Format: 1.8
Date: Fri, 05 Jul 2019 08:49:36 -0400
Source: gvfs
Binary: gvfs gvfs-backends gvfs-bin gvfs-common gvfs-daemons gvfs-fuse gvfs-libs
Architecture: arm64 arm64_translations
Version: 1.38.1-0ubuntu1.3.2
Distribution: cosmic
Urgency: medium
Maintainer: Launchpad Build Daemon <buildd@bos02-arm64-017.buildd>
Changed-By: Marc Deslauriers <marc.deslauriers@ubuntu.com>
Description:
 gvfs       - userspace virtual filesystem - GIO module
 gvfs-backends - userspace virtual filesystem - backends
 gvfs-bin   - userspace virtual filesystem - deprecated command-line tools
 gvfs-common - userspace virtual filesystem - common data files
 gvfs-daemons - userspace virtual filesystem - servers
 gvfs-fuse  - userspace virtual filesystem - fuse server
 gvfs-libs  - userspace virtual filesystem - private libraries
Changes:
 gvfs (1.38.1-0ubuntu1.3.2) cosmic-security; urgency=medium
 .
   * SECURITY UPDATE: file ownership mishandling
     - debian/patches/CVE-2019-12447-1.patch: allow changing file owner in
       daemon/gvfsbackendadmin.c.
     - debian/patches/CVE-2019-12447-2.patch: use fsuid to ensure correct
       file ownership in daemon/gvfsbackendadmin.c.
     - CVE-2019-12447
   * SECURITY UPDATE: race conditions in admin backend
     - debian/patches/CVE-2019-12448.patch: add query_info_on_read/write
       functionality in daemon/gvfsbackendadmin.c.
     - CVE-2019-12448
   * SECURITY UPDATE: user and group ownership mishandling during move
     - debian/patches/CVE-2019-12449.patch: ensure correct ownership when
       moving to file:// uri in daemon/gvfsbackendadmin.c.
     - CVE-2019-12449
   * SECURITY UPDATE: incorrect D-Bus server socket restrictions
     - debian/patches/CVE-2019-12795-1.patch: check that the connecting
       client is the same user in daemon/gvfsdaemon.c.
     - debian/patches/CVE-2019-12795-2.patch: only accept EXTERNAL
       authentication in daemon/gvfsdaemon.c.
     - CVE-2019-12795
Checksums-Sha1:
 239675a84eb0d437c85450c9bcc54da87793497c 1780392 gvfs-backends-dbgsym_1.38.1-0ubuntu1.3.2_arm64.ddeb
 53032f476a9ffb1a001f65156971711c5d56710b 297120 gvfs-backends_1.38.1-0ubuntu1.3.2_arm64.deb
 9a4b0a4d13de95a3a75111edf1e82b6694997fd6 5268 gvfs-bin_1.38.1-0ubuntu1.3.2_arm64.deb
 ac10587ccb4f1feb147b6b340371ff33868c5536 530044 gvfs-daemons-dbgsym_1.38.1-0ubuntu1.3.2_arm64.ddeb
 b56154013a699f3cc93cd27be5fc52ccb968e2c4 106756 gvfs-daemons_1.38.1-0ubuntu1.3.2_arm64.deb
 f1e729ac6f2cf37d8c864032d04f5aee111ca4f0 444684 gvfs-dbgsym_1.38.1-0ubuntu1.3.2_arm64.ddeb
 de799cf6cbd00db73c955bf26d5487a90f2942dc 44732 gvfs-fuse-dbgsym_1.38.1-0ubuntu1.3.2_arm64.ddeb
 e09cb0983360f983e53ad1aed30501f3f1008ff3 16840 gvfs-fuse_1.38.1-0ubuntu1.3.2_arm64.deb
 63e5cf0e2b3de1695c29006235538b3e06909037 482044 gvfs-libs-dbgsym_1.38.1-0ubuntu1.3.2_arm64.ddeb
 d7b580b9531b8101716efa48eeed3656c527c64b 91040 gvfs-libs_1.38.1-0ubuntu1.3.2_arm64.deb
 a7b37412794b976387010a30b646629065b39ad4 24722 gvfs_1.38.1-0ubuntu1.3.2_arm64.buildinfo
 43766011ab2dbf9c0b16348b20fc7cc6f1eb3292 105920 gvfs_1.38.1-0ubuntu1.3.2_arm64.deb
 92a94d2a828484fe972c78b7b5b175dc50bdbbd9 1568267 gvfs_1.38.1-0ubuntu1.3.2_arm64_translations.tar.gz
Checksums-Sha256:
 e82c6680548a608fb891d964e43978bf05e99fdfd177a7906370bbd467f45a60 1780392 gvfs-backends-dbgsym_1.38.1-0ubuntu1.3.2_arm64.ddeb
 b8e5eb7b67bd286966648f42c53aafd3d6ffd1df3dd6a1503f72534d92baaeb8 297120 gvfs-backends_1.38.1-0ubuntu1.3.2_arm64.deb
 d3534968d3ac3c2df2502ab914adc865a210950a1751f603964db72d560d234a 5268 gvfs-bin_1.38.1-0ubuntu1.3.2_arm64.deb
 0cd95c0bb938c9803ad5d1f62f293fdd62f1e3a38b52fc08f5eb9694ce8a6ef4 530044 gvfs-daemons-dbgsym_1.38.1-0ubuntu1.3.2_arm64.ddeb
 306545f59da6a6030dad501cbe8cc039f24d47864a99add21c4b36ac328a34e4 106756 gvfs-daemons_1.38.1-0ubuntu1.3.2_arm64.deb
 559dde50ade4c730750d672336fe204ea8dbd646188cfd3438d0d0ef5d37a91d 444684 gvfs-dbgsym_1.38.1-0ubuntu1.3.2_arm64.ddeb
 7454221dc9d52455a49539285f7ad898c41ce438ec9f04327051fa343570667d 44732 gvfs-fuse-dbgsym_1.38.1-0ubuntu1.3.2_arm64.ddeb
 09566ddaad109f2bb861335e77fa76a085a048f7f2b3adfb289f9b49c210865f 16840 gvfs-fuse_1.38.1-0ubuntu1.3.2_arm64.deb
 996369b28b1952c307c2f4f1252c65fa09f8d66f1171f14057043c70d3544495 482044 gvfs-libs-dbgsym_1.38.1-0ubuntu1.3.2_arm64.ddeb
 4d13b081ba9669c1356924b99a511b3698ee0385a66346432525dd7f01d03220 91040 gvfs-libs_1.38.1-0ubuntu1.3.2_arm64.deb
 8381d5d1e8bab569b4b36453979460abecf92667514965d71acb5e59bf3c7848 24722 gvfs_1.38.1-0ubuntu1.3.2_arm64.buildinfo
 61a899abcc7746a87c7041506de92c4808619391950dfa01aedab5102b26d52e 105920 gvfs_1.38.1-0ubuntu1.3.2_arm64.deb
 100d1e33592bd45906c61c752f9e185d34072dcd0bddaa7776fac416fb4645f9 1568267 gvfs_1.38.1-0ubuntu1.3.2_arm64_translations.tar.gz
Files:
 4dba989dbebe607b7acda77c24e91b23 1780392 debug optional gvfs-backends-dbgsym_1.38.1-0ubuntu1.3.2_arm64.ddeb
 9536ed0db9a4fda1f7f0e02d5179aaac 297120 gnome optional gvfs-backends_1.38.1-0ubuntu1.3.2_arm64.deb
 f4c94206094bcbb71c2d43cdf73230de 5268 oldlibs optional gvfs-bin_1.38.1-0ubuntu1.3.2_arm64.deb
 3b21fc9c8523425a8176c683a125bfe4 530044 debug optional gvfs-daemons-dbgsym_1.38.1-0ubuntu1.3.2_arm64.ddeb
 699d351f40b280b2a0561ebd0e515990 106756 libs optional gvfs-daemons_1.38.1-0ubuntu1.3.2_arm64.deb
 6ca919a3dddeef8c61a6dd5b09ad306f 444684 debug optional gvfs-dbgsym_1.38.1-0ubuntu1.3.2_arm64.ddeb
 eb9b943fcd5309ee2e20f0a10c8cad7c 44732 debug optional gvfs-fuse-dbgsym_1.38.1-0ubuntu1.3.2_arm64.ddeb
 bc30823fbfb28d5478be6a4b4b26a8c5 16840 gnome optional gvfs-fuse_1.38.1-0ubuntu1.3.2_arm64.deb
 eb66c7b72c1428259db344647a45de5d 482044 debug optional gvfs-libs-dbgsym_1.38.1-0ubuntu1.3.2_arm64.ddeb
 550b828e3562692302b7fcec05e084f0 91040 libs optional gvfs-libs_1.38.1-0ubuntu1.3.2_arm64.deb
 5dc8b3a96c392b26d969564860a70c64 24722 gnome optional gvfs_1.38.1-0ubuntu1.3.2_arm64.buildinfo
 eb898f8faacd86e53725877b8f39bcb7 105920 libs optional gvfs_1.38.1-0ubuntu1.3.2_arm64.deb
 95fe8423e8941d3093d979a9101bbcf1 1568267 raw-translations - gvfs_1.38.1-0ubuntu1.3.2_arm64_translations.tar.gz
Original-Maintainer: Debian GNOME Maintainers <pkg-gnome-maintainers@lists.alioth.debian.org>