Format: 1.8
Date: Fri, 05 Jul 2019 09:04:54 -0400
Source: gvfs
Binary: gvfs gvfs-daemons gvfs-libs gvfs-common gvfs-fuse gvfs-backends gvfs-bin
Architecture: s390x s390x_translations
Version: 1.36.1-0ubuntu1.3.3
Distribution: bionic
Urgency: medium
Maintainer: Launchpad Build Daemon <buildd@bos02-s390x-007.buildd>
Changed-By: Marc Deslauriers <marc.deslauriers@ubuntu.com>
Description:
 gvfs       - userspace virtual filesystem - GIO module
 gvfs-backends - userspace virtual filesystem - backends
 gvfs-bin   - userspace virtual filesystem - binaries
 gvfs-common - userspace virtual filesystem - common data files
 gvfs-daemons - userspace virtual filesystem - servers
 gvfs-fuse  - userspace virtual filesystem - fuse server
 gvfs-libs  - userspace virtual filesystem - private libraries
Changes:
 gvfs (1.36.1-0ubuntu1.3.3) bionic-security; urgency=medium
 .
   * SECURITY UPDATE: file ownership mishandling
     - debian/patches/CVE-2019-12447-1.patch: allow changing file owner in
       daemon/gvfsbackendadmin.c.
     - debian/patches/CVE-2019-12447-2.patch: use fsuid to ensure correct
       file ownership in daemon/gvfsbackendadmin.c.
     - CVE-2019-12447
   * SECURITY UPDATE: race conditions in admin backend
     - debian/patches/CVE-2019-12448.patch: add query_info_on_read/write
       functionality in daemon/gvfsbackendadmin.c.
     - CVE-2019-12448
   * SECURITY UPDATE: user and group ownership mishandling during move
     - debian/patches/CVE-2019-12449.patch: ensure correct ownership when
       moving to file:// uri in daemon/gvfsbackendadmin.c.
     - CVE-2019-12449
   * SECURITY UPDATE: incorrect D-Bus server socket restrictions
     - debian/patches/CVE-2019-12795-1.patch: check that the connecting
       client is the same user in daemon/gvfsdaemon.c.
     - debian/patches/CVE-2019-12795-2.patch: only accept EXTERNAL
       authentication in daemon/gvfsdaemon.c.
     - CVE-2019-12795
Checksums-Sha1:
 3b18b883e8c3442b0f4a8243c49bf8ad95b4ee8e 1596580 gvfs-backends-dbgsym_1.36.1-0ubuntu1.3.3_s390x.ddeb
 2dc68d727334d5aa7c2693ef51b44d2ea6315f81 292536 gvfs-backends_1.36.1-0ubuntu1.3.3_s390x.deb
 eeda994811a62e786ace6c397df821503f4d9a34 5008 gvfs-bin_1.36.1-0ubuntu1.3.3_s390x.deb
 bb5b97fde73f3f2ea2d7e2a34527a957b402db1d 478484 gvfs-daemons-dbgsym_1.36.1-0ubuntu1.3.3_s390x.ddeb
 bed7275f8c541deeb888bc9cccc71181957a73e6 105928 gvfs-daemons_1.36.1-0ubuntu1.3.3_s390x.deb
 97eb8bce57e037df831e9b9d790010c7c5be6b82 399076 gvfs-dbgsym_1.36.1-0ubuntu1.3.3_s390x.ddeb
 e1c904e762ef85ac3f809976694c3a37abc33817 40684 gvfs-fuse-dbgsym_1.36.1-0ubuntu1.3.3_s390x.ddeb
 0bdd7ab450c735b4c8242e54d7d56d92b0920ca5 16476 gvfs-fuse_1.36.1-0ubuntu1.3.3_s390x.deb
 bd80c56e4fc3becb3a1b028380e090a93730f0bd 441860 gvfs-libs-dbgsym_1.36.1-0ubuntu1.3.3_s390x.ddeb
 0eb3760f11ca2b579a5cdd127336558fdc84b7d0 89404 gvfs-libs_1.36.1-0ubuntu1.3.3_s390x.deb
 a0e700aca484e9dfe1174dfa3c9f239f0279b05b 24720 gvfs_1.36.1-0ubuntu1.3.3_s390x.buildinfo
 7ef07cff2eddff5305153015a770cc62e78871d8 104460 gvfs_1.36.1-0ubuntu1.3.3_s390x.deb
 491af477a813e80b1a693de444c02a09e9fa2474 1573603 gvfs_1.36.1-0ubuntu1.3.3_s390x_translations.tar.gz
Checksums-Sha256:
 6f632c87fa2c1cf36b887112f91a6419cc3be34ff42e63712133b50ad9be202e 1596580 gvfs-backends-dbgsym_1.36.1-0ubuntu1.3.3_s390x.ddeb
 4b1b30e572567c25be175e8215bdf27d31344f5d5401a5d2ad35e405ee28a3fe 292536 gvfs-backends_1.36.1-0ubuntu1.3.3_s390x.deb
 22eb8d83893f7036c698a0780eba514d2774cda6844e6bcf2c65327053ebbdb9 5008 gvfs-bin_1.36.1-0ubuntu1.3.3_s390x.deb
 2380517fe89975ca84e2d784c58de941cec0d6202252da95f426b168253f12d6 478484 gvfs-daemons-dbgsym_1.36.1-0ubuntu1.3.3_s390x.ddeb
 3079437b65ec0e4641a40a13b3ffb367c5046a65297b1210aadb66892e04c9e3 105928 gvfs-daemons_1.36.1-0ubuntu1.3.3_s390x.deb
 2a19fef7f251be7f3847d1a4d7a21f19142a0f745a8e1fb45cd1dcbccb8584da 399076 gvfs-dbgsym_1.36.1-0ubuntu1.3.3_s390x.ddeb
 8b2612f324f9ebeef2f0880d7a0d95ec48b55a55fbfffa6413e4d73c07ae42b8 40684 gvfs-fuse-dbgsym_1.36.1-0ubuntu1.3.3_s390x.ddeb
 29796dbf98427998313df7cd855785e710fe5ba41f416bdbc974e39336803202 16476 gvfs-fuse_1.36.1-0ubuntu1.3.3_s390x.deb
 cabefd6522edf2ca6565202442d911b2ffea3f2060696d2b81595f37ba8bc6fd 441860 gvfs-libs-dbgsym_1.36.1-0ubuntu1.3.3_s390x.ddeb
 b59904979d0cefcdb53619b084272619f9841bf1a95f0626e013548cc5540231 89404 gvfs-libs_1.36.1-0ubuntu1.3.3_s390x.deb
 c5a63c60a78c024a4b5430ba672a947a110bbe8fc913dcec2539af45ed14aca0 24720 gvfs_1.36.1-0ubuntu1.3.3_s390x.buildinfo
 e1843c977744f0b4a429b0c499247ffe220079157525ba3111e3d21d0d86b4c8 104460 gvfs_1.36.1-0ubuntu1.3.3_s390x.deb
 4e4f7fa7aef3644c390a21f88bc47a8f29d37d1e4e9ca433375559f6e1f8a70c 1573603 gvfs_1.36.1-0ubuntu1.3.3_s390x_translations.tar.gz
Files:
 e3e7c403b0ded76c7ef9cf6d38cadb6d 1596580 debug optional gvfs-backends-dbgsym_1.36.1-0ubuntu1.3.3_s390x.ddeb
 7ec6e42f9a30d05df5c42cf2e0d86f6f 292536 gnome optional gvfs-backends_1.36.1-0ubuntu1.3.3_s390x.deb
 2b8c8a416c96eea274ebaaec292d9917 5008 gnome optional gvfs-bin_1.36.1-0ubuntu1.3.3_s390x.deb
 889ceb9d25ab406be5929665b3dc7df6 478484 debug optional gvfs-daemons-dbgsym_1.36.1-0ubuntu1.3.3_s390x.ddeb
 0db533d17e4c743d965135c3ea5d705f 105928 libs optional gvfs-daemons_1.36.1-0ubuntu1.3.3_s390x.deb
 1ea1a57634cc8023a2df90f0cf4f508e 399076 debug optional gvfs-dbgsym_1.36.1-0ubuntu1.3.3_s390x.ddeb
 c217926e2c0e685e19505537b5ec5858 40684 debug optional gvfs-fuse-dbgsym_1.36.1-0ubuntu1.3.3_s390x.ddeb
 80fd770432d0a3eaba724783ceae8390 16476 gnome optional gvfs-fuse_1.36.1-0ubuntu1.3.3_s390x.deb
 16c1eeb3a778c8742eb67c2982093658 441860 debug optional gvfs-libs-dbgsym_1.36.1-0ubuntu1.3.3_s390x.ddeb
 03b43c5db808576ec2189b427a952458 89404 libs optional gvfs-libs_1.36.1-0ubuntu1.3.3_s390x.deb
 f694e5fc6284a8d8e7284d8d9bf49a7c 24720 gnome optional gvfs_1.36.1-0ubuntu1.3.3_s390x.buildinfo
 9fe1877ea26a63ed67f4e36f55ba4a31 104460 libs optional gvfs_1.36.1-0ubuntu1.3.3_s390x.deb
 5b096a97e905bdc2bed0a2dffcab66b9 1573603 raw-translations - gvfs_1.36.1-0ubuntu1.3.3_s390x_translations.tar.gz
Original-Maintainer: Debian GNOME Maintainers <pkg-gnome-maintainers@lists.alioth.debian.org>