{"id":"CLSA-2026-1792659106","summary":"Fix of 6 CVEs","details":"   * SECURITY UPDATE: heap buffer overflows and out-of-bounds read in index\n     handling\n     - debian/patches/CVE-2026-42617_CVE-2026-46572_CVE-2026-56136.patch:\n       validate the index entry stream and INDEX_ROOT.index_block_size read\n       from disk, and check the size copied from the index root to the new\n       index block in ntfs_ir_to_ib(), in include/ntfs-3g/index.h,\n       libntfs-3g/attrib.c and libntfs-3g/index.c.\n     - CVE-2026-42617\n     - CVE-2026-46572\n     - CVE-2026-56136\n   * SECURITY UPDATE: heap buffer overflow in index block split\n     - debian/patches/CVE-2026-46569.patch: bound tail_size against the\n       destination block capacity in ntfs_ib_copy_tail() in\n       libntfs-3g/index.c.\n     - CVE-2026-46569\n   * SECURITY UPDATE: out-of-bounds write when walking a deep index\n     - debian/patches/CVE-2026-46570.patch: limit the B-tree depth to\n       MAX_PARENT_VCN in ntfs_index_walk_down() in libntfs-3g/index.c.\n     - CVE-2026-46570\n   * Fix double free when an index entry is too long to hold a VCN\n     - debian/patches/index-reject-entry-too-long-for-vcn.patch: reject an\n       index entry that is too long to hold a VCN in ntfs_ie_add_vcn() in\n       libntfs-3g/index.c, as its 16-bit length would wrap to zero.\n   * SECURITY UPDATE: heap buffer overflow in LZNT1 decompression\n     - debian/patches/CVE-2026-42618.patch: end a sub-block when its output\n       is full and check the input bounds before reading sub-block headers\n       and phrase tokens in ntfs_decompress() in libntfs-3g/compress.c, and\n       zero the unused part of the output when the compressed data is garbled.\n     - CVE-2026-42618\n   * SECURITY UPDATE: heap buffer overflow in ntfscat\n     - debian/patches/CVE-2026-42616.patch: size the read buffer from the\n       block size in cat() in ntfsprogs/ntfscat.c.\n     - CVE-2026-42616","modified":"2026-10-26T09:43:17.103678597Z","published":"2026-10-22T08:52:01Z","upstream":["CVE-2026-42616","CVE-2026-42617","CVE-2026-42618","CVE-2026-46569","CVE-2026-46570","CVE-2026-46572","CVE-2026-56136"],"references":[{"type":"ADVISORY","url":"https://errata.tuxcare.com/els_os/ubuntu18.04els/CLSA-2026-1792659106.html"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-42616"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-42617"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-42618"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-46569"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-46570"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-46572"}],"affected":[{"package":{"name":"libntfs-3g88","ecosystem":"TuxCare:Ubuntu:18.04","purl":"pkg:deb/tuxcare/libntfs-3g88?distro=ubuntu-18.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2017.3.23-2ubuntu0.18.04.5+tuxcare.els1"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu18.04els/CLSA-2026-1792659106.json"}},{"package":{"name":"ntfs-3g","ecosystem":"TuxCare:Ubuntu:18.04","purl":"pkg:deb/tuxcare/ntfs-3g?distro=ubuntu-18.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2017.3.23-2ubuntu0.18.04.5+tuxcare.els1"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu18.04els/CLSA-2026-1792659106.json"}},{"package":{"name":"ntfs-3g-dev","ecosystem":"TuxCare:Ubuntu:18.04","purl":"pkg:deb/tuxcare/ntfs-3g-dev?distro=ubuntu-18.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2017.3.23-2ubuntu0.18.04.5+tuxcare.els1"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu18.04els/CLSA-2026-1792659106.json"}}],"schema_version":"1.9.0"}