-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Sun, 29 Mar 2026 04:15:46 +0200 Source: gvfs Binary: gvfs gvfs-backends gvfs-backends-dbgsym gvfs-daemons gvfs-daemons-dbgsym gvfs-dbgsym gvfs-fuse gvfs-fuse-dbgsym gvfs-libs gvfs-libs-dbgsym Architecture: i386 Version: 1.50.3-1+deb12u1 Distribution: bookworm Urgency: high Maintainer: i386 Build Daemon (x86-grnet-01) Changed-By: Andreas Henriksson Description: gvfs - userspace virtual filesystem - GIO module gvfs-backends - userspace virtual filesystem - backends gvfs-daemons - userspace virtual filesystem - servers gvfs-fuse - userspace virtual filesystem - fuse server gvfs-libs - userspace virtual filesystem - private libraries Closes: 1129285 1129286 Changes: gvfs (1.50.3-1+deb12u1) bookworm; urgency=high . * Non-maintainer upload by the LTS Security Team. * CVE-2026-28295 ftp: Use control connection address for PASV data (Closes: #1129285) * CVE-2026-28296 ftp: Reject paths containing CR/LF characters (Closes: #1129286) * debian/gbp.conf: Set debian branch to debian/bookworm Checksums-Sha1: 3805c71d8c7ca7529ced5149cf4a304000e9b0e9 1191240 gvfs-backends-dbgsym_1.50.3-1+deb12u1_i386.deb f4d1e0915c3079f90d0a2fc886d55a20ebabee08 395044 gvfs-backends_1.50.3-1+deb12u1_i386.deb eb54f8586ca710bbbfa61f03f6288be84b695ecc 369188 gvfs-daemons-dbgsym_1.50.3-1+deb12u1_i386.deb 2c0d218cb707342e986d88dbbf9f437c44ba7ac0 135516 gvfs-daemons_1.50.3-1+deb12u1_i386.deb ee658983351a05578b78fc1465657f1bd8c24821 307072 gvfs-dbgsym_1.50.3-1+deb12u1_i386.deb 7241d660696f48beee59f1cd8f8b3b737b9b35ef 41872 gvfs-fuse-dbgsym_1.50.3-1+deb12u1_i386.deb ac2fa1d6d66c789f455d1262bc052d59cc2bb226 22364 gvfs-fuse_1.50.3-1+deb12u1_i386.deb 9ad5bfe85eb1c93f4e7778bea6c82a419903f8f3 269364 gvfs-libs-dbgsym_1.50.3-1+deb12u1_i386.deb 8a7534eb2c7b7b4fd43e01b0a04484e3377df1c8 107232 gvfs-libs_1.50.3-1+deb12u1_i386.deb 166d80464852c9d9274cbd8755cb5024a7f83c88 22682 gvfs_1.50.3-1+deb12u1_i386-buildd.buildinfo a7070761493fd3886b8dc2d244ace21363ee0b79 132840 gvfs_1.50.3-1+deb12u1_i386.deb Checksums-Sha256: 62844736540a1845acec1dfd13ed51623c1e671a8827ed61355eff7d06f259b0 1191240 gvfs-backends-dbgsym_1.50.3-1+deb12u1_i386.deb f86ce1108059bcc401c304cae0270443d61dd480e735bf2d6f1f53c373cd664f 395044 gvfs-backends_1.50.3-1+deb12u1_i386.deb 4f3e43c65ff7c6f6912a34418596fc46e0f56eadd98668b92b0f1d0e358a2314 369188 gvfs-daemons-dbgsym_1.50.3-1+deb12u1_i386.deb 46db5540a17d047c93243c719dfbc56da28ae0cbe85725429a5409bc3aec34c0 135516 gvfs-daemons_1.50.3-1+deb12u1_i386.deb 5a551d5e6aad267e25b2d9331227a6447a4d5571f462752633b6f424bf4be9ab 307072 gvfs-dbgsym_1.50.3-1+deb12u1_i386.deb 50af8f0292ab2fcc4062f9989fbcf5f2bff870d09632f7630b1da1add6b2760d 41872 gvfs-fuse-dbgsym_1.50.3-1+deb12u1_i386.deb 5f9f93edb3aaf1211734630012951f8041fc28f73fcf778f0a95d4c6e58817f0 22364 gvfs-fuse_1.50.3-1+deb12u1_i386.deb 01edeb29e6be4b4edf6590a284689a9376e7157cd5dbedd684e768c02eff8a10 269364 gvfs-libs-dbgsym_1.50.3-1+deb12u1_i386.deb 3077023c22925926521fc7e3636a196cfdf523e3f436d888e854d62e02fb95d9 107232 gvfs-libs_1.50.3-1+deb12u1_i386.deb d616b06541038913013bada4610a347cbf663c7fd6aaa6d1363da9ba940ed0d1 22682 gvfs_1.50.3-1+deb12u1_i386-buildd.buildinfo 8b72239646af4a4a95cfa5e2d066e41098bfeec686004fefb0af89d222c35eca 132840 gvfs_1.50.3-1+deb12u1_i386.deb Files: d746e6efd6b21bc1923f504ce69fa2aa 1191240 debug optional gvfs-backends-dbgsym_1.50.3-1+deb12u1_i386.deb b67da6f8fa3ff6ec171d09d2e4b7dc9b 395044 gnome optional gvfs-backends_1.50.3-1+deb12u1_i386.deb a0b2c7c009a6b9545f6e56d8ef1feb6d 369188 debug optional gvfs-daemons-dbgsym_1.50.3-1+deb12u1_i386.deb a3c1d38cc265f4a112e8038f2ad40bbf 135516 libs optional gvfs-daemons_1.50.3-1+deb12u1_i386.deb d58a1616b4dbb730e6457800d3293825 307072 debug optional gvfs-dbgsym_1.50.3-1+deb12u1_i386.deb a38012aab1a7f477235d21e3d3d18cc8 41872 debug optional gvfs-fuse-dbgsym_1.50.3-1+deb12u1_i386.deb 5efb2b0827a1a04d8041e27670b385dd 22364 gnome optional gvfs-fuse_1.50.3-1+deb12u1_i386.deb 00a3c1b5d1555a8075a129f5be8be53d 269364 debug optional gvfs-libs-dbgsym_1.50.3-1+deb12u1_i386.deb 9dbdff7c26f7710d6b2f87138269bb48 107232 libs optional gvfs-libs_1.50.3-1+deb12u1_i386.deb 3728ab9b768995d74ebb81e2040d0294 22682 gnome optional gvfs_1.50.3-1+deb12u1_i386-buildd.buildinfo a2f3027a9b03d75f73b6ed3bd6e84340 132840 libs optional gvfs_1.50.3-1+deb12u1_i386.deb -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEPAUaMA0H0rOy6qBWf2INRiCdaWIFAmnQP3EACgkQf2INRiCd aWLCrw/9HkhNCS/REA8tJVR++4wvSPxf1FXfx6K3IiuXaKtkEO53rGCM5hvzWPoE SaTbMoz7+wsxngWJ4izUY0O4oMSj9tAitGGgHJh/1vKKLt47G3cHutWIM6NRS2Ic WCCzwRSK+HJIBa97+4lAMMX8YcRlO/vwbQDdvcc11yCwPiSzdXeW3sywA2daL+rb vNB9VroETmtBNybcjgkfSDCOAZZv5ywEy4bkoHnp7WP/xipDNul5HIW//OH0KuKT x3vF0HZoZFWasu/8fppsAYvvQgU9zds13aZ1zumsbRWJ1J221dh+eie332aXzkFs A4fd4/Y4lqtmJ4YmzOXx3YhBAyI7PWphpSNd8sN51EG1NxjfjPbr42n92i8GUGOo J1bHpYXNG7sjj1YssXovqPn52EwzMXBgvEoadkBV3RQ+Nb3VAYIwB4FwFqKFWnUz VDha5aHHv8msmXwXa/Pfb3z8Y98dAumgpmNWyDWYm1FMmMPO4vf/kpICpCHClSsk QCF2nbii+HxOLL9ITI71pCeEBwUN5LelPDhx7ZV9HtybMl5+rOyUlYVWJXpKxTzQ kn9hc2EWvFhKzL/0GeFuB+Ca5xQhM/GRZlqsERNgTfwIdR/HFUx0GJEj6Md6aoFC 0fWqRAE3wSb5SzyfGinJaMPZqemErPCxOTSAH9Qj4auo7xyzJ8E= =yCzh -----END PGP SIGNATURE-----