ntfs-3g-2015.3.14-2.el7

エラータID: AXSA:2016-030:01

Release date: 
Tuesday, January 12, 2016 - 18:12
Subject: 
ntfs-3g-2015.3.14-2.el7
Affected Channels: 
Asianux Server 7 for x86_64
Severity: 
High
Description: 

pigz
pigz, which stands for parallel implementation of gzip,
is a fully functional replacement for gzip that exploits
multiple processors and multiple cores to the hilt when compressing data.

ntfs
The ntfsprogs package currently consists of a library and utilities such as
mkntfs, ntfscat, ntfsls, ntfsresize, and ntfsundelete (for a full list of
included utilities see man 8 ntfsprogs after installation).

Security issues fixed with this release:

CVE-2015-3202
fusermount in FUSE before 2.9.3-15 does not properly clear the environment before invoking (1) mount or (2) umount as root, which allows local users to write to arbitrary files via a crafted LIBMOUNT_MTAB environment variable that is used by mount's debugging feature.

CVE-2015-1191
Multiple directory traversal vulnerabilities in pigz 2.3.1 allow remote attackers to write to arbitrary files via a (1) full pathname or (2) .. (dot dot) in an archive.

Solution: 

Update packages.

Additional Info: 

N/A

Download: 

SRPMS
  1. ntfs-3g-2015.3.14-2.el7.src.rpm
    MD5: 580d8cb8c270711a41958853e049da4d
    SHA-256: bbebb250960069b319b9418d52bf1145f3fbd3fd9a9e2b48f6ed188a6e1a85d9
    Size: 1.17 MB
  2. pigz-2.3.3-1.el7.src.rpm
    MD5: 61da8582be3f52f5ac6623673004fc19
    SHA-256: 233816b7ea1a3bb8e68bfb316ae82f8d028536593bdcb7933c02774d22b56fc4
    Size: 95.98 kB

Asianux Server 7 for x86_64
  1. ntfs-3g-2015.3.14-2.el7.x86_64.rpm
    MD5: a0fbdab3fdebe0066820d97a93b0f216
    SHA-256: 60eb3aa44aff1e6823dc5b01e037680bd3768d47b8a2a78db242530fa1a8e2c1
    Size: 277.80 kB
  2. ntfsprogs-2015.3.14-2.el7.x86_64.rpm
    MD5: 12868781410daacfe653facf12e14db7
    SHA-256: 84e4488e6ad2b54a4b3a30d01578054879ad3dd73d5e5535beeb0967b246a91f
    Size: 274.07 kB
  3. pigz-2.3.3-1.el7.x86_64.rpm
    MD5: f57599ec64e8836dc1a530a3e761a3fc
    SHA-256: 0dc8eaf87347643b809793844158de307c52d07ac52702c6e916d3b6cdcf7df2
    Size: 67.04 kB