FEDORA-2022-8fa7e5aeaf — security update for ntfs-3g

stable

ntfs-3g-2022.5.17-1.fc35

FEDORA-2022-8fa7e5aeaf created by rjones 2 years ago for Fedora 35

New upstream version 2022.5.17

How to install

Updates may require up to 24 hours to propagate to mirrors. If the following command doesn't work, please retry later:

sudo dnf upgrade --refresh --advisory=FEDORA-2022-8fa7e5aeaf

This update has been submitted for testing by rjones.

2 years ago

This update's test gating status has been changed to 'waiting'.

2 years ago

This update's test gating status has been changed to 'failed'.

2 years ago

This update has been pushed to testing.

2 years ago

kparal commented & provided feedback 2 years ago

karma

I can read and write to a Windows partition just fine, listing Windows/System32/ folder also works

This update's test gating status has been changed to 'passed'.

2 years ago

This update has been submitted for stable by bodhi.

2 years ago

nixuser commented & provided feedback 2 years ago

karma

I can use an external 3G drive with NTFS formatting.

This update has been pushed to stable.

2 years ago

Please login to add feedback.

Metadata

Type

security

Severity

medium

Karma

Signed

Content Type

RPM

Test Gating

passed

Autopush Settings

Unstable by Karma

-3

Stable by Karma

Stable by Time

14 days

Dates

submitted

2 years ago

in testing

2 years ago

in stable

2 years ago

Builds

ntfs-3g-2022.5.17-1.fc35

BZ#2093306 CVE-2022-30783 ntfs-3g: invalid return code in fuse_kern_mount enables intercepting of libfuse-lite protocol traffic [fedora-all]

BZ#2093316 CVE-2022-30784 ntfs-3g: crafted NTFS image can cause heap exhaustion in ntfs_get_attribute_value [fedora-all]

BZ#2093321 CVE-2022-30785 ntfs-3g: a file handle created in fuse_lib_opendir, and later used in fuse_lib_readdir, enables arbitrary memory read and write operations [fedora-all]

BZ#2093328 CVE-2022-30786 ntfs-3g: crafted NTFS image can cause a heap-based buffer overflow in ntfs_names_full_collate [fedora-all]

BZ#2093334 CVE-2022-30787 ntfs-3g: integer underflow in fuse_lib_readdir enables arbitrary memory read operations [fedora-all]

BZ#2093341 CVE-2022-30788 ntfs-3g: crafted NTFS image can cause a heap-based buffer overflow in ntfs_mft_rec_alloc [fedora-all]

BZ#2093349 CVE-2022-30789 ntfs-3g: crafted NTFS image can cause a heap-based buffer overflow in ntfs_check_log_client_array [fedora-all]

BZ#2093360 CVE-2021-46790 ntfs-3g: heap-based buffer overflow in ntfsck [fedora-all]

ntfs-3g-2022.5.17-1.fc35

Automated Test Results

passed