mbox series

[meta-filesystems,scarthgap,0/7] ntfs-3g-ntfsprogs: backport security fixes

Message ID 20261016074640.3986037-1-dkelaiya@cisco.com
Headers show
Series ntfs-3g-ntfsprogs: backport security fixes | expand

Message

Darsh Kelaiya -X (dkelaiya - E INFOCHIPS PRIVATE LIMITED at Cisco) Oct. 16, 2026, 7:46 a.m. UTC 
From: Darsh Kelaiya <dkelaiya@cisco.com>

Backport upstream security fixes to ntfs-3g-ntfsprogs 2022.10.3 on
Scarthgap. The seven commits add eleven source patches for
CVE-2026-46572, CVE-2026-42617, CVE-2026-46571, CVE-2026-46570,
CVE-2026-46569, CVE-2026-42618, CVE-2026-42616, and CVE-2026-40706.

The shared index fixes for CVE-2026-46572 and CVE-2026-42617 are kept
in one commit. The CVE-2026-42618 decompression fixes are adapted to
the original 2022.10.3 source layout. Recipe entries apply the patch
parts in dependency order.

Darsh Kelaiya (7):
  ntfs-3g-ntfsprogs: fix CVE-2026-46572 and CVE-2026-42617
  ntfs-3g-ntfsprogs: fix CVE-2026-46571
  ntfs-3g-ntfsprogs: fix CVE-2026-46570
  ntfs-3g-ntfsprogs: fix CVE-2026-46569
  ntfs-3g-ntfsprogs: fix CVE-2026-42618
  ntfs-3g-ntfsprogs: fix CVE-2026-42616
  ntfs-3g-ntfsprogs: fix CVE-2026-40706

 .../files/CVE-2026-40706_p1.patch             |  60 +++++
 .../files/CVE-2026-40706_p2.patch             |  34 +++
 .../files/CVE-2026-42616.patch                |  70 ++++++
 .../files/CVE-2026-42618_p1.patch             |  53 +++++
 .../files/CVE-2026-42618_p2.patch             | 216 ++++++++++++++++++
 .../files/CVE-2026-46569.patch                |  62 +++++
 .../files/CVE-2026-46570.patch                |  42 ++++
 .../files/CVE-2026-46571.patch                |  50 ++++
 .../CVE-2026-46572_CVE-2026-42617_p1.patch    |  66 ++++++
 .../CVE-2026-46572_CVE-2026-42617_p2.patch    | 104 +++++++++
 .../CVE-2026-46572_CVE-2026-42617_p3.patch    |  35 +++
 .../ntfs-3g-ntfsprogs_2022.10.3.bb            |  11 +
 12 files changed, 803 insertions(+)