A ntfs-3g security update has been released for Debian GNU/Linux 8 Extended LTS.

ELA-523-1 ntfs-3g security update

Package ntfs-3g
Version 1:2014.2.15AR.2-1+deb8u5
Related CVEs CVE-2021-33285 CVE-2021-33286 CVE-2021-33287 CVE-2021-33289 CVE-2021-35266 CVE-2021-35267 CVE-2021-35268 CVE-2021-35269 CVE-2021-39251 CVE-2021-39252 CVE-2021-39253 CVE-2021-39254 CVE-2021-39255 CVE-2021-39256 CVE-2021-39257 CVE-2021-39258 CVE-2021-39259 CVE-2021-39260 CVE-2021-39261 CVE-2021-39262 CVE-2021-39263

Several vulnerabilities were discovered in NTFS-3G, a read-write NTFS driver for FUSE. A local user can take advantage of these flaws for local root privilege escalation.

For Debian 8 jessie, these problems have been fixed in version 1:2014.2.15AR.2-1+deb8u5.

We recommend that you upgrade your ntfs-3g packages.

Further information about Extended LTS security advisories can be found at: https://deb.freexian.com/extended-lts/

  ELA-523-1 ntfs-3g security update