Accepted gvfs 1.46.2-2+deb11u1 (source) into oldoldstable-security

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Sat, 28 Mar 2026 12:23:14 +0100
Source: gvfs
Architecture: source
Version: 1.46.2-2+deb11u1
Distribution: bullseye-security
Urgency: high
Maintainer: Debian GNOME Maintainers <pkg-gnome-maintainers@lists.alioth.debian.org>
Changed-By: Andreas Henriksson <andreas@fatal.se>
Changes:
 gvfs (1.46.2-2+deb11u1) bullseye-security; urgency=high
 .
   * Non-maintainer upload by the LTS Security Team.
   * CVE-2026-28295 ftp: Use control connection address for PASV data
   * CVE-2026-28296 ftp: Reject paths containing CR/LF characters
Checksums-Sha1:
 44cc4a728443699f1267d6c3602d91356a611ac6 3466 gvfs_1.46.2-2+deb11u1.dsc
 bbbd183e6ef1dedf54a309546a03f5906a6adcf0 1216056 gvfs_1.46.2.orig.tar.xz
 79200f78b82100d8d310b71f3efff09dc0a3078b 29600 gvfs_1.46.2-2+deb11u1.debian.tar.xz
 4c6a923b5f1a9f3bf28f65da7a564d8a80a35ddf 10655 gvfs_1.46.2-2+deb11u1_source.buildinfo
Checksums-Sha256:
 b7ccb00b9a42cc74a5d35669cf103dd152305eb58799ad4a640831b605aef5b3 3466 gvfs_1.46.2-2+deb11u1.dsc
 d83fa160286670c03eb890240606d8afa7ea6a3a818e8ad17eeed8d976487bd7 1216056 gvfs_1.46.2.orig.tar.xz
 a205c2ebe98efae1d48f0db97c34c33fbbb2752a56f86b58b0123aef1efa47c8 29600 gvfs_1.46.2-2+deb11u1.debian.tar.xz
 a0eb510d9c850db0d95ee6c8e7a0d981ad7a21a13251834d6abaf123f472d804 10655 gvfs_1.46.2-2+deb11u1_source.buildinfo
Files:
 3b2e2c7ea810b5187ba191b41c655509 3466 gnome optional gvfs_1.46.2-2+deb11u1.dsc
 852fff7ae3215012f3e143d0b13a81ff 1216056 gnome optional gvfs_1.46.2.orig.tar.xz
 978447a515038050b0d01006f228e5db 29600 gnome optional gvfs_1.46.2-2+deb11u1.debian.tar.xz
 ac2267ee440eb8db52a3179958fb65d6 10655 gnome optional gvfs_1.46.2-2+deb11u1_source.buildinfo

-----BEGIN PGP SIGNATURE-----
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=vMwS
-----END PGP SIGNATURE-----