Script 'mail_helper' called by obssrc Hello community, here is the log from the commit of package ntfs-3g_ntfsprogs for openSUSE:Factory checked in at 2026-10-20 12:35:54 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Comparing /work/SRC/openSUSE:Factory/ntfs-3g_ntfsprogs (Old) and /work/SRC/openSUSE:Factory/.ntfs-3g_ntfsprogs.new.3698736 (New) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Package is "ntfs-3g_ntfsprogs" Tue Oct 20 12:35:54 2026 rev:38 rq:1385996 version:2026.9.28 Changes: -------- --- /work/SRC/openSUSE:Factory/ntfs-3g_ntfsprogs/ntfs-3g_ntfsprogs.changes 2026-07-29 18:58:31.996163649 +0200 +++ /work/SRC/openSUSE:Factory/.ntfs-3g_ntfsprogs.new.3698736/ntfs-3g_ntfsprogs.changes 2026-10-20 12:36:12.899235957 +0200 @@ -1,0 +2,42 @@ +Sun Oct 18 05:38:20 UTC 2026 - Martin Pluskal <[email protected]> + +- Update to version 2026.9.28 (including the 2026.9.18 security + release; CVEs for its fixes are still pending, tracked by boo#): + * Heap out-of-bounds read/write in ntfs_ie_add_vcn (boo#1281763), + heap data corruption in ntfs_mapping_pairs_decompress + (boo#1281762), heap buffer overflows in ntfs_external_attr_find + (boo#1281761), ntfs_ea_check_wsldev (boo#1281760), + ntfs_check_restart_area (boo#1281759), ntfs_same_sid + (boo#1281757) and ntfs_acl_owner (boo#1281756), and + denial-of-service in ntfs_inode_attach_all_extents (boo#1281758). + * Guard against multiple creator-owner and creator-group ACEs + during ACL inheritance; fix stale $MFTMirr data in ntfsresize. + * Fix MST-fixup return-value regression, ntfslabel options + starting with '-', and use-after-free/improper realloc cases. +- Drop patches adopted upstream: + * 1_ntfs-3g_2026.7.7-SA_2026-06-1_05.patch + * 2_ntfs-3g_2026.7.7-SA_2026-06-1_07.patch + * 3_ntfs-3g_2026.7.7-SA_2026-06-1_08.patch + * 4_ntfs-3g_2026.7.7-SA_2026-06-1_10.patch + * 5_ntfs-3g_2026.7.7-SA_2026-06-1_11.patch + * 6_ntfs-3g_2026.7.7-SA_2026-06-1_12.patch + * 7_ntfs-3g_2026.7.7-SA_2026-06-1_19.patch + * 8_ntfs-3g_2026.7.7-SA_2026-06-1_20.patch +- Soname bump: libntfs-3g.so.90 -> libntfs-3g.so.91. +- Spec cleanup: drop Group tags, use pkgconfig() BuildRequires, + explicitly require gcc and make. + +------------------------------------------------------------------- +Thu Sep 24 01:00:31 UTC 2026 - Xiaoguang Wang <[email protected]> + +- Add CVE patch bundle: + * bsc#1281763: 1_ntfs-3g_2026.7.7-SA_2026-06-1_05.patch + * bsc#1281762: 2_ntfs-3g_2026.7.7-SA_2026-06-1_07.patch + * bsc#1281761: 3_ntfs-3g_2026.7.7-SA_2026-06-1_08.patch + * bsc#1281760: 4_ntfs-3g_2026.7.7-SA_2026-06-1_10.patch + * bsc#1281759: 5_ntfs-3g_2026.7.7-SA_2026-06-1_11.patch + * bsc#1281758: 6_ntfs-3g_2026.7.7-SA_2026-06-1_12.patch + * bsc#1281757: 7_ntfs-3g_2026.7.7-SA_2026-06-1_19.patch + * bsc#1281756: 8_ntfs-3g_2026.7.7-SA_2026-06-1_20.patch + +------------------------------------------------------------------- Old: ---- ntfs-3g_ntfsprogs-2026.7.7.tgz New: ---- ntfs-3g_ntfsprogs-2026.9.28.tgz ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ ntfs-3g_ntfsprogs.spec ++++++ --- /var/tmp/diff_new_pack.yUEfSC/_old 2026-10-20 12:36:13.802273604 +0200 +++ /var/tmp/diff_new_pack.yUEfSC/_new 2026-10-20 12:36:13.805273729 +0200 @@ -16,26 +16,27 @@ # -%define sover 90 +%define sover 91 %if 0%{?suse_version} >= 1550 %define sbindir %{_sbindir} %else %define sbindir /sbin %endif Name: ntfs-3g_ntfsprogs -Version: 2026.7.7 +Version: 2026.9.28 Release: 0 Summary: NTFS Support in Userspace License: GPL-2.0-or-later -Group: System/Filesystems URL: https://github.com/tuxera/ntfs-3g/ Source: https://tuxera.com/opensource/%{name}-%{version}.tgz +BuildRequires: gcc BuildRequires: gnutls-devel -BuildRequires: hwinfo-devel -BuildRequires: libgcrypt-devel -BuildRequires: libuuid-devel +BuildRequires: make BuildRequires: pkgconfig BuildRequires: pkgconfig(fuse) >= 2.6.0 +BuildRequires: pkgconfig(hwinfo) +BuildRequires: pkgconfig(libgcrypt) +BuildRequires: pkgconfig(uuid) %description NTFS-3G allows for read/write access to NTFS partitions which can be @@ -45,7 +46,6 @@ %package -n ntfs-3g Summary: NTFS Support in Userspace License: GPL-2.0-or-later -Group: System/Filesystems Provides: ntfsprogs-fuse = 1.13.1 Obsoletes: ntfsprogs-fuse < 1.13.1 %if 0%{?suse_version} @@ -60,7 +60,6 @@ %package -n libntfs-3g%{sover} Summary: NTFS Support in Userspace -- Library License: LGPL-2.1-or-later -Group: System/Filesystems %description -n libntfs-3g%{sover} NTFS-3G allows for read/write access to NTFS partitions which can be @@ -70,7 +69,6 @@ %package -n libntfs-3g-devel Summary: NTFS Support in Userspace -- Development Files License: LGPL-2.1-or-later -Group: System/Filesystems Requires: glibc-devel Requires: libntfs-3g%{sover} = %{version} Provides: ntfs-3g-devel = %{version} @@ -84,7 +82,6 @@ %package -n ntfsprogs Summary: NTFS Utilities License: GPL-2.0-or-later -Group: System/Filesystems %description -n ntfsprogs The ntfsprogs includes utilities for doing all required tasks to NTFS @@ -94,7 +91,6 @@ %package -n ntfsprogs-extra Summary: NTFS Utilities which can damage your filesystem such that Windows can't read it License: GPL-2.0-or-later -Group: System/Filesystems %description -n ntfsprogs-extra These are programs which are considered non-functional or only test-oriented. They are kept in the source ++++++ ntfs-3g_ntfsprogs-2026.7.7.tgz -> ntfs-3g_ntfsprogs-2026.9.28.tgz ++++++ ++++ 13856 lines of diff (skipped)
