Format: 1.8
Date: Fri, 05 Jul 2019 08:49:36 -0400
Source: gvfs
Binary: gvfs gvfs-backends gvfs-bin gvfs-common gvfs-daemons gvfs-fuse gvfs-libs
Architecture: s390x s390x_translations
Version: 1.38.1-0ubuntu1.3.2
Distribution: cosmic
Urgency: medium
Maintainer: Launchpad Build Daemon <buildd@bos02-s390x-013.buildd>
Changed-By: Marc Deslauriers <marc.deslauriers@ubuntu.com>
Description:
 gvfs       - userspace virtual filesystem - GIO module
 gvfs-backends - userspace virtual filesystem - backends
 gvfs-bin   - userspace virtual filesystem - deprecated command-line tools
 gvfs-common - userspace virtual filesystem - common data files
 gvfs-daemons - userspace virtual filesystem - servers
 gvfs-fuse  - userspace virtual filesystem - fuse server
 gvfs-libs  - userspace virtual filesystem - private libraries
Changes:
 gvfs (1.38.1-0ubuntu1.3.2) cosmic-security; urgency=medium
 .
   * SECURITY UPDATE: file ownership mishandling
     - debian/patches/CVE-2019-12447-1.patch: allow changing file owner in
       daemon/gvfsbackendadmin.c.
     - debian/patches/CVE-2019-12447-2.patch: use fsuid to ensure correct
       file ownership in daemon/gvfsbackendadmin.c.
     - CVE-2019-12447
   * SECURITY UPDATE: race conditions in admin backend
     - debian/patches/CVE-2019-12448.patch: add query_info_on_read/write
       functionality in daemon/gvfsbackendadmin.c.
     - CVE-2019-12448
   * SECURITY UPDATE: user and group ownership mishandling during move
     - debian/patches/CVE-2019-12449.patch: ensure correct ownership when
       moving to file:// uri in daemon/gvfsbackendadmin.c.
     - CVE-2019-12449
   * SECURITY UPDATE: incorrect D-Bus server socket restrictions
     - debian/patches/CVE-2019-12795-1.patch: check that the connecting
       client is the same user in daemon/gvfsdaemon.c.
     - debian/patches/CVE-2019-12795-2.patch: only accept EXTERNAL
       authentication in daemon/gvfsdaemon.c.
     - CVE-2019-12795
Checksums-Sha1:
 98b9e9a407665d73bc158bdb16b6da98d119b486 1789648 gvfs-backends-dbgsym_1.38.1-0ubuntu1.3.2_s390x.ddeb
 50b9132630e793e7f0bb5fc46d753a96c2b2d3b9 294512 gvfs-backends_1.38.1-0ubuntu1.3.2_s390x.deb
 3ff14690ff37513e910167ee825476875496383c 5268 gvfs-bin_1.38.1-0ubuntu1.3.2_s390x.deb
 f2e245c2f829b6e0832f9015c919d4e88fcb944c 536144 gvfs-daemons-dbgsym_1.38.1-0ubuntu1.3.2_s390x.ddeb
 02a7de8a18b6dbfa37cb774890102a26c1da5d86 107368 gvfs-daemons_1.38.1-0ubuntu1.3.2_s390x.deb
 c093a272a0f5976904bce60e87a91dd97a56ba8d 451112 gvfs-dbgsym_1.38.1-0ubuntu1.3.2_s390x.ddeb
 ac2f5924169e58fb7669dd203d0751cddc5289e9 45984 gvfs-fuse-dbgsym_1.38.1-0ubuntu1.3.2_s390x.ddeb
 06ea2f81847932668a1b58d169d0b53f389a6417 16608 gvfs-fuse_1.38.1-0ubuntu1.3.2_s390x.deb
 1fac0fb96b1ecf1751ed7ea712ef61700fd92d5e 482832 gvfs-libs-dbgsym_1.38.1-0ubuntu1.3.2_s390x.ddeb
 4f61bb85def41c7d339fcbeb9ba4bee3a992ba93 89640 gvfs-libs_1.38.1-0ubuntu1.3.2_s390x.deb
 59d33884bb221af0f9c5e3bd81d499cafc82f8e0 24500 gvfs_1.38.1-0ubuntu1.3.2_s390x.buildinfo
 399304dd2428262fc403078593f57c5bba954034 105476 gvfs_1.38.1-0ubuntu1.3.2_s390x.deb
 499b00b7009f1a7e1809b204575015f3386d2501 1567767 gvfs_1.38.1-0ubuntu1.3.2_s390x_translations.tar.gz
Checksums-Sha256:
 de5975832c3ae17298ae745a033550163234ec82e024ff05d3b5b00038acd076 1789648 gvfs-backends-dbgsym_1.38.1-0ubuntu1.3.2_s390x.ddeb
 ab2ba3f49e26e43d0de0c44951eb3a4638046b7f0dc40dcfa5b5c5101bc6242a 294512 gvfs-backends_1.38.1-0ubuntu1.3.2_s390x.deb
 891e2a59884be096d1532a3778f1a91edf76342172e06b59fac4ed32f315649f 5268 gvfs-bin_1.38.1-0ubuntu1.3.2_s390x.deb
 748837bc951ce5f75a1dcb0cca0120dcb86813c394a6acd86dff66d74c57954d 536144 gvfs-daemons-dbgsym_1.38.1-0ubuntu1.3.2_s390x.ddeb
 6204a03bb878f0bc2b6b405f2535181c8aed69222531aa31e46b62cb8d62fc69 107368 gvfs-daemons_1.38.1-0ubuntu1.3.2_s390x.deb
 2e000abc54b6f21a82e6990ee3e62420b072effb225046ad5c23ba7a63a12af1 451112 gvfs-dbgsym_1.38.1-0ubuntu1.3.2_s390x.ddeb
 afaa3189a27adfc123d5dcd7ceb67730b6358710b61be9c75b4d3bf3ba266762 45984 gvfs-fuse-dbgsym_1.38.1-0ubuntu1.3.2_s390x.ddeb
 a8901cd30cea36b51a76b4d1a8b27ccfc169bdeec4a2edcbe0b9e449128eb326 16608 gvfs-fuse_1.38.1-0ubuntu1.3.2_s390x.deb
 cf4254db17bfc8cb7fa5095aa41da262fcd7308255a2489cb695dfafa7493a28 482832 gvfs-libs-dbgsym_1.38.1-0ubuntu1.3.2_s390x.ddeb
 aed52bb42c285558a635b24bccf773b941eb8a35c40b9c535e25de5bf3919a46 89640 gvfs-libs_1.38.1-0ubuntu1.3.2_s390x.deb
 aacdc0da9a180d00f19edac1a3bed60238e334fb3e98ad1c8ca24de52c8c78a8 24500 gvfs_1.38.1-0ubuntu1.3.2_s390x.buildinfo
 a1915c2737f426c6425799b2f307534be2ac91b87e0e9670aef4a84bfba0e6e4 105476 gvfs_1.38.1-0ubuntu1.3.2_s390x.deb
 c1ffb5b374f388195255ceef98aea1279e8c6411da34ee220b11af31aace771c 1567767 gvfs_1.38.1-0ubuntu1.3.2_s390x_translations.tar.gz
Files:
 0813bdca2a55db700cc6f5d69620ef4f 1789648 debug optional gvfs-backends-dbgsym_1.38.1-0ubuntu1.3.2_s390x.ddeb
 5241694a0e942d231a6b2930227048bc 294512 gnome optional gvfs-backends_1.38.1-0ubuntu1.3.2_s390x.deb
 2a8fb25d266cf681f2e575655980681a 5268 oldlibs optional gvfs-bin_1.38.1-0ubuntu1.3.2_s390x.deb
 1ac46e364d1a12552b715ff7976bf458 536144 debug optional gvfs-daemons-dbgsym_1.38.1-0ubuntu1.3.2_s390x.ddeb
 ecde3a17d9f520bb2fe5a7a06c6a40f1 107368 libs optional gvfs-daemons_1.38.1-0ubuntu1.3.2_s390x.deb
 69fcf8172bca5f36562aeb62a0315e53 451112 debug optional gvfs-dbgsym_1.38.1-0ubuntu1.3.2_s390x.ddeb
 65046b78696e75ff1c65462fc9b2744f 45984 debug optional gvfs-fuse-dbgsym_1.38.1-0ubuntu1.3.2_s390x.ddeb
 27a3bab3c1201a180ceac0e34733c82e 16608 gnome optional gvfs-fuse_1.38.1-0ubuntu1.3.2_s390x.deb
 7493cee374a3079f74ae3366ac972328 482832 debug optional gvfs-libs-dbgsym_1.38.1-0ubuntu1.3.2_s390x.ddeb
 fa3a2b90bba08d68516b4237c01f484c 89640 libs optional gvfs-libs_1.38.1-0ubuntu1.3.2_s390x.deb
 477a4f3717fbc76b5a266a9eb2fb1f8d 24500 gnome optional gvfs_1.38.1-0ubuntu1.3.2_s390x.buildinfo
 a44fa829204b89fdb69b7107cc882e8d 105476 libs optional gvfs_1.38.1-0ubuntu1.3.2_s390x.deb
 e06fe842dd481fb42676c48f1ededc6a 1567767 raw-translations - gvfs_1.38.1-0ubuntu1.3.2_s390x_translations.tar.gz
Original-Maintainer: Debian GNOME Maintainers <pkg-gnome-maintainers@lists.alioth.debian.org>