SUSE · Security update for ntfs-3g_ntfsprogs
Affects SUSESource GCVE Database
0
Severity
MediumRated by Threat Radar
Data as of 10 Nov 2026, 20:06 UTC
Description
This update for ntfs-3g_ntfsprogs fixes the following issues: - Denial-of-service in ntfs_inode_attach_all_extents() (bsc#1281758). - Heap buffer overflow in ntfs_acl_owner() (bsc#1281756). - Heap buffer overflow in ntfs_check_restart_area() (bsc#1281759). - Heap buffer overflow in ntfs_ea_check_wsldev() (bsc#1281760). - Heap buffer overflow in ntfs_external_attr_find() (bsc#1281761). - Heap buffer overflow in ntfs_same_sid() (bsc#1281757). - Heap data corruption in ntfs_mapping_pairs_decompress_i() (bsc#1281762). - Heap out of bounds read/write in ntfs_ie_add_vcn() (bsc#1281763).
References
- suse.com/support/security/rating/ (opens in a new tab)
- ftp.suse.com/pub/projects/security/csaf/2026/opensuse-su-2026_22053-1.json (opens in a new tab)
- bugzilla.suse.com/1281756 (opens in a new tab)
- bugzilla.suse.com/1281757 (opens in a new tab)
- bugzilla.suse.com/1281758 (opens in a new tab)
- bugzilla.suse.com/1281759 (opens in a new tab)
- bugzilla.suse.com/1281760 (opens in a new tab)
- bugzilla.suse.com/1281761 (opens in a new tab)
- bugzilla.suse.com/1281762 (opens in a new tab)
- bugzilla.suse.com/1281763 (opens in a new tab)
Community reviews
Loading reviews…