From 932f4190e2b65419cef9960e27a7f94fcab9c816 Mon Sep 17 00:00:00 2001 From: Nikolaus Rath Date: Tue, 24 Jul 2018 07:45:33 +0100 Subject: Released 3.2.5 --- AUTHORS | 4 ++++ ChangeLog.rst | 9 +++++++-- meson.build | 2 +- 3 files changed, 12 insertions(+), 3 deletions(-) diff --git a/AUTHORS b/AUTHORS index 5497251..dc8ea4d 100644 --- a/AUTHORS +++ b/AUTHORS @@ -17,6 +17,7 @@ CUSE has been written by Tejun Heo . Furthermore, the following people have contributed patches (autogenerated list): admorgan +Alexander Alex Richman amosonn Anatol Pomozov @@ -54,6 +55,7 @@ Hendrik Brueckner Ikey Doherty itsdeepak Jan Blumschein +Jann Horn Jay Hankins Joachim Schiele Joachim Schiele @@ -84,6 +86,8 @@ Reuben Hawkins Richard W.M. Jones Riku Voipio Roland Bauerschmidt +Rostislav +Rostislav Skudnov Sam Stuewe Sangwoo Moon Sebastian Pipping diff --git a/ChangeLog.rst b/ChangeLog.rst index 10ab5ad..f5d24ca 100644 --- a/ChangeLog.rst +++ b/ChangeLog.rst @@ -1,6 +1,11 @@ -Unreleased Changes -================== +libfuse 3.2.5 (2018-07-24) +========================== +* SECURITY UPDATE: In previous versions of libfuse it was possible to + for unprivileged users to specify the `allow_other` option even when + this was forbidden in `/etc/fuse.conf`. The vulnerability is + present only on systems where SELinux is active (including in + permissive mode). * The fusermount binary has been hardened in several ways to reduce potential attack surface. Most importantly, mountpoints and mount options must now match a hard-coded whitelist. It is expected that diff --git a/meson.build b/meson.build index 71fe59a..0f9ef18 100644 --- a/meson.build +++ b/meson.build @@ -1,4 +1,4 @@ -project('libfuse3', 'c', version: '3.2.4', +project('libfuse3', 'c', version: '3.2.5', meson_version: '>= 0.38', default_options: [ 'buildtype=debugoptimized' ]) -- cgit v1.2.3