Accepting request 1276944 from security

- add README.openSUSE for boo#1221085, boo#1243036

OBS-URL: https://build.opensuse.org/request/show/1276944
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/encfs?expand=0&rev=43

encfs.changes

@@ -1,3 +1,8 @@
+-------------------------------------------------------------------
+Mon May 12 16:34:02 UTC 2025 - Andreas Stieger <andreas.stieger@gmx.de>
+
+- add README.openSUSE for boo#1221085, boo#1243036
+
 -------------------------------------------------------------------
 Fri Apr 25 18:42:13 UTC 2025 - Andreas Stieger <andreas.stieger@gmx.de>
 

encfs.spec

@@ -25,6 +25,7 @@ License:        GPL-2.0-or-later AND GPL-3.0-or-later
 Group:          System/Filesystems
 URL:            https://vgough.github.io/encfs/
 Source:         https://github.com/vgough/encfs/releases/download/v%{version}/encfs-%{version}.tar.gz
+Source2:        README.openSUSE
 BuildRequires:  c++_compiler
 BuildRequires:  cmake
 BuildRequires:  fuse
@@ -59,6 +60,7 @@ application using fuse (FUSE (Filesystem in USErspace)).
 
 %prep
 %autosetup -p1
+cp %{SOURCE2} .
 
 %build
 %cmake \
@@ -78,6 +80,7 @@ application using fuse (FUSE (Filesystem in USErspace)).
 %files
 %license COPYING*
 %doc AUTHORS ChangeLog DESIGN.md PERFORMANCE.md README*
+%doc README.openSUSE
 %{_bindir}/encfs*
 %{_mandir}/man1/*.1%{?ext_man}
 %{_libdir}/libencfs.so*

README.openSUSE

@@ -0,0 +1,27 @@
+# Information for Encfs on openSUSE
+
+## Encfs is deprecated
+
+Encfs is no longer maintained upstream. A number of inherrent security issues
+may remain unresolved forever. The package is on a deprecation path in
+openSUSE. Users are advised to move to alternatives, such as LUKS, crypfs,
+gocryptfs, or file based encryption (GnuPG).
+
+See https://bugzilla.opensuse.org/show_bug.cgi?id=1243036
+
+## encfs on Leap 15.6 or later may fail to decrypt old directories
+
+encfs, when built against OpenSSL 3, may fail to decrypt data created with
+versions built against OpenSSL 1. This applies when when transitioing from
+openSUSE Leap 15.5 to 15.6, or to openSUSE Tumbleweed. As a workaround, the
+following configuration may be added to /etc/ssl/openssl.cnf :
+
+````
+[provider_sect]
+legacy = legacy_sect
+
+[legacy_sect]
+activate = 1
+````
+
+See https://bugzilla.opensuse.org/show_bug.cgi?id=1221085