-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Sun, 29 Mar 2026 04:23:19 +0200 Source: gvfs Binary: gvfs gvfs-backends gvfs-backends-dbgsym gvfs-daemons gvfs-daemons-dbgsym gvfs-dbgsym gvfs-fuse gvfs-fuse-dbgsym gvfs-libs gvfs-libs-dbgsym Architecture: arm64 Version: 1.57.2-2+deb13u1 Distribution: trixie Urgency: high Maintainer: arm Build Daemon (arm-conova-04) Changed-By: Andreas Henriksson Description: gvfs - userspace virtual filesystem - GIO module gvfs-backends - userspace virtual filesystem - backends gvfs-daemons - userspace virtual filesystem - servers gvfs-fuse - userspace virtual filesystem - fuse server gvfs-libs - userspace virtual filesystem - private libraries Closes: 1129285 1129286 Changes: gvfs (1.57.2-2+deb13u1) trixie; urgency=high . * Non-maintainer upload by the LTS Security Team. * CVE-2026-28295 ftp: Use control connection address for PASV data (Closes: #1129285) * CVE-2026-28296 ftp: Reject paths containing CR/LF characters (Closes: #1129286) * debian/gbp.conf: Set debian branch to debian/trixie Checksums-Sha1: 896bfc941f3606c5e34591621facfbcbfa8b1897 1638344 gvfs-backends-dbgsym_1.57.2-2+deb13u1_arm64.deb 71cf4989bbd6f7e8d7481e80cc2d906f50e0e0dd 337988 gvfs-backends_1.57.2-2+deb13u1_arm64.deb e91d0defca873ec8cc0e0fcd256a20d646170216 443500 gvfs-daemons-dbgsym_1.57.2-2+deb13u1_arm64.deb 4bc2bce46e4126b920a4eb4a74e2eabf95eac6db 111172 gvfs-daemons_1.57.2-2+deb13u1_arm64.deb cd146f357c944d9cabcb3d44b48376f5522e8181 407804 gvfs-dbgsym_1.57.2-2+deb13u1_arm64.deb f8f1f17d0d02bb130e12afa4d68355229e8d37ed 47128 gvfs-fuse-dbgsym_1.57.2-2+deb13u1_arm64.deb 6a0513f662de7a2e7a0d990a45c1edfc1b69241f 22132 gvfs-fuse_1.57.2-2+deb13u1_arm64.deb 4d28bfe8289c4407e7339c5037df5cc43ddcb1a8 375276 gvfs-libs-dbgsym_1.57.2-2+deb13u1_arm64.deb 22e78fca48f8142c51a4161113cbfe2e82624248 95908 gvfs-libs_1.57.2-2+deb13u1_arm64.deb 01e12ed6e1586f5baf7bb58b3fcc13d98b4b7551 18470 gvfs_1.57.2-2+deb13u1_arm64-buildd.buildinfo 7ae0c5be92bb08d1dba9083984a1045db6952a8d 119668 gvfs_1.57.2-2+deb13u1_arm64.deb Checksums-Sha256: 4174243114c674bd5b59553ae0741b8b13b15907676a0601de660cdf5a3e6cfb 1638344 gvfs-backends-dbgsym_1.57.2-2+deb13u1_arm64.deb b806c06de74c6ed1c3542c57704a25a22c7d9ab3b47a504531422f3fd50c4e2c 337988 gvfs-backends_1.57.2-2+deb13u1_arm64.deb 0b7e799c38ccf381abc469a85b8f8bf28aa0ab87afd174f50275f509f34a7b43 443500 gvfs-daemons-dbgsym_1.57.2-2+deb13u1_arm64.deb 7ab6e7807dfb2734163fed1efe1a7c6af51d8064653583690e1ee9657b887a24 111172 gvfs-daemons_1.57.2-2+deb13u1_arm64.deb 71d45d519114e851059ef0c5bf112f0b500681885afadbafd9a113cbf36cabc1 407804 gvfs-dbgsym_1.57.2-2+deb13u1_arm64.deb 03f9a93634bf1781dbd4d3dcbef3265d62f2cc8213836dcc7a31052cde71d087 47128 gvfs-fuse-dbgsym_1.57.2-2+deb13u1_arm64.deb 2f21549da0bfa7a962498fe8abf68bb50c09077e62ddf8141772e3bd30ea33a4 22132 gvfs-fuse_1.57.2-2+deb13u1_arm64.deb 411866e2d479082c915231e7ade4903e6575a7ea990bc56ee6493e4f28d2ce81 375276 gvfs-libs-dbgsym_1.57.2-2+deb13u1_arm64.deb 3060b948c6ee6951fdb626821d6ca2055094a2f621f56fdbbdbe5cffc649a2d7 95908 gvfs-libs_1.57.2-2+deb13u1_arm64.deb 0bcc7192e882437816e22645b6eac1f806fea23ce2665b1b18793ebb993d6881 18470 gvfs_1.57.2-2+deb13u1_arm64-buildd.buildinfo 52108160695c8320cd0fb886e6266920f5cd29ba7173f054f49f48b9c9118384 119668 gvfs_1.57.2-2+deb13u1_arm64.deb Files: 87a91ea5e5b96875609ede3ca96029e8 1638344 debug optional gvfs-backends-dbgsym_1.57.2-2+deb13u1_arm64.deb 4c6f9e0cf46617c266b0430a416e89a9 337988 gnome optional gvfs-backends_1.57.2-2+deb13u1_arm64.deb e5e65453a00d4f6683493ca08a95a844 443500 debug optional gvfs-daemons-dbgsym_1.57.2-2+deb13u1_arm64.deb a2c8df64ea31c39287b18bcb114b3a85 111172 libs optional gvfs-daemons_1.57.2-2+deb13u1_arm64.deb 82f3f346075402137c49830d74c3730d 407804 debug optional gvfs-dbgsym_1.57.2-2+deb13u1_arm64.deb 09afa914c1039fcc8098d2f664eedad2 47128 debug optional gvfs-fuse-dbgsym_1.57.2-2+deb13u1_arm64.deb ef3efb00b39bd2149ad81e8f95000e25 22132 gnome optional gvfs-fuse_1.57.2-2+deb13u1_arm64.deb 78d154b4ab67415c90b177d219b9c922 375276 debug optional gvfs-libs-dbgsym_1.57.2-2+deb13u1_arm64.deb 13a777d8b81d22f6ea3961d018790402 95908 libs optional gvfs-libs_1.57.2-2+deb13u1_arm64.deb 763b52823cf9a5e43c98100d247a33a2 18470 gnome optional gvfs_1.57.2-2+deb13u1_arm64-buildd.buildinfo dee8af3bda42a31910d2bc5efd805074 119668 libs optional gvfs_1.57.2-2+deb13u1_arm64.deb -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEYxmcRLDHP0tCCM0oScpU3dYulLgFAmnQG0UACgkQScpU3dYu lLhdUw//YeuBJa4lp3O4cq98Athgj/mzA6PjdWHu8b0thA1dDm+iNQKYq522I4DP uux2jM9Ws7THM3TbMBXVDyVEhx62BxkHtaHe/iZjA9CLjnfRmww4HxHG0br+hilv waUKl9270TIpBgUE8TblRBF0BB4D4BRczYJLDh/m3JRWowo/XWBghVzoB2SAKMDM lQr1B1qV+NVORDbTLzQoyvU6DQ8GaS3BCwFK45ppsun2gq0Xo0bDDR8mQ9oVIvGi fD7QlKNTUCtg94p1CgBIUfR4X9n/7q7uyaTn/UoImw7jQKSEJbAm7pAEFoC+aDEY dPMID2a25i29r30B6lNePaN4PPvcc9b0pVckkU3ZWQrpPghczfawAmKfnKfLDJ6p OJPjJpLbxPf2RQpmVviUsoFqvI3A34g0ORFbKUjtaUCz/r2qoU/ZZRWII065sWDF vXU+K6VEH4XvtJhWKwD/TAdbJTVhGjBBO1vk7mTc1TeInufrv+1v7qFfn1ucFlAP knEFhVOz6lnLHzahAszNyiYkqYnJrBn2/WFr+5sYRaD8g82jr8yetXNkS1bC5p8r hooAtJxJ6KgXR0VrC342hGJl59ZM9R7rMPvnKuQh2bNTO9ddEcI7zaSKw6p1sK1S 8y0ObR7bMQQ67mIGPb6x9DKmPcYr7K6Nj74ZCK9zT0DRkG199gg= =qFXP -----END PGP SIGNATURE-----