ntfs-3g-ntfsprogs: upgrade 2026.2.25 -> 2026.7.7

Changelog:
==========
- (ntfscat) Fix heap memory corruption when processing a corrupt or maliciously
  crafted filesystem. (CVE-2026-42616)
- Fix heap memory corruption when copying index data from root to an index
  block in a corrupt or maliciously crafted filesystem. (CVE-2026-42617)
- Fix single-byte heap buffer overflow when decompressing maliciously crafted
  compressed file data. (CVE-2026-42618)
- Fix heap buffer overflow when copying the tail data of an index block to a
  freshly allocated block. (CVE-2026-46569)
- Fix out-of-bounds read when processing symlink reparse data in a corrupt or
  maliciously crafted filesystem. (CVE-2026-46571)
- Fix heap memory corruption for maliciously crafted or corrupt index data
  descending to an out-of-bounds tree depth. (CVE-2026-46570)
- Fix heap buffer overflow for maliciously crafted or corrupt index data during
  a node split. (CVE-2026-46572)
- Fix heap buffer overflow when building inherited ACL data. (CVE-2026-56135)
- Fix out of bounds access when clearing an index root in maliciously crafted
  or corrupt index data. (CVE-2026-56136)

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
This commit is contained in:
Wang Mingyu
2026-07-22 18:22:55 +08:00
committed by Khem Raj
parent 355272aa93
commit 5d4bf38da4
@@ -9,7 +9,7 @@ LIC_FILES_CHKSUM = "file://COPYING;md5=59530bdf33659b29e73d4adb9f9f6552 \
SRC_URI = "git://github.com/tuxera/ntfs-3g;protocol=https;branch=edge;tag=${PV} \
file://0001-libntfs-3g-Makefile.am-fix-install-failed-while-host.patch \
"
SRCREV = "d1cb9e825d059ef5db0ccd30d5bce202edbd69dc"
SRCREV = "d327833ec1d5eb1358b6f2c37139f10a3460944d"
UPSTREAM_CHECK_GITTAGREGEX = "(?P<pver>\d+(\.\d+)+)"