SUSE-SU-2026:4764-1
SUSE-SU-2026:4764-1 · Security update for ntfs-3g_ntfsprogs
This page contains facts from public vulnerability sources. Check the original advisory before updating.
This update for ntfs-3g_ntfsprogs fixes the following issues: - Denial-of-service in ntfs_inode_attach_all_extents() (bsc#1281758). - Heap buffer overflow in ntfs_acl_owner() (bsc#1281756). - Heap buffer overflow in ntfs_check_restart_area() (bsc#1281759). - Heap buffer overflow in ntfs_ea_check_wsldev() (bsc#1281760). - Heap buffer overflow in ntfs_external_attr_find() (bsc#1281761). - Heap buffer overflow in ntfs_same_sid() (bsc#1281757). - Heap data corruption in ntfs_mapping_pairs_decompress_i() (bsc#1281762). - Heap out of bounds read/write in ntfs_ie_add_vcn() (bsc#1281763).
Fix available
- Published
- Updated
Stack: system
Affected products and versions
ntfs-3g_ntfsprogs SUSE:Linux Enterprise Module for Basesystem 15 SP7
- Affected ranges
- ECOSYSTEM: < 2022.5.17-150000.3.30.1
Update to 2022.5.17-150000.3.30.1
ntfs-3g_ntfsprogs SUSE:Linux Enterprise Module for Development Tools 15 SP7
- Affected ranges
- ECOSYSTEM: < 2022.5.17-150000.3.30.1
Update to 2022.5.17-150000.3.30.1
Original sources
- https://www.suse.com/support/update/announcement/2026/suse-su-20264764-1/
- https://bugzilla.suse.com/1281756
- https://bugzilla.suse.com/1281757
- https://bugzilla.suse.com/1281758
- https://bugzilla.suse.com/1281759
- https://bugzilla.suse.com/1281760
- https://bugzilla.suse.com/1281761
- https://bugzilla.suse.com/1281762
- https://bugzilla.suse.com/1281763
- https://osv.dev/vulnerability/SUSE-SU-2026:4764-1