File _patchinfo of Package patchinfo.25304

Overview Repositories Revisions Requests Users Attributes Meta

File _patchinfo of Package patchinfo.25304

<patchinfo incident="25304">
  <issue tracker="bnc" id="1199978">VUL-0: CVE-2022-30783,CVE-2022-30784,CVE-2022-30785,CVE-2022-30786,CVE-2022-30787,CVE-2022-30788,CVE-2022-30789: ntfs-3g_ntfsprogs: 2022.5.17 release</issue>
  <issue tracker="cve" id="2022-30785"/>
  <issue tracker="cve" id="2022-30789"/>
  <issue tracker="cve" id="2022-30787"/>
  <issue tracker="cve" id="2021-46790"/>
  <issue tracker="cve" id="2022-30788"/>
  <issue tracker="cve" id="2022-30783"/>
  <issue tracker="cve" id="2022-30786"/>
  <issue tracker="cve" id="2022-30784"/>
  <packager>mgorse</packager>
  <rating>important</rating>
  <category>security</category>
  <summary>Security update for ntfs-3g_ntfsprogs</summary>
  <description>This update for ntfs-3g_ntfsprogs fixes the following issues:

Updated to version 2022.5.17 (bsc#1199978):
- CVE-2022-30783: Fixed an issue where messages between NTFS-3G and
  the kernel could be intercepted when using libfuse-lite.
- CVE-2022-30784: Fixed a memory exhaustion issue when opening a
  crafted NTFS image.
- CVE-2022-30785: Fixed a bug where arbitrary memory read and write
  operations could be achieved whe using libfuse-lite.
- CVE-2022-30786: Fixed a memory corruption issue when opening a
  crafted NTFS image.
- CVE-2022-30787: Fixed an integer underflow which enabled arbitrary
  memory read operations when using libfuse-lite.
- CVE-2022-30788: Fixed a memory corruption issue when opening a
  crafted NTFS image.
- CVE-2022-30789: Fixed a memory corruption issue when opening a
  crafted NTFS image.
</description>
</patchinfo>

Places

File _patchinfo of Package patchinfo.25304

Places