-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Sun, 29 Mar 2026 04:23:19 +0200 Source: gvfs Binary: gvfs gvfs-backends gvfs-backends-dbgsym gvfs-daemons gvfs-daemons-dbgsym gvfs-dbgsym gvfs-fuse gvfs-fuse-dbgsym gvfs-libs gvfs-libs-dbgsym Architecture: armhf Version: 1.57.2-2+deb13u1 Distribution: trixie Urgency: high Maintainer: arm Build Daemon (arm-ubc-02) Changed-By: Andreas Henriksson Description: gvfs - userspace virtual filesystem - GIO module gvfs-backends - userspace virtual filesystem - backends gvfs-daemons - userspace virtual filesystem - servers gvfs-fuse - userspace virtual filesystem - fuse server gvfs-libs - userspace virtual filesystem - private libraries Closes: 1129285 1129286 Changes: gvfs (1.57.2-2+deb13u1) trixie; urgency=high . * Non-maintainer upload by the LTS Security Team. * CVE-2026-28295 ftp: Use control connection address for PASV data (Closes: #1129285) * CVE-2026-28296 ftp: Reject paths containing CR/LF characters (Closes: #1129286) * debian/gbp.conf: Set debian branch to debian/trixie Checksums-Sha1: 370e125e642365fe037fdb7dbd3b8947ddcfbf61 1539504 gvfs-backends-dbgsym_1.57.2-2+deb13u1_armhf.deb b4f67776c0a3e2e4ba6fd2e8cabab3d12c1978f5 311024 gvfs-backends_1.57.2-2+deb13u1_armhf.deb bd14d83f2847ca3839a909a6f3eb9dc313735d1d 437116 gvfs-daemons-dbgsym_1.57.2-2+deb13u1_armhf.deb f955e233ced334931ed17520c44b5f05e6e0ded9 101892 gvfs-daemons_1.57.2-2+deb13u1_armhf.deb f7fac87b16125668e09cdaa81e131d8c2a86e3e9 411284 gvfs-dbgsym_1.57.2-2+deb13u1_armhf.deb bdf78886b64330568d484678445b2374d45a100a 47052 gvfs-fuse-dbgsym_1.57.2-2+deb13u1_armhf.deb bd9c60f78f0c7a8b4d62fdced1f0fcd87c404dfa 21236 gvfs-fuse_1.57.2-2+deb13u1_armhf.deb 6fca4db5e9cdcadc6bec80b7be6ccdaaa4aa5abc 378320 gvfs-libs-dbgsym_1.57.2-2+deb13u1_armhf.deb e6439a3ae68d737931202444d3b83ec95e6fa224 83064 gvfs-libs_1.57.2-2+deb13u1_armhf.deb 496a45b337c73cf5d9948c89e947785614a6fd78 18316 gvfs_1.57.2-2+deb13u1_armhf-buildd.buildinfo 15ebcdd3e0c8f13d5ead3c9c5370f346f4742207 109784 gvfs_1.57.2-2+deb13u1_armhf.deb Checksums-Sha256: ee8bd2e2deb268b53c430382ff08445c7f8601ac739ee1461f66f0aaf7bfc96f 1539504 gvfs-backends-dbgsym_1.57.2-2+deb13u1_armhf.deb 93176e65974f52c128926149110d801b3dddd4f1d5c5a001c5ef661526c93d9e 311024 gvfs-backends_1.57.2-2+deb13u1_armhf.deb 8b14c0a4cdf3485e0584ff637855068d23665e4401f6f713bf09077e1f551005 437116 gvfs-daemons-dbgsym_1.57.2-2+deb13u1_armhf.deb b57b44884c5255870b286999a6d2e38867e91ad7ac6312e443a7a2aaac589036 101892 gvfs-daemons_1.57.2-2+deb13u1_armhf.deb 56d1b9d71417b3b196b65704ca1f84367717035386a6805271f29da42a0dfee0 411284 gvfs-dbgsym_1.57.2-2+deb13u1_armhf.deb 92bd05acfb7f88e5c41874c4ec3ba6b5c29d21b1ca1d58d0cc8566ee16a022a2 47052 gvfs-fuse-dbgsym_1.57.2-2+deb13u1_armhf.deb 2a013b0a4be1b0484aad72b1fb145741bbccb97973a950316643c950b5ad0b55 21236 gvfs-fuse_1.57.2-2+deb13u1_armhf.deb c189cd8bbd62830aeda08f2a05f35ae9813321bbea0776092fc88cee490dfb0a 378320 gvfs-libs-dbgsym_1.57.2-2+deb13u1_armhf.deb 146778c20ebc58a2780ef444fcc9b7fa6e82ae843d643a2c728706308a561835 83064 gvfs-libs_1.57.2-2+deb13u1_armhf.deb ea458154920d3020aeb82528f5302f9567239d08de2474c41e8965fb52509b15 18316 gvfs_1.57.2-2+deb13u1_armhf-buildd.buildinfo 72aea50fed6beaf63bfb6afee7a82565b2a09302ab057ee36928dc50b4369198 109784 gvfs_1.57.2-2+deb13u1_armhf.deb Files: 07ec76b86f7377d7f03b24f406e45d47 1539504 debug optional gvfs-backends-dbgsym_1.57.2-2+deb13u1_armhf.deb d0b5a1f6f2a622c05c1ccd99da009e6a 311024 gnome optional gvfs-backends_1.57.2-2+deb13u1_armhf.deb 17b9e933e14a11764db895f438ef7dda 437116 debug optional gvfs-daemons-dbgsym_1.57.2-2+deb13u1_armhf.deb 6a03d8803b0c793fb91262c6b0e6741a 101892 libs optional gvfs-daemons_1.57.2-2+deb13u1_armhf.deb e135b968db67754cf2b90c465b885f66 411284 debug optional gvfs-dbgsym_1.57.2-2+deb13u1_armhf.deb b7e6874fe72b6b54e045c10502bc4482 47052 debug optional gvfs-fuse-dbgsym_1.57.2-2+deb13u1_armhf.deb ff1797c0fa483da9464aebebf48ace5b 21236 gnome optional gvfs-fuse_1.57.2-2+deb13u1_armhf.deb 94da7d54af52804b5704e20c5a65eaca 378320 debug optional gvfs-libs-dbgsym_1.57.2-2+deb13u1_armhf.deb 4a79afc46e1367892927f9140db4580e 83064 libs optional gvfs-libs_1.57.2-2+deb13u1_armhf.deb f13d92ce7801c019a8971106543037ef 18316 gnome optional gvfs_1.57.2-2+deb13u1_armhf-buildd.buildinfo 31b7eaf5f6b8d8252c1469b054598cf5 109784 libs optional gvfs_1.57.2-2+deb13u1_armhf.deb -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEJkN0BnKzGWWW6tS+G5VHrWJmwgcFAmnQHgMACgkQG5VHrWJm wgeo1w//Zgk6S7Q0bbOFfYtA52DaroycPaCsnYplq3zw7i28V51IQRukBJlPGomQ rMox5vUk99JWddu/E2SYLvXM1JVsRchajIFYoALy9vWWAL1rss3m9BwvAp7TALE5 Ydr7sZQRR33BflNe/o8xETGPSfGIgenVrn2k7i7xlzG4XAIVZe4N3xq5EWuUP+1s GqTnfMQwRWyxJmKaQrbi8LM9GG5YGTaotf8Wwk1AGQ3kEfefegI9zs1U6VOtenhc /GyhqY1RXv/kUW+mCeZbir9/A6eQ6FwEvVnM+Hlv08o097hfIZhExA7k7rBy2ICp 0jCMs1UQBbax1SKKqGzMyYozxonbJhORMZV20yt4Crm3kyuniva/J6ZfLG95VBb8 czTf/lHBPzeve9USZC6gnMByL4T/i4O2TqYO8yA5+EYnRgDMegwrPWWcSMNhJFUM C/RhnRRS8MLRcpeJ8/DUsWo4KBhMiioomcR4xwHHeJqh2r88KhL7JItbv+y9Xc4G BFNQ8R3xrtaMvg2D8BqhfCFbBeUSBqBKFP9r0CJzKMtaaOFEW78Q5IHO0okZqKgh YtTAKSRGDPVyGOJGIM0n9Q13igAmmS0Al/zHKrX321y2UaXZCEtcU9MITC16KakS cdi5a9VOHNtOw4tCHXmcaE1UaEkzjhdbUA3BbHDCu6yA+CJZuiA= =fk76 -----END PGP SIGNATURE-----