Format: 1.8
Date: Fri, 05 Jul 2019 08:31:52 -0400
Source: gvfs
Binary: gvfs gvfs-backends gvfs-bin gvfs-daemons gvfs-fuse gvfs-libs
Architecture: s390x s390x_translations
Version: 1.40.1-1ubuntu1
Distribution: eoan-proposed
Urgency: medium
Maintainer: Launchpad Build Daemon <buildd@bos02-s390x-018.buildd>
Changed-By: Marc Deslauriers <marc.deslauriers@ubuntu.com>
Description:
 gvfs       - userspace virtual filesystem - GIO module
 gvfs-backends - userspace virtual filesystem - backends
 gvfs-bin   - userspace virtual filesystem - deprecated command-line tools
 gvfs-daemons - userspace virtual filesystem - servers
 gvfs-fuse  - userspace virtual filesystem - fuse server
 gvfs-libs  - userspace virtual filesystem - private libraries
Changes:
 gvfs (1.40.1-1ubuntu1) eoan; urgency=medium
 .
   * SECURITY UPDATE: file ownership mishandling
     - debian/patches/CVE-2019-12447-1.patch: allow changing file owner in
       daemon/gvfsbackendadmin.c.
     - debian/patches/CVE-2019-12447-2.patch: use fsuid to ensure correct
       file ownership in daemon/gvfsbackendadmin.c.
     - CVE-2019-12447
   * SECURITY UPDATE: race conditions in admin backend
     - debian/patches/CVE-2019-12448.patch: add query_info_on_read/write
       functionality in daemon/gvfsbackendadmin.c.
     - CVE-2019-12448
   * SECURITY UPDATE: user and group ownership mishandling during move
     - debian/patches/CVE-2019-12449.patch: ensure correct ownership when
       moving to file:// uri in daemon/gvfsbackendadmin.c.
     - CVE-2019-12449
   * SECURITY UPDATE: incorrect D-Bus server socket restrictions
     - debian/patches/CVE-2019-12795-1.patch: check that the connecting
       client is the same user in daemon/gvfsdaemon.c.
     - debian/patches/CVE-2019-12795-2.patch: only accept EXTERNAL
       authentication in daemon/gvfsdaemon.c.
     - CVE-2019-12795
Checksums-Sha1:
 a268f4369e6a3ec9a53d024fb5dcf9c57f10fb05 1855524 gvfs-backends-dbgsym_1.40.1-1ubuntu1_s390x.ddeb
 742b4eaf94ca51d0b765ac77dfd1fd264e5d9819 305572 gvfs-backends_1.40.1-1ubuntu1_s390x.deb
 ff67380b1fd55d6cc5895cbcc17b488a89b9235c 4916 gvfs-bin_1.40.1-1ubuntu1_s390x.deb
 90c0ee242403fda07788576ccfff98fe460c9031 537648 gvfs-daemons-dbgsym_1.40.1-1ubuntu1_s390x.ddeb
 29dba96f60d6b34af44e49678e2fa0aff0b6821c 107320 gvfs-daemons_1.40.1-1ubuntu1_s390x.deb
 ec6a9db2340933f7682f10419e7e4291e66e79bd 452872 gvfs-dbgsym_1.40.1-1ubuntu1_s390x.ddeb
 c9316d3c065fd470c38abd292dfc566d39796775 46048 gvfs-fuse-dbgsym_1.40.1-1ubuntu1_s390x.ddeb
 655e7eaf96e02c05b6051acb8fd7f5f4d068a1fb 16184 gvfs-fuse_1.40.1-1ubuntu1_s390x.deb
 993c0d8095b3716bfe3b59b7a64a1619043ef762 483440 gvfs-libs-dbgsym_1.40.1-1ubuntu1_s390x.ddeb
 7ff39cad7464ac8ff3fde6f51c5bb1782d2b5b47 89464 gvfs-libs_1.40.1-1ubuntu1_s390x.deb
 39b663a778b633a614410aa3c083e306a5d4557c 24044 gvfs_1.40.1-1ubuntu1_s390x.buildinfo
 3d7fccd4aae9d8983ba525e2cef28a7b7a122f9a 106448 gvfs_1.40.1-1ubuntu1_s390x.deb
 f10ca470fb5c362c61117a292086ef5764f782c2 1567972 gvfs_1.40.1-1ubuntu1_s390x_translations.tar.gz
Checksums-Sha256:
 f1441ecc53890a47a105b408b056dabea5b0b8d3d27cb8a1941f4724d083bfea 1855524 gvfs-backends-dbgsym_1.40.1-1ubuntu1_s390x.ddeb
 5a9af61308e5845541d151d013062f86810ce295401b67d78385984c6ded8455 305572 gvfs-backends_1.40.1-1ubuntu1_s390x.deb
 caf6a4fbe1d01540d1b982e006301112514cd0fd62c50b7e1ce5bf8d9be919bd 4916 gvfs-bin_1.40.1-1ubuntu1_s390x.deb
 3f5bcc2b38cd33cf6fe52b42b1dec82ae7afa44664837c17e447a0d019360a41 537648 gvfs-daemons-dbgsym_1.40.1-1ubuntu1_s390x.ddeb
 9ab1006ad149dd7c04f3833b25261b66dfca54589f10fa1ee57b04a3e12faf89 107320 gvfs-daemons_1.40.1-1ubuntu1_s390x.deb
 19006e70cff121ce21bb91bc508c4423bf56a177d645bb2e69e8849ccc4c46fb 452872 gvfs-dbgsym_1.40.1-1ubuntu1_s390x.ddeb
 75bf976a864fa4c7dcc503381e3adb7260ae3661e6d609deeedf8d8d4fc492a1 46048 gvfs-fuse-dbgsym_1.40.1-1ubuntu1_s390x.ddeb
 f787db8dd32c8b47413d1cdf9d64973f5b882cb775f66d64cf02bf6d3f1d3f1d 16184 gvfs-fuse_1.40.1-1ubuntu1_s390x.deb
 c7f371236e33b048f1930bb0974ffab57877ae48570604045fbabcaeed10472a 483440 gvfs-libs-dbgsym_1.40.1-1ubuntu1_s390x.ddeb
 3e941a5098514d1916dc15adbb5ba17aba85f98007c56ad45c3ac522e21adceb 89464 gvfs-libs_1.40.1-1ubuntu1_s390x.deb
 bb334c835ecc84a7bc66d85bf195f21d78018a04eb00409c6fd133c4dc632e2b 24044 gvfs_1.40.1-1ubuntu1_s390x.buildinfo
 0b64aca66f0be8d55d208804033a6c3e5c571dfb76d11b320631efbbad843fcc 106448 gvfs_1.40.1-1ubuntu1_s390x.deb
 47ddf1348c9232c87381d3b4773da2928c6844c099322506afe7d40269902f17 1567972 gvfs_1.40.1-1ubuntu1_s390x_translations.tar.gz
Files:
 9c79b2fceabdd566e9f73e8e82e4a48e 1855524 debug optional gvfs-backends-dbgsym_1.40.1-1ubuntu1_s390x.ddeb
 22e9711e168c6f5534aa2c199b006a97 305572 gnome optional gvfs-backends_1.40.1-1ubuntu1_s390x.deb
 68c115df2250f4d74e09173cd3420ae0 4916 oldlibs optional gvfs-bin_1.40.1-1ubuntu1_s390x.deb
 299aec3176870eb251b5173af25daca1 537648 debug optional gvfs-daemons-dbgsym_1.40.1-1ubuntu1_s390x.ddeb
 c8b2d66d18f7cb61e18d062f4044d77f 107320 libs optional gvfs-daemons_1.40.1-1ubuntu1_s390x.deb
 d1c71baa2929238d973e594c98306a86 452872 debug optional gvfs-dbgsym_1.40.1-1ubuntu1_s390x.ddeb
 4ad919ac110f9bb19f0082365e4a92a9 46048 debug optional gvfs-fuse-dbgsym_1.40.1-1ubuntu1_s390x.ddeb
 ac9c849055f4671fad229b52d0fca519 16184 gnome optional gvfs-fuse_1.40.1-1ubuntu1_s390x.deb
 f38b48a424d0ffcf5e8eef720a879a72 483440 debug optional gvfs-libs-dbgsym_1.40.1-1ubuntu1_s390x.ddeb
 77765b44bc4562238d984068ac5438f7 89464 libs optional gvfs-libs_1.40.1-1ubuntu1_s390x.deb
 fbe3c5748f9b43a0a20dd8c7c9e9cd9a 24044 gnome optional gvfs_1.40.1-1ubuntu1_s390x.buildinfo
 2fc2dcb9a7dc443cdbfd8597d6e9c973 106448 libs optional gvfs_1.40.1-1ubuntu1_s390x.deb
 b31b37bc482d28c7e47399ffd86d3fbe 1567972 raw-translations - gvfs_1.40.1-1ubuntu1_s390x_translations.tar.gz
Original-Maintainer: Debian GNOME Maintainers <pkg-gnome-maintainers@lists.alioth.debian.org>