This update for ntfs-3g_ntfsprogs fixes the following issues:
- Denial-of-service in ntfs_inode_attach_all_extents() (bsc#1281758).
- Heap buffer overflow in ntfs_acl_owner() (bsc#1281756).
- Heap buffer overflow in ntfs_check_restart_area() (bsc#1281759).
- Heap buffer overflow in ntfs_ea_check_wsldev() (bsc#1281760).
- Heap buffer overflow in ntfs_external_attr_find() (bsc#1281761).
- Heap buffer overflow in ntfs_same_sid() (bsc#1281757).
- Heap data corruption in ntfs_mapping_pairs_decompress_i() (bsc#1281762).
- Heap out of bounds read/write in ntfs_ie_add_vcn() (bsc#1281763).
This update for ntfs-3g_ntfsprogs fixes the following issues
- CVE-2026-42616: heap buffer overflow in `cat()` of `cat.c` can lead to heap corruption in the ntfscat binary via a
specially crafted NTFS image (bsc#1271102).
- CVE-2026-42617: heap buffer overflow in `ntfs_ir_to_ib()` of `index.c` can lead to heap corruption in the SUID-root
ntfs-3g binary via a specially crafted NTFS image (bsc#1271103).
- CVE-2026-42618: heap buffer overflow in `ntfs_decompress()` of `compress.c` can lead to heap corruption in the
SUID-root ntfs-3g binary via a specially crafted NTFS image (bsc#1271104).
- CVE-2026-46569: heap buffer overflow in `ntfs_ib
This update for ntfs-3g_ntfsprogs fixes the following issue:
- CVE-2026-40706: heap buffer overflow in ntfs_build_permissions_posix() in acls.c (bsc#1262216).