Opened 7 months ago

Closed 7 months ago

#22885 closed enhancement (fixed)

gvfs-1.58.2

Reported by: Bruce Dubbs Owned by: Douglas R. Reno
Priority: elevated Milestone: 13.0
Component: BOOK Version: git
Severity: medium Keywords:
Cc:

Description

New point version.

Change History (3)

comment:1 by Xi Ruoyao, 7 months ago

Priority: normal → elevated 
* client: Fix use-after-free when creating async proxy failed (Ondrej Holy)
* daemon: Fix race on subscribers list when on thread (Ondrej Holy)
* ftp: Validate fe_size when parsing symlink target (Ondrej Holy)
* ftp: Check localtime() return value before use (Ondrej Holy)
* CVE-2026-28295: ftp: Use control connection address for PASV data (Ondrej Holy)
* CVE-2026-28296: ftp: Reject paths containing CR/LF characters (Ondrej Holy)
* gphoto2: Use g_try_realloc() instead of g_realloc() (Ondrej Holy)
* cdda: Reject path traversal in mount URI host (Ondrej Holy)
* client: Fail when URI has invalid UTF-8 chars (Ondrej Holy)
* Some other fixes (correctmost, Ondrej Holy)

comment:2 by Douglas R. Reno, 7 months ago

Milestone: 13.1 → 13.0
Owner: changed from blfs-book to Douglas R. Reno
Status: new → assigned

I'll take care of this. This is theoretically not an end-package, but it's only used by a handful of file managers.

comment:3 by Douglas R. Reno, 7 months ago

Resolution: → fixed
Status: assigned → closed

Fixed at 4fb5965d0921042e9856ab83b41557317b1a896d

SA-12.4-111 issued

Note: See TracTickets for help on using tickets.