From unknown Tue Jun 17 01:48:53 2025 X-Loop: help-debbugs@gnu.org Subject: [bug#50488] [PATCH] gnu: ntfs-3g: Update to 2021.8.22 [security fixes]. Resent-From: Leo Famulari Original-Sender: "Debbugs-submit" Resent-CC: guix-patches@gnu.org Resent-Date: Thu, 09 Sep 2021 17:22:02 +0000 Resent-Message-ID: Resent-Sender: help-debbugs@gnu.org X-GNU-PR-Message: report 50488 X-GNU-PR-Package: guix-patches X-GNU-PR-Keywords: patch To: 50488@debbugs.gnu.org X-Debbugs-Original-To: guix-patches@gnu.org Received: via spool by submit@debbugs.gnu.org id=B.163120807825674 (code B ref -1); Thu, 09 Sep 2021 17:22:02 +0000 Received: (at submit) by debbugs.gnu.org; 9 Sep 2021 17:21:18 +0000 Received: from localhost ([127.0.0.1]:36137 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1mONjc-0006fv-7X for submit@debbugs.gnu.org; Thu, 09 Sep 2021 13:21:17 -0400 Received: from lists.gnu.org ([209.51.188.17]:40648) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1mONjb-0006fo-3K for submit@debbugs.gnu.org; Thu, 09 Sep 2021 13:21:11 -0400 Received: from eggs.gnu.org ([2001:470:142:3::10]:37452) by lists.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.90_1) (envelope-from ) id 1mONja-0001Uz-TP for guix-patches@gnu.org; Thu, 09 Sep 2021 13:21:10 -0400 Received: from wout3-smtp.messagingengine.com ([64.147.123.19]:41799) by eggs.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.90_1) (envelope-from ) id 1mONjW-0001g2-Sa for guix-patches@gnu.org; Thu, 09 Sep 2021 13:21:10 -0400 Received: from compute3.internal (compute3.nyi.internal [10.202.2.43]) by mailout.west.internal (Postfix) with ESMTP id 2125C320093F; Thu, 9 Sep 2021 13:21:05 -0400 (EDT) Received: from mailfrontend1 ([10.202.2.162]) by compute3.internal (MEProxy); Thu, 09 Sep 2021 13:21:05 -0400 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=famulari.name; h=from:to:subject:date:message-id:mime-version :content-transfer-encoding; s=mesmtp; bh=NhSDC6bCiFn+NCDdHUQcMxk 4u4I+XEslPkyAL0qbbWA=; b=h5jvChN19nEBaHa7/yXbA9k4gowDOjDZStABDZF Gy1gM3LXVbJdUShpAJD7njyD7x/Fm5Fc2VwjddqgmSAHlEXv95JpYucnaRwtKKMC QxIKllIAvY4F40jG3gz7i0zZ6SVoWa56PKBe40EU2KaHIgPmZWqeoEZjSg7Yd39l Usy8= DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d= messagingengine.com; h=content-transfer-encoding:date:from :message-id:mime-version:subject:to:x-me-proxy:x-me-proxy :x-me-sender:x-me-sender:x-sasl-enc; s=fm3; bh=NhSDC6bCiFn+NCDdH UQcMxk4u4I+XEslPkyAL0qbbWA=; b=q4pWJyRi+RQ8Ry34HDb31zB0d1Ykn3Mnq BrFzTQd02lDsp30zmbaQOfrSNHC4kj2IC2nfQGvdojg6U7k4pnU5EnhhTB13pOcY kunK917r0cEAgHmsXi1X77Yfd/q55utH8WafTX41lCm/NcIxti9/r3gu0HvlBWhZ 7AVSmzcLxvwtAKiuL75HbC1SmQaI+i3NBPeb3F2YBrBCgk933TfCKmw5CSDvFMjY P8BtznpTlFBslQff6Np+MbFHBIIEYc7rfbPpASeqxQbo64chXI83HrWOpqZXUuDO VVKmJt0uBc5Zz+Nn4cqa36TZnGlB+LPL47EMOQM33WDhng2FZ3sug== X-ME-Sender: X-ME-Received: X-ME-Proxy-Cause: gggruggvucftvghtrhhoucdtuddrgedvtddrudefledgudduvdcutefuodetggdotefrod ftvfcurfhrohhfihhlvgemucfhrghsthforghilhdpqfgfvfdpuffrtefokffrpgfnqfgh necuuegrihhlohhuthemuceftddtnecunecujfgurhephffvufffkffoggfgsedtkeertd ertddtnecuhfhrohhmpefnvghoucfhrghmuhhlrghrihcuoehlvghosehfrghmuhhlrghr ihdrnhgrmhgvqeenucggtffrrghtthgvrhhnpeektdejhfefheejgeeuvefhhefffedtud eijeehhfeuvdevudfgtdekudefjeeukeenucffohhmrghinhepshgvtghlihhsthhsrdho rhhgpdhtuhigvghrrgdrtghomhdpuggvsghirghnrdhorhhgpdhmihhtrhgvrdhorhhgpd hsohhurhgtvghfohhrghgvrdhnvghtnecuvehluhhsthgvrhfuihiivgeptdenucfrrghr rghmpehmrghilhhfrhhomheplhgvohesfhgrmhhulhgrrhhirdhnrghmvg X-ME-Proxy: Received: by mail.messagingengine.com (Postfix) with ESMTPA for ; Thu, 9 Sep 2021 13:21:04 -0400 (EDT) From: Leo Famulari Date: Thu, 9 Sep 2021 13:21:00 -0400 Message-Id: <08e0c59de3bf79d8b95107019295afeb2113b3e7.1631207973.git.leo@famulari.name> X-Mailer: git-send-email 2.33.0 MIME-Version: 1.0 Content-Transfer-Encoding: 8bit Received-SPF: pass client-ip=64.147.123.19; envelope-from=leo@famulari.name; helo=wout3-smtp.messagingengine.com X-Spam_score_int: -27 X-Spam_score: -2.8 X-Spam_bar: -- X-Spam_report: (-2.8 / 5.0 requ) BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, RCVD_IN_DNSWL_LOW=-0.7, RCVD_IN_MSPIKE_H2=-0.001, SPF_HELO_PASS=-0.001, SPF_PASS=-0.001 autolearn=ham autolearn_force=no X-Spam_action: no action X-Spam-Score: -1.4 (-) X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.18 Precedence: list List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: debbugs-submit-bounces@debbugs.gnu.org Sender: "Debbugs-submit" X-Spam-Score: -0.1 (/) The upstream security advisory is named NTFS3G-SA-2021-0001. Fixes CVE-2021-33285, CVE-2021-35269, CVE-2021-35268, CVE-2021-33289, CVE-2021-33286, CVE-2021-35266, CVE-2021-33287, CVE-2021-35267, CVE-2021-39251, CVE-2021-39252, CVE-2021-39253, CVE-2021-39254, CVE-2021-39255, CVE-2021-39256, CVE-2021-39257, CVE-2021-39258, CVE-2021-39259, CVE-2021-39260, CVE-2021-39261, CVE-2021-39262, CVE-2021-39263. For more information: https://seclists.org/oss-sec/2021/q3/139 * gnu/packages/linux.scm (ntfs-3g): Update to 2021.8.22. [source]: Remove obsolete patch. * gnu/packages/patches/ntfs-3g-CVE-2019-9755.patch: Delete file. * gnu/local.mk (dist_patch_DATA): Remove it. --- gnu/local.mk | 1 - gnu/packages/linux.scm | 9 ++- .../patches/ntfs-3g-CVE-2019-9755.patch | 72 ------------------- 3 files changed, 4 insertions(+), 78 deletions(-) delete mode 100644 gnu/packages/patches/ntfs-3g-CVE-2019-9755.patch diff --git a/gnu/local.mk b/gnu/local.mk index 2a56c4a9e2..451cd9d1c1 100644 --- a/gnu/local.mk +++ b/gnu/local.mk @@ -1507,7 +1507,6 @@ dist_patch_DATA = \ %D%/packages/patches/nsis-source-date-epoch.patch \ %D%/packages/patches/nss-increase-test-timeout.patch \ %D%/packages/patches/nss-3.56-pkgconfig.patch \ - %D%/packages/patches/ntfs-3g-CVE-2019-9755.patch \ %D%/packages/patches/nvi-assume-preserve-path.patch \ %D%/packages/patches/nvi-dbpagesize-binpower.patch \ %D%/packages/patches/nvi-db4.patch \ diff --git a/gnu/packages/linux.scm b/gnu/packages/linux.scm index 4281ce4b0a..5860a49df7 100644 --- a/gnu/packages/linux.scm +++ b/gnu/packages/linux.scm @@ -5902,15 +5902,14 @@ invocations of itself.") (define-public ntfs-3g (package (name "ntfs-3g") - (version "2017.3.23") + (version "2021.8.22") (source (origin (method url-fetch) (uri (string-append "https://tuxera.com/opensource/" "ntfs-3g_ntfsprogs-" version ".tgz")) - (patches (search-patches "ntfs-3g-CVE-2019-9755.patch")) (sha256 (base32 - "1mb228p80hv97pgk3myyvgp975r9mxq56c6bdn1n24kngcfh4niy")) + "1yrf42xr92qv3pads8lzp5nyssz6875ncfgg8v3jwjyr0nm87f2m")) (modules '((guix build utils))) (snippet '(begin ;; Install under $prefix. @@ -5919,8 +5918,8 @@ invocations of itself.") "@sbindir@")) #t)))) (build-system gnu-build-system) - (inputs `(("util-linux" ,util-linux) - ("fuse" ,fuse))) ;libuuid + (inputs `(("util-linux" ,util-linux) ; libuuid + ("fuse" ,fuse))) (native-inputs `(("pkg-config" ,pkg-config))) (arguments '(#:configure-flags (list "--disable-static" diff --git a/gnu/packages/patches/ntfs-3g-CVE-2019-9755.patch b/gnu/packages/patches/ntfs-3g-CVE-2019-9755.patch deleted file mode 100644 index a7794aed47..0000000000 --- a/gnu/packages/patches/ntfs-3g-CVE-2019-9755.patch +++ /dev/null @@ -1,72 +0,0 @@ -Fix CVE-2019-9755: - -https://security-tracker.debian.org/tracker/CVE-2019-9755 -https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-9755 - -Patch copied from upstream source repository: - -https://sourceforge.net/p/ntfs-3g/ntfs-3g/ci/85c1634a26faa572d3c558d4cf8aaaca5202d4e9/ - -From 85c1634a26faa572d3c558d4cf8aaaca5202d4e9 Mon Sep 17 00:00:00 2001 -From: =?UTF-8?q?Jean-Pierre=20Andr=C3=A9?= -Date: Wed, 19 Dec 2018 15:57:50 +0100 -Subject: [PATCH] Fixed reporting an error when failed to build the mountpoint - -The size check was inefficient because getcwd() uses an unsigned int -argument. ---- - src/lowntfs-3g.c | 6 +++++- - src/ntfs-3g.c | 6 +++++- - 2 files changed, 10 insertions(+), 2 deletions(-) - -diff --git a/src/lowntfs-3g.c b/src/lowntfs-3g.c -index 993867fa..0660439b 100644 ---- a/src/lowntfs-3g.c -+++ b/src/lowntfs-3g.c -@@ -4411,7 +4411,8 @@ int main(int argc, char *argv[]) - else { - ctx->abs_mnt_point = (char*)ntfs_malloc(PATH_MAX); - if (ctx->abs_mnt_point) { -- if (getcwd(ctx->abs_mnt_point, -+ if ((strlen(opts.mnt_point) < PATH_MAX) -+ && getcwd(ctx->abs_mnt_point, - PATH_MAX - strlen(opts.mnt_point) - 1)) { - strcat(ctx->abs_mnt_point, "/"); - strcat(ctx->abs_mnt_point, opts.mnt_point); -@@ -4419,6 +4420,9 @@ int main(int argc, char *argv[]) - /* Solaris also wants the absolute mount point */ - opts.mnt_point = ctx->abs_mnt_point; - #endif /* defined(__sun) && defined (__SVR4) */ -+ } else { -+ free(ctx->abs_mnt_point); -+ ctx->abs_mnt_point = (char*)NULL; - } - } - } -diff --git a/src/ntfs-3g.c b/src/ntfs-3g.c -index 6ce89fef..4e0912ae 100644 ---- a/src/ntfs-3g.c -+++ b/src/ntfs-3g.c -@@ -4148,7 +4148,8 @@ int main(int argc, char *argv[]) - else { - ctx->abs_mnt_point = (char*)ntfs_malloc(PATH_MAX); - if (ctx->abs_mnt_point) { -- if (getcwd(ctx->abs_mnt_point, -+ if ((strlen(opts.mnt_point) < PATH_MAX) -+ && getcwd(ctx->abs_mnt_point, - PATH_MAX - strlen(opts.mnt_point) - 1)) { - strcat(ctx->abs_mnt_point, "/"); - strcat(ctx->abs_mnt_point, opts.mnt_point); -@@ -4156,6 +4157,9 @@ int main(int argc, char *argv[]) - /* Solaris also wants the absolute mount point */ - opts.mnt_point = ctx->abs_mnt_point; - #endif /* defined(__sun) && defined (__SVR4) */ -+ } else { -+ free(ctx->abs_mnt_point); -+ ctx->abs_mnt_point = (char*)NULL; - } - } - } --- -2.21.0 - -- 2.33.0 From unknown Tue Jun 17 01:48:53 2025 X-Loop: help-debbugs@gnu.org Subject: [bug#50488] [PATCH] gnu: ntfs-3g: Update to 2021.8.22 [security fixes]. Resent-From: Ludovic =?UTF-8?Q?Court=C3=A8s?= Original-Sender: "Debbugs-submit" Resent-CC: guix-patches@gnu.org Resent-Date: Tue, 21 Sep 2021 12:56:01 +0000 Resent-Message-ID: Resent-Sender: help-debbugs@gnu.org X-GNU-PR-Message: followup 50488 X-GNU-PR-Package: guix-patches X-GNU-PR-Keywords: patch To: Leo Famulari Cc: 50488@debbugs.gnu.org Received: via spool by 50488-submit@debbugs.gnu.org id=B50488.16322289199235 (code B ref 50488); Tue, 21 Sep 2021 12:56:01 +0000 Received: (at 50488) by debbugs.gnu.org; 21 Sep 2021 12:55:19 +0000 Received: from localhost ([127.0.0.1]:45329 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1mSfIt-0002Op-HP for submit@debbugs.gnu.org; Tue, 21 Sep 2021 08:55:19 -0400 Received: from eggs.gnu.org ([209.51.188.92]:54850) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1mSfIs-0002OT-Dl for 50488@debbugs.gnu.org; Tue, 21 Sep 2021 08:55:18 -0400 Received: from fencepost.gnu.org ([2001:470:142:3::e]:48670) by eggs.gnu.org with esmtp (Exim 4.90_1) (envelope-from ) id 1mSfIn-0007sN-2F; Tue, 21 Sep 2021 08:55:13 -0400 Received: from [2001:660:6102:320:e120:2c8f:8909:cdfe] (port=47310 helo=ribbon) by fencepost.gnu.org with esmtpsa (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.90_1) (envelope-from ) id 1mSfIk-0002Bt-IN; Tue, 21 Sep 2021 08:55:12 -0400 From: Ludovic =?UTF-8?Q?Court=C3=A8s?= References: <08e0c59de3bf79d8b95107019295afeb2113b3e7.1631207973.git.leo@famulari.name> Date: Tue, 21 Sep 2021 14:55:09 +0200 In-Reply-To: <08e0c59de3bf79d8b95107019295afeb2113b3e7.1631207973.git.leo@famulari.name> (Leo Famulari's message of "Thu, 9 Sep 2021 13:21:00 -0400") Message-ID: <87a6k6ks0i.fsf@gnu.org> User-Agent: Gnus/5.13 (Gnus v5.13) Emacs/27.2 (gnu/linux) MIME-Version: 1.0 Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: quoted-printable X-Spam-Score: -2.3 (--) X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.18 Precedence: list List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: debbugs-submit-bounces@debbugs.gnu.org Sender: "Debbugs-submit" X-Spam-Score: -3.3 (---) Hi Leo, Leo Famulari skribis: > The upstream security advisory is named NTFS3G-SA-2021-0001. > > Fixes CVE-2021-33285, CVE-2021-35269, CVE-2021-35268, CVE-2021-33289, > CVE-2021-33286, CVE-2021-35266, CVE-2021-33287, CVE-2021-35267, CVE-2021-= 39251, > CVE-2021-39252, CVE-2021-39253, CVE-2021-39254, CVE-2021-39255, CVE-2021-= 39256, > CVE-2021-39257, CVE-2021-39258, CVE-2021-39259, CVE-2021-39260, CVE-2021-= 39261, > CVE-2021-39262, CVE-2021-39263. > > For more information: > > https://seclists.org/oss-sec/2021/q3/139 > > * gnu/packages/linux.scm (ntfs-3g): Update to 2021.8.22. > [source]: Remove obsolete patch. > * gnu/packages/patches/ntfs-3g-CVE-2019-9755.patch: Delete file. > * gnu/local.mk (dist_patch_DATA): Remove it. LGTM, thanks for taking care of it! Ludo=E2=80=99. From debbugs-submit-bounces@debbugs.gnu.org Tue Sep 21 13:30:39 2021 Received: (at control) by debbugs.gnu.org; 21 Sep 2021 17:30:40 +0000 Received: from localhost ([127.0.0.1]:47875 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1mSjbL-0001el-Ko for submit@debbugs.gnu.org; Tue, 21 Sep 2021 13:30:39 -0400 Received: from wout5-smtp.messagingengine.com ([64.147.123.21]:37121) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1mSjbK-0001Yb-3H for control@debbugs.gnu.org; Tue, 21 Sep 2021 13:30:38 -0400 Received: from compute2.internal (compute2.nyi.internal [10.202.2.42]) by mailout.west.internal (Postfix) with ESMTP id 5A5303202102; Tue, 21 Sep 2021 13:30:32 -0400 (EDT) Received: from mailfrontend1 ([10.202.2.162]) by compute2.internal (MEProxy); Tue, 21 Sep 2021 13:30:32 -0400 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=famulari.name; h=date:from:to:message-id:mime-version:content-type; s=mesmtp; bh=PqPp5jkklfkMTvI5N//LAah/fN1qSR8LcI1c99lW3U0=; b=Z6YiCUe3ivh7 RLkSAIQqou3v7v+o2H9I9SVT+LPZb6cSSEWqKeJDoRBAgKA4AqLwrtiriWs4/gnL 42Bb5l+QeSdG2Aj/NB0JmMpakI/1yZ+CHQBm2ekw7tjtt8DM7b5HqESypEICKjfG zBCRSk1rtSX4hb213frxdrCFlMrASuw= DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d= messagingengine.com; h=content-type:date:from:message-id :mime-version:to:x-me-proxy:x-me-proxy:x-me-sender:x-me-sender :x-sasl-enc; s=fm3; bh=PqPp5jkklfkMTvI5N//LAah/fN1qSR8LcI1c99lW3 U0=; b=OLkVz/qyrKuNYf8mYTjW6abcsvKefDQTfJbi0QUTfUOIEB+xWdb8Aik6A 4LhuyzycdJ0de3ZNG8/9lyClK5M8vKT/bf7tdpHWleW7uchlcGqqqB3F01UOyQnL MYi4SCejCW3kEV0SQ/G1v4q5ny5NczllteejSnemGpN8yzU/ZZD2FMI08+tjnp5a NNE/BByvUPjibbDsUL3H2S1jLvvYxBf7FFJWFQTgYSLfYiBjmD7yfHYG1HamElZ0 8T3DXAra17aijKjAxFYm0kUw6gsKZGAKup38YjZMCLbQPNGoosfgxu6LfmG7/mAB Y9efEIZDMGTscbgkB1YDhMWVwsLdw== X-ME-Sender: X-ME-Received: X-ME-Proxy-Cause: gggruggvucftvghtrhhoucdtuddrgedvtddrudeigedguddufecutefuodetggdotefrod ftvfcurfhrohhfihhlvgemucfhrghsthforghilhdpqfgfvfdpuffrtefokffrpgfnqfgh necuuegrihhlohhuthemuceftddtnecugfhmphhthicushhusghjvggtthculddutddmne cujfgurhepfffhvffkgggtugesthdtredttddtvdenucfhrhhomhepnfgvohcuhfgrmhhu lhgrrhhiuceolhgvohesfhgrmhhulhgrrhhirdhnrghmvgeqnecuggftrfgrthhtvghrnh ephfejiefgfeevvdefteehgeeltdekvedutdegtdduieetheetgedvfeffudfffeffnecu vehluhhsthgvrhfuihiivgeptdenucfrrghrrghmpehmrghilhhfrhhomheplhgvohesfh grmhhulhgrrhhirdhnrghmvg X-ME-Proxy: Received: by mail.messagingengine.com (Postfix) with ESMTPA for ; Tue, 21 Sep 2021 13:30:31 -0400 (EDT) Date: Tue, 21 Sep 2021 13:30:29 -0400 From: Leo Famulari To: control@debbugs.gnu.org Message-ID: MIME-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline X-Spam-Score: 1.3 (+) X-Spam-Report: Spam detection software, running on the system "debbugs.gnu.org", has NOT identified this incoming email as spam. The original message has been attached to this so you can view it or label similar future email. If you have any questions, see the administrator of that system for details. Content preview: close 50488 Content analysis details: (1.3 points, 10.0 required) pts rule name description ---- ---------------------- -------------------------------------------------- -0.0 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2) [64.147.123.21 listed in wl.mailspike.net] -0.7 RCVD_IN_DNSWL_LOW RBL: Sender listed at https://www.dnswl.org/, low trust [64.147.123.21 listed in list.dnswl.org] -0.0 SPF_PASS SPF: sender matches SPF record -0.0 SPF_HELO_PASS SPF: HELO matches SPF record 1.8 MISSING_SUBJECT Missing Subject: header 0.2 NO_SUBJECT Extra score for no subject X-Debbugs-Envelope-To: control X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.18 Precedence: list List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: debbugs-submit-bounces@debbugs.gnu.org Sender: "Debbugs-submit" X-Spam-Score: 0.3 (/) close 50488 From unknown Tue Jun 17 01:48:53 2025 X-Loop: help-debbugs@gnu.org Subject: [bug#50488] [PATCH] gnu: ntfs-3g: Update to 2021.8.22 [security fixes]. Resent-From: Leo Famulari Original-Sender: "Debbugs-submit" Resent-CC: guix-patches@gnu.org Resent-Date: Tue, 21 Sep 2021 17:31:02 +0000 Resent-Message-ID: Resent-Sender: help-debbugs@gnu.org X-GNU-PR-Message: followup 50488 X-GNU-PR-Package: guix-patches X-GNU-PR-Keywords: patch To: Ludovic =?UTF-8?Q?Court=C3=A8s?= Cc: 50488-done@debbugs.gnu.org Received: via spool by 50488-done@debbugs.gnu.org id=D50488.16322454205254 (code D ref 50488); Tue, 21 Sep 2021 17:31:02 +0000 Received: (at 50488-done) by debbugs.gnu.org; 21 Sep 2021 17:30:20 +0000 Received: from localhost ([127.0.0.1]:47871 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1mSjat-0001DZ-TY for submit@debbugs.gnu.org; Tue, 21 Sep 2021 13:30:20 -0400 Received: from wout5-smtp.messagingengine.com ([64.147.123.21]:33383) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1mSjar-00013P-KF for 50488-done@debbugs.gnu.org; Tue, 21 Sep 2021 13:30:09 -0400 Received: from compute4.internal (compute4.nyi.internal [10.202.2.44]) by mailout.west.internal (Postfix) with ESMTP id ABEF13202126; Tue, 21 Sep 2021 13:30:03 -0400 (EDT) Received: from mailfrontend1 ([10.202.2.162]) by compute4.internal (MEProxy); Tue, 21 Sep 2021 13:30:03 -0400 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=famulari.name; h=date:from:to:cc:subject:message-id:references:mime-version :content-type:content-transfer-encoding:in-reply-to; s=mesmtp; bh=91HtvfX4hRs47oljdgg188xSQharYu9gojZJ2YJgoYg=; b=OiNDci+GwR8O 6jTNt2V1iCnTHYhoxE4OzBOtWTEhbFT4Y//gWn2yEUcJFa8/Yz6u0QPp6UnxqQWY At0rHZj3/JeuWDeg82bPQPWudacSHoAeZU0N7rQmbQc+FNhRI95L9nsBYnpo76x4 RTIgFo/kzq7ho/PvvxDZSQYFGhTqMDs= DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d= messagingengine.com; h=cc:content-transfer-encoding:content-type :date:from:in-reply-to:message-id:mime-version:references :subject:to:x-me-proxy:x-me-proxy:x-me-sender:x-me-sender :x-sasl-enc; s=fm3; bh=91HtvfX4hRs47oljdgg188xSQharYu9gojZJ2YJgo Yg=; b=NpT5btEGzAuVxnbKCNwMF21/xfYakWjmXjjrghnXs00ceL6lzaO8h6YQj CwZybg1aP98Auk4pq6vyil9Mt3A3WKCJGw7v2etMJW1lxXkjO14Cyz8Jriew9FMd miVFkcErPPgOhLu/3PQrvadg8PbouHqPDny5IMyVd2k/OzZhlFH6NW/oXUN48Kj7 NlR1AOIT4jz0fqusB43gIJ54Pc8zpyb5I0KvVGRVhEoKZTVhaGxvPXfqp5Yvczil OG2+4NHhlw5UIKQcx6OeigVlyuu6OSyJnEyWqfwk0kMn0G0IBbsoEuY6I7hEM8rj Q28wad706WMmR4fP4P6MbOSaq3nCg== X-ME-Sender: X-ME-Received: X-ME-Proxy-Cause: gggruggvucftvghtrhhoucdtuddrgedvtddrudeigedguddugecutefuodetggdotefrod ftvfcurfhrohhfihhlvgemucfhrghsthforghilhdpqfgfvfdpuffrtefokffrpgfnqfgh necuuegrihhlohhuthemuceftddtnecusecvtfgvtghiphhivghnthhsucdlqddutddtmd enucfjughrpeffhffvuffkfhggtggugfgjsehtkeertddttddunecuhfhrohhmpefnvgho ucfhrghmuhhlrghrihcuoehlvghosehfrghmuhhlrghrihdrnhgrmhgvqeenucggtffrrg htthgvrhhnpeekvdettdevkeffjedttdefueekkeefteduveeugfeiffffjeffheefuddt gfeuheenucffohhmrghinhepshgvtghlihhsthhsrdhorhhgnecuvehluhhsthgvrhfuih iivgeptdenucfrrghrrghmpehmrghilhhfrhhomheplhgvohesfhgrmhhulhgrrhhirdhn rghmvg X-ME-Proxy: Received: by mail.messagingengine.com (Postfix) with ESMTPA; Tue, 21 Sep 2021 13:30:02 -0400 (EDT) Date: Tue, 21 Sep 2021 13:30:00 -0400 From: Leo Famulari Message-ID: References: <08e0c59de3bf79d8b95107019295afeb2113b3e7.1631207973.git.leo@famulari.name> <87a6k6ks0i.fsf@gnu.org> MIME-Version: 1.0 Content-Type: text/plain; charset=iso-8859-1 Content-Disposition: inline Content-Transfer-Encoding: 8bit In-Reply-To: <87a6k6ks0i.fsf@gnu.org> X-Spam-Score: -0.7 (/) X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.18 Precedence: list List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: debbugs-submit-bounces@debbugs.gnu.org Sender: "Debbugs-submit" X-Spam-Score: -1.0 (-) On Tue, Sep 21, 2021 at 02:55:09PM +0200, Ludovic Courtès wrote: > Hi Leo, > > Leo Famulari skribis: > > > The upstream security advisory is named NTFS3G-SA-2021-0001. > > > > Fixes CVE-2021-33285, CVE-2021-35269, CVE-2021-35268, CVE-2021-33289, > > CVE-2021-33286, CVE-2021-35266, CVE-2021-33287, CVE-2021-35267, CVE-2021-39251, > > CVE-2021-39252, CVE-2021-39253, CVE-2021-39254, CVE-2021-39255, CVE-2021-39256, > > CVE-2021-39257, CVE-2021-39258, CVE-2021-39259, CVE-2021-39260, CVE-2021-39261, > > CVE-2021-39262, CVE-2021-39263. > > > > For more information: > > > > https://seclists.org/oss-sec/2021/q3/139 > > > > * gnu/packages/linux.scm (ntfs-3g): Update to 2021.8.22. > > [source]: Remove obsolete patch. > > * gnu/packages/patches/ntfs-3g-CVE-2019-9755.patch: Delete file. > > * gnu/local.mk (dist_patch_DATA): Remove it. > > LGTM, thanks for taking care of it! Thanks for the reminder! Pushed as 1e3262d74fe96cf3bc3b8b3914379ef9e37672df