[CLSA-2026:1791188157] gvfs: Fix of 4 CVEs
Type:
security
Severity:
None
Release date:
2026-10-05 08:16:06 UTC
Description:
- Rebase onto Amazon Linux 2 gvfs-1.36.2-3.amzn2.0.3 - CVE-2026-84268: sftp read_reply overruns the job buffer when the server returns more data than requested (fixed by the vendor patches in this build) - CVE-2019-12448: fix admin backend race in query_info_on_read/write - CVE-2019-12447: fix admin backend file ownership via fsuid - CVE-2019-12795: fix gvfs daemon D-Bus unauthenticated client access
Updated packages:
  • gvfs-1.36.2-3.amzn2.0.3.tuxcare.els1.aarch64.rpm
    sha:4acd6c36e7420825e1ec5a8ea5198db918b3cdbdb38609f036c21a2b17ab7964
  • gvfs-1.36.2-3.amzn2.0.3.tuxcare.els1.x86_64.rpm
    sha:8518d579590aa2f1e42ab0c5b7ad672e47e14950fdcce7f72fbc61c5171d0372
  • gvfs-afc-1.36.2-3.amzn2.0.3.tuxcare.els1.aarch64.rpm
    sha:2aaf4248b8ee43ac9c32f51b3157b42e91d1b0e52df8228c6b97954c1ffdc144
  • gvfs-afc-1.36.2-3.amzn2.0.3.tuxcare.els1.x86_64.rpm
    sha:89b34393594c2ca46a9e746f783c40bd7d5a50f7d47d246997320440093fb5ac
  • gvfs-afp-1.36.2-3.amzn2.0.3.tuxcare.els1.aarch64.rpm
    sha:ef0c006f1551a93c0411b337fa14573071b4d1c916d62745cb2f63d1228893c6
  • gvfs-afp-1.36.2-3.amzn2.0.3.tuxcare.els1.x86_64.rpm
    sha:f3e64588abfd71b4cd6264c9032d8f3f842dca58b394956641c63c9851a544bc
  • gvfs-archive-1.36.2-3.amzn2.0.3.tuxcare.els1.aarch64.rpm
    sha:39880fb462ecea2ea52c2772be98b389a51b156d4f1e877984cfa8bf8ef6355e
  • gvfs-archive-1.36.2-3.amzn2.0.3.tuxcare.els1.x86_64.rpm
    sha:37d68557f6fd391ee32890683f64319a7afd6a6d373e97872434c0fcb9e8f721
  • gvfs-client-1.36.2-3.amzn2.0.3.tuxcare.els1.aarch64.rpm
    sha:c9338bf42507e6f190a3d8ff2d4334e7c6457e84730f329337833391adbf774c
  • gvfs-client-1.36.2-3.amzn2.0.3.tuxcare.els1.x86_64.rpm
    sha:cbabed5ed88e04c5d6ee3f189282d71164f555f1af2d34278382d41bd957f902
  • gvfs-devel-1.36.2-3.amzn2.0.3.tuxcare.els1.aarch64.rpm
    sha:42a03fbca7d03b064a6728e467b70fff7f703901082b04b8ebf5bc987a65062e
  • gvfs-devel-1.36.2-3.amzn2.0.3.tuxcare.els1.x86_64.rpm
    sha:a6e27adeae7b8cf643ed8c672361f692867fd657d3cff13c0bea58aadcded760
  • gvfs-fuse-1.36.2-3.amzn2.0.3.tuxcare.els1.aarch64.rpm
    sha:3589b34028c44794143342589bbcb7a9143ac91f5c2de145b6aa1a6ad85eaf47
  • gvfs-fuse-1.36.2-3.amzn2.0.3.tuxcare.els1.x86_64.rpm
    sha:70320f2fa4137027a5abbb5f0a2c5c453d1ea67b0d59ee57528d13e5fa25a748
  • gvfs-goa-1.36.2-3.amzn2.0.3.tuxcare.els1.aarch64.rpm
    sha:b6af09288891d79bd5528f3981c20cf27f4bcbc78952ac53ded0df0da855ada5
  • gvfs-goa-1.36.2-3.amzn2.0.3.tuxcare.els1.x86_64.rpm
    sha:96b7474cbec0991ffbb1fed3893836662d3b6e91c667081fc300176b780f443b
  • gvfs-gphoto2-1.36.2-3.amzn2.0.3.tuxcare.els1.aarch64.rpm
    sha:57b5df251c40896c8b8258c2d9f060332cb1a7ceac6050530da66da272dc55b1
  • gvfs-gphoto2-1.36.2-3.amzn2.0.3.tuxcare.els1.x86_64.rpm
    sha:354bf6e4c6eca88cfae93b583fe3ba013970d57480e4d0f8349f01a6356b31ee
  • gvfs-mtp-1.36.2-3.amzn2.0.3.tuxcare.els1.aarch64.rpm
    sha:16a216534759e3554cbd243a60eb606dfcc80900ed939ae58daadf012a00105a
  • gvfs-mtp-1.36.2-3.amzn2.0.3.tuxcare.els1.x86_64.rpm
    sha:b8348b039a6f2f7eafe8ca45e35876dc10e72d093cc77657601e8e997496fb06
  • gvfs-smb-1.36.2-3.amzn2.0.3.tuxcare.els1.aarch64.rpm
    sha:a4d46d704c432487e923513010012a60dd08590cedcd6c6c6a0eec52e1818fb9
  • gvfs-smb-1.36.2-3.amzn2.0.3.tuxcare.els1.x86_64.rpm
    sha:cc7e3b3a95d0b31a89d7190e9d9b51ac43695560a029a718d2fdf612f8df6a74
  • gvfs-tests-1.36.2-3.amzn2.0.3.tuxcare.els1.aarch64.rpm
    sha:44f42b7576d71661f4f94d639e850e647390ef0a2ceed3a68b52f24fee91a30a
  • gvfs-tests-1.36.2-3.amzn2.0.3.tuxcare.els1.x86_64.rpm
    sha:7f5279b59790a4c38be7282d90e9bf7334b71a2cc8ec01fb4681a0ec2b55dd24
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.