Salvatore Bonaccorso pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
01e14ab7 by Salvatore Bonaccorso at 2026-10-12T22:49:06+02:00
Reserve DSA number for ntfs-3g update
- - - - -
3 changed files:
- data/CVE/list
- data/DSA/list
- data/dsa-needed.txt
Changes:
=====================================
data/CVE/list
=====================================
@@ -23454,34 +23454,42 @@ CVE-2026-73581 (Improper Check for Certificate
Revocation vulnerability in Apach
CVE-2026-XXXX [GHSA-pc48-m7cx-qf72: NTFS-3G-SA_2026-06-1_20]
[experimental] - ntfs-3g 1:2026.9.18-1
- ntfs-3g 1:2026.9.18-2
+ [trixie] - ntfs-3g 1:2022.10.3-5+deb13u3
NOTE:
https://github.com/tuxera/ntfs-3g/security/advisories/GHSA-pc48-m7cx-qf72
CVE-2026-XXXX [GHSA-x98j-3g35-f59x: NTFS-3G-SA_2026-06-1_19]
[experimental] - ntfs-3g 1:2026.9.18-1
- ntfs-3g 1:2026.9.18-2
+ [trixie] - ntfs-3g 1:2022.10.3-5+deb13u3
NOTE:
https://github.com/tuxera/ntfs-3g/security/advisories/GHSA-x98j-3g35-f59x
CVE-2026-XXXX [GHSA-jcjj-9262-6j6p: NTFS-3G-SA_2026-06-1_12]
[experimental] - ntfs-3g 1:2026.9.18-1
- ntfs-3g 1:2026.9.18-2
+ [trixie] - ntfs-3g 1:2022.10.3-5+deb13u3
NOTE:
https://github.com/tuxera/ntfs-3g/security/advisories/GHSA-jcjj-9262-6j6p
CVE-2026-XXXX [GHSA-xrvx-6jrp-4q3x: NTFS-3G-SA_2026-06-1_11]
[experimental] - ntfs-3g 1:2026.9.18-1
- ntfs-3g 1:2026.9.18-2
+ [trixie] - ntfs-3g 1:2022.10.3-5+deb13u3
NOTE:
https://github.com/tuxera/ntfs-3g/security/advisories/GHSA-xrvx-6jrp-4q3x
CVE-2026-XXXX [GHSA-2c97-47cr-9xr8: NTFS-3G-SA_2026-06-1_10]
[experimental] - ntfs-3g 1:2026.9.18-1
- ntfs-3g 1:2026.9.18-2
+ [trixie] - ntfs-3g 1:2022.10.3-5+deb13u3
NOTE:
https://github.com/tuxera/ntfs-3g/security/advisories/GHSA-2c97-47cr-9xr8
CVE-2026-XXXX [GHSA-wf3w-fjjg-x4w3: NTFS-3G-SA_2026-06-1_08]
[experimental] - ntfs-3g 1:2026.9.18-1
- ntfs-3g 1:2026.9.18-2
+ [trixie] - ntfs-3g 1:2022.10.3-5+deb13u3
NOTE:
https://github.com/tuxera/ntfs-3g/security/advisories/GHSA-wf3w-fjjg-x4w3
CVE-2026-XXXX [GHSA-mc3c-983p-wqm8: NTFS-3G-SA_2026-06-1_07]
[experimental] - ntfs-3g 1:2026.9.18-1
- ntfs-3g 1:2026.9.18-2
+ [trixie] - ntfs-3g 1:2022.10.3-5+deb13u3
NOTE:
https://github.com/tuxera/ntfs-3g/security/advisories/GHSA-mc3c-983p-wqm8
CVE-2026-XXXX [GHSA-r6xj-6488-p8mv: NTFS-3G-SA_2026-06-1_05]
[experimental] - ntfs-3g 1:2026.9.18-1
- ntfs-3g 1:2026.9.18-2
+ [trixie] - ntfs-3g 1:2022.10.3-5+deb13u3
NOTE:
https://github.com/tuxera/ntfs-3g/security/advisories/GHSA-r6xj-6488-p8mv
CVE-2026-86247 (Race condition within a thread vulnerability in Apache Tomcat
Native a ...)
- tomcat-native 2.0.16-1
=====================================
data/DSA/list
=====================================
@@ -1,3 +1,5 @@
+[12 Oct 2026] DSA-6557-1 ntfs-3g - security update
+ [trixie] - ntfs-3g 1:2022.10.3-5+deb13u3
[12 Oct 2026] DSA-6556-1 nagios4 - security update
{CVE-2026-48549 CVE-2026-48550 CVE-2026-48551 CVE-2026-48552
CVE-2026-48553 CVE-2026-48554}
[trixie] - nagios4 4.4.6-4.1+deb13u2
=====================================
data/dsa-needed.txt
=====================================
@@ -111,8 +111,6 @@ network-manager-sstp
network-manager-vpnc
no upstream fix yet, if totally dead removal is an option
--
-ntfs-3g (carnil)
---
node-dompurify
--
nsd
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/01e14ab7dbc7bed9b31159fab39795fa3f2463c5
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/01e14ab7dbc7bed9b31159fab39795fa3f2463c5
You're receiving this email because of your account on salsa.debian.org. Manage
all notifications: https://salsa.debian.org/-/profile/notifications | Help:
https://salsa.debian.org/help
_______________________________________________
debian-security-tracker-commits mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
