Hi Salvatore,

On Fri, May 22, 2015 at 6:48 AM, Salvatore Bonaccorso <car...@debian.org> wrote:
> ntfs-3g in jessie and above is similarly affected by CVE-2015-3202
> since ntfs-3g since 1:2013.1.13AR.3-2 builds with internal fuse copy.
 Ouch. I plan to patch the Sid version and change the build system to
use the system FUSE library.

> The patch I have used to prepare the updates for jessie is attached.
 I just got the DAK email for Jessie. Wheezy is not affected I guess,
will check.

> ntfs-3g though should try to use the system fuse and not the embedded
> copy, could you check to switch this back?
 Sure thing. The internal copy may contain some fixes over the
official source, but I'll check this as well. I'm away from home, but
will be back in ten hours.

Thanks,
Laszlo/GCS


-- 
To UNSUBSCRIBE, email to debian-bugs-rc-requ...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org

Reply via email to