-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Tue, 26 May 2015 19:36:39 +0200 Source: ntfs-3g Binary: ntfs-3g ntfs-3g-dbg ntfs-3g-dev ntfs-3g-udeb Architecture: source Version: 1:2014.2.15AR.2-1+deb8u2 Distribution: jessie-security Urgency: high Maintainer: Laszlo Boszormenyi (GCS) <gcs@debian.org> Changed-By: Salvatore Bonaccorso <carnil@debian.org> Description: ntfs-3g - read/write NTFS driver for FUSE ntfs-3g-dbg - read/write NTFS driver for FUSE (debug) ntfs-3g-dev - read/write NTFS driver for FUSE (development) ntfs-3g-udeb - read/write NTFS driver for FUSE (udeb) Closes: 786475 Changes: ntfs-3g (1:2014.2.15AR.2-1+deb8u2) jessie-security; urgency=high . * Non-maintainer upload by the Security Team. * Update 0002-CVE-2015-3202.patch patch. CVE-2015-3202: Missing scrubbing of the environment before executing a mount or umount of a filesystem. The previous fix for CVE-2015-3202 was incomplete and missed the replacement of one execl call with execle. (Closes: #786475) Checksums-Sha1: 89e05dd2bcb494810899b4e7fb9df696ceb17932 2162 ntfs-3g_2014.2.15AR.2-1+deb8u2.dsc e7c1de2631b8c111a6284d674bd7122e031e67b3 22108 ntfs-3g_2014.2.15AR.2-1+deb8u2.debian.tar.xz Checksums-Sha256: 273d5e157ad5dd6d9ae0626756aad1ff422b724390510106fe8ca9c40caa7d56 2162 ntfs-3g_2014.2.15AR.2-1+deb8u2.dsc 029e9b81c4b1ef07f1509b6caf6b2758e9905989f59501c784b7625437dbb7e5 22108 ntfs-3g_2014.2.15AR.2-1+deb8u2.debian.tar.xz Files: f99879552909df5533547293a02b0b15 2162 otherosfs optional ntfs-3g_2014.2.15AR.2-1+deb8u2.dsc c2d64326825320044a9cf500c14209a3 22108 otherosfs optional ntfs-3g_2014.2.15AR.2-1+deb8u2.debian.tar.xz -----BEGIN PGP SIGNATURE----- Version: GnuPG v1 iQIcBAEBCgAGBQJVZLXxAAoJEAVMuPMTQ89EuYgP/10WjuwtubjiOqI1Nd2Lus42 5VjjCkbNRoJGhIMEGVaL6d07QzIX9gG+W6l0v9VIkib+nXRWW34Y1cl9IBSTku9u jusRDhlGVGF01BuB1pFWAGFY8PR+AgXMTkVWxVQj8WlE/L9aBbPlC3Dc8oxc1ngx Ok8VXQzlRvsnuK9DGRl+pzHlgDbgu5afzkoLaH6Txzyg1ZG4CLvFda7CWnpt9NH2 tg73dlwkmXsM2K45W+/DXqOv+MEY7KpyaJbWXOukpcUdB1qsAqQLHSf5NQu1U+cF fFgmB1CsdGxQ1a0aBgsl9s/AE384o31GMq40Su3jFXy+CCX8zCGQRBrvDfElNIXf Ltow7zn0pr+LfaWn8oZjSzrocNuUtlCOIfL8eBfim0Ik2zsrbt0DQ+c1idARGpS5 tC8bc2+y6ZvXdq9g22kJO3C4DN5YS4ZXjOWdAgub4gI699N6VqRi6oPQXtyt5lBP +zOOw3VRNNAmKAQw6KSPmLBzmUcOCgQOYnw0APTZ6VPI3k0mPo+0cd2AvhJyRL6g TYQQh9UDlP+7+UeWHe0plU9oi0KFH6yuFDRQEo/x87h4MxU+ys4ioGkXIzVK86CK uePSwIkly14Rzs9O8TAoXExlF/1uV753m6fqBlZP3UOHsG/cVs01tqw4vjh9KPon cMbQ4udEJra2emSdBA7+ =xFQx -----END PGP SIGNATURE-----