From 6172ece7177fec28f3a771bbd445d5e9b9d5acd0 Mon Sep 17 00:00:00 2001 From: Nikolaus Rath Date: Tue, 24 Jul 2018 08:00:09 +0100 Subject: [PATCH] Released 2.9.8 --- AUTHORS | 20 ++++---------------- ChangeLog | 13 +++++++------ configure.ac | 2 +- lib/Makefile.am | 2 +- 4 files changed, 13 insertions(+), 24 deletions(-) diff --git a/AUTHORS b/AUTHORS index 3aae1ac..9872ba8 100644 --- a/AUTHORS +++ b/AUTHORS @@ -16,26 +16,18 @@ Contributors CUSE has been written by Tejun Heo . Furthermore, the following people have contributed patches (autogenerated list): +Alexander Anatol Pomozov -Antonio SJ Musumeci -Christopher Harrison +Bill Zissimopoulos +Carl Edquist Csaba Henk -cvs2git <> Dalvik Khertel Daniel Thau David McNab -David Sheets Emmanuel Dreyfus -Enke Chen -Eric Engestrom -Eric Wong Fabrice Bauzac -Feng Shuo Hendrik Brueckner -Ikey Doherty -Jan Blumschein -Joachim Schiele -Joachim Schiele +Jann Horn John Muir Laszlo Papp Madan Valluri @@ -50,10 +42,6 @@ Nikolaus Rath Olivier Blin Ratna_Bolla@dell.com Reuben Hawkins -Richard W.M. Jones -Riku Voipio Roland Bauerschmidt -Sam Stuewe Sebastian Pipping therealneworld@gmail.com -Winfried Koehler diff --git a/ChangeLog b/ChangeLog index 0149cb3..8f6536f 100644 --- a/ChangeLog +++ b/ChangeLog @@ -1,16 +1,17 @@ -Unreleased Changes -================== +FUSE 2.9.8 (2018-07-24) +======================= +* SECURITY UPDATE: In previous versions of libfuse it was possible to + for unprivileged users to specify the `allow_other` option even when + this was forbidden in `/etc/fuse.conf`. The vulnerability is + present only on systems where SELinux is active (including in + permissive mode). * libfuse no longer segfaults when fuse_interrupted() is called outside the event loop. * The fusermount binary has been hardened in several ways to reduce potential attack surface. Most importantly, mountpoints and mount options must now match a hard-coded whitelist. It is expected that this whitelist covers all regular use-cases. - -FUSE 2.9.8 -========== - * Fixed rename deadlock on FreeBSD. FUSE 2.9.7 (2016-06-20) diff --git a/configure.ac b/configure.ac index 8f1a63a..a96da7f 100644 --- a/configure.ac +++ b/configure.ac @@ -1,4 +1,4 @@ -AC_INIT(fuse, 2.9.7) +AC_INIT(fuse, 2.9.8) AC_PREREQ(2.59d) AC_CONFIG_MACRO_DIR([m4]) diff --git a/lib/Makefile.am b/lib/Makefile.am index b0f195e..5cbc6b5 100644 --- a/lib/Makefile.am +++ b/lib/Makefile.am @@ -37,7 +37,7 @@ libfuse_la_SOURCES = \ $(iconv_source) \ $(mount_source) -libfuse_la_LDFLAGS = -pthread @libfuse_libs@ -version-number 2:9:7 \ +libfuse_la_LDFLAGS = -pthread @libfuse_libs@ -version-number 2:9:8 \ -Wl,--version-script,$(srcdir)/fuse_versionscript if NETBSD -- 2.30.2