SUSE-SU-2026:3213-1
- Source
- https://www.suse.com/support/update/announcement/2026/suse-su-20263213-1/
- Import Source
- https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2026:3213-1.json
- JSON Data
- https://api.test.osv.dev/v1/vulns/SUSE-SU-2026:3213-1
- Upstream
CVE (9)
- CVE-2026-42616
- CVE-2026-42617
- CVE-2026-42618
- CVE-2026-46569
- CVE-2026-46570
- CVE-2026-46571
- CVE-2026-46572
- CVE-2026-56135
- CVE-2026-56136
- Related
- Published
- 2026-07-23T14:18:11Z
- Modified
- 2026-07-24T17:15:10Z
- Summary
- Security update for ntfs-3g_ntfsprogs
- Details
-
This update for ntfs-3g_ntfsprogs fixes the following issues
- CVE-2026-42616: heap buffer overflow in cat() in cat.c (bsc#1271102).
- CVE-2026-42617: heap buffer overflow in ntfs_ir_to_ib() in index.c (bsc#1271103).
- CVE-2026-42618: heap buffer overflow in ntfs_decompress() in compress.c (bsc#1271104).
- CVE-2026-46569: heap buffer overflow in ntfs_ib_copy_tail() in libntfs-3g/index.c (bsc#1271105).
- CVE-2026-46570: heap buffer overflow exists in ntfs_index_walk_down() in libntfs-3g/index.c (bsc#1271106).
- CVE-2026-46571: out-of-bounds read in ntfs_fix_file_name() in libntfs-3g/reparse.c (bsc#1271107).
- CVE-2026-46572: heap buffer overflow in ntfs_ib_cut_tail() in libntfs-3g/index.c (bsc#1271108).
- CVE-2026-56135: heap-based buffer overflow in build_inherited_id() in libntfs-3g/security.c (bsc#1271109).
- CVE-2026-56136: out-of-bounds read in ntfs_ir_nill() in libntfs-3g/index.c (bsc#1271110).
- References
-
- https://www.suse.com/support/update/announcement/2026/suse-su-20263213-1/
- https://bugzilla.suse.com/1271102
- https://bugzilla.suse.com/1271103
- https://bugzilla.suse.com/1271104
- https://bugzilla.suse.com/1271105
- https://bugzilla.suse.com/1271106
- https://bugzilla.suse.com/1271107
- https://bugzilla.suse.com/1271108
- https://bugzilla.suse.com/1271109
- https://bugzilla.suse.com/1271110
- https://www.suse.com/security/cve/CVE-2026-42616
- https://www.suse.com/security/cve/CVE-2026-42617
- https://www.suse.com/security/cve/CVE-2026-42618
- https://www.suse.com/security/cve/CVE-2026-46569
- https://www.suse.com/security/cve/CVE-2026-46570
- https://www.suse.com/security/cve/CVE-2026-46571
- https://www.suse.com/security/cve/CVE-2026-46572
- https://www.suse.com/security/cve/CVE-2026-56135
- https://www.suse.com/security/cve/CVE-2026-56136
Affected packages
SUSE:Linux Enterprise Server 12 SP5-LTSS / ntfs-3g_ntfsprogs
Package
- Name
- ntfs-3g_ntfsprogs
- Purl
- pkg:rpm/suse/ntfs-3g_ntfsprogs&distro=SUSE%20Linux%20Enterprise%20Server%2012%20SP5-LTSS