mbox series

[meta-filesystems,wrynose,0/7] ntfs-3g-ntfsprogs: backport security fixes

Message ID 20261019050741.1688261-1-dkelaiya@cisco.com
Headers show
Series ntfs-3g-ntfsprogs: backport security fixes | expand

Message

Darsh Kelaiya -X (dkelaiya - E INFOCHIPS PRIVATE LIMITED at Cisco) Oct. 19, 2026, 5:07 a.m. UTC 
From: Darsh Kelaiya <dkelaiya@cisco.com>

Backport upstream security fixes to ntfs-3g-ntfsprogs 2022.10.3 on
Wrynose. The series addresses CVE-2026-46572, CVE-2026-42617,
CVE-2026-46571, CVE-2026-46570, CVE-2026-46569,
CVE-2026-42618, CVE-2026-42616, and CVE-2026-40706.

The series includes shared index validation fixes, decompression
hardening, and a follow-up check for POSIX ACL allocation failure.

Darsh Kelaiya (7):
  ntfs-3g-ntfsprogs: fix CVE-2026-46572 and CVE-2026-42617
  ntfs-3g-ntfsprogs: fix CVE-2026-46571
  ntfs-3g-ntfsprogs: fix CVE-2026-46570
  ntfs-3g-ntfsprogs: fix CVE-2026-46569
  ntfs-3g-ntfsprogs: fix CVE-2026-42618
  ntfs-3g-ntfsprogs: fix CVE-2026-42616
  ntfs-3g-ntfsprogs: fix CVE-2026-40706

 .../files/CVE-2026-40706_p1.patch           |  60 ++++++
 .../files/CVE-2026-40706_p2.patch           |  34 +++
 .../files/CVE-2026-42616_p1.patch           |  70 +++++++
 .../files/CVE-2026-42616_p2.patch           |  79 +++++++
 .../files/CVE-2026-42618_p1.patch           |  53 +++++
 .../files/CVE-2026-42618_p2.patch           | 221 ++++++++++++++++++++
 .../files/CVE-2026-46569.patch              |  62 ++++++
 .../files/CVE-2026-46570.patch              |  42 ++++
 .../files/CVE-2026-46571.patch              |  50 +++++
 .../CVE-2026-46572_CVE-2026-42617_p1.patch  |  66 ++++++
 .../CVE-2026-46572_CVE-2026-42617_p2.patch  | 104 +++++++++
 .../CVE-2026-46572_CVE-2026-42617_p3.patch  |  35 ++++
 .../ntfs-3g-ntfsprogs_2022.10.3.bb          |  12 ++
 13 files changed, 888 insertions(+)