Bug#786475: ntfs-3g: CVE-2015-3202

2015-05-22 Thread GCS
Hi Salvatore, On Fri, May 22, 2015 at 6:48 AM, Salvatore Bonaccorso car...@debian.org wrote: ntfs-3g in jessie and above is similarly affected by CVE-2015-3202 since ntfs-3g since 1:2013.1.13AR.3-2 builds with internal fuse copy. Ouch. I plan to patch the Sid version and change the build

Bug#786475: ntfs-3g: CVE-2015-3202

2015-05-22 Thread Salvatore Bonaccorso
Hi László! On Fri, May 22, 2015 at 08:14:16AM +0200, László Böszörményi (GCS) wrote: Hi Salvatore, On Fri, May 22, 2015 at 6:48 AM, Salvatore Bonaccorso car...@debian.org wrote: ntfs-3g in jessie and above is similarly affected by CVE-2015-3202 since ntfs-3g since 1:2013.1.13AR.3-2

Bug#786475: ntfs-3g: CVE-2015-3202

2015-05-22 Thread GCS
Hi Salvatore, On Fri, May 22, 2015 at 9:28 AM, Salvatore Bonaccorso car...@debian.org wrote: On Fri, May 22, 2015 at 08:14:16AM +0200, László Böszörményi (GCS) wrote: Ouch. I plan to patch the Sid version and change the build system to use the system FUSE library. Jep that would be great. i

Bug#786475: ntfs-3g: CVE-2015-3202

2015-05-21 Thread Salvatore Bonaccorso
Source: ntfs-3g Version: 1:2013.1.13AR.3-2 Severity: grave Tags: security patch upstream Justification: user security hole Hi Laszlo ntfs-3g in jessie and above is similarly affected by CVE-2015-3202 since ntfs-3g since 1:2013.1.13AR.3-2 builds with internal fuse copy. The patch I have used to