[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
Re: [PATCH] gnu: ntfs-3g: Fix CVE-2017-0358.
|
From: |
Marius Bakke |
|
Subject: |
Re: [PATCH] gnu: ntfs-3g: Fix CVE-2017-0358. |
|
Date: |
Thu, 09 Feb 2017 23:39:42 +0100 |
|
User-agent: |
Notmuch/0.23.5 (https://notmuchmail.org) Emacs/25.1.1 (x86_64-unknown-linux-gnu) |
Kei Kebreau <address@hidden> writes:
> Reviewers, how does this patch look to you?
AFAIU from CVE-2017-0358, ntfs-3g is only vulnerable when installed
setuid root, which is not the case on guix.
FWIW Debian do not carry this patch, but have fixed the CVE according to
the changelog. So I doubt this patch is necessary.
signature.asc
Description: PGP signature