Originally posted by uid313
View Post
Of course, NTFS support is also available in the kernel. But Debian just dropped it. Why?
* ntfs: Disable NTFS_FS due to lack of upstream security support
(CVE-2018-12929, CVE-2018-12930, CVE-2018-12931)
(CVE-2018-12929, CVE-2018-12930, CVE-2018-12931)
Really, Linux upstream maintainers should probably just remove the module from the tree. But that might require facing up to the fact that they've allowed this clear conflict of interest to come about, and persist for a decade.
Leave a comment: