[CLSA-2026:1792194238] gvfs: Fix of CVE-2026-84268
Type:
security
Severity:
Important
Release date:
2026-10-16 23:44:09 UTC
Description:
- CVE-2026-84268: sftp backend read_reply() used the server-supplied data length without checking it against the requested size, allowing a malicious SFTP server to overflow the read buffer; reject such replies with an error (upstream ea1322da, 1590471a)
CVEs fixed:
Updated packages:
  • gvfs-1.48.1-6.el9_6.tuxcare.els2.aarch64.rpm
    sha:57e31745c179260aaa340ce566e79599ee8498efc3f1a1c078008fd4ca4db602
  • gvfs-1.48.1-6.el9_6.tuxcare.els2.i686.rpm
    sha:93f98e961a0a87e80cc3fbd42b187c6a41d65051265c9abae8bc85ebfe785acd
  • gvfs-1.48.1-6.el9_6.tuxcare.els2.x86_64.rpm
    sha:813ba07fbae6be3cb688e10be1001aee82daae43fe4f83261e8701e55074e6c7
  • gvfs-client-1.48.1-6.el9_6.tuxcare.els2.aarch64.rpm
    sha:0246b150cb037df2b6f3fc6889e64f532263ed993f1bd0ae6b581f0b52a87b21
  • gvfs-client-1.48.1-6.el9_6.tuxcare.els2.i686.rpm
    sha:a13729e0f5e01acd4e4e209a4d444fe8c8ad6171f1c74cfd47a565d36324e9e5
  • gvfs-client-1.48.1-6.el9_6.tuxcare.els2.x86_64.rpm
    sha:9e71154e116f5580d8c0d4a72a4324b6989a8b8f1daf5b56f4878f618ce35bc1
  • gvfs-devel-1.48.1-6.el9_6.tuxcare.els2.aarch64.rpm
    sha:dfa2cfe1bde6276f588f022d66097cc0c5172e5c06176da93e6ef3f395329d36
  • gvfs-devel-1.48.1-6.el9_6.tuxcare.els2.i686.rpm
    sha:ed51af8b73d9ec3643d648fef9462aeb3daee474c1147b59db389a1ed3ff3f45
  • gvfs-devel-1.48.1-6.el9_6.tuxcare.els2.x86_64.rpm
    sha:9970a1629a3c40747ff5c7daeed439462d9e3a2dc904104d7cdf626f3c849678
  • gvfs-fuse-1.48.1-6.el9_6.tuxcare.els2.aarch64.rpm
    sha:e7dbd7c1cc737fef3250808f44c7284842b7f3eee6cc8c4f30c035d0a1a5ebfa
  • gvfs-fuse-1.48.1-6.el9_6.tuxcare.els2.i686.rpm
    sha:5bf782d5ed9b1547969eb2a9f89a74bf3175e9f90d99091e271088ae5af5eda4
  • gvfs-fuse-1.48.1-6.el9_6.tuxcare.els2.x86_64.rpm
    sha:6621d86b1bc76e78ab46d8ed03bfe12b567f58438fd2087473e8b641f36c8490
  • gvfs-goa-1.48.1-6.el9_6.tuxcare.els2.aarch64.rpm
    sha:a68d8ad752b448533268fa001771d670f5449d8427b6bd26ea890b4789ad5541
  • gvfs-goa-1.48.1-6.el9_6.tuxcare.els2.i686.rpm
    sha:aedcc7b3a2de4d57fbc0d46015e7f5ad0dee4879ea9c203737042fd69c2d997a
  • gvfs-goa-1.48.1-6.el9_6.tuxcare.els2.x86_64.rpm
    sha:1551245707a58bcbce4a34916f2eb77b45b4c6a4fd62bce873da67047049b01a
  • gvfs-gphoto2-1.48.1-6.el9_6.tuxcare.els2.aarch64.rpm
    sha:13160b8310099c9fffe8bf47760a24a426b8fe4e62cc3e9e08e4b1e86dc7f135
  • gvfs-gphoto2-1.48.1-6.el9_6.tuxcare.els2.i686.rpm
    sha:6be84243dfd20c384c86fa68d6e41b3d1dbc4d052be9168b38716323fe23f2fc
  • gvfs-gphoto2-1.48.1-6.el9_6.tuxcare.els2.x86_64.rpm
    sha:24697c651bfe725a2667b1d52dabd09108136f1062dcfffc78a71e44369d9c54
  • gvfs-mtp-1.48.1-6.el9_6.tuxcare.els2.aarch64.rpm
    sha:8f8e518c1c4bd7058652cb2f59820f2c70437c4694d16c74208b6252b87beb70
  • gvfs-mtp-1.48.1-6.el9_6.tuxcare.els2.i686.rpm
    sha:174fa5ceac13ee4f506fd939b72c87a01b467b6e2e36bb0b6488f745ac0a3968
  • gvfs-mtp-1.48.1-6.el9_6.tuxcare.els2.x86_64.rpm
    sha:7fcf8ed028c5069780b082f751f9c18a63a892024b2404ad99230147df4bb20f
  • gvfs-smb-1.48.1-6.el9_6.tuxcare.els2.aarch64.rpm
    sha:40a116d0242126dd89bbfc51981b0d543547db6ef56c1b85920939044f1105f6
  • gvfs-smb-1.48.1-6.el9_6.tuxcare.els2.i686.rpm
    sha:317c025d088a7546912fb1f187f0226d9b3bb38c382c5bf0b326846003db75f6
  • gvfs-smb-1.48.1-6.el9_6.tuxcare.els2.x86_64.rpm
    sha:778b7273a8139234ac157d4d578b35b365e99f419b4abe512fd05f2321c15e11
  • gvfs-tests-1.48.1-6.el9_6.tuxcare.els2.aarch64.rpm
    sha:98eea2aeea408b50601df2f9aa1a3fa1db0ac364c331604f58c02449d9cf5363
  • gvfs-tests-1.48.1-6.el9_6.tuxcare.els2.i686.rpm
    sha:4b03a9afb4341a3557245e69e962266584fff267f8058846610ca2763c95d1aa
  • gvfs-tests-1.48.1-6.el9_6.tuxcare.els2.x86_64.rpm
    sha:438650b7fe60324d75fb81f7296a654eb39d0575effc80a430f8efa63df2fccf
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.