gvfs 1.38.1-0ubuntu1.3.2 source package in Ubuntu

Changelog

gvfs (1.38.1-0ubuntu1.3.2) cosmic-security; urgency=medium

  * SECURITY UPDATE: file ownership mishandling
    - debian/patches/CVE-2019-12447-1.patch: allow changing file owner in
      daemon/gvfsbackendadmin.c.
    - debian/patches/CVE-2019-12447-2.patch: use fsuid to ensure correct
      file ownership in daemon/gvfsbackendadmin.c.
    - CVE-2019-12447
  * SECURITY UPDATE: race conditions in admin backend
    - debian/patches/CVE-2019-12448.patch: add query_info_on_read/write
      functionality in daemon/gvfsbackendadmin.c.
    - CVE-2019-12448
  * SECURITY UPDATE: user and group ownership mishandling during move
    - debian/patches/CVE-2019-12449.patch: ensure correct ownership when
      moving to file:// uri in daemon/gvfsbackendadmin.c.
    - CVE-2019-12449
  * SECURITY UPDATE: incorrect D-Bus server socket restrictions
    - debian/patches/CVE-2019-12795-1.patch: check that the connecting
      client is the same user in daemon/gvfsdaemon.c.
    - debian/patches/CVE-2019-12795-2.patch: only accept EXTERNAL
      authentication in daemon/gvfsdaemon.c.
    - CVE-2019-12795

 -- Marc Deslauriers <email address hidden>  Fri, 05 Jul 2019 08:49:36 -0400

Upload details

Uploaded by:
Marc Deslauriers on 2019-07-05
Uploaded to:
Cosmic
Original maintainer:
Ubuntu Developers
Architectures:
any all
Section:
gnome
Urgency:
Medium Urgency

See full publishing history Publishing

Series Pocket Published Component Section

Downloads

File Size SHA-256 Checksum
gvfs_1.38.1.orig.tar.xz 1.1 MiB ed136a842c996d25c835da405c4775c77106b46470e75bdc242bdd59ec0d61a0
gvfs_1.38.1-0ubuntu1.3.2.debian.tar.xz 28.2 KiB 532c112531ce5f65bb7902bd351714fccb5ba844c83319acad610dd9e1a2aef1
gvfs_1.38.1-0ubuntu1.3.2.dsc 3.6 KiB 9ea5535a016e89941f212c9aeb6af4585d26df913c84efb624114c0625c36992

View changes file

Binary packages built by this source

gvfs: No summary available for gvfs in ubuntu cosmic.

No description available for gvfs in ubuntu cosmic.

gvfs-backends: No summary available for gvfs-backends in ubuntu cosmic.

No description available for gvfs-backends in ubuntu cosmic.

gvfs-backends-dbgsym: No summary available for gvfs-backends-dbgsym in ubuntu cosmic.

No description available for gvfs-backends-dbgsym in ubuntu cosmic.

gvfs-bin: No summary available for gvfs-bin in ubuntu cosmic.

No description available for gvfs-bin in ubuntu cosmic.

gvfs-common: No summary available for gvfs-common in ubuntu cosmic.

No description available for gvfs-common in ubuntu cosmic.

gvfs-daemons: No summary available for gvfs-daemons in ubuntu cosmic.

No description available for gvfs-daemons in ubuntu cosmic.

gvfs-daemons-dbgsym: No summary available for gvfs-daemons-dbgsym in ubuntu cosmic.

No description available for gvfs-daemons-dbgsym in ubuntu cosmic.

gvfs-dbgsym: No summary available for gvfs-dbgsym in ubuntu cosmic.

No description available for gvfs-dbgsym in ubuntu cosmic.

gvfs-fuse: No summary available for gvfs-fuse in ubuntu cosmic.

No description available for gvfs-fuse in ubuntu cosmic.

gvfs-fuse-dbgsym: No summary available for gvfs-fuse-dbgsym in ubuntu cosmic.

No description available for gvfs-fuse-dbgsym in ubuntu cosmic.

gvfs-libs: No summary available for gvfs-libs in ubuntu cosmic.

No description available for gvfs-libs in ubuntu cosmic.

gvfs-libs-dbgsym: No summary available for gvfs-libs-dbgsym in ubuntu cosmic.

No description available for gvfs-libs-dbgsym in ubuntu cosmic.