| Index | index by Group | index by Distribution | index by Vendor | index by creation date | index by Name | Mirrors | Help | Search |
| Name: ntfs-3g | Distribution: openSUSE Tumbleweed |
| Version: 2026.9.28 | Vendor: openSUSE |
| Release: 1.1 | Build date: Sun Oct 18 07:38:20 2026 |
| Group: Unspecified | Build host: reproducible |
| Size: 321142 | Source RPM: ntfs-3g_ntfsprogs-2026.9.28-1.1.src.rpm |
| Packager: https://bugs.opensuse.org | |
| Url: https://github.com/tuxera/ntfs-3g/ | |
| Summary: NTFS Support in Userspace | |
NTFS-3G allows for read/write access to NTFS partitions which can be shared with Windows XP, Windows Server 2003, Windows 2000, Windows Vista and Windows Seven.
GPL-2.0-or-later
* Sun Oct 18 2026 Martin Pluskal <mpluskal@suse.com>
- Update to version 2026.9.28 (including the 2026.9.18 security
release; CVEs for its fixes are still pending, tracked by boo#):
* Heap out-of-bounds read/write in ntfs_ie_add_vcn (boo#1281763),
heap data corruption in ntfs_mapping_pairs_decompress
(boo#1281762), heap buffer overflows in ntfs_external_attr_find
(boo#1281761), ntfs_ea_check_wsldev (boo#1281760),
ntfs_check_restart_area (boo#1281759), ntfs_same_sid
(boo#1281757) and ntfs_acl_owner (boo#1281756), and
denial-of-service in ntfs_inode_attach_all_extents (boo#1281758).
* Guard against multiple creator-owner and creator-group ACEs
during ACL inheritance; fix stale $MFTMirr data in ntfsresize.
* Fix MST-fixup return-value regression, ntfslabel options
starting with '-', and use-after-free/improper realloc cases.
- Drop patches adopted upstream:
* 1_ntfs-3g_2026.7.7-SA_2026-06-1_05.patch
* 2_ntfs-3g_2026.7.7-SA_2026-06-1_07.patch
* 3_ntfs-3g_2026.7.7-SA_2026-06-1_08.patch
* 4_ntfs-3g_2026.7.7-SA_2026-06-1_10.patch
* 5_ntfs-3g_2026.7.7-SA_2026-06-1_11.patch
* 6_ntfs-3g_2026.7.7-SA_2026-06-1_12.patch
* 7_ntfs-3g_2026.7.7-SA_2026-06-1_19.patch
* 8_ntfs-3g_2026.7.7-SA_2026-06-1_20.patch
- Soname bump: libntfs-3g.so.90 -> libntfs-3g.so.91.
- Spec cleanup: drop Group tags, use pkgconfig() BuildRequires,
explicitly require gcc and make.
* Thu Sep 24 2026 Xiaoguang Wang <xiaoguang.wang@suse.com>
- Add CVE patch bundle:
* bsc#1281763: 1_ntfs-3g_2026.7.7-SA_2026-06-1_05.patch
* bsc#1281762: 2_ntfs-3g_2026.7.7-SA_2026-06-1_07.patch
* bsc#1281761: 3_ntfs-3g_2026.7.7-SA_2026-06-1_08.patch
* bsc#1281760: 4_ntfs-3g_2026.7.7-SA_2026-06-1_10.patch
* bsc#1281759: 5_ntfs-3g_2026.7.7-SA_2026-06-1_11.patch
* bsc#1281758: 6_ntfs-3g_2026.7.7-SA_2026-06-1_12.patch
* bsc#1281757: 7_ntfs-3g_2026.7.7-SA_2026-06-1_19.patch
* bsc#1281756: 8_ntfs-3g_2026.7.7-SA_2026-06-1_20.patch
* Wed Jul 22 2026 Michael Gorse <mgorse@suse.com>
- Update to version 2026.7.7:
* (ntfscat) Fix heap memory corruption when processing a corrupt
or maliciously crafted filesystem. (CVE-2026-42616).
* Fix heap memory corruption when copying index data from root to
an index block in a corrupt or maliciously crafted filesystem.
(CVE-2026-42617).
* Fix single-byte heap buffer overflow when decompressing
maliciously crafted compressed file data. (CVE-2026-42618).
* Fix heap buffer overflow when copying the tail data of an index
block to a freshly allocated block. (CVE-2026-46569).
* Fix out-of-bounds read when processing symlink reparse data in
a corrupt or maliciously crafted filesystem. (CVE-2026-46571).
* Fix heap memory corruption for maliciously crafted or corrupt
index data descending to an out-of-bounds tree depth.
(CVE-2026-46570).
* Fix heap buffer overflow for maliciously crafted or corrupt
index data during a node split. (CVE-2026-46572).
* Fix heap buffer overflow when building inherited ACL data.
(CVE-2026-56135).
* Fix out of bounds access when clearing an index root in
maliciously crafted or corrupt index data. (CVE-2026-56136).
- Drop patches fixed upstream:
+ ntfs3g-unistr-use-after-free.patch
+ ntfs3g-heap-overflow.patch
+ 1_ntfs-3g_2022.10.3-CVE-2026-42618.patch
+ 2_ntfs-3g_2022.10.3-CVE-2026-42616.patch
+ 3_ntfs-3g_2022.10.3-CVE-2026-42617.patch
+ 4_ntfs-3g_2022.10.3-CVE-2026-46569.patch
+ 5_ntfs-3g_2022.10.3-CVE-2026-46571.patch
+ 6_ntfs-3g_2022.10.3-CVE-2026-46570.patch
+ 8_ntfs-3g_2022.10.3-CVE-2026-56135.patch
* Tue Jul 14 2026 Scott Bradnick <scott.bradnick@suse.com>
- Adding patch bundle from upstream (download.tuxera.com/opensource)
re:cve_2026-04 for v2022.10.3
* bsc#1271104 -> 1_ntfs-3g_2022.10.3-CVE-2026-42618.patch
* bsc#1271102 -> 2_ntfs-3g_2022.10.3-CVE-2026-42616.patch
* bsc#1271103 -> 3_ntfs-3g_2022.10.3-CVE-2026-42617.patch
* bsc#1271105 -> 4_ntfs-3g_2022.10.3-CVE-2026-46569.patch
* bsc#1271107 -> 5_ntfs-3g_2022.10.3-CVE-2026-46571.patch
* bsc#1271106 -> 6_ntfs-3g_2022.10.3-CVE-2026-46570.patch
* bsc#1271108 -> 7_ntfs-3g_2022.10.3-CVE-2026-46572.patch
- This file is identical to 3_...42617.patch
* bsc#1271109 -> 8_ntfs-3g_2022.10.3-CVE-2026-56135.patch
* bsc#1271110 -> 9_ntfs-3g_2022.10.3-CVE-2026-56136.patch
- This file is identical to 3_...42617.patch
* Sat May 09 2026 Martin Schreiner <martin.schreiner@suse.com>
- Remove last remnants of update-alternatives.
* Fri Apr 17 2026 Scott Reeves <sreeves@suse.com>
- Add ntfs3g-heap-overflow.patch: bsc#1262216 CVE-2026-40706.
* Mon Jun 02 2025 Martin Schreiner <martin.schreiner@suse.com>
- Migrate away from update-alternatives (bsc#1240095).
- Upon installation of the newer packages, the old alternatives
are purged from the system.
* Mon Jun 10 2024 Michael Gorse <mgorse@suse.com>
- Add ntfs3g-unistr-use-after-free.patch: fix a use after free in
ntfs_uppercase_mbs (boo#1226007 CVE-2023-52890).
- No longer call autoconf; likely not needed anymore.
* Tue Dec 27 2022 Ludwig Nussel <lnussel@suse.com>
- Replace transitional %usrmerged macro with regular version check (boo#1206798)
* Mon Oct 31 2022 Michael Gorse <mgorse@suse.com>
- update to 2022.10.3 (bsc#1204734 CVE-2022-40284):
* Rejected zero-sized runs.
* Avoided merging runlists with no runs.
/usr/bin/lowntfs-3g /usr/bin/ntfs-3g /usr/bin/ntfs-3g.probe /usr/bin/ntfssecaudit /usr/bin/ntfsusermap /usr/sbin/mount.lowntfs-3g /usr/sbin/mount.ntfs /usr/sbin/mount.ntfs-3g /usr/share/doc/packages/ntfs-3g /usr/share/doc/packages/ntfs-3g/AUTHORS /usr/share/doc/packages/ntfs-3g/CREDITS /usr/share/doc/packages/ntfs-3g/ChangeLog /usr/share/doc/packages/ntfs-3g/NEWS /usr/share/doc/packages/ntfs-3g/README /usr/share/licenses/ntfs-3g /usr/share/licenses/ntfs-3g/COPYING /usr/share/man/man8/mount.lowntfs-3g.8.gz /usr/share/man/man8/mount.ntfs-3g.8.gz /usr/share/man/man8/mount.ntfs.8.gz /usr/share/man/man8/ntfs-3g.8.gz /usr/share/man/man8/ntfs-3g.probe.8.gz /usr/share/man/man8/ntfssecaudit.8.gz /usr/share/man/man8/ntfsusermap.8.gz
Generated by rpm2html 1.8.1
Fabrice Bellet, Mon Oct 26 00:13:59 2026