-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512
Format: 1.8
Date: Thu, 16 Apr 2026 23:28:39 +0200
Source: ntfs-3g
Architecture: source
Version: 1:2022.10.3-1+deb12u3
Distribution: bookworm-security
Urgency: high
Maintainer: Laszlo Boszormenyi (GCS) <gcs@debian.org>
Changed-By: Salvatore Bonaccorso <carnil@debian.org>
Changes:
ntfs-3g (1:2022.10.3-1+deb12u3) bookworm-security; urgency=high
.
* Non-maintainer upload by the Security Team.
* acls.c: Fix heap buffer overflow in 'ntfs_build_permissions_posix'
(CVE-2026-40706)
Checksums-Sha1:
c9b6f53a51aeeb97df55e521a36e4c45ac9d4cfb 2289 ntfs-3g_2022.10.3-1+deb12u3.dsc
d7058fb60028f3689b0ac8ec81a8a944ea80a405 900425 ntfs-3g_2022.10.3.orig.tar.gz
8e084b6a6d018ca72bed4945a6d61fb21c09d79c 24004 ntfs-3g_2022.10.3-1+deb12u3.debian.tar.xz
12d94b5a1a694210eda7c86f96e659f2a0bc7ed2 6252 ntfs-3g_2022.10.3-1+deb12u3_source.buildinfo
Checksums-Sha256:
1fda9b59fbe05abc021a6f1fc8cbf429c297571adfb88fbdb55cf018b8b44ce5 2289 ntfs-3g_2022.10.3-1+deb12u3.dsc
8bd7749ea9d8534c9f0664d48b576e90b96d45ec8803c9427f6ffaa2f0dde299 900425 ntfs-3g_2022.10.3.orig.tar.gz
458cbea82c6201583ac5eb692a0a3e06af3dfa0671caa385a26535f2dadf946b 24004 ntfs-3g_2022.10.3-1+deb12u3.debian.tar.xz
981e72c1301454a972a0afd5e95b64ff1fbc2964768db42dc8437d71f989d37e 6252 ntfs-3g_2022.10.3-1+deb12u3_source.buildinfo
Files:
37d90b4bc3b8b94948ff7644e32ef60a 2289 otherosfs optional ntfs-3g_2022.10.3-1+deb12u3.dsc
65814658dfd6ad06796795c4f3d1d6bc 900425 otherosfs optional ntfs-3g_2022.10.3.orig.tar.gz
9f19d7485e518d586ed9e0efb369568e 24004 otherosfs optional ntfs-3g_2022.10.3-1+deb12u3.debian.tar.xz
0a9cff6fc4afa91a855e32bcb4872005 6252 otherosfs optional ntfs-3g_2022.10.3-1+deb12u3_source.buildinfo
-----BEGIN PGP SIGNATURE-----
iQKmBAEBCgCQFiEERkRAmAjBceBVMd3uBUy48xNDz0QFAmnj2ylfFIAAAAAALgAo
aXNzdWVyLWZwckBub3RhdGlvbnMub3BlbnBncC5maWZ0aGhvcnNlbWFuLm5ldDQ2
NDQ0MDk4MDhDMTcxRTA1NTMxRERFRTA1NENCOEYzMTM0M0NGNDQSHGNhcm5pbEBk
ZWJpYW4ub3JnAAoJEAVMuPMTQ89EJeoQAJIIpbWN9Vnp0/SD8rrgWKpsdd7Zspzp
IiZiprfjl/gtEDM0u/Y1+/Ss58NonMdy70Ca+EOIQEeKBB2pAe/Rc9tblKbP1azc
wqebajPn3kahjt0zUtC/q1qFH3RQSlnojQ9B0fayiQ9woc8pcDaTkOymbVXgy5pc
AVe0TS5mJpKvz3wlniqgY94WlhYCnXQrbqtJe5GHTrR6w3hvDX3Iaa/Bhmd8jbrm
vzG4zmO1XxPS3fi3LxU4zECFRAck3LxQX7ZKjLwUbvVhOLsOqFe+2JoPcG4MYm64
QG7RCA8VBtUsSxaGwYhWqk8PWyfTnellb0LWS5H17e8fecd6Zw+/VBv8DLSsskVc
mOq/WnD22Y5SJZf49rPeenZ0BOW7+6271zSlHiTjk564QHSVjATzd6OpQ+CAORXo
al1yFXM0KjjaLbn5jtCPLrd2HCVIHxS1eLp39GTIs8HEVFBkR3ruwEfICj3vlxPJ
zREtaieKqpjYSO6ICisiC691MstEjpbMK8wfYt0s8G1hrPyXy1kPjwjg1IOyZ+cj
AcGOGrPMiREg1S5hGOfGA4Sf7O+RD7JMsPnH2cXf5WyeLPXmwbL5bVYKGKTuU1th
u3s4YDP91baMvzpcNDOjKorcWLd/m7jxsT3blxfWy8q8BQ+KNWeJFfOfYBwT1Pih
PzCUxNt3wN9t
=nD6i
-----END PGP SIGNATURE-----