-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Sun, 29 Mar 2026 04:15:46 +0200 Source: gvfs Binary: gvfs gvfs-backends gvfs-backends-dbgsym gvfs-daemons gvfs-daemons-dbgsym gvfs-dbgsym gvfs-fuse gvfs-fuse-dbgsym gvfs-libs gvfs-libs-dbgsym Architecture: arm64 Version: 1.50.3-1+deb12u1 Distribution: bookworm Urgency: high Maintainer: arm Build Daemon (arm-ubc-01) Changed-By: Andreas Henriksson Description: gvfs - userspace virtual filesystem - GIO module gvfs-backends - userspace virtual filesystem - backends gvfs-daemons - userspace virtual filesystem - servers gvfs-fuse - userspace virtual filesystem - fuse server gvfs-libs - userspace virtual filesystem - private libraries Closes: 1129285 1129286 Changes: gvfs (1.50.3-1+deb12u1) bookworm; urgency=high . * Non-maintainer upload by the LTS Security Team. * CVE-2026-28295 ftp: Use control connection address for PASV data (Closes: #1129285) * CVE-2026-28296 ftp: Reject paths containing CR/LF characters (Closes: #1129286) * debian/gbp.conf: Set debian branch to debian/bookworm Checksums-Sha1: a70dbd9154b5780290f852bc4e13816b673103a1 1492156 gvfs-backends-dbgsym_1.50.3-1+deb12u1_arm64.deb c92d2b75fd65755d90e415108218b91c351502da 328484 gvfs-backends_1.50.3-1+deb12u1_arm64.deb 97ce16f20db44453fdb35e639cbbdb41aa0aa509 442500 gvfs-daemons-dbgsym_1.50.3-1+deb12u1_arm64.deb f444eb47439f4e0293bb45cfa81cc3a5dfc748ab 113004 gvfs-daemons_1.50.3-1+deb12u1_arm64.deb 011345c87379894514bed8ab76d181e53fe50381 376080 gvfs-dbgsym_1.50.3-1+deb12u1_arm64.deb 1fd55a7cd37e3b1378ef6f296ef08a2ceb941e0d 46372 gvfs-fuse-dbgsym_1.50.3-1+deb12u1_arm64.deb 523b8a244020239efb33a5e344579ebebf165e79 19672 gvfs-fuse_1.50.3-1+deb12u1_arm64.deb 33925710f0a77872c134ba6374f0322cc3f5782c 356632 gvfs-libs-dbgsym_1.50.3-1+deb12u1_arm64.deb 36b0efcbd2aa0df584c4f647c4f25b56933e1825 96580 gvfs-libs_1.50.3-1+deb12u1_arm64.deb 8d76aeb8f6b90f12621ef21a11b08b12408c4d5d 22759 gvfs_1.50.3-1+deb12u1_arm64-buildd.buildinfo d66618a7424e1608d6c0b744adbae33967ffaf52 114600 gvfs_1.50.3-1+deb12u1_arm64.deb Checksums-Sha256: ca90c46a51941419011dc119ce670f9ba92af423762133a5baf02115405c2f3c 1492156 gvfs-backends-dbgsym_1.50.3-1+deb12u1_arm64.deb f23814db73ec7b59ca606e838e703cc4e428d2ed21c4abd6f040c292ed5325c7 328484 gvfs-backends_1.50.3-1+deb12u1_arm64.deb 6f8f7680699d199a8ca43842368479433143579569aa793a37cdc2db03f11448 442500 gvfs-daemons-dbgsym_1.50.3-1+deb12u1_arm64.deb a655bbbcf64656449823f7c838ae74d139cfb29e0a5ed5e93804d30e01f29270 113004 gvfs-daemons_1.50.3-1+deb12u1_arm64.deb 76c9c12082fa4d67c9260ac869ae68068f33cb2e20cef58917040e53df323b5d 376080 gvfs-dbgsym_1.50.3-1+deb12u1_arm64.deb 69b7295e7831a74687adf7edc04706f3ce654b71fe3e060e30af4b29f815dde6 46372 gvfs-fuse-dbgsym_1.50.3-1+deb12u1_arm64.deb c6bb3ebded3a15a6d017024a37e03dd4e350bf230ca8d6330975e39708182f56 19672 gvfs-fuse_1.50.3-1+deb12u1_arm64.deb d7cf5277c2784911abccdcc62847547e6108282b6cf6c354c1fc04447eda6f73 356632 gvfs-libs-dbgsym_1.50.3-1+deb12u1_arm64.deb 9db7e3bf0b27307d4604727697bd68d9fa69cfee7e3d91d0ae7e8fdd3fbdd109 96580 gvfs-libs_1.50.3-1+deb12u1_arm64.deb 902fc2e1a8a76b6bd22a28cf6d19f5144620c271514544dcfb3c0017d2b7aee1 22759 gvfs_1.50.3-1+deb12u1_arm64-buildd.buildinfo 2819204b51b6206b1c236dbd18f5eed148e6c119209f4a34cb09d9d2129e1211 114600 gvfs_1.50.3-1+deb12u1_arm64.deb Files: ba1ab9280bf3a1126055f124e70b5340 1492156 debug optional gvfs-backends-dbgsym_1.50.3-1+deb12u1_arm64.deb 8cec1867c092ce7d4d1ceb176ae848a3 328484 gnome optional gvfs-backends_1.50.3-1+deb12u1_arm64.deb c513d92cf6ad69640451bb44ca76607e 442500 debug optional gvfs-daemons-dbgsym_1.50.3-1+deb12u1_arm64.deb ee68e64a49874f5754897d66e2480b2d 113004 libs optional gvfs-daemons_1.50.3-1+deb12u1_arm64.deb 04effcdec9a6d7514a746ebdeed26d66 376080 debug optional gvfs-dbgsym_1.50.3-1+deb12u1_arm64.deb 49841c4550e5c2d5c49695c923b602ca 46372 debug optional gvfs-fuse-dbgsym_1.50.3-1+deb12u1_arm64.deb 932dc606346d4a5154e40a683f8ef93a 19672 gnome optional gvfs-fuse_1.50.3-1+deb12u1_arm64.deb 9d253944a311b50e19001a9383e6b161 356632 debug optional gvfs-libs-dbgsym_1.50.3-1+deb12u1_arm64.deb a039144a6cb8dabfdeb81871dd3c38a8 96580 libs optional gvfs-libs_1.50.3-1+deb12u1_arm64.deb f8b28ed2d18a5cc1116643477d3fb8ce 22759 gnome optional gvfs_1.50.3-1+deb12u1_arm64-buildd.buildinfo ca3326f863cfaa8f0b1c340571ea97ac 114600 libs optional gvfs_1.50.3-1+deb12u1_arm64.deb -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEE0Ha//LlsGOpbQ/H4xqCFmsOWgoYFAmnQP2MACgkQxqCFmsOW goZ/cxAAr8kdEMYaWxtNpu/QzW9gt90U4jw+c5snV4tyRN0VIQ9K0ss+oczxEbWO 5yBOR4QYR8CpqgFXjbkikj4HFzmU9zT9syenfaHOMHNkoJQIpmrG95VSgGrabIxn nf85XsjBZ5v2R73fxeyk5RLzHN7v7aIOb/HSitOAojZv94HmZUvnOzW/2/LguSz4 gQ9u7uWgsM29MyMFNZvPtV61mFNEBzldhf1scFj1S3Nr1x45O7ZgJhtsKBFaL8v6 xSsEU/ICNm4+f7LbG9xLdahJlbRlr0Hl3mIKmQByplbke3NhPNHnYJ+IMHWXewjp zFSyhEyRlVV3LPj0Xe7e4QOsEtId8VXs9xwJ+mGDe+c/SMDrMi87cR/DOHII56D4 ZlMGF7ZC+DR0LQdeGQ14JUXPS37tjExMnYYnM+nGHCQe86AAlfA6mVSiaR/2m86+ cEGkIb5+KPYW/+y+DZKbeFTJDFS3e/s6oTdeTL5C8E/5XqCq+bJAcnWiXMSIVikV OdkVRql9v/1bOl1T3lKb6spgdK+WSF+5+8v9KtU4RUNpWT7HxN/dQq2w5koQeYCb pXO12WX7Zf6rnOQ6UW+8LClGr1sLK3aQRh6CjXvDPtMyCElwY6ey4XJwbt+vJlD2 XwswIsMRNQAGtIafH2gWZXQRWo404qO0dsTH0vzhzYUvl7BQdYM= =THcw -----END PGP SIGNATURE-----