[CLSA-2026:1792186767] gvfs: Fix of CVE-2026-84268
Type:
security
Severity:
Important
Release date:
2026-10-17 00:46:53 UTC
Description:
- Fix CVE-2026-84268: sftp backend read_reply() used the server-supplied data length without checking it against the requested size, allowing a malicious SFTP server to overflow the read buffer; reject such replies with an error (upstream ea1322da, 1590471a)
CVEs fixed:
Updated packages:
  • gvfs-1.48.1-4.el9_2.tuxcare.els1.aarch64.rpm
    sha:0c95c642183b7c62ddf4bd70858d831a3c030f0e0556357e0e63266008d2b114
  • gvfs-1.48.1-4.el9_2.tuxcare.els1.i686.rpm
    sha:d81e9a9982c6617574e6f1b2de1d8a10ea4d523169aec09ce0270d81ca695150
  • gvfs-1.48.1-4.el9_2.tuxcare.els1.x86_64.rpm
    sha:bde923b5ec43febcecce634991402a33c94a03b14bb9940aa0934f1f95e40001
  • gvfs-client-1.48.1-4.el9_2.tuxcare.els1.aarch64.rpm
    sha:a7002e07222400373ba1914771f89cd9a9d894e13ebaa342a6e5ba330b3aae0a
  • gvfs-client-1.48.1-4.el9_2.tuxcare.els1.i686.rpm
    sha:5b648f994f9d5408aec14d85473d527ece3c4a572a4453c52fd4d0bd0719f64e
  • gvfs-client-1.48.1-4.el9_2.tuxcare.els1.x86_64.rpm
    sha:4b1668dc649690ffc474c20a48309b26c1f2253f0d6cba5b86302bfcf7361c0a
  • gvfs-devel-1.48.1-4.el9_2.tuxcare.els1.aarch64.rpm
    sha:6455b6edaae31d72932eb995492fb7394d74d0ac783138bd02d4ccf77a56fdf6
  • gvfs-devel-1.48.1-4.el9_2.tuxcare.els1.i686.rpm
    sha:0e9c6670344b2a143a56bcad76167503867dd74e5d13e5bc6574b7e2bda2564f
  • gvfs-devel-1.48.1-4.el9_2.tuxcare.els1.x86_64.rpm
    sha:790b4b46ddbdba157e3a41eb52cd2777e0a418dee16497f5bc5b16857f002552
  • gvfs-fuse-1.48.1-4.el9_2.tuxcare.els1.aarch64.rpm
    sha:e26cd38590e66ccacda812c3c40f45a48bdb3b38946617fa03547daf733fd198
  • gvfs-fuse-1.48.1-4.el9_2.tuxcare.els1.i686.rpm
    sha:3d8d1be0cb10fdddccad2e85a471a40358ab4129325dfb1bc7f42fa84d8b7838
  • gvfs-fuse-1.48.1-4.el9_2.tuxcare.els1.x86_64.rpm
    sha:83316ac67f9012282e2fb6fdfd69972788405ae688b5cb7be077b1c7e353232b
  • gvfs-goa-1.48.1-4.el9_2.tuxcare.els1.aarch64.rpm
    sha:3505a815f9528b3ec40b4d363bfdbe33dfd1d6caaa65d46997738c0cf212c879
  • gvfs-goa-1.48.1-4.el9_2.tuxcare.els1.i686.rpm
    sha:78d5cef4d7653aed0f18a61be24eda0078e1ef298152e15dadf3d5075963e824
  • gvfs-goa-1.48.1-4.el9_2.tuxcare.els1.x86_64.rpm
    sha:129f9e641756162b03a6860b1d13092c05e36bc1d609e05b2534571f634ac222
  • gvfs-gphoto2-1.48.1-4.el9_2.tuxcare.els1.aarch64.rpm
    sha:102f4b2b90ae93cd72c31a6027a589a6945faec14da6ed8b0188f1da1d50d89c
  • gvfs-gphoto2-1.48.1-4.el9_2.tuxcare.els1.i686.rpm
    sha:a62861dadd40c95af65cf70a13e3876afa8a548c07e7881bcb62087280572d7a
  • gvfs-gphoto2-1.48.1-4.el9_2.tuxcare.els1.x86_64.rpm
    sha:0953e591c6173247931347367a64821e30787303f9b0164282ef89fce419e1aa
  • gvfs-mtp-1.48.1-4.el9_2.tuxcare.els1.aarch64.rpm
    sha:f103c838059199cc491132ad90fb28d8c80524027aa8544ec905c1071eade5c8
  • gvfs-mtp-1.48.1-4.el9_2.tuxcare.els1.i686.rpm
    sha:7a90fe017af36385d2f413ac6806b52c4a20b253d30298e7b829dcd161e63b05
  • gvfs-mtp-1.48.1-4.el9_2.tuxcare.els1.x86_64.rpm
    sha:3d2a0082787e1af284a82870ffca6d4f0d4daf2b6443a5f8ceba271d82a17155
  • gvfs-smb-1.48.1-4.el9_2.tuxcare.els1.aarch64.rpm
    sha:13550541727bb97f10dcb444871cf66cd31a009822d384e68919eab8eefacaf1
  • gvfs-smb-1.48.1-4.el9_2.tuxcare.els1.i686.rpm
    sha:15717a054f663293413ef372005f0045cfd72f73521ed71e42be1613227a3b58
  • gvfs-smb-1.48.1-4.el9_2.tuxcare.els1.x86_64.rpm
    sha:239df03c380fd49807052b7a5384238706765b10390015ca0ad1e6b62f1b8085
  • gvfs-tests-1.48.1-4.el9_2.tuxcare.els1.aarch64.rpm
    sha:d0058c1b42ed7207f51cb92ab4d473b999510ea34d3f0e3626be261c2ed38f62
  • gvfs-tests-1.48.1-4.el9_2.tuxcare.els1.i686.rpm
    sha:b0406452b11b935c7398b1f89eef9ffad47dcc1f68561faa37fbf34d0f25eda4
  • gvfs-tests-1.48.1-4.el9_2.tuxcare.els1.x86_64.rpm
    sha:361e4d7f6065aeede0ef42e3354a89746582bfff44d6b61653f4aad5185f7a2b
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.