[CLSA-2026:1792166468] gvfs: Fix of CVE-2026-88924
Type:
security
Severity:
Important
Release date:
2026-10-16 16:01:18 UTC
Description:
- Fix CVE-2026-88924: gvfsd-admin changed the ownership of its D-Bus socket with a link-following chown() after creating it in a user-controlled directory, allowing a local user to take ownership of arbitrary root-owned files; set the filesystem UID before creating the socket instead (upstream 371909dd)
CVEs fixed:
Updated packages:
  • gvfs-1.48.1-6.el9_6.tuxcare.els1.aarch64.rpm
    sha:76862f624fa674d8b27c000553544ceef5a6aa2df1b80fa78d2d53db87d5beea
  • gvfs-1.48.1-6.el9_6.tuxcare.els1.i686.rpm
    sha:9fdc14cfa3414f2311fd1239bd973eb8f18e75d9db3a899717627b2979039261
  • gvfs-1.48.1-6.el9_6.tuxcare.els1.x86_64.rpm
    sha:72187e5b2bfa11c6e389cf101c0c87d7a787047c201100390245bb2a437ac0e6
  • gvfs-client-1.48.1-6.el9_6.tuxcare.els1.aarch64.rpm
    sha:8e495f4311462a12f367d1bc5603bffabb8a1381ca1f583b72ed8ad58ece3471
  • gvfs-client-1.48.1-6.el9_6.tuxcare.els1.i686.rpm
    sha:ba8c5db36e315411b804dc3f67ca9027fb0bb76cebb35ee7962b396f9ecd0cd4
  • gvfs-client-1.48.1-6.el9_6.tuxcare.els1.x86_64.rpm
    sha:1eb08b733b0dd5b98016791eb3179d84a3477b63ebebdfb0756c7ea907c83f9a
  • gvfs-devel-1.48.1-6.el9_6.tuxcare.els1.aarch64.rpm
    sha:0d119cb693eb29dc812d773d19fd142492edc8ec1a45436dd2079853bce6bc37
  • gvfs-devel-1.48.1-6.el9_6.tuxcare.els1.i686.rpm
    sha:4cb017bcaa29ac4c56d2728dfdcad11dd448b3fd0d3f019f1d5e9a648ce71aec
  • gvfs-devel-1.48.1-6.el9_6.tuxcare.els1.x86_64.rpm
    sha:5bdc7415d60abf80fd106e334319a4de7c4d2c155a8d043dfef5792db2fc78d6
  • gvfs-fuse-1.48.1-6.el9_6.tuxcare.els1.aarch64.rpm
    sha:9ef3142d632dc6a9c9a449ee4bc611c8d343f4ece6785deec65bd1667103de92
  • gvfs-fuse-1.48.1-6.el9_6.tuxcare.els1.i686.rpm
    sha:a4ff7a0b90b9a7a58fd1d473c744c7897d02ff4822ea4a0a4eb96a0ca3d4137f
  • gvfs-fuse-1.48.1-6.el9_6.tuxcare.els1.x86_64.rpm
    sha:ec06546b952fa596c0a1ad761931af4b0bdc5ccb112e6bf0956cabb36caa1687
  • gvfs-goa-1.48.1-6.el9_6.tuxcare.els1.aarch64.rpm
    sha:38b7bc6dc28753ec713819ded0f76f8088990ab557f7b4a78e28dc17e1a0ac36
  • gvfs-goa-1.48.1-6.el9_6.tuxcare.els1.i686.rpm
    sha:df7c87b1239687455ff4f9e6eec2c2ee2fd697c976899a6bf4445bbb045d1a2d
  • gvfs-goa-1.48.1-6.el9_6.tuxcare.els1.x86_64.rpm
    sha:2dfa4254847839250c613796c55f697172a6d3cbaa6b09ecdbfeeb2fcaebfa2c
  • gvfs-gphoto2-1.48.1-6.el9_6.tuxcare.els1.aarch64.rpm
    sha:db06b87e7085b54e1f2a7918a9b772e316369962886133594820ff20adf39d78
  • gvfs-gphoto2-1.48.1-6.el9_6.tuxcare.els1.i686.rpm
    sha:1f0c5fa0bbaf32bf0d5922502562026ebb4e886e9c269f39dd300e0cc56c8f59
  • gvfs-gphoto2-1.48.1-6.el9_6.tuxcare.els1.x86_64.rpm
    sha:7f7997dc877dadd4276f8216551bde3b706dab003be5d22feebcab7619415e99
  • gvfs-mtp-1.48.1-6.el9_6.tuxcare.els1.aarch64.rpm
    sha:075233841b58f6efd1b17e11a674446edf3cbf5ed838d5d208946276186d213a
  • gvfs-mtp-1.48.1-6.el9_6.tuxcare.els1.i686.rpm
    sha:2daa3c7d68b7f387d2fb9bfbd3acba2c11ce1d3cf7f9086ba0235c327cadfed4
  • gvfs-mtp-1.48.1-6.el9_6.tuxcare.els1.x86_64.rpm
    sha:71c6c79cf14dd1985311d537d8b6ce0825175b67c15fa438ad610712e7188ac8
  • gvfs-smb-1.48.1-6.el9_6.tuxcare.els1.aarch64.rpm
    sha:7253cf1d227050dce882efe69f11ef41f73c4f14f5249c5ef6b085411ed403b3
  • gvfs-smb-1.48.1-6.el9_6.tuxcare.els1.i686.rpm
    sha:f33bce7f186e18eb3c542af24a69c8ceb9f81f6ba141248a33f6644fa2127da8
  • gvfs-smb-1.48.1-6.el9_6.tuxcare.els1.x86_64.rpm
    sha:28dc4ab86f43b404a734825477f5f40368338e0c5ce37998a9118c868eea33fa
  • gvfs-tests-1.48.1-6.el9_6.tuxcare.els1.aarch64.rpm
    sha:7aca96cf1e8d7249af18e6e8c598afc511e1ff0afe623072f88259011795bf80
  • gvfs-tests-1.48.1-6.el9_6.tuxcare.els1.i686.rpm
    sha:84c845f0c3aec7af40f99ab4f8f9c3161d33fd11d580393e8e479edef41212e4
  • gvfs-tests-1.48.1-6.el9_6.tuxcare.els1.x86_64.rpm
    sha:c814f3c2ae860038e4c9ee988de226f1eebce966ff0f99d63504ccb79afb9d73
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.