Accepting request 627620 from filesystems

OBS-URL: https://build.opensuse.org/request/show/627620
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/fuse?expand=0&rev=68

fuse-2.9.7.tar.gz

@@ -1,3 +0,0 @@
-version https://git-lfs.github.com/spec/v1
-oid sha256:832432d1ad4f833c20e13b57cf40ce5277a9d33e483205fc63c78111b3358874
-size 661138

fuse-2.9.7.tar.gz.asc

@@ -1,20 +0,0 @@
------BEGIN PGP SIGNATURE-----
-Version: GnuPG v1
-
-iQKgBAABCgCKBQJXaEo6XxSAAAAAAC4AKGlzc3Vlci1mcHJAbm90YXRpb25zLm9w
-ZW5wZ3AuZmlmdGhob3JzZW1hbi5uZXRFRDMxNzkxQjJDNUMxNjEzQUYzODhCOEFE
-MTEzRkNBQzNDNEU1OTlGIxpodHRwOi8vd3d3LnJhdGgub3JnL2dwZ3BvbGljeS5o
-dG1sAAoJENET/Kw8TlmfCfUP/36GmAhqrDt5SIQruYUETuJMlZ7G5CVUYWlTXpy3
-sqoeGiYePDonlx1fHqutuTxj/btqSphbn5d+4Uj8AsobiKsNGmMxdmdQH3QO7g61
-Qe5Wzk2d89Ge3GzkyjEVK5EkbptKWmhEgcX4OQgNzJ34O49cAu6IA8sCcAR3HgBw
-sbtfh33G+d94QaqQHj1FDQJV4KmyYUAG7RLMiDv+O9F16ZG7kQS8a1BQwPlrvxKs
-vMzTbULium/quP7SwlYIOSdpcnx6TULLbwafbmXCt6zze7zbGAhGmW03Lzu5g3uj
-exazwzKbZiHgadAXCSoWGOJXYnZ8N7W+69q72emAHl2LO3nEyttkSVa3/6LAJrYw
-VQqEnBhCLi12bo7wTBzijjMilXRdxU0s47qmNGQnnQdFSoj99ilgDVKZCCQlHTtY
-dSLVAR9fKyMlqNUPEsl1ZoFe/Zjjl1ZGAu4JUFUXMIurpRXO/EqTddvLpemXl8rP
-8kVAAwp0rPFRT2DHDg0OMqvwmDPvWbiOIVgtCiTMffuILWx+sJkj4sTa+uce49gM
-/XlGlrxKVgk7KOTaSsKXva5BZv+8zf4BhuZrtmGEWaPqr/8soCh6CRyJg3sfkvW/
-v6R9Q4VxG/IPSpdL2fQGmVIPxQW5QwOytTJvZHApmJ+Ve8R2JlXbpkLRnfAtN10f
-iAHy
-=sqI5
------END PGP SIGNATURE-----

fuse-2.9.8.tar.gz

@@ -0,0 +1,3 @@
+version https://git-lfs.github.com/spec/v1
+oid sha256:5e84f81d8dd527ea74f39b6bc001c874c02bad6871d7a9b0c14efb57430eafe3
+size 4610904

fuse-2.9.8.tar.gz.asc

@@ -0,0 +1,19 @@
+-----BEGIN PGP SIGNATURE-----
+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+=gchp
+-----END PGP SIGNATURE-----

fuse.changes

@@ -1,3 +1,21 @@
+-------------------------------------------------------------------
+Sat Jul 28 22:36:01 UTC 2018 - avindra@opensuse.org
+
+- fuse 2.9.8
+  * SECURITY UPDATE: In previous versions of libfuse it was possible
+    to for unprivileged users to specify the allow_other option even
+    when this was forbidden in /etc/fuse.conf. The vulnerability is
+    present only on systems where SELinux is active (including in
+    permissive mode).
+  * libfuse no longer segfaults when fuse_interrupted() is called
+    outside the event loop.
+  * The fusermount binary has been hardened in several ways to
+    reduce potential attack surface. Most importantly, mountpoints
+    and mount options must now match a hard-coded whitelist. It is
+    expected that this whitelist covers all regular use-cases.
+- cleanup with spec-cleaner
+- update wiki urls to new location
+
 -------------------------------------------------------------------
 Mon Oct 16 19:28:32 UTC 2017 - admorgan@morgancomputers.net
 

fuse.spec

@@ -1,7 +1,7 @@
 #
 # spec file for package fuse
 #
-# Copyright (c) 2017 SUSE LINUX GmbH, Nuernberg, Germany.
+# Copyright (c) 2018 SUSE LINUX GmbH, Nuernberg, Germany.
 #
 # All modifications and additions to the file contributed by third parties
 # remain the property of their copyright owners, unless otherwise agreed
@@ -17,12 +17,12 @@
 
 
 Name:           fuse
-Version:        2.9.7
+Version:        2.9.8
 Release:        0
 Summary:        User space File System
-License:        GPL-2.0+ and LGPL-2.1+
+License:        GPL-2.0-or-later AND LGPL-2.1-or-later
 Group:          System/Filesystems
-Url:            https://github.com/libfuse/libfuse
+URL:            https://github.com/libfuse/libfuse
 Source:         https://github.com/libfuse/libfuse/releases/download/fuse-%{version}/fuse-%{version}.tar.gz
 Source2:        fuse.rpmlintrc
 Source3:        baselibs.conf
@@ -38,7 +38,6 @@ BuildRequires:  libtool
 BuildRequires:  pkgconfig
 # FIXME: use proper Requires(pre/post/preun/...)
 PreReq:         permissions
-BuildRoot:      %{_tmppath}/%{name}-%{version}-build
 %if 0%{?suse_version} > 1320
 Requires(pre):  group(trusted)
 %endif
@@ -83,7 +82,7 @@ by some FUSE filesystems like ntfs-3g) and the documentation for FUSE.
 
 After installing fuse-devel, administrators can compile and install
 other user space file systems which can be found at
-http://fuse.sourceforge.net/wiki
+https://github.com/libfuse/libfuse/wiki/
 
 %package -n libulockmgr1
 Summary:        Library of FUSE, the User space File System for GNU/Linux and BSD
@@ -107,7 +106,7 @@ and /sbin/mount.fuse.
 
 After installing fuse-devel, administrators can compile and install
 other user space file systems which can be found at
-http://fuse.sourceforge.net/wiki
+https://github.com/libfuse/libfuse/wiki/
 
 %package doc
 Summary:        Document package for FUSE (userspace filesystem)
@@ -132,7 +131,7 @@ implement kernel-default (Linux) file systems in user space.
 
 With fuse-devel, administrators can compile and install other user
 space file systems which can be found at
-http://fuse.sourceforge.net/wiki
+https://github.com/libfuse/libfuse/wiki/
 
 %package devel-static
 Summary:        Development package for FUSE (userspace filesystem) modules
@@ -147,7 +146,7 @@ implement kernel-default (Linux) file systems in user space.
 
 With fuse-devel, administrators can compile and install other user
 space file systems which can be found at
-http://fuse.sourceforge.net/wiki
+https://github.com/libfuse/libfuse/wiki/
 
 %prep
 %setup -q
@@ -167,7 +166,7 @@ autoreconf -fi
 make %{?_smp_mflags}
 
 %install
-make DESTDIR=%{buildroot} install %{?_smp_mflags}
+%make_install
 rm -rf %{buildroot}/%{_sysconfdir}/init.d
 install -m644 -D %{SOURCE4} %{buildroot}/%{_sysconfdir}/fuse.conf
 # Needed for OpenSUSE buildservice
@@ -203,16 +202,13 @@ rm -rf doc/Makefile.am doc/Makefile.in doc/Makefile
 %verify_permissions -e %{_bindir}/fusermount
 
 %post -n libfuse2 -p /sbin/ldconfig
-
 %postun -n libfuse2 -p /sbin/ldconfig
-
 %post -n libulockmgr1 -p /sbin/ldconfig
-
 %postun -n libulockmgr1 -p /sbin/ldconfig
 
 %files
-%defattr(-,root,root)
+%license COPYING*
-%doc AUTHORS ChangeLog NEWS README* COPYING*
+%doc AUTHORS ChangeLog NEWS README*
 %if 0%{?suse_version} <= 1020
 %dir %{_sysconfdir}/udev
 %dir %{_sysconfdir}/udev/rules.d
@@ -225,30 +221,26 @@ rm -rf doc/Makefile.am doc/Makefile.in doc/Makefile
 %{_sbindir}/mount.fuse
 %config %{_sysconfdir}/fuse.conf
 %{_bindir}/ulockmgr_server
-%{_mandir}/man1/fusermount.1.*
+%{_mandir}/man1/fusermount.1%{?ext_man}
-%{_mandir}/man1/ulockmgr_server.1.*
+%{_mandir}/man1/ulockmgr_server.1%{?ext_man}
-%{_mandir}/man8/mount.fuse.8.*
+%{_mandir}/man8/mount.fuse.8%{?ext_man}
 
 %files -n libfuse2
-%defattr(-,root,root)
 #UsrMerge
 /%{_lib}/libfuse.so.2*
 #EndUsrMerge
 %{_libdir}/libfuse.so.2*
 
 %files -n libulockmgr1
-%defattr(-,root,root)
 #UsrMerge
 /%{_lib}/libulockmgr.so.*
 #EndUsrMerge
 %{_libdir}/libulockmgr.so.*
 
 %files doc
-%defattr(-,root,root)
 %doc example doc
 
 %files devel
-%defattr(-,root,root)
 %{_libdir}/libfuse.so
 %{_libdir}/libulockmgr.so
 %{_includedir}/fuse.h
@@ -257,7 +249,6 @@ rm -rf doc/Makefile.am doc/Makefile.in doc/Makefile
 %{_includedir}/ulockmgr.h
 
 %files devel-static
-%defattr(-,root,root)
 %{_libdir}/libfuse.a
 
 %changelog