-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Sun, 29 Mar 2026 04:23:19 +0200 Source: gvfs Binary: gvfs gvfs-backends gvfs-backends-dbgsym gvfs-daemons gvfs-daemons-dbgsym gvfs-dbgsym gvfs-fuse gvfs-fuse-dbgsym gvfs-libs gvfs-libs-dbgsym Architecture: i386 Version: 1.57.2-2+deb13u1 Distribution: trixie Urgency: high Maintainer: all / amd64 / i386 Build Daemon (x86-conova-01) Changed-By: Andreas Henriksson Description: gvfs - userspace virtual filesystem - GIO module gvfs-backends - userspace virtual filesystem - backends gvfs-daemons - userspace virtual filesystem - servers gvfs-fuse - userspace virtual filesystem - fuse server gvfs-libs - userspace virtual filesystem - private libraries Closes: 1129285 1129286 Changes: gvfs (1.57.2-2+deb13u1) trixie; urgency=high . * Non-maintainer upload by the LTS Security Team. * CVE-2026-28295 ftp: Use control connection address for PASV data (Closes: #1129285) * CVE-2026-28296 ftp: Reject paths containing CR/LF characters (Closes: #1129286) * debian/gbp.conf: Set debian branch to debian/trixie Checksums-Sha1: d42bf6fd8ef8d5b11dfe582a9dfb1bcf7b0f7a95 1072148 gvfs-backends-dbgsym_1.57.2-2+deb13u1_i386.deb e47e62872dca032faddde28b24b15ca68669e3c8 322672 gvfs-backends_1.57.2-2+deb13u1_i386.deb 36aaf0458490b583b6879f9c9d2f62bd85e4b21e 375264 gvfs-daemons-dbgsym_1.57.2-2+deb13u1_i386.deb 3ce4728b18886ee714ad1d322ffc2042a43eda50 129352 gvfs-daemons_1.57.2-2+deb13u1_i386.deb 12705674b1b455c4ca1c2153a7cb9048f9b41391 338504 gvfs-dbgsym_1.57.2-2+deb13u1_i386.deb 9c90ff025414ba206b9414ac92457f6e37b2b189 42592 gvfs-fuse-dbgsym_1.57.2-2+deb13u1_i386.deb 0e9a93c16f5b45ee81c41772eb2127f16339f3af 24564 gvfs-fuse_1.57.2-2+deb13u1_i386.deb cee98db2d94fc116fcb35835c04a61fe4317deef 292788 gvfs-libs-dbgsym_1.57.2-2+deb13u1_i386.deb 3a0926c20fd7c15ae28917c961b0c584474b940b 105504 gvfs-libs_1.57.2-2+deb13u1_i386.deb 31a8b63dc24136d46b754898ff1b05c1b2814436 17006 gvfs_1.57.2-2+deb13u1_i386-buildd.buildinfo 14de1f785473e07c86bee4976e26411f7f53f660 136212 gvfs_1.57.2-2+deb13u1_i386.deb Checksums-Sha256: 2c27666926a6eb2afbef2a3345ce9662d6e02091578fb4874407bdc53a772fac 1072148 gvfs-backends-dbgsym_1.57.2-2+deb13u1_i386.deb bb94dfcd95ae2cc37c798f7c5fc89807a8e5cac3143995f96282aabbb40e2b21 322672 gvfs-backends_1.57.2-2+deb13u1_i386.deb ca21101879a9ae6051f0c1856ace8381e6949adafde3afe071de7433616349d8 375264 gvfs-daemons-dbgsym_1.57.2-2+deb13u1_i386.deb 339a244487b67883aaf193dac15750c18f7fd4e3b09066a4100545bb1eddf407 129352 gvfs-daemons_1.57.2-2+deb13u1_i386.deb 2ae820b6bbb5cc0afa192796f1b4f057517337c9614ff9f791fe836d0b91627f 338504 gvfs-dbgsym_1.57.2-2+deb13u1_i386.deb 71bdeae6a991e4626e01a0c8366d0a53d8826e438c20215001afccccded8ed88 42592 gvfs-fuse-dbgsym_1.57.2-2+deb13u1_i386.deb 4b9127529aaf94503943da0c06fb02a4a45c49ad70b2a8329a54ef1464f4ef5b 24564 gvfs-fuse_1.57.2-2+deb13u1_i386.deb affaf68d35ed627f9540027916c4299595071d15e2cb3262a517cf3448189741 292788 gvfs-libs-dbgsym_1.57.2-2+deb13u1_i386.deb d72bc7518b3a2ccfd391123e1326586830fac931a41e657f7e9825810dc3df12 105504 gvfs-libs_1.57.2-2+deb13u1_i386.deb 99fb2159c1fe97fd210c248ce0cfedd0fd2ac366770d21e8ec41c647ad448af1 17006 gvfs_1.57.2-2+deb13u1_i386-buildd.buildinfo 0e86407c40848ac219a6d642d1cd66b29424baba0453fc16ef7fbf2a66148e85 136212 gvfs_1.57.2-2+deb13u1_i386.deb Files: bf802d212c4ce53bd6c3ad8f495ab08c 1072148 debug optional gvfs-backends-dbgsym_1.57.2-2+deb13u1_i386.deb c7079532adf812b7b09afada7c3c9947 322672 gnome optional gvfs-backends_1.57.2-2+deb13u1_i386.deb f1b22878acac1a0b93e9a531ae7d9c38 375264 debug optional gvfs-daemons-dbgsym_1.57.2-2+deb13u1_i386.deb d0d5da10dab3799943a973765dc1d496 129352 libs optional gvfs-daemons_1.57.2-2+deb13u1_i386.deb ca5de7193423519296100ef2ff2abc74 338504 debug optional gvfs-dbgsym_1.57.2-2+deb13u1_i386.deb c33e1316c430d683d7963c5eaac1ba96 42592 debug optional gvfs-fuse-dbgsym_1.57.2-2+deb13u1_i386.deb f1eb0c25a5fefa252034dc62d373fbe6 24564 gnome optional gvfs-fuse_1.57.2-2+deb13u1_i386.deb b0858c654f6a3d4088c3dcdaffd5f9fb 292788 debug optional gvfs-libs-dbgsym_1.57.2-2+deb13u1_i386.deb 7bb03518679708847bd925713be4bd85 105504 libs optional gvfs-libs_1.57.2-2+deb13u1_i386.deb 46c0cc0163e9d8ab93f05899757bcf9d 17006 gnome optional gvfs_1.57.2-2+deb13u1_i386-buildd.buildinfo fecd6298e9e789f70e51400b20b8a294 136212 libs optional gvfs_1.57.2-2+deb13u1_i386.deb -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEE7cQ9mRD4+dWjjrb6PkCWRKsh20cFAmnQHY4ACgkQPkCWRKsh 20fSGg/9ExskcyJwedbsg/69DmcJMBGLjdRDs1wgtvdfRfsTJP35vopljOypP9Vr lD4yCAs1N86Mb3qSjZgONSWElVDIciEto7exkktlJunn1INjhHZ4I5ALQJP2YPOV WoniqtJPDWfmBYZNU/Gi6h0wfM62WSo3CFLvEf4kS7AIPjAAiEPVYP77tc9WC0CC PJhTRbcA//9kuLsouwwFgKzZA8lK6Bp0Y6NhR2uFdM8bHjDQzQwoCCDVN0PG70qZ 69hpxsRvkSzB6tAA1NcCT5aUADPaJ/hBtUPW5Rg+AsUg2n9M+sRoFcQgDrScrM++ lZRs/iPaoERkU0suZRTpuvvl9O66sJMLMJPb3ryaJhQ3CrSxFoOK4xcGZoIc1hm8 N+PcKvEtGk95BrzH9QiPUebrBIjTaDo9/HkeWov5o0bn6QlQLUsMHDTmxU8k+KNN NqfdcNCw8NWhUbBfPLObAp7N/v64+xuJ93CTdaiY21lpm5oq8pLvr6Rq8KEIQwGI mAEiyKIP23MfdulVWawGa8DcbX/zH9f4yXeud2xxB06qndnYcAc90k2XglKqhlBh gImE5fkbStmqUPVLjduFEciMgvs1olr0MgIdE2o2aylDDHafNxv1TmA2V7mICwe0 iJIUXKhb7rN4Scfp52bm7oRBGIRUIna8MNdEn4qjsU0ldZkN2TU= =RP5/ -----END PGP SIGNATURE-----