[CLSA-2026:1791805472] Fix CVE(s): CVE-2026-84268
Type:
security
Severity:
Important
Release date:
2026-10-12 11:44:41 UTC
Description:
* SECURITY UPDATE: heap buffer overflow in sftp backend - debian/patches/CVE-2026-84268.patch: reject read replies larger than the requested size in daemon/gvfsbackendsftp.c. - CVE-2026-84268
CVEs fixed:
Updated packages:
  • gvfs_1.36.1-0ubuntu1.3.3+tuxcare.els1_amd64.deb
    sha:6f106d85dffde72a80687619fe57a7a11144ce55
  • gvfs-backends_1.36.1-0ubuntu1.3.3+tuxcare.els1_amd64.deb
    sha:2431f159c91783c30fdd473e9511c5072d56b112
  • gvfs-bin_1.36.1-0ubuntu1.3.3+tuxcare.els1_amd64.deb
    sha:6ea69a62d0724f0feda16a5408db65d4a4e7afdd
  • gvfs-common_1.36.1-0ubuntu1.3.3+tuxcare.els1_all.deb
    sha:a9734cd3e6f1f4c0172f63ac0818fab45508e187
  • gvfs-daemons_1.36.1-0ubuntu1.3.3+tuxcare.els1_amd64.deb
    sha:86abfbdf97db1552834bbf7ef65269de7f5a9556
  • gvfs-fuse_1.36.1-0ubuntu1.3.3+tuxcare.els1_amd64.deb
    sha:f7b6ccbfa01fa3bf51b2130e76404f0b99c54fcb
  • gvfs-libs_1.36.1-0ubuntu1.3.3+tuxcare.els1_amd64.deb
    sha:df76e2cb0e13cf0032e2d2bc3f0af92a39e985c9
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.