SUSE-SU-2026:3214-1
SUSE-SU-2026:3214-1 · Security update for ntfs-3g_ntfsprogs
Diese Seite enthält Fakten aus öffentlichen Sicherheitsquellen. Lesen Sie vor dem Aktualisieren die Originalmeldung.
This update for ntfs-3g_ntfsprogs fixes the following issues - CVE-2026-42616: heap buffer overflow in `cat()` of `cat.c` can lead to heap corruption in the ntfscat binary via a specially crafted NTFS image (bsc#1271102). - CVE-2026-42617: heap buffer overflow in `ntfs_ir_to_ib()` of `index.c` can lead to heap corruption in the SUID-root ntfs-3g binary via a specially crafted NTFS image (bsc#1271103). - CVE-2026-42618: heap buffer overflow in `ntfs_decompress()` of `compress.c` can lead to heap corruption in the SUID-root ntfs-3g binary via a specially crafted NTFS image (bsc#1271104). - CVE-2026-46569: heap buffer overflow in `ntfs_ib_copy_tail()` of `libntfs-3g/index.c`can lead to heap corruption in the SUID-root ntfs-3g binary via a specially crafted NTFS image (bsc#1271105). - CVE-2026-46570: heap buffer overflow in `ntfs_index_walk_down()` of `libntfs-3g/index.c` can lead to heap corruption in the SUID-root ntfs-3g binary via a specially crafted NTFS image (bsc#1271106). - CVE-2026-46571: out-of-bounds read in `ntfs_fix_file_name()` of `libntfs-3g/reparse.c` can lead to disclosure of confidential information from the ntfs-3g process memory when handling a specially crafted NTFS image (bsc#1271107). - CVE-2026-46572: heap buffer overflow in `ntfs_ib_cut_tail()` of `libntfs-3g/index.c` can lead to heap corruption in the SUID-root ntfs-3g binary via a specially crafted NTFS image (bsc#1271108). - CVE-2026-56135: heap-based buffer overflow in `build_inherited_id()` of `libntfs-3g/security.c` can lead to heap corruption in the SUID-root ntfs-3g binary via a specially crafted NTFS image (bsc#1271109). - CVE-2026-56136: out-of-bounds read in `ntfs_ir_nill()` of `libntfs-3g/index.c` can lead to disclosure of confidential information from the ntfs-3g process memory when handling a specially crafted NTFS image (bsc#1271110).
Korrektur verfügbar
- Veröffentlicht
- Aktualisiert
Technologie-Stack: system
Betroffene Produkte und Versionen
ntfs-3g_ntfsprogs SUSE:Linux Enterprise Module for Basesystem 15 SP7
- Betroffene Versionsbereiche
- ECOSYSTEM: < 2022.5.17-150000.3.27.1
Auf 2022.5.17-150000.3.27.1 aktualisieren
ntfs-3g_ntfsprogs SUSE:Linux Enterprise Module for Development Tools 15 SP7
- Betroffene Versionsbereiche
- ECOSYSTEM: < 2022.5.17-150000.3.27.1
Auf 2022.5.17-150000.3.27.1 aktualisieren
ntfs-3g_ntfsprogs SUSE:Linux Enterprise Server 15 SP6-LTSS
- Betroffene Versionsbereiche
- ECOSYSTEM: < 2022.5.17-150000.3.27.1
Auf 2022.5.17-150000.3.27.1 aktualisieren
ntfs-3g_ntfsprogs SUSE:Linux Enterprise Server for SAP Applications 15 SP6
- Betroffene Versionsbereiche
- ECOSYSTEM: < 2022.5.17-150000.3.27.1
Auf 2022.5.17-150000.3.27.1 aktualisieren
Originalquellen
- https://www.suse.com/support/update/announcement/2026/suse-su-20263214-1/
- https://bugzilla.suse.com/1271102
- https://bugzilla.suse.com/1271103
- https://bugzilla.suse.com/1271104
- https://bugzilla.suse.com/1271105
- https://bugzilla.suse.com/1271106
- https://bugzilla.suse.com/1271107
- https://bugzilla.suse.com/1271108
- https://bugzilla.suse.com/1271109
- https://bugzilla.suse.com/1271110
- https://www.suse.com/security/cve/CVE-2026-42616
- https://www.suse.com/security/cve/CVE-2026-42617
- https://www.suse.com/security/cve/CVE-2026-42618
- https://www.suse.com/security/cve/CVE-2026-46569
- https://www.suse.com/security/cve/CVE-2026-46570
- https://www.suse.com/security/cve/CVE-2026-46571
- https://www.suse.com/security/cve/CVE-2026-46572
- https://www.suse.com/security/cve/CVE-2026-56135
- https://www.suse.com/security/cve/CVE-2026-56136
- https://osv.dev/vulnerability/SUSE-SU-2026:3214-1