| Index | index by Group | index by Distribution | index by Vendor | index by creation date | index by Name | Mirrors | Help | Search |
| Name: ntfsprogs-extra | Distribution: openSUSE Tumbleweed |
| Version: 2026.7.7 | Vendor: openSUSE |
| Release: 1.1 | Build date: Thu Jul 23 01:42:55 2026 |
| Group: System/Filesystems | Build host: reproducible |
| Size: 157624 | Source RPM: ntfs-3g_ntfsprogs-2026.7.7-1.1.src.rpm |
| Packager: https://bugs.opensuse.org | |
| Url: https://github.com/tuxera/ntfs-3g/ | |
| Summary: NTFS Utilities which can damage your filesystem such that Windows can't read it | |
These are programs which are considered non-functional or only test-oriented. They are kept in the source tarball so that volunteers can capitalize on them for improvement. In particular ntfsck is just a place holder. Distributions are expected not to recommend inserting a positive value in the last field of /etc/fstab for ntfs partitions. They have been orphaned for ten years and are unlikely to be upgraded (except ntfsfallocate, if there is some demand).
GPL-2.0-or-later
* Wed Jul 22 2026 Michael Gorse <mgorse@suse.com>
- Update to version 2026.7.7:
* (ntfscat) Fix heap memory corruption when processing a corrupt
or maliciously crafted filesystem. (CVE-2026-42616).
* Fix heap memory corruption when copying index data from root to
an index block in a corrupt or maliciously crafted filesystem.
(CVE-2026-42617).
* Fix single-byte heap buffer overflow when decompressing
maliciously crafted compressed file data. (CVE-2026-42618).
* Fix heap buffer overflow when copying the tail data of an index
block to a freshly allocated block. (CVE-2026-46569).
* Fix out-of-bounds read when processing symlink reparse data in
a corrupt or maliciously crafted filesystem. (CVE-2026-46571).
* Fix heap memory corruption for maliciously crafted or corrupt
index data descending to an out-of-bounds tree depth.
(CVE-2026-46570).
* Fix heap buffer overflow for maliciously crafted or corrupt
index data during a node split. (CVE-2026-46572).
* Fix heap buffer overflow when building inherited ACL data.
(CVE-2026-56135).
* Fix out of bounds access when clearing an index root in
maliciously crafted or corrupt index data. (CVE-2026-56136).
- Drop patches fixed upstream:
+ ntfs3g-unistr-use-after-free.patch
+ ntfs3g-heap-overflow.patch
+ 1_ntfs-3g_2022.10.3-CVE-2026-42618.patch
+ 2_ntfs-3g_2022.10.3-CVE-2026-42616.patch
+ 3_ntfs-3g_2022.10.3-CVE-2026-42617.patch
+ 4_ntfs-3g_2022.10.3-CVE-2026-46569.patch
+ 5_ntfs-3g_2022.10.3-CVE-2026-46571.patch
+ 6_ntfs-3g_2022.10.3-CVE-2026-46570.patch
+ 8_ntfs-3g_2022.10.3-CVE-2026-56135.patch
* Tue Jul 14 2026 Scott Bradnick <scott.bradnick@suse.com>
- Adding patch bundle from upstream (download.tuxera.com/opensource)
re:cve_2026-04 for v2022.10.3
* bsc#1271104 -> 1_ntfs-3g_2022.10.3-CVE-2026-42618.patch
* bsc#1271102 -> 2_ntfs-3g_2022.10.3-CVE-2026-42616.patch
* bsc#1271103 -> 3_ntfs-3g_2022.10.3-CVE-2026-42617.patch
* bsc#1271105 -> 4_ntfs-3g_2022.10.3-CVE-2026-46569.patch
* bsc#1271107 -> 5_ntfs-3g_2022.10.3-CVE-2026-46571.patch
* bsc#1271106 -> 6_ntfs-3g_2022.10.3-CVE-2026-46570.patch
* bsc#1271108 -> 7_ntfs-3g_2022.10.3-CVE-2026-46572.patch
- This file is identical to 3_...42617.patch
* bsc#1271109 -> 8_ntfs-3g_2022.10.3-CVE-2026-56135.patch
* bsc#1271110 -> 9_ntfs-3g_2022.10.3-CVE-2026-56136.patch
- This file is identical to 3_...42617.patch
* Sat May 09 2026 Martin Schreiner <martin.schreiner@suse.com>
- Remove last remnants of update-alternatives.
* Fri Apr 17 2026 Scott Reeves <sreeves@suse.com>
- Add ntfs3g-heap-overflow.patch: bsc#1262216 CVE-2026-40706.
* Mon Jun 02 2025 Martin Schreiner <martin.schreiner@suse.com>
- Migrate away from update-alternatives (bsc#1240095).
- Upon installation of the newer packages, the old alternatives
are purged from the system.
* Mon Jun 10 2024 Michael Gorse <mgorse@suse.com>
- Add ntfs3g-unistr-use-after-free.patch: fix a use after free in
ntfs_uppercase_mbs (boo#1226007 CVE-2023-52890).
- No longer call autoconf; likely not needed anymore.
* Tue Dec 27 2022 Ludwig Nussel <lnussel@suse.com>
- Replace transitional %usrmerged macro with regular version check (boo#1206798)
* Mon Oct 31 2022 Michael Gorse <mgorse@suse.com>
- update to 2022.10.3 (bsc#1204734 CVE-2022-40284):
* Rejected zero-sized runs.
* Avoided merging runlists with no runs.
* Sun May 29 2022 Dirk Müller <dmueller@suse.com>
- update to 2022.5.17 (bsc#1199978):
* Improved defence against maliciously tampered NTFS partitions
* Improved defence against improper use of options
* Updated the documentation
* CVE-2022-30783, CVE-2022-30785, CVE-2022-30787
* CVE-2021-46790, CVE-2022-30784, CVE-2022-30786,
* CVE-2022-30788, CVE-2022-30789
* Tue Aug 31 2021 Michael Gorse <mgorse@suse.com>
- Update to version 2021.8.22 (boo#1189720 boo#1130165):
* Fixed compile error when building with libfuse < 2.8.0
* Fixed obsolete macros in configure.ac
* Signalled support of UTIME_OMIT to external libfuse2
* Fixed an improper macro usage in ntfscp.c
* Updated the repository change in the README
* Fixed vulnerability threats caused by maliciously tampered
NTFS partitions
* Security fixes: CVE-2021-33285, CVE-2021-33286, CVE-2021-33287,
CVE-2021-33289, CVE-2021-35266, CVE-2021-35267, CVE-2021-35268,
CVE-2021-35269, CVE-2021-39251, CVE-2021-39252, CVE-2021-39253,
CVE_2021-39254, CVE-2021-39255, CVE-2021-39256, CVE-2021-39257,
CVE-2021-39258, CVE-2021-39259, CVE-2021-39260, CVE-2021-39261,
CVE-2021-39262, CVE-2021-39263, CVE-2019-9755.
- Sover is now 89
- Update URL.
- Remove 21-storage-ntfs-3g.fdi; it is no longer used.
/usr/bin/ntfsck /usr/bin/ntfsdump_logfile /usr/bin/ntfsfallocate /usr/bin/ntfsmftalloc /usr/bin/ntfsmove /usr/share/doc/packages/ntfsprogs-extra /usr/share/doc/packages/ntfsprogs-extra/AUTHORS /usr/share/doc/packages/ntfsprogs-extra/CREDITS /usr/share/doc/packages/ntfsprogs-extra/ChangeLog /usr/share/doc/packages/ntfsprogs-extra/NEWS /usr/share/doc/packages/ntfsprogs-extra/README /usr/share/licenses/ntfsprogs-extra /usr/share/licenses/ntfsprogs-extra/COPYING /usr/share/man/man8/ntfsfallocate.8.gz
Generated by rpm2html 1.8.1
Fabrice Bellet, Sun Aug 2 01:54:38 2026