-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512
Format: 1.8
Date: Wed, 21 Aug 2019 12:05:56 +0100
Source: gvfs
Architecture: source
Version: 1.41.91-1
Distribution: experimental
Urgency: medium
Maintainer: Debian GNOME Maintainers <pkg-gnome-maintainers@lists.alioth.debian.org>
Changed-By: Iain Lane <laney@debian.org>
Changes:
gvfs (1.41.91-1) experimental; urgency=medium
.
[ Simon McVittie ]
* Add bug number and CVE ID to previous changelog entry
.
[ Iain Lane ]
* debian/watch: Find unstable versions
* New upstream release
+ admin: Add query_info_on_read/write functionality (CVE-2019-12448)
+ admin: Allow changing file owner (CVE-2019-12447)
+ admin: Ensure correct ownership when moving to file:// uri
(CVE-2019-12449)
+ admin: Prevent core dumps when daemon is manually started
+ admin: Use fsuid to ensure correct file ownership (CVE-2019-12447)
+ afc: Remove assumptions about length of device UUID to support new
devices
+ afp: Fix afp backend crash when no username supplied
+ build: Add dependency on gsettings-desktop-schemas
+ build: Bump required meson version to 0.50.0
+ build: Define gvfs_rpath for libgvfsdaemon.so
+ build: Several meson improvements
+ daemon: Check that the connecting client is the same user
(CVE-2019-12795)
+ daemon: Only accept EXTERNAL authentication (CVE-2019-12795)
+ daemon/udisks2: Handle lockdown option to disable writing
+ daemon: Unify some translatable strings
+ fuse: Adapt gvfsd-fuse to use fuse 3.x
+ fuse: Define RENAME_* macros when they are not defined
+ fuse: Remove max_write limit
+ gmountsource: Fix deadlocks in synchronous API
+ google: Check ownership in is_owner() without additional HTTP request
+ google: Disable deletion of non-empty directories
+ google: Do not enumerate volatile entries if title matches id
+ google: Fix crashes when deleting if the file isn't found
+ google: Fix issue with stale entries remaining after rename operation
+ google: Support deleting shared Google Drive files
+ proxy: Don't leak a GVfsDBusDaemon
+ udisks2: Change display name for crypto_unknown devices
* debian/patches: Drop backported patches. We're further ahead now.
Checksums-Sha1:
ee2bb0911e7962d135ac62f02bee0f77e27146de 3403 gvfs_1.41.91-1.dsc
319eff283af69ff6db5c7943411866a436f2d7a8 1209944 gvfs_1.41.91.orig.tar.xz
24dc1092226dd8dece6d48e4c2c74d9fb142a9c3 23768 gvfs_1.41.91-1.debian.tar.xz
8b4c5075eb96315cc409feb5963d6122ca004a6a 23647 gvfs_1.41.91-1_source.buildinfo
Checksums-Sha256:
2c94549921138f20ce2c94781e1eca5cfd5de9f7f90cf612529abf6e70f9ef7f 3403 gvfs_1.41.91-1.dsc
a0e255640715f11f782e59a36a208962bbc84406cf3cfdea52e0651c0e26447f 1209944 gvfs_1.41.91.orig.tar.xz
d9e76c29604fcac7a6eb175ec50a23ec99ae35457947d171282ed24c8a366684 23768 gvfs_1.41.91-1.debian.tar.xz
ac9d234226bb2403cac39965df5c04a458a3352cba9d03a463124ad1af6b9f82 23647 gvfs_1.41.91-1_source.buildinfo
Files:
6c723568fbcd229c690b79c8b4b3bbb9 3403 gnome optional gvfs_1.41.91-1.dsc
01f76ec5205c1d8cccd5138f79cd48b2 1209944 gnome optional gvfs_1.41.91.orig.tar.xz
90e338831d8f5b91bc10baf7a917c4d5 23768 gnome optional gvfs_1.41.91-1.debian.tar.xz
08334ef6b5c48de72d0caf6912e0b27b 23647 gnome optional gvfs_1.41.91-1_source.buildinfo
-----BEGIN PGP SIGNATURE-----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=+cRr
-----END PGP SIGNATURE-----
