Bug 2506707
| Summary: | ntfs-3g: multiple memory safety vulnerabilities in EPEL 10 package | ||
|---|---|---|---|
| Product: | [Fedora] Fedora EPEL | Reporter: | Akiyoshi Kurita <akito5623> |
| Component: | ntfs-3g | Assignee: | Tom "spot" Callaway <spotrh> |
| Status: | ON_QA --- | QA Contact: | Fedora Extras Quality Assurance <extras-qa> |
| Severity: | unspecified | Docs Contact: | |
| Priority: | unspecified | ||
| Version: | epel10 | CC: | spotrh |
| Target Milestone: | --- | ||
| Target Release: | --- | ||
| Hardware: | All | ||
| OS: | Linux | ||
| Whiteboard: | |||
| Fixed In Version: | Doc Type: | --- | |
| Doc Text: | Story Points: | --- | |
| Clone Of: | Environment: | ||
| Last Closed: | Type: | Bug | |
| Regression: | --- | Mount Type: | --- |
| Documentation: | --- | CRM: | |
| Verified Versions: | Category: | --- | |
| oVirt Team: | --- | RHEL 7.3 requirements from Atomic Host: | |
| Cloudforms Team: | --- | Target Upstream Version: | |
| Embargoed: | |||
|
Description
Akiyoshi Kurita
2026-07-24 11:36:25 UTC
Could you please review whether the current EPEL ntfs-3g packages are affected by these vulnerabilities? FEDORA-EPEL-2026-436cd95a7d (ntfs-3g-2026.7.7-2.el10_4) has been submitted as an update to Fedora EPEL 10.4. https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2026-436cd95a7d FEDORA-EPEL-2026-436cd95a7d has been pushed to the Fedora EPEL 10.4 testing repository. You can provide feedback for this update here: https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2026-436cd95a7d See also https://fedoraproject.org/wiki/QA:Updates_Testing for more information on how to test updates. Thank you for preparing the EPEL 10.4 update. Could you also please consider building ntfs-3g 2026.7.7 for the EPEL 10.2 branch? Since these vulnerabilities also affect older ntfs-3g versions, it would be helpful to have the security fixes available for EPEL 10.2 users as well. Thank you. FEDORA-EPEL-2026-6769292d4a (ntfs-3g-2026.9.18-1.el10_4) has been submitted as an update to Fedora EPEL 10.4. https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2026-6769292d4a I do not have the time to maintain builds for every different EPEL sub-revision. I would happily let someone else maintain those if they wish. FEDORA-EPEL-2026-6769292d4a has been pushed to the Fedora EPEL 10.4 testing repository. You can provide feedback for this update here: https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2026-6769292d4a See also https://fedoraproject.org/wiki/QA:Updates_Testing for more information on how to test updates. FEDORA-EPEL-2026-6769292d4a has been pushed to the Fedora EPEL 10.4 testing repository. You can provide feedback for this update here: https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2026-6769292d4a See also https://fedoraproject.org/wiki/QA:Updates_Testing for more information on how to test updates. FEDORA-EPEL-2026-6769292d4a has been pushed to the Fedora EPEL 10.4 testing repository. You can provide feedback for this update here: https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2026-6769292d4a See also https://fedoraproject.org/wiki/QA:Updates_Testing for more information on how to test updates. |