-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Thu, 01 Oct 2026 23:06:57 +0200 Source: ntfs-3g Architecture: source Version: 1:2022.10.3-5+deb13u3 Distribution: trixie-security Urgency: high Maintainer: Laszlo Boszormenyi (GCS) Changed-By: Salvatore Bonaccorso Changes: ntfs-3g (1:2022.10.3-5+deb13u3) trixie-security; urgency=high . * Non-maintainer upload by the Security Team. * [NTFS-3G-SA_2026-06-1_05] Heap out of bounds read/write in ntfs_ie_add_vcn() * [NTFS-3G-SA_2026-06-1_07] Heap data corruption in ntfs_mapping_pairs_decompress_i() * [NTFS-3G-SA_2026-06-1_08] Heap buffer overflow in ntfs_external_attr_find() * [NTFS-3G-SA_2026-06-1_10] Heap buffer overflow in ntfs_ea_check_wsldev() * [NTFS-3G-SA_2026-06-1_11] Heap buffer overflow in ntfs_check_restart_area() * [NTFS-3G-SA_2026-06-1_12] Denial-of-service in ntfs_inode_attach_all_extents() * [NTFS-3G-SA_2026-06-1_19] Heap buffer overflow in ntfs_same_sid() * [NTFS-3G-SA_2026-06-1_20] Heap buffer overflow in ntfs_acl_owner() * Revert "attrib.c: check the multi sector transfer fixup on read" Checksums-Sha1: 5c1363cfb419d07c0b66149f5c242fc554615996 2314 ntfs-3g_2022.10.3-5+deb13u3.dsc 503515b5fe88d69e1ec36ba4ec48ba03f14b3e8b 36732 ntfs-3g_2022.10.3-5+deb13u3.debian.tar.xz dc376aca912ce5b2b61d04a56fb4cdaa61c8a3db 5295 ntfs-3g_2022.10.3-5+deb13u3_source.buildinfo Checksums-Sha256: d74be6b202256a74d24b5925b469299a34bdd53b05eedbbefada3525f2798727 2314 ntfs-3g_2022.10.3-5+deb13u3.dsc 833dadd65ececb5e0f77063214a5af32ae124cb7be8fe83bcc61b664629be80b 36732 ntfs-3g_2022.10.3-5+deb13u3.debian.tar.xz 23d02fa5a05fffbbab9e088c89bda2848671c33eec462645dd0986df88824f8b 5295 ntfs-3g_2022.10.3-5+deb13u3_source.buildinfo Files: 736ecb18540cf353cb40d7f855ea2b31 2314 otherosfs optional ntfs-3g_2022.10.3-5+deb13u3.dsc 76cd9cc3d3a65b4cec00ebabad6cacc6 36732 otherosfs optional ntfs-3g_2022.10.3-5+deb13u3.debian.tar.xz 2b0a9fea4003370873d8e22ee1ee5f0c 5295 otherosfs optional ntfs-3g_2022.10.3-5+deb13u3_source.buildinfo -----BEGIN PGP SIGNATURE----- iQKmBAEBCgCQFiEERkRAmAjBceBVMd3uBUy48xNDz0QFAmrLkq9fFIAAAAAALgAo aXNzdWVyLWZwckBub3RhdGlvbnMub3BlbnBncC5maWZ0aGhvcnNlbWFuLm5ldDQ2 NDQ0MDk4MDhDMTcxRTA1NTMxRERFRTA1NENCOEYzMTM0M0NGNDQSHGNhcm5pbEBk ZWJpYW4ub3JnAAoJEAVMuPMTQ89EA2oP+gN22AdErg0P+UoWLjx+nd4w48cTQpnc llu1A9C4tjl6LA1q8YvG9CIlxtoTvUHNqiHpI0QbrhnwdVziizSWWqg+7mxaOLKo fa+T8t2eruS96cmWLDH1H0GW4ZXjHziRQP6Yzh3a4SW8gaDzouAyUtixyCe5H/0X ckh7UjAbEH088ADr8cld7zviqgpAL35UGJTzawgAMfa4AnCTuP06FbE4LQyHWnJ2 NoYNlrqYuTzblx+GtttDZpBiUio5l1xjfBsseRfsmGHXZL4dAI/LOye3LUA96STC t0O+KIYs16xmqMWOuqKggv/UFIFN0XVxlYDOx+AxnBZXul9e0N6n3wz3+u6GSPXO 6jvA26Ugk2T1N5qrXrBPYpEHMs7+92QVkpI7UIOkk/H7qLtXzwBpvEHALFbbtBVk 8wJZ92wJUlrko7T9zL6vHQBA2Tg8xKdbuoNdc8dvCML4PhLDqjK+dHjTNTmKcasL PIXFetdmfsYXgGnex34kUe3hQIrufQ14+4Am+nSAKD1hnQ9ZbBWdxzH6h+sISDh/ ngVOKLwGzhkp7IcKSSwarYrtBadNkRnXAABjsc8m/yDdqjTkPDFNitu1Zv1rX/cH y5Rnhg9LAEoqnvCK93GSFdIt+RhDG1eNBJMjYOlxUY9hOxg3R+jKNSMNrX/TpAy7 NHs9Bq1tMu8z =1QiE -----END PGP SIGNATURE-----