-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Fri, 17 Apr 2026 19:03:02 +0200 Source: ntfs-3g Architecture: source Version: 1:2017.3.23AR.3-4+deb11u5 Distribution: bullseye-security Urgency: high Maintainer: Laszlo Boszormenyi (GCS) <gcs@debian.org> Changed-By: Thorsten Alteholz <debian@alteholz.de> Changes: ntfs-3g (1:2017.3.23AR.3-4+deb11u5) bullseye-security; urgency=high . * Non-maintainer upload by the LTS Team. * CVE-2026-40706 acls.c: Fix heap buffer overflow in 'ntfs_build_permissions_posix' Checksums-Sha1: 14e9a6947df81390c0b3869cd7e6332d3be5a404 2373 ntfs-3g_2017.3.23AR.3-4+deb11u5.dsc 18a483bb91cb5cb532454ae5c4f18d71e5cd9b80 1277609 ntfs-3g_2017.3.23AR.3.orig.tar.gz 942e312a8af3a39baa979f538a3dc93cacf36ee4 41376 ntfs-3g_2017.3.23AR.3-4+deb11u5.debian.tar.xz 1698a5e37c0905e810ace9e83ecbd50a7427009a 9285 ntfs-3g_2017.3.23AR.3-4+deb11u5_amd64.buildinfo Checksums-Sha256: aed8d98d7b2474e35be3129a3f9746521ba28ef71f1b2d219864196cbd265b3b 2373 ntfs-3g_2017.3.23AR.3-4+deb11u5.dsc a83fbd533259abd5b73dc37635cc003a697248375702ddcc39af129957a7564b 1277609 ntfs-3g_2017.3.23AR.3.orig.tar.gz 840276f3b34937e96f5609c97f9c1f6768c5688c3151ab6b89dbd9e3f0292acf 41376 ntfs-3g_2017.3.23AR.3-4+deb11u5.debian.tar.xz 7b3f41d78de6748a47b4ad8465b87e5180077763969d226828ddb12efe7a5271 9285 ntfs-3g_2017.3.23AR.3-4+deb11u5_amd64.buildinfo Files: def3ac80214257095a4c56d53729d546 2373 otherosfs optional ntfs-3g_2017.3.23AR.3-4+deb11u5.dsc 5202fb9d41b0db673b73da4ca9bb88b5 1277609 otherosfs optional ntfs-3g_2017.3.23AR.3.orig.tar.gz 60e849258b195b81ed996e050ee1f2a9 41376 otherosfs optional ntfs-3g_2017.3.23AR.3-4+deb11u5.debian.tar.xz 0030165060eef6af61a9ac9afbf2466c 9285 otherosfs optional ntfs-3g_2017.3.23AR.3-4+deb11u5_amd64.buildinfo -----BEGIN PGP SIGNATURE----- iQKnBAEBCgCRFiEEYgH7/9u94Hgi6ruWlvysDTh7WEcFAmnnj3dfFIAAAAAALgAo aXNzdWVyLWZwckBub3RhdGlvbnMub3BlbnBncC5maWZ0aGhvcnNlbWFuLm5ldDYy MDFGQkZGREJCREUwNzgyMkVBQkI5Njk2RkNBQzBEMzg3QjU4NDcTHGRlYmlhbkBh bHRlaG9sei5kZQAKCRCW/KwNOHtYR0VWD/0b8KIE65FmHLFcf1qmklCat3zdh1jj wBEQ58PI1Ie8BwpJjPY0EeyRcgl05KZRmpOg1qJwlzpDVI1x8rDxPhrBBsq8Oo8t lZ0fbo+6iosYgd7DESO1CUlzY4iyXVKOXwgUb5kosdC34dwFktEb6frgNTlrfuSd VLQ/tdaFuK2/ZIasUNDPC6F903bI2WIMxsQ8ErDKihfaYjKo+ics1s7rOiB5FP7J xgvVo/iOFgAQY0Aezejd9qd8/hr/UZJFrp0YXYNaeXfoG5OAweoS6QB3SW/BjBb3 acIqSnf5Cj2N3ciEK3g599g/9FSX8KUcKR6P3lIiIV325nxB7us1GZmd6SzKPHin sA1Bzo7F05FzsDSFjAuyntRFKsfUlxo3PUcCvk4/+uYfvsJ8Y/METZN7dWlmT2nJ d6MWRChMPPXT4RAUACCOTbKbxpbXsIhXGwaZRU5LAzwCQw4h3fvrPqW4DeVLHnJh iYVDFsCjmDMQYKdloaWH7mnHgxwGGfV6GW2pyGYzHdUEtbz0BahqHGo/X8Linrtt rJKRnY/bho1QMq4sisA55Iu53QcGwNLAJLdC8GHpGBmLJTLnhs0AatFzTw+9aer4 tTUCsDXx3l2D5OKxuesLSNvobe1SJ2YkTYWH6HR2RKVLC06MpSQkhLAnwnZZhVlR TnA6UrqqeVFU9Q== =QHqR -----END PGP SIGNATURE-----