[Git][security-tracker-team/security-tracker][master] Reserve DSA number for ntfs-3g update

[Salvatore Bonaccorso (@carnil)]

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
01e14ab7 by Salvatore Bonaccorso at 2026-10-12T22:49:06+02:00
Reserve DSA number for ntfs-3g update

- - - - -


3 changed files:

- data/CVE/list
- data/DSA/list
- data/dsa-needed.txt


Changes:

=====================================
data/CVE/list
=====================================
@@ -23454,34 +23454,42 @@ CVE-2026-73581 (Improper Check for Certificate Revocation vulnerability in Apach
 CVE-2026-XXXX [GHSA-pc48-m7cx-qf72: NTFS-3G-SA_2026-06-1_20]
 	[experimental] - ntfs-3g 1:2026.9.18-1
 	- ntfs-3g 1:2026.9.18-2
+	[trixie] - ntfs-3g 1:2022.10.3-5+deb13u3
 	NOTE: https://github.com/tuxera/ntfs-3g/security/advisories/GHSA-pc48-m7cx-qf72
 CVE-2026-XXXX [GHSA-x98j-3g35-f59x: NTFS-3G-SA_2026-06-1_19]
 	[experimental] - ntfs-3g 1:2026.9.18-1
 	- ntfs-3g 1:2026.9.18-2
+	[trixie] - ntfs-3g 1:2022.10.3-5+deb13u3
 	NOTE: https://github.com/tuxera/ntfs-3g/security/advisories/GHSA-x98j-3g35-f59x
 CVE-2026-XXXX [GHSA-jcjj-9262-6j6p: NTFS-3G-SA_2026-06-1_12]
 	[experimental] - ntfs-3g 1:2026.9.18-1
 	- ntfs-3g 1:2026.9.18-2
+	[trixie] - ntfs-3g 1:2022.10.3-5+deb13u3
 	NOTE: https://github.com/tuxera/ntfs-3g/security/advisories/GHSA-jcjj-9262-6j6p
 CVE-2026-XXXX [GHSA-xrvx-6jrp-4q3x: NTFS-3G-SA_2026-06-1_11]
 	[experimental] - ntfs-3g 1:2026.9.18-1
 	- ntfs-3g 1:2026.9.18-2
+	[trixie] - ntfs-3g 1:2022.10.3-5+deb13u3
 	NOTE: https://github.com/tuxera/ntfs-3g/security/advisories/GHSA-xrvx-6jrp-4q3x
 CVE-2026-XXXX [GHSA-2c97-47cr-9xr8: NTFS-3G-SA_2026-06-1_10]
 	[experimental] - ntfs-3g 1:2026.9.18-1
 	- ntfs-3g 1:2026.9.18-2
+	[trixie] - ntfs-3g 1:2022.10.3-5+deb13u3
 	NOTE: https://github.com/tuxera/ntfs-3g/security/advisories/GHSA-2c97-47cr-9xr8
 CVE-2026-XXXX [GHSA-wf3w-fjjg-x4w3: NTFS-3G-SA_2026-06-1_08]
 	[experimental] - ntfs-3g 1:2026.9.18-1
 	- ntfs-3g 1:2026.9.18-2
+	[trixie] - ntfs-3g 1:2022.10.3-5+deb13u3
 	NOTE: https://github.com/tuxera/ntfs-3g/security/advisories/GHSA-wf3w-fjjg-x4w3
 CVE-2026-XXXX [GHSA-mc3c-983p-wqm8: NTFS-3G-SA_2026-06-1_07]
 	[experimental] - ntfs-3g 1:2026.9.18-1
 	- ntfs-3g 1:2026.9.18-2
+	[trixie] - ntfs-3g 1:2022.10.3-5+deb13u3
 	NOTE: https://github.com/tuxera/ntfs-3g/security/advisories/GHSA-mc3c-983p-wqm8
 CVE-2026-XXXX [GHSA-r6xj-6488-p8mv: NTFS-3G-SA_2026-06-1_05]
 	[experimental] - ntfs-3g 1:2026.9.18-1
 	- ntfs-3g 1:2026.9.18-2
+	[trixie] - ntfs-3g 1:2022.10.3-5+deb13u3
 	NOTE: https://github.com/tuxera/ntfs-3g/security/advisories/GHSA-r6xj-6488-p8mv
 CVE-2026-86247 (Race condition within a thread vulnerability in Apache Tomcat Native a ...)
 	- tomcat-native 2.0.16-1


=====================================
data/DSA/list
=====================================
@@ -1,3 +1,5 @@
+[12 Oct 2026] DSA-6557-1 ntfs-3g - security update
+	[trixie] - ntfs-3g 1:2022.10.3-5+deb13u3
 [12 Oct 2026] DSA-6556-1 nagios4 - security update
 	{CVE-2026-48549 CVE-2026-48550 CVE-2026-48551 CVE-2026-48552 CVE-2026-48553 CVE-2026-48554}
 	[trixie] - nagios4 4.4.6-4.1+deb13u2


=====================================
data/dsa-needed.txt
=====================================
@@ -111,8 +111,6 @@ network-manager-sstp
 network-manager-vpnc
   no upstream fix yet, if totally dead removal is an option
 --
-ntfs-3g (carnil)
---
 node-dompurify
 --
 nsd



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/01e14ab7dbc7bed9b31159fab39795fa3f2463c5

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/01e14ab7dbc7bed9b31159fab39795fa3f2463c5
You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20261012/aeabff1f/attachment.htm>