Format: 1.8
Date: Fri, 05 Jul 2019 09:04:54 -0400
Source: gvfs
Binary: gvfs gvfs-daemons gvfs-libs gvfs-common gvfs-fuse gvfs-backends gvfs-bin
Architecture: arm64 arm64_translations
Version: 1.36.1-0ubuntu1.3.3
Distribution: bionic
Urgency: medium
Maintainer: Launchpad Build Daemon <buildd@bos02-arm64-073.buildd>
Changed-By: Marc Deslauriers <marc.deslauriers@ubuntu.com>
Description:
 gvfs       - userspace virtual filesystem - GIO module
 gvfs-backends - userspace virtual filesystem - backends
 gvfs-bin   - userspace virtual filesystem - binaries
 gvfs-common - userspace virtual filesystem - common data files
 gvfs-daemons - userspace virtual filesystem - servers
 gvfs-fuse  - userspace virtual filesystem - fuse server
 gvfs-libs  - userspace virtual filesystem - private libraries
Changes:
 gvfs (1.36.1-0ubuntu1.3.3) bionic-security; urgency=medium
 .
   * SECURITY UPDATE: file ownership mishandling
     - debian/patches/CVE-2019-12447-1.patch: allow changing file owner in
       daemon/gvfsbackendadmin.c.
     - debian/patches/CVE-2019-12447-2.patch: use fsuid to ensure correct
       file ownership in daemon/gvfsbackendadmin.c.
     - CVE-2019-12447
   * SECURITY UPDATE: race conditions in admin backend
     - debian/patches/CVE-2019-12448.patch: add query_info_on_read/write
       functionality in daemon/gvfsbackendadmin.c.
     - CVE-2019-12448
   * SECURITY UPDATE: user and group ownership mishandling during move
     - debian/patches/CVE-2019-12449.patch: ensure correct ownership when
       moving to file:// uri in daemon/gvfsbackendadmin.c.
     - CVE-2019-12449
   * SECURITY UPDATE: incorrect D-Bus server socket restrictions
     - debian/patches/CVE-2019-12795-1.patch: check that the connecting
       client is the same user in daemon/gvfsdaemon.c.
     - debian/patches/CVE-2019-12795-2.patch: only accept EXTERNAL
       authentication in daemon/gvfsdaemon.c.
     - CVE-2019-12795
Checksums-Sha1:
 e573a578e5c8c6eeaf449c6e8b41690f61e90c46 1604368 gvfs-backends-dbgsym_1.36.1-0ubuntu1.3.3_arm64.ddeb
 d78288b645a652379adc2c2c1ae411c26805264f 260688 gvfs-backends_1.36.1-0ubuntu1.3.3_arm64.deb
 759db7f2caa942a99dd6d071c0db83dd6097e452 5012 gvfs-bin_1.36.1-0ubuntu1.3.3_arm64.deb
 775ba1ad94eb9e71204abecc188e6e6816ba6cdd 480596 gvfs-daemons-dbgsym_1.36.1-0ubuntu1.3.3_arm64.ddeb
 bd0b013bbe60f15933bd4266d7760f2ccea21088 93928 gvfs-daemons_1.36.1-0ubuntu1.3.3_arm64.deb
 654329dd7fb76e7ce6c64d32d60fa0856eb47883 398952 gvfs-dbgsym_1.36.1-0ubuntu1.3.3_arm64.ddeb
 27376d173e1dcfb9cfc9d1fbc41fb7ed3faaf31b 41372 gvfs-fuse-dbgsym_1.36.1-0ubuntu1.3.3_arm64.ddeb
 01877299f4eb8d139b0e878baa86b5d16f84b851 15480 gvfs-fuse_1.36.1-0ubuntu1.3.3_arm64.deb
 6f6e7a22a07ad60cc611eace6704a5b02c5c3fd0 442968 gvfs-libs-dbgsym_1.36.1-0ubuntu1.3.3_arm64.ddeb
 6a33be655d1ae7141f8a6f4811aec9079c47a05a 76524 gvfs-libs_1.36.1-0ubuntu1.3.3_arm64.deb
 0290739a8b5806568bfb5f35cb4dfd009d4bacfc 24886 gvfs_1.36.1-0ubuntu1.3.3_arm64.buildinfo
 5540e2005a081f4907579ffc730ba78085c4d036 92300 gvfs_1.36.1-0ubuntu1.3.3_arm64.deb
 800e5113b848843ed91869fb776dcc612f56fa9f 1573898 gvfs_1.36.1-0ubuntu1.3.3_arm64_translations.tar.gz
Checksums-Sha256:
 91874cf22748789ee609a9922d16a3ad87da36389b25072f68051d5d30564b8d 1604368 gvfs-backends-dbgsym_1.36.1-0ubuntu1.3.3_arm64.ddeb
 82b22264d90b1e0391ffea837a8b104256ee5f8d326088915a8bb6f85b5b5c36 260688 gvfs-backends_1.36.1-0ubuntu1.3.3_arm64.deb
 86519c09bb2084c8d473074c7c8b445ea19061a4210c361185828fbd54ad88c6 5012 gvfs-bin_1.36.1-0ubuntu1.3.3_arm64.deb
 64ff176f6c91b5fee2768c207b051f4f21cf47ab11a79d02714a11a998481c02 480596 gvfs-daemons-dbgsym_1.36.1-0ubuntu1.3.3_arm64.ddeb
 c73062212e8732dd4ab19be92c90315b948f82558bb7d71f467b030f88c7b960 93928 gvfs-daemons_1.36.1-0ubuntu1.3.3_arm64.deb
 48f6719a38b40f833c0bc5fd673596128e1ef15b0985e2ca275b7aaf674afcef 398952 gvfs-dbgsym_1.36.1-0ubuntu1.3.3_arm64.ddeb
 e08c194be67062fdc5ce4f8b58388c0d0048987acd7b1f0108807e0e0c157303 41372 gvfs-fuse-dbgsym_1.36.1-0ubuntu1.3.3_arm64.ddeb
 ecbb1154aabee763352e735b665cd34915ff80a3bc561e4248fac7613aeb3f51 15480 gvfs-fuse_1.36.1-0ubuntu1.3.3_arm64.deb
 9cf77d284b4ed4f1dfd4621f7c7ed2c74d8f93dc57983d96d45d48804796487e 442968 gvfs-libs-dbgsym_1.36.1-0ubuntu1.3.3_arm64.ddeb
 ee8083b70531201857ac432720b55f3398de19278491cabf767c060a5d9ee3b2 76524 gvfs-libs_1.36.1-0ubuntu1.3.3_arm64.deb
 782bd0e0de09af6290ec1747ed2941720e61752de1942436f675f021923e9a3a 24886 gvfs_1.36.1-0ubuntu1.3.3_arm64.buildinfo
 a56061323b2acc5f19a0a62a64e3c6cde45ab6cc617cc12ac7494f93504b322c 92300 gvfs_1.36.1-0ubuntu1.3.3_arm64.deb
 f51bca7972d0b9ca60dffb2b1309df830f79acbbd59e6de1f8314f1dd679d294 1573898 gvfs_1.36.1-0ubuntu1.3.3_arm64_translations.tar.gz
Files:
 9151dd54fd0502b7b426724bca8ec817 1604368 debug optional gvfs-backends-dbgsym_1.36.1-0ubuntu1.3.3_arm64.ddeb
 58055d31e5669f958a57dd44bcd8b3b6 260688 gnome optional gvfs-backends_1.36.1-0ubuntu1.3.3_arm64.deb
 349b192ef37da3fdfe7845c1dbdb78c5 5012 gnome optional gvfs-bin_1.36.1-0ubuntu1.3.3_arm64.deb
 49ef214a9e824bfe703d9e915d889805 480596 debug optional gvfs-daemons-dbgsym_1.36.1-0ubuntu1.3.3_arm64.ddeb
 2291de78ec3e043f45d540bc9f4eb78d 93928 libs optional gvfs-daemons_1.36.1-0ubuntu1.3.3_arm64.deb
 25ef9286ca9f1adfca5f248afa3290d3 398952 debug optional gvfs-dbgsym_1.36.1-0ubuntu1.3.3_arm64.ddeb
 999c9bd6b179d91a3e7190cb6d74ef4a 41372 debug optional gvfs-fuse-dbgsym_1.36.1-0ubuntu1.3.3_arm64.ddeb
 c66fc455fca141059ceb547a8f3d7b8e 15480 gnome optional gvfs-fuse_1.36.1-0ubuntu1.3.3_arm64.deb
 50e3db23925dce7919fd514c118873d5 442968 debug optional gvfs-libs-dbgsym_1.36.1-0ubuntu1.3.3_arm64.ddeb
 1a43ffbb73015ca81c6a0c83cf7476ff 76524 libs optional gvfs-libs_1.36.1-0ubuntu1.3.3_arm64.deb
 2ae7e3b26b722aac511f50672ff4f501 24886 gnome optional gvfs_1.36.1-0ubuntu1.3.3_arm64.buildinfo
 8edf10a765c8a77c24e1943b009f16ae 92300 libs optional gvfs_1.36.1-0ubuntu1.3.3_arm64.deb
 a57b189aa0febeca2f60fde5eadb34e0 1573898 raw-translations - gvfs_1.36.1-0ubuntu1.3.3_arm64_translations.tar.gz
Original-Maintainer: Debian GNOME Maintainers <pkg-gnome-maintainers@lists.alioth.debian.org>