-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Thu, 16 Apr 2026 23:28:39 +0200 Source: ntfs-3g Architecture: source Version: 1:2022.10.3-1+deb12u3 Distribution: bookworm-security Urgency: high Maintainer: Laszlo Boszormenyi (GCS) Changed-By: Salvatore Bonaccorso Changes: ntfs-3g (1:2022.10.3-1+deb12u3) bookworm-security; urgency=high . * Non-maintainer upload by the Security Team. * acls.c: Fix heap buffer overflow in 'ntfs_build_permissions_posix' (CVE-2026-40706) Checksums-Sha1: c9b6f53a51aeeb97df55e521a36e4c45ac9d4cfb 2289 ntfs-3g_2022.10.3-1+deb12u3.dsc d7058fb60028f3689b0ac8ec81a8a944ea80a405 900425 ntfs-3g_2022.10.3.orig.tar.gz 8e084b6a6d018ca72bed4945a6d61fb21c09d79c 24004 ntfs-3g_2022.10.3-1+deb12u3.debian.tar.xz 12d94b5a1a694210eda7c86f96e659f2a0bc7ed2 6252 ntfs-3g_2022.10.3-1+deb12u3_source.buildinfo Checksums-Sha256: 1fda9b59fbe05abc021a6f1fc8cbf429c297571adfb88fbdb55cf018b8b44ce5 2289 ntfs-3g_2022.10.3-1+deb12u3.dsc 8bd7749ea9d8534c9f0664d48b576e90b96d45ec8803c9427f6ffaa2f0dde299 900425 ntfs-3g_2022.10.3.orig.tar.gz 458cbea82c6201583ac5eb692a0a3e06af3dfa0671caa385a26535f2dadf946b 24004 ntfs-3g_2022.10.3-1+deb12u3.debian.tar.xz 981e72c1301454a972a0afd5e95b64ff1fbc2964768db42dc8437d71f989d37e 6252 ntfs-3g_2022.10.3-1+deb12u3_source.buildinfo Files: 37d90b4bc3b8b94948ff7644e32ef60a 2289 otherosfs optional ntfs-3g_2022.10.3-1+deb12u3.dsc 65814658dfd6ad06796795c4f3d1d6bc 900425 otherosfs optional ntfs-3g_2022.10.3.orig.tar.gz 9f19d7485e518d586ed9e0efb369568e 24004 otherosfs optional ntfs-3g_2022.10.3-1+deb12u3.debian.tar.xz 0a9cff6fc4afa91a855e32bcb4872005 6252 otherosfs optional ntfs-3g_2022.10.3-1+deb12u3_source.buildinfo -----BEGIN PGP SIGNATURE----- iQKmBAEBCgCQFiEERkRAmAjBceBVMd3uBUy48xNDz0QFAmnj2ylfFIAAAAAALgAo aXNzdWVyLWZwckBub3RhdGlvbnMub3BlbnBncC5maWZ0aGhvcnNlbWFuLm5ldDQ2 NDQ0MDk4MDhDMTcxRTA1NTMxRERFRTA1NENCOEYzMTM0M0NGNDQSHGNhcm5pbEBk ZWJpYW4ub3JnAAoJEAVMuPMTQ89EJeoQAJIIpbWN9Vnp0/SD8rrgWKpsdd7Zspzp IiZiprfjl/gtEDM0u/Y1+/Ss58NonMdy70Ca+EOIQEeKBB2pAe/Rc9tblKbP1azc wqebajPn3kahjt0zUtC/q1qFH3RQSlnojQ9B0fayiQ9woc8pcDaTkOymbVXgy5pc AVe0TS5mJpKvz3wlniqgY94WlhYCnXQrbqtJe5GHTrR6w3hvDX3Iaa/Bhmd8jbrm vzG4zmO1XxPS3fi3LxU4zECFRAck3LxQX7ZKjLwUbvVhOLsOqFe+2JoPcG4MYm64 QG7RCA8VBtUsSxaGwYhWqk8PWyfTnellb0LWS5H17e8fecd6Zw+/VBv8DLSsskVc mOq/WnD22Y5SJZf49rPeenZ0BOW7+6271zSlHiTjk564QHSVjATzd6OpQ+CAORXo al1yFXM0KjjaLbn5jtCPLrd2HCVIHxS1eLp39GTIs8HEVFBkR3ruwEfICj3vlxPJ zREtaieKqpjYSO6ICisiC691MstEjpbMK8wfYt0s8G1hrPyXy1kPjwjg1IOyZ+cj AcGOGrPMiREg1S5hGOfGA4Sf7O+RD7JMsPnH2cXf5WyeLPXmwbL5bVYKGKTuU1th u3s4YDP91baMvzpcNDOjKorcWLd/m7jxsT3blxfWy8q8BQ+KNWeJFfOfYBwT1Pih PzCUxNt3wN9t =nD6i -----END PGP SIGNATURE-----