-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Sun, 29 Mar 2026 04:15:46 +0200 Source: gvfs Binary: gvfs-common Architecture: all Version: 1.50.3-1+deb12u1 Distribution: bookworm Urgency: high Maintainer: all / amd64 / i386 Build Daemon (x86-conova-01) Changed-By: Andreas Henriksson Description: gvfs-common - userspace virtual filesystem - common data files Closes: 1129285 1129286 Changes: gvfs (1.50.3-1+deb12u1) bookworm; urgency=high . * Non-maintainer upload by the LTS Security Team. * CVE-2026-28295 ftp: Use control connection address for PASV data (Closes: #1129285) * CVE-2026-28296 ftp: Reject paths containing CR/LF characters (Closes: #1129286) * debian/gbp.conf: Set debian branch to debian/bookworm Checksums-Sha1: c3a09869932a6bf8e81f7f30dd6c83d78aae1de7 479664 gvfs-common_1.50.3-1+deb12u1_all.deb efc9861d78c2b38c576ff7779326a4d06e30b888 20114 gvfs_1.50.3-1+deb12u1_all-buildd.buildinfo Checksums-Sha256: 69f50963f879fb15a0cb7056a6cb6f77bdab96b669290d33129db5724b36b291 479664 gvfs-common_1.50.3-1+deb12u1_all.deb e4483c9004c9bf3a63614b2fe294243b038296c719bf98394c03de06e7ae85e8 20114 gvfs_1.50.3-1+deb12u1_all-buildd.buildinfo Files: 2d47f69bb29783208ecfc3486fdc2638 479664 libs optional gvfs-common_1.50.3-1+deb12u1_all.deb f40cbc9d142a5b5d21ed95f490ced3d7 20114 gnome optional gvfs_1.50.3-1+deb12u1_all-buildd.buildinfo -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEE7cQ9mRD4+dWjjrb6PkCWRKsh20cFAmnQP3oACgkQPkCWRKsh 20dQnQ//XfGSjYTjKwfM476c+o2j0Pu/RjMKcEaCdSOYahZ4D/UL8BfycOTmaUnm EwkkpRI/oFUYxNlkmW2jGPjTwraFLYzGjZdPsUdVyRJ0VC/vsvQ5chsI05KhQSWl Ck2QF+EXCtKoZEeFdATwrM/dzKpMIELnH3sLN67M1H+vut02uaYjHQaez/cQLvNl KwaWj/8cRuRYqgzVoC/i92fUErNfrLG1cKYrskTYNJ48lwbrjQFh9xeEM+8cVWQd wsBDpoz2Ta7P3IRA4V7VHlccCJYrr5VrHOq8VYAgWB9lUM8rXeh3tkoTn5/EndIT Tcsqt9ikDcBKgnafObaVmR8p7DwPq4O5ZveuR0PHFIUOxlER2rd4LUIuO7Pffe+U 9lMZSgje3BTQnDsbgytyCxXSiHKGNTQurxJBqgXmRwSKRhdBeK0quhI/4RjgwDrh BzuJkyBvaIYnhan9hCVAqbTLTR6PqvfyrwNO0fG1bmA9mWpavbiEYyiBlwsemVtE PrMYIRrk2Nl8lx6cP2pUan1ZXUr5pI3cRw6wek2SAgLILtnzL/J13trPRAqmZoG2 DGc/HalSLjzvrIFUF7LIfTuln2IIVdTID/o3OWNPMnSRJMLiWW6Ss8PZLyA4K8A3 mAJSNWZIDk1wJHDp2001JsRKw7UkBYL4P6JRZYP2plX0V6uCyY8= =NWi/ -----END PGP SIGNATURE-----