gpp_maybe
Security update for gvfs
SUSE-SLE-Module-Desktop-Applications-15-SP7-2026-4240
This update for gvfs fixes the following issues: - CVE-2026-84267: `read_string()` allocates buffers withouth verifying that the buffer is completely filled when communicating with a malicious SFTP server, which can lead to uninitialized heap memory leaks (bsc#1278157). - CVE-2026-84268: `read_reply()` processes length that exceeds requested client size when communicating with a malicious SFTP server, which can lead to an OOB write (bsc#1278158). - CVE-2026-84269: DSI read path processes length that exceeds requested client size when communicating with a malicious AFP server, which can lead to an OOB memory access (bsc#1278159). - CVE-2026-84270: `do_read()` trusts the data length returned by a mounted MTP device and does not limit it to the original size requested by the client, which can lead to an OOB write (bsc#1278156).
-
Release DateSep 17 2026
-
ReferencesBugzilla: 1278156, 1278157, 1278158, 1278159
CVEs: CVE-2026-84267, CVE-2026-84268, CVE-2026-84269, CVE-2026-84270 -
Typesecurity
-
Severityimportant
cloud_download Downloads
Desktop Applications Module 15.7 s390x
-
Packagesgvfs
Virtual File System functionality for GLibgvfs-backend-afc1.52.2-150600.3.9.1 lock rpm lock src
VFS functionality for GLib -- iPod / iPhone Supportgvfs-backend-samba1.52.2-150600.3.9.1 lock rpm
VFS functionality for GLib -- Samba Supportgvfs-backends1.52.2-150600.3.9.1 lock rpm
VFS functionality for GLibgvfs-devel1.52.2-150600.3.9.1 lock rpm
Development files for the GNOME Virtual file systemgvfs-fuse1.52.2-150600.3.9.1 lock rpm
VFS functionality for GLibgvfs-lang1.52.2-150600.3.9.1 lock rpm
Translations for package gvfs1.52.2-150600.3.9.1 lock rpm
Desktop Applications Module 15.7 ppc64le
-
Packagesgvfs
Virtual File System functionality for GLibgvfs-backend-afc1.52.2-150600.3.9.1 lock rpm lock src
VFS functionality for GLib -- iPod / iPhone Supportgvfs-backend-samba1.52.2-150600.3.9.1 lock rpm
VFS functionality for GLib -- Samba Supportgvfs-backends1.52.2-150600.3.9.1 lock rpm
VFS functionality for GLibgvfs-devel1.52.2-150600.3.9.1 lock rpm
Development files for the GNOME Virtual file systemgvfs-fuse1.52.2-150600.3.9.1 lock rpm
VFS functionality for GLibgvfs-lang1.52.2-150600.3.9.1 lock rpm
Translations for package gvfs1.52.2-150600.3.9.1 lock rpm
Desktop Applications Module 15.7 aarch64
-
Packagesgvfs
Virtual File System functionality for GLibgvfs-backend-afc1.52.2-150600.3.9.1 lock rpm lock src
VFS functionality for GLib -- iPod / iPhone Supportgvfs-backend-samba1.52.2-150600.3.9.1 lock rpm
VFS functionality for GLib -- Samba Supportgvfs-backends1.52.2-150600.3.9.1 lock rpm
VFS functionality for GLibgvfs-devel1.52.2-150600.3.9.1 lock rpm
Development files for the GNOME Virtual file systemgvfs-fuse1.52.2-150600.3.9.1 lock rpm
VFS functionality for GLibgvfs-lang1.52.2-150600.3.9.1 lock rpm
Translations for package gvfs1.52.2-150600.3.9.1 lock rpm
Desktop Applications Module 15.7 x86_64
-
Packagesgvfs
Virtual File System functionality for GLibgvfs-backend-afc1.52.2-150600.3.9.1 lock rpm lock src
VFS functionality for GLib -- iPod / iPhone Supportgvfs-backend-samba1.52.2-150600.3.9.1 lock rpm
VFS functionality for GLib -- Samba Supportgvfs-backends1.52.2-150600.3.9.1 lock rpm
VFS functionality for GLibgvfs-devel1.52.2-150600.3.9.1 lock rpm
Development files for the GNOME Virtual file systemgvfs-fuse1.52.2-150600.3.9.1 lock rpm
VFS functionality for GLibgvfs-lang1.52.2-150600.3.9.1 lock rpm
Translations for package gvfs1.52.2-150600.3.9.1 lock rpm