From patchwork Fri Oct 2 11:23:26 2026 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit X-Patchwork-Submitter: Adolf Belka X-Patchwork-Id: 10304 Return-Path: Received: from mail01.ipfire.org (mail01.haj.ipfire.org [172.28.1.202]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange x25519) (Client CN "mail01.haj.ipfire.org", Issuer "YR2" (not verified)) by web04.haj.ipfire.org (Postfix) with ESMTPS id 4hx5yF1WHGz3x5B for ; Fri, 02 Oct 2026 11:23:49 +0000 (UTC) Received: from mail02.haj.ipfire.org (mail02.haj.ipfire.org [IPv6:2001:678:b28::201]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange x25519) (Client CN "mail02.haj.ipfire.org", Issuer "YE1" (not verified)) by mail01.ipfire.org (Postfix) with ESMTPS id 4hx5yC4kkDz86T for ; Fri, 02 Oct 2026 11:23:47 +0000 (UTC) Received: from mail02.haj.ipfire.org (localhost [IPv6:::1]) by mail02.haj.ipfire.org (Postfix) with ESMTP id 4hx5y80p73z378T for ; Fri, 02 Oct 2026 11:23:44 +0000 (UTC) X-Original-To: development@lists.ipfire.org Received: from mail01.ipfire.org (mail01.haj.ipfire.org [IPv6:2001:678:b28::25]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange x25519) (Client CN "mail01.haj.ipfire.org", Issuer "YR2" (not verified)) by mail02.haj.ipfire.org (Postfix) with ESMTPS id 4hx5y06yNLz37Dq for ; Fri, 02 Oct 2026 11:23:36 +0000 (UTC) Received: from [127.0.0.1] (localhost [127.0.0.1]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange x25519 server-signature RSA-PSS (4096 bits) server-digest SHA256) (No client certificate requested) by mail01.ipfire.org (Postfix) with ESMTPSA id 4hx5y05cHQz3kH; Fri, 02 Oct 2026 11:23:36 +0000 (UTC) DKIM-Signature: v=1; a=ed25519-sha256; c=relaxed/relaxed; d=ipfire.org; s=202003ed25519; t=1790940216; h=from:from:reply-to:subject:subject:date:date:message-id:message-id: to:to:cc:cc:mime-version:mime-version: content-transfer-encoding:content-transfer-encoding: in-reply-to:in-reply-to:references:references; bh=Ltq1rp6ZSQ2leFA+EWHuz3ukNJl5KYzkoQEg1+A1Vyo=; b=VFj3t7HnUUPu63ZaZm09rf1292JjAhIN/r9fNcL05QogvzJrOujFeDYQyR62wbvzeA/lMP IKztnBBrGfy8+uBA== DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=ipfire.org; s=202003rsa; t=1790940216; h=from:from:reply-to:subject:subject:date:date:message-id:message-id: to:to:cc:cc:mime-version:mime-version: content-transfer-encoding:content-transfer-encoding: in-reply-to:in-reply-to:references:references; bh=Ltq1rp6ZSQ2leFA+EWHuz3ukNJl5KYzkoQEg1+A1Vyo=; b=H3gfGKMCRBdNfafMRHiHBgQtjeSPPOK+mRAveMF/QHczkpLU9d6HCXK0A9wJmQjjPE3APO /VvaKLjJyjvA0/QeYATxm7ofsdTryZiBItViYzmag8BwWNLwe0VLX8I+8OAYXXjFBwvxua sEg0Q5PCt+czG2rH5fPdTf7BFtdSd9DQxNmipRl7T8N50BUCLm7xGnXwrTGOgYB13Xh2+6 W/cklcfeHmRht7KGuFNYMIeAEW8oAPtpEmFucX8oJNe7R9BmuyKzbJdE44+KZfOtsNSORb 7PMWQiMDoDJ0LvUXtwBumwGyVvXCwjjadvS75jepxk82iS7JJv6f3bQs8ODCvg== From: Adolf Belka To: development@lists.ipfire.org Cc: Adolf Belka Subject: [PATCH] ntfs-3g: Update to version 2026.9.28 Date: Fri, 2 Oct 2026 13:23:26 +0200 Message-ID: <20261002112330.3568361-9-adolf.belka@ipfire.org> In-Reply-To: <20261002112330.3568361-1-adolf.belka@ipfire.org> References: <20261002112330.3568361-1-adolf.belka@ipfire.org> Precedence: list List-Id: List-Subscribe: , List-Unsubscribe: , List-Post: List-Help: Sender: Mail-Followup-To: MIME-Version: 1.0 - Update from version 2026.7.7 to 2026.9.28 - Update of rootfile - 8 CVE fixes in 2026.9.18 - Changelog 2026.9.28 Fix regression caused by overly strict return value check after MST fixups which was introduced in a security hardening commit (issues #217 and #218). Fix option parsing issues in ntfslabel preventing setting labels beginning with '-' (issue #177). Fix various low-impact instances of use-after-free and improper realloc usage (issue #153). 2026.9.18Guard against multiple creator-owner and creator-group ACEs during ACL inheritance. (ntfscat) Fix missing cleanup of opened attribute on error (issue #212). Fix heap out of bounds read/write in ntfs_ie_add_vcn(). (GHSA-r6xj-6488-p8mv, CVE pending) Fix heap data corruption in ntfs_mapping_pairs_decompress_i(). (GHSA-mc3c-983p-wqm8, CVE pending) Fix heap buffer overflow in ntfs_external_attr_find(). (GHSA-wf3w-fjjg-x4w3, CVE pending) Fix heap buffer overflow in ntfs_ea_check_wsldev(). (GHSA-2c97-47cr-9xr8, CVE pending) Fix heap buffer overflow in ntfs_check_restart_area(). (GHSA-xrvx-6jrp-4q3x, CVE pending) Fix denial-of-service in ntfs_inode_attach_all_extents(). (GHSA-jcjj-9262-6j6p, CVE pending) Fix heap buffer overflow in ntfs_same_sid(). (GHSA-x98j-3g35-f59x, CVE pending) Fix heap buffer overflow in ntfs_acl_owner(). (GHSA-pc48-m7cx-qf72, CVE pending) (ntfsresize) Fix stale $MFTMirr data when the first extent of $MFT is relocated (issue #209). Signed-off-by: Adolf Belka --- config/rootfiles/common/ntfs-3g | 4 ++-- lfs/ntfs-3g | 4 ++-- 2 files changed, 4 insertions(+), 4 deletions(-) diff --git a/config/rootfiles/common/ntfs-3g b/config/rootfiles/common/ntfs-3g index 65d958495..0e96e6200 100644 --- a/config/rootfiles/common/ntfs-3g +++ b/config/rootfiles/common/ntfs-3g @@ -1,8 +1,8 @@ bin/lowntfs-3g bin/ntfs-3g #lib/libntfs-3g.so -lib/libntfs-3g.so.90 -lib/libntfs-3g.so.90.0.0 +lib/libntfs-3g.so.91 +lib/libntfs-3g.so.91.0.0 sbin/mkfs.ntfs sbin/mount.lowntfs-3g sbin/mount.ntfs-3g diff --git a/lfs/ntfs-3g b/lfs/ntfs-3g index d7c4eb20c..7a34a792c 100644 --- a/lfs/ntfs-3g +++ b/lfs/ntfs-3g @@ -24,7 +24,7 @@ include Config -VER = 2026.7.7 +VER = 2026.9.28 THISAPP = ntfs-3g-$(VER) DL_FILE = ntfs-3g_ntfsprogs-$(VER).tgz @@ -40,7 +40,7 @@ objects = $(DL_FILE) $(DL_FILE) = $(DL_FROM)/$(DL_FILE) -$(DL_FILE)_BLAKE2 = 2cdeeeb00a9274282e3455bd2827f388b11a5f69b06f85c7655e175e493269b4e9447843de4ef69748d406e58df5d3bf5832086337d74dfd5a9bcf3e47e49b2f +$(DL_FILE)_BLAKE2 = 9afdaa18d8748cadcc9426e98350c3b56b7fbd682f643b8f8ca991207182b8ffb4dc508e52b3f5d3d8da14fc28e521f7f73f3fcbc84c409edbd27e2c9be28ac7 install : $(TARGET)