[UVFe] please merge ntfs-3g (1:1.913-1) from Debian unstable (main)

Bug #145852 reported by Matti Lindell
14
Affects Status Importance Assigned to Milestone
ntfs-3g (Ubuntu)
Fix Released
Undecided
Colin Watson

Bug Description

Binary package hint: ntfs-3g

as per https://wiki.ubuntu.com/FreezeExceptionProcess

description of the proposed changes:
 * no major changes. most notably bug fixes (including http://bugs.debian.org/434128 http://bugs.debian.org/436658)
 * other notable changes can be summarised as performance, logging and manual page improvements
 * release details: http://www.ntfs-3g.org/releases.html
 * detailed changelog: http://mercurial.creo.hu/repos/ntfs-3g-hg/

rationale for the exception:
  * fix known bugs in gutsy's current ntfs-3g
  * let unprivileged user umount the partition who also mounted it (http://bugs.debian.org/434128)
  * benefit from new version's performance improvements
  * we should have the most stable ntfs driver in gutsy if https://wiki.ubuntu.com/WriteSupportForNTFS is considered important

CVE References

Revision history for this message
Matti Lindell (mlind) wrote :
Revision history for this message
Martin Pitt (pitti) wrote :

This is the debdiff between current Debian and your merge. However, for the purpose of FF exception we need the debdiff between current gutsy and your version. Can you please attach that?

Changed in ntfs-3g:
status: New → Incomplete
Revision history for this message
Matti Lindell (mlind) wrote :

ah, sorry about that. Here's the complete debdiff.

Revision history for this message
Martin Pitt (pitti) wrote :

Thanks. Looks reasonable to me. SONAME bump will require NEWing, but is ok since there are no reverse dependencies except ntfs-3g itself.

Changed in ntfs-3g:
status: Incomplete → In Progress
Revision history for this message
Matti Lindell (mlind) wrote :

the changelog entry in my debdiff seems to refer to old soname.
here's the corrected one.

Revision history for this message
Martin Pitt (pitti) wrote :

Thanks for the fixup.

Revision history for this message
Daniel Holbach (dholbach) wrote :

Colin: as you seem to have uploaded all the last Ubuntu versions of ntfs-3g, could you also take a look into this one?

Colin Watson (cjwatson)
Changed in ntfs-3g:
assignee: nobody → kamion
Revision history for this message
Colin Watson (cjwatson) wrote :

ntfs-3g (1:1.913-2ubuntu1) gutsy; urgency=low

  [ Matti Lindell, Colin Watson ]
  * Resynchronise with Debian (LP: #145852), mainly to fix major performance
    problems and help out the installer by being able to mount filesystems
    even when they need to be checked the next time Windows boots. Remaining
    changes:
    + Add udeb shlibs entries for libntfs-3g12-udeb.
    + Bump debhelper build-dependency to 5.0.22 for dh_makeshlibs --add-udeb.
    + Create libntfs3g12-udeb and ntfs-3g-udeb.
    + Copy ntfs-3g into the initramfs. If ntfs-3g is used to mount the root
      filesystem (either directly or via a loopback mount), load the fuse
      module beforehand, and save ntfs-3g's PID (indirectly) in
      /var/run/sendsigs.omit.

    + WriteSupportForNTFS
      - Move install location of ntfs-3g from /usr/bin to /bin
      - Move install location of library libntfs-3g.so.12.0.0 and
        its lib*.so.* symlink from /usr/lib to /lib
      - Fix up libntfs-3g-dev library symlink libntfs-3g.so in
        /usr/lib to point to new location of libntfs-3g.so.12.0.0
        in debian/rules
      - Add /sbin/mount.ntfs symlink to /bin/ntfs-3g
      - Add a symlink for the mount.ntfs manual page too.

ntfs-3g (1:1.913-2) unstable; urgency=HIGH

  * Security set to HIGH because it fixes a critical issue.
  * Do not set ntfs-3g binary setuid with group fuse.
    This could allows local users with fuse group membership to read from and
    write to arbitrary block devices, possibly involving a file descriptor
    leak. (CVE-2007-5159) (Closes: #445315).
  * Update README.Debian and long description (Closes: #443418).

ntfs-3g (1:1.913-1) unstable; urgency=low

  * New upstream release.
  * Bump library package name to match current soname.

ntfs-3g (1:1.826-1) unstable; urgency=low

  * New upstream release.
  * Bump library package name to match current soname.

ntfs-3g (1:1.810-1) unstable; urgency=low

  * New upstream release (Closes: #434128).
  * Bump libfuse-dev build depends to >= 2.7 (Needed to really fix #434128).
  * Bump library package name to match current soname.

ntfs-3g (1:1.710-2) unstable; urgency=low

  * Update long description, ntfs-3g works fine on any architecture (Closes: #436435).
  * ntfs-3g binary is now 4754, according to debian policy (Closes: #436658).

 -- Colin Watson <email address hidden> Mon, 08 Oct 2007 14:27:53 +0100

Changed in ntfs-3g:
status: In Progress → Fix Released
To post a comment you must log in.
This report contains Public information  
Everyone can see this information.

Duplicates of this bug

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.