gvfs 1.40.1-1ubuntu1 source package in Ubuntu

Changelog

gvfs (1.40.1-1ubuntu1) eoan; urgency=medium

  * SECURITY UPDATE: file ownership mishandling
    - debian/patches/CVE-2019-12447-1.patch: allow changing file owner in
      daemon/gvfsbackendadmin.c.
    - debian/patches/CVE-2019-12447-2.patch: use fsuid to ensure correct
      file ownership in daemon/gvfsbackendadmin.c.
    - CVE-2019-12447
  * SECURITY UPDATE: race conditions in admin backend
    - debian/patches/CVE-2019-12448.patch: add query_info_on_read/write
      functionality in daemon/gvfsbackendadmin.c.
    - CVE-2019-12448
  * SECURITY UPDATE: user and group ownership mishandling during move
    - debian/patches/CVE-2019-12449.patch: ensure correct ownership when
      moving to file:// uri in daemon/gvfsbackendadmin.c.
    - CVE-2019-12449
  * SECURITY UPDATE: incorrect D-Bus server socket restrictions
    - debian/patches/CVE-2019-12795-1.patch: check that the connecting
      client is the same user in daemon/gvfsdaemon.c.
    - debian/patches/CVE-2019-12795-2.patch: only accept EXTERNAL
      authentication in daemon/gvfsdaemon.c.
    - CVE-2019-12795

 -- Marc Deslauriers <email address hidden>  Fri, 05 Jul 2019 08:31:52 -0400

Upload details

Uploaded by:
Marc Deslauriers on 2019-07-05
Uploaded to:
Eoan
Original maintainer:
Ubuntu Developers
Architectures:
any all
Section:
libs
Urgency:
Medium Urgency

See full publishing history Publishing

Series Pocket Published Component Section

Downloads

File Size SHA-256 Checksum
gvfs_1.40.1.orig.tar.xz 1.1 MiB 927af496efee4767f1ba12694190f9c93bc512a44854e88dbb6f5792abfad6b1
gvfs_1.40.1-1ubuntu1.debian.tar.xz 26.3 KiB a3c81179df2473d54c074e74ff535d14723303474bef82c3e9cdacaf0256df19
gvfs_1.40.1-1ubuntu1.dsc 3.4 KiB f6546a28938c7b016bf959bc5f1b54726b6854b1b9f1902623c730038644989d

View changes file

Binary packages built by this source

gvfs: userspace virtual filesystem - GIO module

 gvfs is a userspace virtual filesystem where mounts run as separate
 processes which you talk to via D-Bus. It also contains a gio module
 that seamlessly adds gvfs support to all applications using the gio
 API. It also supports exposing the gvfs mounts to non-gio applications
 using fuse.
 .
 This package contains the GIO module that lets applications use gvfs
 mounts.

gvfs-backends: userspace virtual filesystem - backends

 gvfs is a userspace virtual filesystem where mounts run as separate
 processes which you talk to via D-Bus. It also contains a gio module
 that seamlessly adds gvfs support to all applications using the gio
 API. It also supports exposing the gvfs mounts to non-gio applications
 using fuse.
 .
 This package contains the afc, afp, archive, cdda, dav, dnssd, ftp,
 gphoto2, http, mtp, network, sftp, smb and smb-browse backends.

gvfs-backends-dbgsym: debug symbols for gvfs-backends
gvfs-bin: userspace virtual filesystem - deprecated command-line tools

 gvfs is a userspace virtual filesystem where mounts run as separate
 processes which you talk to via D-Bus. It also contains a gio module
 that seamlessly adds gvfs support to all applications using the gio
 API. It also supports exposing the gvfs mounts to non-gio applications
 using fuse.
 .
 This package contains deprecated command-line tools such as gvfs-copy
 and gvfs-rename. Please use the gio(1) tool in the libglib2.0-bin
 package instead.

gvfs-common: userspace virtual filesystem - common data files

 gvfs is a userspace virtual filesystem where mounts run as separate
 processes which you talk to via D-Bus. It also contains a gio module
 that seamlessly adds gvfs support to all applications using the gio
 API. It also supports exposing the gvfs mounts to non-gio applications
 using fuse.
 .
 This package contains the data files and translations used by all gvfs
 components.

gvfs-daemons: userspace virtual filesystem - servers

 gvfs is a userspace virtual filesystem where mounts run as separate
 processes which you talk to via D-Bus. It also contains a gio module
 that seamlessly adds gvfs support to all applications using the gio
 API. It also supports exposing the gvfs mounts to non-gio applications
 using fuse.
 .
 This package contains the gvfs server and the minimal set of backends.

gvfs-daemons-dbgsym: debug symbols for gvfs-daemons
gvfs-dbgsym: debug symbols for gvfs
gvfs-fuse: userspace virtual filesystem - fuse server

 gvfs is a userspace virtual filesystem where mounts run as separate
 processes which you talk to via D-Bus. It also contains a gio module
 that seamlessly adds gvfs support to all applications using the gio
 API. It also supports exposing the gvfs mounts to non-gio applications
 using fuse.
 .
 This package contains the gvfs-fuse server that exports gvfs mounts to
 all applications using FUSE.

gvfs-fuse-dbgsym: debug symbols for gvfs-fuse
gvfs-libs: userspace virtual filesystem - private libraries

 gvfs is a userspace virtual filesystem where mounts run as separate
 processes which you talk to via D-Bus. It also contains a gio module
 that seamlessly adds gvfs support to all applications using the gio
 API. It also supports exposing the gvfs mounts to non-gio applications
 using fuse.
 .
 This package contains private libraries with common functions between
 the daemons and the GIO module.

gvfs-libs-dbgsym: debug symbols for gvfs-libs