-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Sun, 29 Mar 2026 04:15:46 +0200 Source: gvfs Binary: gvfs gvfs-backends gvfs-backends-dbgsym gvfs-daemons gvfs-daemons-dbgsym gvfs-dbgsym gvfs-fuse gvfs-fuse-dbgsym gvfs-libs gvfs-libs-dbgsym Architecture: amd64 Version: 1.50.3-1+deb12u1 Distribution: bookworm Urgency: high Maintainer: amd64 / i386 Build Daemon (x86-ubc-01) Changed-By: Andreas Henriksson Description: gvfs - userspace virtual filesystem - GIO module gvfs-backends - userspace virtual filesystem - backends gvfs-daemons - userspace virtual filesystem - servers gvfs-fuse - userspace virtual filesystem - fuse server gvfs-libs - userspace virtual filesystem - private libraries Closes: 1129285 1129286 Changes: gvfs (1.50.3-1+deb12u1) bookworm; urgency=high . * Non-maintainer upload by the LTS Security Team. * CVE-2026-28295 ftp: Use control connection address for PASV data (Closes: #1129285) * CVE-2026-28296 ftp: Reject paths containing CR/LF characters (Closes: #1129286) * debian/gbp.conf: Set debian branch to debian/bookworm Checksums-Sha1: 5658a17138333da2707506eda7b4a9f93fd1b3c0 1510736 gvfs-backends-dbgsym_1.50.3-1+deb12u1_amd64.deb d0702f7c52a027d0d601c830c81f7cdbe8537cc8 364772 gvfs-backends_1.50.3-1+deb12u1_amd64.deb d9bfc408f2caa779ff854f6de3e1d4de2611f775 448756 gvfs-daemons-dbgsym_1.50.3-1+deb12u1_amd64.deb fddd6d8c12fa615e5b320a63309a0e35aa510645 125408 gvfs-daemons_1.50.3-1+deb12u1_amd64.deb 6d2ac7be23135451a6d4a3dabea7f0c21e7e68bb 382492 gvfs-dbgsym_1.50.3-1+deb12u1_amd64.deb 7a497573b6b572b73462106b860a97db6ab0d50d 47352 gvfs-fuse-dbgsym_1.50.3-1+deb12u1_amd64.deb 5438882af7700e3a54f297ffd871e25ce46f00be 20632 gvfs-fuse_1.50.3-1+deb12u1_amd64.deb e79dee68c7bf2e899f88b9d742bbd1c0cc354ea9 355016 gvfs-libs-dbgsym_1.50.3-1+deb12u1_amd64.deb 573ad069272b9c9f3834fbc11cdb4ba06f0bea05 102548 gvfs-libs_1.50.3-1+deb12u1_amd64.deb c2ed91d568b45c02422caba1fd5b76202ea3600a 22823 gvfs_1.50.3-1+deb12u1_amd64-buildd.buildinfo 20c64d58e4dd97d01c4a1a553ceb9d9ec5189080 122696 gvfs_1.50.3-1+deb12u1_amd64.deb Checksums-Sha256: d902704952f1bc5f52538b18e2800b34421238000c3c63bf7f33182dd57ccf6c 1510736 gvfs-backends-dbgsym_1.50.3-1+deb12u1_amd64.deb a799ef80218a1fd88ede05ca85410bbf0dbcc15907e4c98b99d0b6d616c24da3 364772 gvfs-backends_1.50.3-1+deb12u1_amd64.deb 95b06dbff2b305ef9cbbf35ef4d7c9c55fad6d3a2546a1956c2daa7aec6dd5d6 448756 gvfs-daemons-dbgsym_1.50.3-1+deb12u1_amd64.deb 25eb2e8887bce52507e255d4ff150997612fcf293aa8d03ae9ada8a34d2c53d6 125408 gvfs-daemons_1.50.3-1+deb12u1_amd64.deb e4d40aaeb0c92c032b83d3adb3c1c914408952017b8cd0c7546da6bae3872b17 382492 gvfs-dbgsym_1.50.3-1+deb12u1_amd64.deb 224a53ccd7162ac11a56304312960eb9d7fd4439e323f18dbe2956dd8beff078 47352 gvfs-fuse-dbgsym_1.50.3-1+deb12u1_amd64.deb b8d3aba274d52e632a6ff07e324ad2261760271d0070a901b5931fa6d98e4c27 20632 gvfs-fuse_1.50.3-1+deb12u1_amd64.deb cff5283d0c1bd849f56ea5104d5f0629c24b88ce196293e6f9b5fc3c441c801a 355016 gvfs-libs-dbgsym_1.50.3-1+deb12u1_amd64.deb 62dfefb3ce854a273ffcf11cf2781b024501a1793c191e44b3f1096936dedbe7 102548 gvfs-libs_1.50.3-1+deb12u1_amd64.deb 2656b91b0dd5317b748004a76164dc312f0d60fe2f413124d777bd84576e5bca 22823 gvfs_1.50.3-1+deb12u1_amd64-buildd.buildinfo 24308473879207402487844038de5ef6fa92edeb7aab56443235aec0f9378090 122696 gvfs_1.50.3-1+deb12u1_amd64.deb Files: 41e38a138e66b57f995ebc34d2fb1772 1510736 debug optional gvfs-backends-dbgsym_1.50.3-1+deb12u1_amd64.deb 8a8dde3d1d4e112da5002111e826bf03 364772 gnome optional gvfs-backends_1.50.3-1+deb12u1_amd64.deb 21cb61509afbb8b6b848ffd31b693667 448756 debug optional gvfs-daemons-dbgsym_1.50.3-1+deb12u1_amd64.deb 8288d6ed84b7e85e0d0bb9c318afadd6 125408 libs optional gvfs-daemons_1.50.3-1+deb12u1_amd64.deb 498bb1669ec258bdca79b696835e80f2 382492 debug optional gvfs-dbgsym_1.50.3-1+deb12u1_amd64.deb aded114ad68de4130f30a5f6dc4bb130 47352 debug optional gvfs-fuse-dbgsym_1.50.3-1+deb12u1_amd64.deb d114aa4a55d8f45665a5ae2ec0340162 20632 gnome optional gvfs-fuse_1.50.3-1+deb12u1_amd64.deb 2e869f090fe0596b34da77e6688ea1ee 355016 debug optional gvfs-libs-dbgsym_1.50.3-1+deb12u1_amd64.deb 9c2bfc1b301f1c7ba445862f24f27779 102548 libs optional gvfs-libs_1.50.3-1+deb12u1_amd64.deb 7a356ceb247948fa5f99b49e45ccf8ab 22823 gnome optional gvfs_1.50.3-1+deb12u1_amd64-buildd.buildinfo 56c6d1680d0b02039a62edd8293a13ad 122696 libs optional gvfs_1.50.3-1+deb12u1_amd64.deb -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEmtr4KUMaso2EQ6NrTwt/65ON6zcFAmnQP2kACgkQTwt/65ON 6zeV1A//Uam1Y2LfNXqdoHyfv9xMewqcHwqlAB52Qe5FiE/YQHmlXzKuXoEK/nTL jiOn5kGESS6t+oKEm2VM6L0tWbnuGECMAqP6zg7V1cRwgb1uOoC69wjl+/l2MrS7 oCm61P4FuduJzkCSwgYzTf9UOTuEUicNIEPyxBphwWgCWdqiNwEg4YogFW5sj5aU TZyyxfEoQFmcQcxnWN8HR0NH+utyetkVPQv2VLUuB1fBYYp9OTmXvRjmLM6/GnjP ge3SRkEL2ueXNaQy/KdhLwf7IC+GJgwxpiNaTetIZl7Qk52Z13CZy0aATCxSYMm1 i0oxQevYXDqKpMyvm25WPKq8wueRyXIQdqoKJSpA10FfEUMKeGPIwcET5X+KE2BX whhC5HzB3ipjvvB/lwhIuDccOQ8TMz2JmQYxH5Xrn4ViOiCfxA0ohvmiT+dUrb47 yLCEEsX0iolk1QlbX8BYxfNjc5bFgKayeNpGXZ6XgEU2c4hBjxs+HdDfU3rtXt7S EHSZwo6S0wGAlKiDEOVTNjr3E3C6N+CHjP9+VNpIPFxOGhFZi6YclkvMAPzuSfCb FrJWkfXKefQrqvPOP3ziMCSW/PcffzrYTqYPkJnUSQyz8xQZxcxRcu4OxYvo4+OE Ycp4bHhTPr9+gG3tSxYZW4h22XoPfEpiZUb3CLiE8KrJtioy4ZA= =qHZq -----END PGP SIGNATURE-----