Home
Reading
Searching
Subscribe
Sponsors
Statistics
Posting
Contact
Spam
Lists
Links
About
Hosting
Filtering
Features Download
Marketing
Archives
FAQ
Blog
 
Gmane
From: Szabolcs Szakacsits <szaka-IyvsvuGDJ8VAfugRpC6u6w <at> public.gmane.org>
Subject: Stable ntfs-3g-1.516 released
Newsgroups: gmane.comp.file-systems.ntfs-3g.devel
Date: Tuesday 15th May 2007 22:38:26 UTC (over 10 years ago)
Hello,

This is an emergency, security fix release. 

If ntfs-3g was installed setuid root on Linux __and__ the FUSE kernel 
driver wasn't loaded yet into the running kernel before mount then those 
users who had access to run ntfs-3g could gain root access in a properly 
crafted environment.

Non-Linux OSes, non-setuid installations and setups where the FUSE 
kernel driver loads automatically during system boot (and it's not 
removed afterwards) are not affected.

Many thanks to Jochen Schmitt and Tom "spot" Callaway for the bug report 
and their contributions.

The stable release is available at

    http://ntfs-3g.org/

Have a safe sailing,
	
	Szaka

-------------------------------------------------------------------------
This SF.net email is sponsored by DB2 Express
Download DB2 Express C - the FREE version of DB2 express and take
control of your XML. No limits. Just data. Click to get it now.
http://sourceforge.net/powerbar/db2/
 
CD: 3ms