[DSA 6389-1] ntfs-3g security update

Salvatore Bonaccorso <[email protected]> Wed, 15 Jul 2026 20:04:15 +0000
Newsgroups	gmane.linux.debian.user.security.announce
Message-ID	<[email protected]>
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

- -------------------------------------------------------------------------
Debian Security Advisory DSA-6389-1                   [email protected]
https://www.debian.org/security/                     Salvatore Bonaccorso
July 15, 2026                         https://www.debian.org/security/faq
- -------------------------------------------------------------------------

Package        : ntfs-3g
CVE ID         : CVE-2026-42616 CVE-2026-42617 CVE-2026-42618 CVE-2026-46569
                 CVE-2026-46570 CVE-2026-46571 CVE-2026-46572 CVE-2026-56135
                 CVE-2026-56136
Debian Bug     : 1142144

Several vulnerabilities were discovered in NTFS-3G, a read-write NTFS
driver for FUSE. A local user can take advantage of these flaws for
local root privilege escalation.

For the stable distribution (trixie), these problems have been fixed in
version 1:2022.10.3-5+deb13u2.

We recommend that you upgrade your ntfs-3g packages.

For the detailed security status of ntfs-3g please refer to its security
tracker page at:
https://security-tracker.debian.org/tracker/ntfs-3g

Further information about Debian Security Advisories, how to apply
these updates to your system and frequently asked questions can be
found at: https://www.debian.org/security/

Mailing list: [email protected]
-----BEGIN PGP SIGNATURE-----
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=XUbu
-----END PGP SIGNATURE-----