From 23ae2d637c8c1b0d337fa15a12bf8266d850a163692636e980bab1656fd7115b Mon Sep 17 00:00:00 2001 From: Dirk Mueller Date: Thu, 9 May 2024 18:54:37 +0000 Subject: [PATCH] - update to 0.3.5: * Upgraded various dependencies, resolving two security alerts from GitHub. * `fscrypt` now requires Go 1.18 or later to build. * `fscrypt` now provides a better error message when it's asked to operate on a locked regular file. * Made some improvements to the documentation. - drop pam-specs from main package - use pam_moduledir script (CVE-2022-25328, command injection). * Make pam_fscrypt ignore system users completely. - refresh 346.patch with final merged state - add 346.patch (bsc#1195623) * Improved the documentation. - spec-cleaner run OBS-URL: https://build.opensuse.org/package/show/filesystems/fscrypt?expand=0&rev=22 --- fscrypt-0.3.4.tar.gz | 3 --- fscrypt-0.3.5.tar.gz | 3 +++ fscrypt.changes | 27 +++++++++++++++++++-------- fscrypt.spec | 6 +++--- 4 files changed, 25 insertions(+), 14 deletions(-) delete mode 100644 fscrypt-0.3.4.tar.gz create mode 100644 fscrypt-0.3.5.tar.gz diff --git a/fscrypt-0.3.4.tar.gz b/fscrypt-0.3.4.tar.gz deleted file mode 100644 index d76f0e9..0000000 --- a/fscrypt-0.3.4.tar.gz +++ /dev/null @@ -1,3 +0,0 @@ -version https://git-lfs.github.com/spec/v1 -oid sha256:fe3c51ecb936226087bb3a62dddda5b7f5cd77dd3be7bf1feb270e1c55eddfa3 -size 175778 diff --git a/fscrypt-0.3.5.tar.gz b/fscrypt-0.3.5.tar.gz new file mode 100644 index 0000000..7f7670d --- /dev/null +++ b/fscrypt-0.3.5.tar.gz @@ -0,0 +1,3 @@ +version https://git-lfs.github.com/spec/v1 +oid sha256:368119b5e67c64bdc5f7872ffc7beed425e1401778003f4c7ae7c1062a45ebaf +size 175314 diff --git a/fscrypt.changes b/fscrypt.changes index df8fc80..767a82e 100644 --- a/fscrypt.changes +++ b/fscrypt.changes @@ -1,3 +1,14 @@ +------------------------------------------------------------------- +Thu May 9 18:53:43 UTC 2024 - Dirk Müller + +- update to 0.3.5: + * Upgraded various dependencies, resolving two security alerts + from GitHub. + * `fscrypt` now requires Go 1.18 or later to build. + * `fscrypt` now provides a better error message when it's asked + to operate on a locked regular file. + * Made some improvements to the documentation. + ------------------------------------------------------------------- Wed Mar 8 11:28:28 UTC 2023 - Dirk Müller @@ -8,7 +19,7 @@ Wed Mar 8 11:28:28 UTC 2023 - Dirk Müller Wed Feb 15 13:58:22 UTC 2023 - Dirk Müller - add fscrypt pam configuration -- drop pam-specs from main package +- drop pam-specs from main package ------------------------------------------------------------------- Tue Jan 31 07:27:28 UTC 2023 - Marcus Rueckert @@ -31,14 +42,14 @@ Tue Jan 31 07:27:28 UTC 2023 - Marcus Rueckert ------------------------------------------------------------------- Tue Mar 8 21:10:23 UTC 2022 - Dirk Müller -- use pam_moduledir +- use pam_moduledir ------------------------------------------------------------------- Thu Feb 24 12:38:24 UTC 2022 - Dirk Müller - update to 0.3.3: * Correctly handle malicious mountpoint paths in the fscrypt bash completion - script (CVE-2022-25328, command injection). + script (CVE-2022-25328, command injection). * Validate the size, type, and owner (for login protectors) of policy and protector files (CVE-2022-25327, denial of service). * Make the fscrypt metadata directories non-world-writable by default @@ -50,18 +61,18 @@ Thu Feb 24 12:38:24 UTC 2022 - Dirk Müller * Make policy and protector files mode 0600 rather than 0644. * Make all relevant files owned by the user when root encrypts a directory with a user's login protector, not just the the login protector itself. - * Make pam_fscrypt ignore system users completely. + * Make pam_fscrypt ignore system users completely. - drop 346.patch: upstream ------------------------------------------------------------------- Wed Feb 23 22:28:47 UTC 2022 - Dirk Müller -- refresh 346.patch with final merged state +- refresh 346.patch with final merged state ------------------------------------------------------------------- Tue Feb 22 15:39:10 UTC 2022 - Dirk Müller -- add 346.patch (bsc#1195623) +- add 346.patch (bsc#1195623) ------------------------------------------------------------------- Thu Feb 10 20:16:40 UTC 2022 - Dirk Müller @@ -78,12 +89,12 @@ Thu Feb 10 20:16:40 UTC 2022 - Dirk Müller * Made fscrypt metadata remove-protector-from-policy work even if the protector is no longer accessible. * Made fscrypt stop trying to access irrelevant filesystems. - * Improved the documentation. + * Improved the documentation. ------------------------------------------------------------------- Fri Feb 4 21:42:05 UTC 2022 - Dirk Müller -- spec-cleaner run +- spec-cleaner run ------------------------------------------------------------------- Wed Oct 20 10:18:41 UTC 2021 - Marcus Rueckert diff --git a/fscrypt.spec b/fscrypt.spec index 07d23e9..cdfaf41 100644 --- a/fscrypt.spec +++ b/fscrypt.spec @@ -1,7 +1,7 @@ # # spec file for package fscrypt # -# Copyright (c) 2023 SUSE LLC +# Copyright (c) 2024 SUSE LLC # # All modifications and additions to the file contributed by third parties # remain the property of their copyright owners, unless otherwise agreed @@ -17,7 +17,7 @@ Name: fscrypt -Version: 0.3.4 +Version: 0.3.5 Release: 0 Summary: Go tool for managing Linux filesystem encryption License: Apache-2.0 @@ -31,7 +31,7 @@ BuildRequires: golang-packaging BuildRequires: m4 BuildRequires: pam-devel BuildRequires: pkgconfig -BuildRequires: golang(API) >= 1.16 +BuildRequires: golang(API) >= 1.18 BuildRequires: pkgconfig(bash-completion) Requires: pam-fscrypt = %{version}