Fedora: 2021-4dd269a76c Critical: NTFS-3G Buffer Overflow Fix

NTFS-3G is a stable, open source, GPL licensed, POSIX, read/write NTFS

driver for Linux and many other operating systems. It provides safe

handling of the Windows XP, Windows Server 2003, Windows 2000, Windows

Vista, Windows Server 2008 and Windows 7 NTFS file systems. NTFS-3G can

create, remove, rename, move files, directories, hard links, and streams;

it can read and write normal and transparently compressed files, including

streams and sparse files; it can handle special files like symbolic links,

devices, and FIFOs, ACL, extended attributes; moreover it provides full

file access right and ownership support.

Update NTFS-3G to 2021.8.22 to fix multiple CVEs ---- New upstream development

version 1.45.7. ---- Upstream patch to work with qemu 6.1 (RHBZ#1998820)

* Tue Aug 31 2021 Neal Gompa - 2:2021.8.22-1

- Rebase to version 2021.8.22 to fix various CVEs (RHBZ#1999869)

- Clean up old cruft for RHEL < 7

- Split libraries out to libs subpackage

[ 1 ] Bug #1998820 - libguestfs breaks with qemu 6.1 with error "Backing file specified without backing format"

https://bugzilla.redhat.com/show_bug.cgi?id=1998820

[ 2 ] Bug #1999788 - ntfs-3g: Multiple buffer overflows in all versions [fedora-all]

https://bugzilla.redhat.com/show_bug.cgi?id=1999788

[ 3 ] Bug #1999869 - ntfs-3g-2021.8.22 is available

https://bugzilla.redhat.com/show_bug.cgi?id=1999869

su -c 'dnf upgrade --advisory FEDORA-2021-4dd269a76c' at the command

line. For more information, refer to the dnf documentation available at

https://dnf.readthedocs.io/en/latest/command_ref.html

All packages are signed with the Fedora Project GPG key. More details on the

GPG keys used by the Fedora Project can be found at

package-announce mailing list -- package-announce@lists.fedoraproject.org

To unsubscribe send an email to package-announce-leave@lists.fedoraproject.org

Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/

List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines

List Archives: https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/

Do not reply to spam on the list, report it: https://pagure.io/fedora-infrastructure