Hello,
This is an emergency, security fix release.
If ntfs-3g was installed setuid root on Linux __and__ the FUSE kernel
driver wasn't loaded yet into the running kernel before mount then those
users who had access to run ntfs-3g could gain root access in a properly
crafted environment.
Non-Linux OSes, non-setuid installations and setups where the FUSE
kernel driver loads automatically during system boot (and it's not
removed afterwards) are not affected.
Many thanks to Jochen Schmitt and Tom "spot" Callaway for the bug report
and their contributions.
The stable release is available at
http://ntfs-3g.org/
Have a safe sailing,
Szaka
-------------------------------------------------------------------------
This SF.net email is sponsored by DB2 Express
Download DB2 Express C - the FREE version of DB2 express and take
control of your XML. No limits. Just data. Click to get it now.
http://sourceforge.net/powerbar/db2/
_______________________________________________
ntfs-3g-devel mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/ntfs-3g-devel
