Format: 1.8 Date: Fri, 05 Jul 2019 08:31:52 -0400 Source: gvfs Binary: gvfs gvfs-backends gvfs-bin gvfs-common gvfs-daemons gvfs-fuse gvfs-libs Architecture: amd64 all amd64_translations Version: 1.40.1-1ubuntu1 Distribution: eoan-proposed Urgency: medium Maintainer: Launchpad Build Daemon Changed-By: Marc Deslauriers Description: gvfs - userspace virtual filesystem - GIO module gvfs-backends - userspace virtual filesystem - backends gvfs-bin - userspace virtual filesystem - deprecated command-line tools gvfs-common - userspace virtual filesystem - common data files gvfs-daemons - userspace virtual filesystem - servers gvfs-fuse - userspace virtual filesystem - fuse server gvfs-libs - userspace virtual filesystem - private libraries Changes: gvfs (1.40.1-1ubuntu1) eoan; urgency=medium . * SECURITY UPDATE: file ownership mishandling - debian/patches/CVE-2019-12447-1.patch: allow changing file owner in daemon/gvfsbackendadmin.c. - debian/patches/CVE-2019-12447-2.patch: use fsuid to ensure correct file ownership in daemon/gvfsbackendadmin.c. - CVE-2019-12447 * SECURITY UPDATE: race conditions in admin backend - debian/patches/CVE-2019-12448.patch: add query_info_on_read/write functionality in daemon/gvfsbackendadmin.c. - CVE-2019-12448 * SECURITY UPDATE: user and group ownership mishandling during move - debian/patches/CVE-2019-12449.patch: ensure correct ownership when moving to file:// uri in daemon/gvfsbackendadmin.c. - CVE-2019-12449 * SECURITY UPDATE: incorrect D-Bus server socket restrictions - debian/patches/CVE-2019-12795-1.patch: check that the connecting client is the same user in daemon/gvfsdaemon.c. - debian/patches/CVE-2019-12795-2.patch: only accept EXTERNAL authentication in daemon/gvfsdaemon.c. - CVE-2019-12795 Checksums-Sha1: 3792395457ca86b6dec62f63c50748cfebc74bf1 1848680 gvfs-backends-dbgsym_1.40.1-1ubuntu1_amd64.ddeb 2a94269c4764a44d2f27abe4e4d4945e5c4e801c 336048 gvfs-backends_1.40.1-1ubuntu1_amd64.deb de797bb1bd950d29ea43450aadc588c92597e23a 4916 gvfs-bin_1.40.1-1ubuntu1_amd64.deb 4eaeadd339596c53b898dc730bc52d7555535463 20360 gvfs-common_1.40.1-1ubuntu1_all.deb fee6feb4487f6d62dbb6d5440962e37bbaa19ffb 533656 gvfs-daemons-dbgsym_1.40.1-1ubuntu1_amd64.ddeb 18d9940fbb3b993732888b71583edc4fe0c1b709 117476 gvfs-daemons_1.40.1-1ubuntu1_amd64.deb e2b036790ecf67ba55ff9ccc27bb83d62f3a42c1 447488 gvfs-dbgsym_1.40.1-1ubuntu1_amd64.ddeb ac4a84decacb5a6f7d1e8c4c16392f6620e46ec2 45472 gvfs-fuse-dbgsym_1.40.1-1ubuntu1_amd64.ddeb 18936064a8cff65201d35dffe7a353d001b72fc4 17504 gvfs-fuse_1.40.1-1ubuntu1_amd64.deb 0eacb5d51d7d805f15151716d8388300e14c59fd 481124 gvfs-libs-dbgsym_1.40.1-1ubuntu1_amd64.ddeb ac7efa97a70a8d8592bcdb9c63648993c219604e 96704 gvfs-libs_1.40.1-1ubuntu1_amd64.deb 3d452550c389b996c677885fe917c919658e3ffb 24542 gvfs_1.40.1-1ubuntu1_amd64.buildinfo 616a709812827afb61451c377e44060f106c22fc 113708 gvfs_1.40.1-1ubuntu1_amd64.deb 9622c11ca4f7407fefec207b69aacfbeff75fe0b 2646442 gvfs_1.40.1-1ubuntu1_amd64_translations.tar.gz Checksums-Sha256: 6bc72dbdc288f17549cce15590e8be1eab71866593bb5994d2cfd756763f6119 1848680 gvfs-backends-dbgsym_1.40.1-1ubuntu1_amd64.ddeb c8eae3456b2d5f4400dc064853b4b5a6c1f7acf18aa8cdcf8472d387fa08bd08 336048 gvfs-backends_1.40.1-1ubuntu1_amd64.deb 3339ab97ae495495e59bfee867813c076437e69e128f301cdcf6f6558ab04d3d 4916 gvfs-bin_1.40.1-1ubuntu1_amd64.deb ea9a19b603bfa1e589ff542b10fce96c8f7024b6f98b5ee353991746244dc6cc 20360 gvfs-common_1.40.1-1ubuntu1_all.deb d1418a054ea4c55183d18f1582212b20b35dcd9bf8aec273df20311cee688fba 533656 gvfs-daemons-dbgsym_1.40.1-1ubuntu1_amd64.ddeb 4c6926a47108dc735789a02a8539ea185e09978a9d70861a83c4c5762500d332 117476 gvfs-daemons_1.40.1-1ubuntu1_amd64.deb de67699eec4188ecc8db78efa8edafc2e5722199a7eaecbfbd70dd6cb6e06c36 447488 gvfs-dbgsym_1.40.1-1ubuntu1_amd64.ddeb 8640c5907a5aa5749ede91526857ccc03cfd41477f89470edb82c6da9187767c 45472 gvfs-fuse-dbgsym_1.40.1-1ubuntu1_amd64.ddeb 0317a8f226c629c23952e7fc96c1ce0654384b9b4392ff2cbcfac74dee7a6c82 17504 gvfs-fuse_1.40.1-1ubuntu1_amd64.deb 1e4a2f5c206e779557b1ad821e3cbdb349da498a65504436c0122bbcdd9e80ce 481124 gvfs-libs-dbgsym_1.40.1-1ubuntu1_amd64.ddeb f32abbc8765e129bec462920dd6636fa8a0dbd8f27e63b6dc3bc7cb57ddf880c 96704 gvfs-libs_1.40.1-1ubuntu1_amd64.deb 3dc8ad75909dfcbe91679d44cc50f47424a58c102672a501496f53fa13d32233 24542 gvfs_1.40.1-1ubuntu1_amd64.buildinfo bda53a4010ac078ad145a920da2acb283798ba6257a25442675561a0381c03b2 113708 gvfs_1.40.1-1ubuntu1_amd64.deb b4c8c41fef002e2553218aae22ac7e1d5474a00448baf8daa8b34774648cd9d9 2646442 gvfs_1.40.1-1ubuntu1_amd64_translations.tar.gz Files: f93bf89da0c76d5b3bd2778647c69a14 1848680 debug optional gvfs-backends-dbgsym_1.40.1-1ubuntu1_amd64.ddeb 134b6ebd182209865b3a1628890c3171 336048 gnome optional gvfs-backends_1.40.1-1ubuntu1_amd64.deb 221ab2056d694db694049d62c132fe42 4916 oldlibs optional gvfs-bin_1.40.1-1ubuntu1_amd64.deb d1a853f1bc0713fdfc6094822ca3176a 20360 libs optional gvfs-common_1.40.1-1ubuntu1_all.deb 51a396ee10ae63bf10e08027b0389728 533656 debug optional gvfs-daemons-dbgsym_1.40.1-1ubuntu1_amd64.ddeb e9f067be5be5acf2d73644c366b4f2c7 117476 libs optional gvfs-daemons_1.40.1-1ubuntu1_amd64.deb c956f1b00b46ca2bb417bdea42b9426f 447488 debug optional gvfs-dbgsym_1.40.1-1ubuntu1_amd64.ddeb 23ad37eedec30f63618146675dbacb98 45472 debug optional gvfs-fuse-dbgsym_1.40.1-1ubuntu1_amd64.ddeb 5b0c7b87348dec2b44a4863d86dadb0f 17504 gnome optional gvfs-fuse_1.40.1-1ubuntu1_amd64.deb 3d737fcfefb238b87052d69b5a3c384d 481124 debug optional gvfs-libs-dbgsym_1.40.1-1ubuntu1_amd64.ddeb e6fc5a4fbc27adedb3688a78f1f7fa57 96704 libs optional gvfs-libs_1.40.1-1ubuntu1_amd64.deb ff38b3ba05cd4e18a5a567d73135e64a 24542 gnome optional gvfs_1.40.1-1ubuntu1_amd64.buildinfo 0c020dcd94fbe30479afd1e306604053 113708 libs optional gvfs_1.40.1-1ubuntu1_amd64.deb 2bc285090474e08ab6f4a8e974ae78db 2646442 raw-translations - gvfs_1.40.1-1ubuntu1_amd64_translations.tar.gz Original-Maintainer: Debian GNOME Maintainers