Hello community, here is the log from the commit of package fuse for openSUSE:Factory checked in at 2018-08-08 14:44:17 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Comparing /work/SRC/openSUSE:Factory/fuse (Old) and /work/SRC/openSUSE:Factory/.fuse.new (New) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Package is "fuse" Wed Aug 8 14:44:17 2018 rev:68 rq:627620 version:2.9.8 Changes: -------- --- /work/SRC/openSUSE:Factory/fuse/fuse.changes 2017-10-23 16:38:49.997284085 +0200 +++ /work/SRC/openSUSE:Factory/.fuse.new/fuse.changes 2018-08-08 14:44:18.564646792 +0200 @@ -1,0 +2,18 @@ +Sat Jul 28 22:36:01 UTC 2018 - [email protected] + +- fuse 2.9.8 + * SECURITY UPDATE: In previous versions of libfuse it was possible + to for unprivileged users to specify the allow_other option even + when this was forbidden in /etc/fuse.conf. The vulnerability is + present only on systems where SELinux is active (including in + permissive mode). + * libfuse no longer segfaults when fuse_interrupted() is called + outside the event loop. + * The fusermount binary has been hardened in several ways to + reduce potential attack surface. Most importantly, mountpoints + and mount options must now match a hard-coded whitelist. It is + expected that this whitelist covers all regular use-cases. +- cleanup with spec-cleaner +- update wiki urls to new location + +------------------------------------------------------------------- Old: ---- fuse-2.9.7.tar.gz fuse-2.9.7.tar.gz.asc New: ---- fuse-2.9.8.tar.gz fuse-2.9.8.tar.gz.asc ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ fuse.spec ++++++ --- /var/tmp/diff_new_pack.Nd40Xc/_old 2018-08-08 14:44:19.124647703 +0200 +++ /var/tmp/diff_new_pack.Nd40Xc/_new 2018-08-08 14:44:19.128647709 +0200 @@ -1,7 +1,7 @@ # # spec file for package fuse # -# Copyright (c) 2017 SUSE LINUX GmbH, Nuernberg, Germany. +# Copyright (c) 2018 SUSE LINUX GmbH, Nuernberg, Germany. # # All modifications and additions to the file contributed by third parties # remain the property of their copyright owners, unless otherwise agreed @@ -17,12 +17,12 @@ Name: fuse -Version: 2.9.7 +Version: 2.9.8 Release: 0 Summary: User space File System -License: GPL-2.0+ and LGPL-2.1+ +License: GPL-2.0-or-later AND LGPL-2.1-or-later Group: System/Filesystems -Url: https://github.com/libfuse/libfuse +URL: https://github.com/libfuse/libfuse Source: https://github.com/libfuse/libfuse/releases/download/fuse-%{version}/fuse-%{version}.tar.gz Source2: fuse.rpmlintrc Source3: baselibs.conf @@ -38,7 +38,6 @@ BuildRequires: pkgconfig # FIXME: use proper Requires(pre/post/preun/...) PreReq: permissions -BuildRoot: %{_tmppath}/%{name}-%{version}-build %if 0%{?suse_version} > 1320 Requires(pre): group(trusted) %endif @@ -83,7 +82,7 @@ After installing fuse-devel, administrators can compile and install other user space file systems which can be found at -http://fuse.sourceforge.net/wiki +https://github.com/libfuse/libfuse/wiki/ %package -n libulockmgr1 Summary: Library of FUSE, the User space File System for GNU/Linux and BSD @@ -107,7 +106,7 @@ After installing fuse-devel, administrators can compile and install other user space file systems which can be found at -http://fuse.sourceforge.net/wiki +https://github.com/libfuse/libfuse/wiki/ %package doc Summary: Document package for FUSE (userspace filesystem) @@ -132,7 +131,7 @@ With fuse-devel, administrators can compile and install other user space file systems which can be found at -http://fuse.sourceforge.net/wiki +https://github.com/libfuse/libfuse/wiki/ %package devel-static Summary: Development package for FUSE (userspace filesystem) modules @@ -147,7 +146,7 @@ With fuse-devel, administrators can compile and install other user space file systems which can be found at -http://fuse.sourceforge.net/wiki +https://github.com/libfuse/libfuse/wiki/ %prep %setup -q @@ -167,7 +166,7 @@ make %{?_smp_mflags} %install -make DESTDIR=%{buildroot} install %{?_smp_mflags} +%make_install rm -rf %{buildroot}/%{_sysconfdir}/init.d install -m644 -D %{SOURCE4} %{buildroot}/%{_sysconfdir}/fuse.conf # Needed for OpenSUSE buildservice @@ -203,16 +202,13 @@ %verify_permissions -e %{_bindir}/fusermount %post -n libfuse2 -p /sbin/ldconfig - %postun -n libfuse2 -p /sbin/ldconfig - %post -n libulockmgr1 -p /sbin/ldconfig - %postun -n libulockmgr1 -p /sbin/ldconfig %files -%defattr(-,root,root) -%doc AUTHORS ChangeLog NEWS README* COPYING* +%license COPYING* +%doc AUTHORS ChangeLog NEWS README* %if 0%{?suse_version} <= 1020 %dir %{_sysconfdir}/udev %dir %{_sysconfdir}/udev/rules.d @@ -225,30 +221,26 @@ %{_sbindir}/mount.fuse %config %{_sysconfdir}/fuse.conf %{_bindir}/ulockmgr_server -%{_mandir}/man1/fusermount.1.* -%{_mandir}/man1/ulockmgr_server.1.* -%{_mandir}/man8/mount.fuse.8.* +%{_mandir}/man1/fusermount.1%{?ext_man} +%{_mandir}/man1/ulockmgr_server.1%{?ext_man} +%{_mandir}/man8/mount.fuse.8%{?ext_man} %files -n libfuse2 -%defattr(-,root,root) #UsrMerge /%{_lib}/libfuse.so.2* #EndUsrMerge %{_libdir}/libfuse.so.2* %files -n libulockmgr1 -%defattr(-,root,root) #UsrMerge /%{_lib}/libulockmgr.so.* #EndUsrMerge %{_libdir}/libulockmgr.so.* %files doc -%defattr(-,root,root) %doc example doc %files devel -%defattr(-,root,root) %{_libdir}/libfuse.so %{_libdir}/libulockmgr.so %{_includedir}/fuse.h @@ -257,7 +249,6 @@ %{_includedir}/ulockmgr.h %files devel-static -%defattr(-,root,root) %{_libdir}/libfuse.a %changelog ++++++ fuse-2.9.7.tar.gz -> fuse-2.9.8.tar.gz ++++++ ++++ 103848 lines of diff (skipped)
