Am Sun, Oct 27, 2024 at 03:58:13PM +0100 schrieb László Böszörményi (GCS): > Package: release.debian.org > Severity: normal > Tags: bookworm > User: release.debian....@packages.debian.org > Usertags: pu > X-Debbugs-Cc: ntfs...@packages.debian.org > Control: affects -1 + src:ntfs-3g > > [ Reason ] > I overlooked a mistake back during the development of Bookworm. I have > fixed bug #983359 [1] which notes that pre-dependency on fuse3 is not > the correct way to have it for the working of ntfs-3g. But then, there > was already a newer version of it in Experimental due to a soname > change. I've uploaded that when I got a go for the transition - forgot > to merge the previous change. > Thus it was missing from Sid as well, but lately I have fixed this > there as well.
If we do an update anyway, we could also piggyback the straightforward patch for CVE-2023-52890/#1073248, what do you think? https://github.com/tuxera/ntfs-3g/commit/75dcdc2cf37478fad6c0e3427403d198b554951d Cheers, Moritz
