UbuntuUpdates.org

Package "ntfs-3g"

Name: ntfs-3g

Description:

read/write NTFS driver for FUSE
Latest version: 1:2022.10.3-1.2ubuntu3.1
Release: noble (24.04)
Level: security
Repository: main
Homepage: https://github.com/tuxera/ntfs-3g/wiki

Links

All versions of this package
Bug fixes

List of files in package
Repository home page

Download "ntfs-3g"

32-bit deb package
64-bit deb package
APT INSTALL

Other versions of "ntfs-3g" in Noble

Repository Area Version
base main 1:2022.10.3-1.2ubuntu3
updates main 1:2022.10.3-1.2ubuntu3.1

Packages in group

Deleted packages are displayed in grey.


Changelog

Version: 1:2022.10.3-1.2ubuntu3.1 2026-04-21 17:09:40 UTC

  ntfs-3g (1:2022.10.3-1.2ubuntu3.1) noble-security; urgency=medium

  * SECURITY UPDATE: use-after-free in ntfs_uppercase_mbs
    - debian/patches/CVE-2023-52890.patch: fix use-after-free in
      libntfs-3g/unistr.c.
    - CVE-2023-52890
  * SECURITY UPDATE: heap overflow in ntfs_build_permissions_posix()
    - debian/patches/CVE-2026-40706.patch: allocate space for the worst
      case number of ACE entries in libntfs-3g/acls.c.
    - CVE-2026-40706

 -- Marc Deslauriers <email address hidden> Fri, 17 Apr 2026 13:52:55 -0400
CVE-2023-52890 NTFS-3G before 75dcdc2 has a use-after-free in ntfs_uppercase_mbs in libntfs-3g/unistr.c. NOTE: discussion suggests that exploitation would be challe
CVE-2026-40706 Heap Buffer Overflow in ntfs_build_permissions_posix()


About   -   Send Feedback to @ubuntu_updates