 libdevel optional libmunge-dev_0.5.15-2+deb12u1_amd64.deb c77b61113fbdc469676c98b2f23065da 61764 debug optional libmunge2-dbgsym_0.5.15-2+deb12u1_amd64.deb f0c3bb3af08274c2af19f8eab91a9dbc 19740 libs optional libmunge2_0.5.15-2+deb12u1_amd64.deb 3e072e56a80d7b060cdb893051be2192 337528 debug optional munge-dbgsym_0.5.15-2+deb12u1_amd64.deb 8bd7e7d42373a960d61557ada3546b1a 7310 admin optional munge_0.5.15-2+deb12u1_amd64-buildd.buildinfo 06fe9cc22efb406e71f2f7be654d720b 106096 admin optional munge_0.5.15-2+deb12u1_amd64.deb -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEc5vuvf2HND40bnI+8IREj/cRiTMFAmmItHIACgkQ8IREj/cR iTPj8A/9HVzI93oO8kdMX1aXfiGCnwI/HSBktcVFG6MpVzhZqFH/RsSKLfMEq1JW lN6zU1sALWwl7TAr9+di2YTRpMosX27p2dZPQ/tJJh14cdsHBC5ntPdLIrB6296j M/cAzJeqFOv7gq2sHCdy7CfPZWqKpCeTdQZjC71sdmXYSw7Hs4KhacjjdJHIEugh hQBPNUErl9IxF+81urHaqZMSmB+zE3vqV8Uz0a7OoMLfDPGNBXGdy/rvlpg8b2HC HXJRmsnFmADCZj5Ei/6sRgt1nbfZFDH3IkJO5jfMWRsPaQOphc6rGF1wHFNbE0hN vVOQhz5Tuir1llHigVrmmFqJSnv/xblCraPITLP2BoyRC90FWEompnFWFC9X3xFj 6H2n5J+QpoTjTIRrS9FNtXLJv+aevK0lP7gffSYfF7S9fowqp+qzOF+8GsTIueOo k6EHFWimB8aXugzgd4zc7bMMA0PYTM+2jx9AccmbADr9SbJux8HibIR3+cu2LdY4 vOcy1k+SPyISos6FZkFY/lRjuvAsMaQpNb8jSQXhUbksGI5CHhJTsCq3SOcIfdwl v/fNf2PC1gfcBuw32alMgr6O0elbKu4Br+ARyrWDT+RfZWBdxHVX9U2lzsHLw/gs bod4nA8U9spvVm2fnLzIkhk173YDHrqtujYyaYBLRSMvfKvEl4Y= =SXzh -----END PGP SIGNATURE-----