-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Sun, 29 Mar 2026 04:23:19 +0200 Source: gvfs Binary: gvfs gvfs-backends gvfs-backends-dbgsym gvfs-daemons gvfs-daemons-dbgsym gvfs-dbgsym gvfs-fuse gvfs-fuse-dbgsym gvfs-libs gvfs-libs-dbgsym Architecture: amd64 Version: 1.57.2-2+deb13u1 Distribution: trixie Urgency: high Maintainer: amd64 / i386 Build Daemon (x86-ubc-01) Changed-By: Andreas Henriksson Description: gvfs - userspace virtual filesystem - GIO module gvfs-backends - userspace virtual filesystem - backends gvfs-daemons - userspace virtual filesystem - servers gvfs-fuse - userspace virtual filesystem - fuse server gvfs-libs - userspace virtual filesystem - private libraries Closes: 1129285 1129286 Changes: gvfs (1.57.2-2+deb13u1) trixie; urgency=high . * Non-maintainer upload by the LTS Security Team. * CVE-2026-28295 ftp: Use control connection address for PASV data (Closes: #1129285) * CVE-2026-28296 ftp: Reject paths containing CR/LF characters (Closes: #1129286) * debian/gbp.conf: Set debian branch to debian/trixie Checksums-Sha1: 8b4f7215db946bbc5f317dd05478f7a57ffec29f 1663956 gvfs-backends-dbgsym_1.57.2-2+deb13u1_amd64.deb 14300504589ac942b8fcabebec5be27a51dd84d2 370112 gvfs-backends_1.57.2-2+deb13u1_amd64.deb c33912c4e327b154b0c039b961af1ee957eb87d7 448684 gvfs-daemons-dbgsym_1.57.2-2+deb13u1_amd64.deb 1e0cd6194093a0f95b87700885508a703e25d678 121152 gvfs-daemons_1.57.2-2+deb13u1_amd64.deb 07766da48f584cfe3de3510f2f60e2194deb53b7 414184 gvfs-dbgsym_1.57.2-2+deb13u1_amd64.deb f188c58fa9e1b8a16f1b0b84b873fcca7b1d9eec 48052 gvfs-fuse-dbgsym_1.57.2-2+deb13u1_amd64.deb a2dfe96f04243a2d88e32fe6c0458140e9f1af32 22956 gvfs-fuse_1.57.2-2+deb13u1_amd64.deb 169b8b39d424bed9de0a0d8eb8bd3ea07fdbc37d 375236 gvfs-libs-dbgsym_1.57.2-2+deb13u1_amd64.deb c0e54515244cbcfbaab0297c2b5b71938d242fa0 103044 gvfs-libs_1.57.2-2+deb13u1_amd64.deb 4ff7ba65746019034511114c4c3fffd9774d8c7c 18480 gvfs_1.57.2-2+deb13u1_amd64-buildd.buildinfo 941f45294ba6a21b745a49a7df4dbc9bbb35df2d 127924 gvfs_1.57.2-2+deb13u1_amd64.deb Checksums-Sha256: ae8b088c3444b830d35a0fea6b158927621ffe30ad0e41ea255cce99e8dcdbfb 1663956 gvfs-backends-dbgsym_1.57.2-2+deb13u1_amd64.deb 1657dc14e05088590172f2b0d89bccef28ce35923f8f65dae01802696359e9be 370112 gvfs-backends_1.57.2-2+deb13u1_amd64.deb a75fdb922f5c17094228178424321a38a8c59859eea3c1cf8484308fc578d9dd 448684 gvfs-daemons-dbgsym_1.57.2-2+deb13u1_amd64.deb d7892267ef7d55c2c812c8767f803b608f8fae3f5fa58f3e5054df5dd592d8d0 121152 gvfs-daemons_1.57.2-2+deb13u1_amd64.deb 5744fa14f1cc3037ab654bbb9870b2af56a48cb7e63506e0f03e6a9df2d14711 414184 gvfs-dbgsym_1.57.2-2+deb13u1_amd64.deb 20a4a95c7901952c69e72b76b10419cd098e47bb4f52155e93f59ab36a5ebfe8 48052 gvfs-fuse-dbgsym_1.57.2-2+deb13u1_amd64.deb 292ec259cc9991240fc6efd687ec0c3c8bb6e48d76803cb3536b0f5c70080a3e 22956 gvfs-fuse_1.57.2-2+deb13u1_amd64.deb 9da91a1f9103a210acfe8fb29f18086f5ce8b93181615dfc38c6f21e71bea249 375236 gvfs-libs-dbgsym_1.57.2-2+deb13u1_amd64.deb 680808e23752b3623c1b53395597997d6fe8b84b11e0d71a01a8eac5de3d7cfb 103044 gvfs-libs_1.57.2-2+deb13u1_amd64.deb 13caf5b293408044701d554ba609548a38a29980599406234271ea41cdb422b5 18480 gvfs_1.57.2-2+deb13u1_amd64-buildd.buildinfo 32ff891607bbbcfbe17f30f6218da5de830af450a2120ab7a3bf5ee9c3671324 127924 gvfs_1.57.2-2+deb13u1_amd64.deb Files: 20218b63b07cdba77d519c0c8a60e1e0 1663956 debug optional gvfs-backends-dbgsym_1.57.2-2+deb13u1_amd64.deb a84d1cf10417d198d98781a256beb17b 370112 gnome optional gvfs-backends_1.57.2-2+deb13u1_amd64.deb cd05d8d0e618399642dd71d693f68e6e 448684 debug optional gvfs-daemons-dbgsym_1.57.2-2+deb13u1_amd64.deb 49bb23377b2de604945b1b4a9e3f4ed6 121152 libs optional gvfs-daemons_1.57.2-2+deb13u1_amd64.deb 05bdf52a3afcd6b7929a4296043f2e02 414184 debug optional gvfs-dbgsym_1.57.2-2+deb13u1_amd64.deb 16d6849c928a2aca82d5b24debfd442c 48052 debug optional gvfs-fuse-dbgsym_1.57.2-2+deb13u1_amd64.deb ad2434a8a5d7e8cf9e8cf9c09398b754 22956 gnome optional gvfs-fuse_1.57.2-2+deb13u1_amd64.deb 6931eadb78b11e9eb6727e378f596596 375236 debug optional gvfs-libs-dbgsym_1.57.2-2+deb13u1_amd64.deb 23d0343ff6f04d3781ca8d64e4142a8d 103044 libs optional gvfs-libs_1.57.2-2+deb13u1_amd64.deb 5824902dcb6f0236f524418c42494716 18480 gnome optional gvfs_1.57.2-2+deb13u1_amd64-buildd.buildinfo ed1f8735a168b2cf68579db9fbbab133 127924 libs optional gvfs_1.57.2-2+deb13u1_amd64.deb -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEmtr4KUMaso2EQ6NrTwt/65ON6zcFAmnQHB8ACgkQTwt/65ON 6zdUjA/+OgqEVPV9CzrWsHO3zsAbnfTbJWnIomEd4c1WkhzzhZWUNDAkLACuxRe2 HJwu91WVpN5ZcbBLwH15SVdzBKr1zCxScNKKfTL6NTOvYVm5iYlHCIaLgjMYINtz hDib6ozRUKAUBWWOo7hHUG2PUGJHP+dP1wfJ9PJ/998j5V47hhuV56xXOJd0bJOD Pi1IuxjxJyR8OydwFwhXTBEGp4xNS9P95fuApJ11gmkVrZqHUrPz2i7cnZPzD7SY UsQzNrYZEySG38nVldN1VAzaPP4H+9wQIgswuOMAQu0fXR77GRTS6z2Qz+sRZNik 2qY/b7alZohQ4n0o+l+4k70ynERBWgHaqChz2Ku5wp4Hxp4rH5koIz6FHlNp2Ztx tdvcSNUvml2vA5NsgfE2CzHDO22BCam0Tx2gMGUK9mgnPVz2HqARacZA31gW7pQa SpT6yJs1EjYQbpz6UiFNxTqwMgzkX/zQzs3TANX571lW1yl4izzFt9xFO2QcacLd EalSei7xQ/cxfsn0fJyGEXX5pefgyW0oi08YcRdfmSKTwq55/irrykdyxJGQCETi ru17GhupGA8vByN9Rz3fRJjVZ6Y/y8lShH9Rg54dTbaMFSqVmWxR5Dg6Oxx+yDPN /EVGDsNBWSimBD/4AT/JH5VrovI/Zlfhl3RWkNSAmKWWUeZaonM= =RV2e -----END PGP SIGNATURE-----