gpp_maybe Security update for ntfs-3g_ntfsprogs

SUSE-SLE-Module-Development-Tools-15-SP7-2026-3214

This update for ntfs-3g_ntfsprogs fixes the following issues - CVE-2026-42616: heap buffer overflow in `cat()` of `cat.c` can lead to heap corruption in the ntfscat binary via a specially crafted NTFS image (bsc#1271102). - CVE-2026-42617: heap buffer overflow in `ntfs_ir_to_ib()` of `index.c` can lead to heap corruption in the SUID-root ntfs-3g binary via a specially crafted NTFS image (bsc#1271103). - CVE-2026-42618: heap buffer overflow in `ntfs_decompress()` of `compress.c` can lead to heap corruption in the SUID-root ntfs-3g binary via a specially crafted NTFS image (bsc#1271104). - CVE-2026-46569: heap buffer overflow in `ntfs_ib_copy_tail()` of `libntfs-3g/index.c`can lead to heap corruption in the SUID-root ntfs-3g binary via a specially crafted NTFS image (bsc#1271105). - CVE-2026-46570: heap buffer overflow in `ntfs_index_walk_down()` of `libntfs-3g/index.c` can lead to heap corruption in the SUID-root ntfs-3g binary via a specially crafted NTFS image (bsc#1271106). - CVE-2026-46571: out-of-bounds read in `ntfs_fix_file_name()` of `libntfs-3g/reparse.c` can lead to disclosure of confidential information from the ntfs-3g process memory when handling a specially crafted NTFS image (bsc#1271107). - CVE-2026-46572: heap buffer overflow in `ntfs_ib_cut_tail()` of `libntfs-3g/index.c` can lead to heap corruption in the SUID-root ntfs-3g binary via a specially crafted NTFS image (bsc#1271108). - CVE-2026-56135: heap-based buffer overflow in `build_inherited_id()` of `libntfs-3g/security.c` can lead to heap corruption in the SUID-root ntfs-3g binary via a specially crafted NTFS image (bsc#1271109). - CVE-2026-56136: out-of-bounds read in `ntfs_ir_nill()` of `libntfs-3g/index.c` can lead to disclosure of confidential information from the ntfs-3g process memory when handling a specially crafted NTFS image (bsc#1271110).

Release Date

Jul 23 2026
References

Bugzilla: 1271102, 1271103, 1271104, 1271105, 1271106, 1271107, 1271108, 1271109, 1271110
CVEs: CVE-2026-42616, CVE-2026-42617, CVE-2026-42618, CVE-2026-46569, CVE-2026-46570, CVE-2026-46571, CVE-2026-46572, CVE-2026-56135, CVE-2026-56136
Type

security
Severity

important

cloud_download Downloads

To download packages, you need to log in and have a valid subscription.

Development Tools Module 15.7 aarch64

Packages

libntfs-3g-devel
NTFS Support in Userspace -- Development Files

2022.5.17-150000.3.27.1 lock rpm

ntfs-3g_ntfsprogs
NTFS Support in Userspace

2022.5.17-150000.3.27.1 lock src

Development Tools Module 15.7 ppc64le

Packages

libntfs-3g-devel
NTFS Support in Userspace -- Development Files

2022.5.17-150000.3.27.1 lock rpm

ntfs-3g_ntfsprogs
NTFS Support in Userspace

2022.5.17-150000.3.27.1 lock src

Development Tools Module 15.7 s390x

Packages

libntfs-3g-devel
NTFS Support in Userspace -- Development Files

2022.5.17-150000.3.27.1 lock rpm

ntfs-3g_ntfsprogs
NTFS Support in Userspace

2022.5.17-150000.3.27.1 lock src

Development Tools Module 15.7 x86_64

Packages

libntfs-3g-devel
NTFS Support in Userspace -- Development Files

2022.5.17-150000.3.27.1 lock rpm

ntfs-3g_ntfsprogs
NTFS Support in Userspace

2022.5.17-150000.3.27.1 lock src