[ALSA-2026:73998] Important: gvfs security update
Type:
security
Severity:
important
Release date:
2026-10-01
Description:
GVFS is the GNOME Desktop Virtual File System layer that allows users to easily access local and remote data using File Transfer Protocol (FTP), Secure Shell File Transfer Protocol (SFTP), Web Distributed Authoring and Versioning (WebDAV), Common Internet File System (CIFS), Server Message Block (SMB), and other protocols. GVFS integrates with the GNOME I/O (GIO) abstraction layer. Security Fix(es): * gvfs: SFTP: heap-based buffer overflow in read_reply() (CVE-2026-84268) * gvfs: gvfs-admin socket ownership race permits local root (CVE-2026-88924) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
References:
Updated packages listed below:
Architecture Package Checksum
aarch64 gvfs-mtp-1.54.4-4.el10_2.1.aarch64.rpm 25f083d00c48be4dd5444af45bb40d2df701b9531c0fc577b82f9992393805f5
aarch64 gvfs-client-1.54.4-4.el10_2.1.aarch64.rpm 29f50584004ddc0d57e396ca20a18c3ecd7c05b520f7a21cc1e94a52ecdff04f
aarch64 gvfs-1.54.4-4.el10_2.1.aarch64.rpm 2cff29f8902378fdf7427927dc0fc8695bd371858451da48ede962fe0ca00f06
aarch64 gvfs-goa-1.54.4-4.el10_2.1.aarch64.rpm a145be318c2cdd62f38a7a3517cd2ce05bf050713031ce39a05e9331ace2ffd5
aarch64 gvfs-smb-1.54.4-4.el10_2.1.aarch64.rpm ae50f0f79c44feca31d089cb9da77f50e74d78306eba5a420bf96720a3518967
aarch64 gvfs-fuse-1.54.4-4.el10_2.1.aarch64.rpm c5201ef6a43fae189a432b50507226ab190ab3996dabb3c1abefb1be298fe920
aarch64 gvfs-gphoto2-1.54.4-4.el10_2.1.aarch64.rpm dc70d730b49332d090b8ccf681835b7ecc7e7041a1356bd328dee861d6580945
ppc64le gvfs-goa-1.54.4-4.el10_2.1.ppc64le.rpm 2236a90f81b18bddba7e26b846d7e6a560e4d9fbcae26b371398bb24e5f9fde2
ppc64le gvfs-smb-1.54.4-4.el10_2.1.ppc64le.rpm 405710f28bd7ac0659e12f70cf3da4655a439c9ce85eeae7d6ab8289222d4677
ppc64le gvfs-client-1.54.4-4.el10_2.1.ppc64le.rpm 4840f2ce0b5b16f4c05d5b1d9a73c902ef9aff91831f13e66c2bccec8cac70e8
ppc64le gvfs-1.54.4-4.el10_2.1.ppc64le.rpm 6a90b1d0a0058496a288fe06882b66c03749bf2ef3442bd8d152638ab7105007
ppc64le gvfs-fuse-1.54.4-4.el10_2.1.ppc64le.rpm 7f61e7a7600549e1426030e665aec9c74de4cffb6c8ab4654628dde812dade67
ppc64le gvfs-gphoto2-1.54.4-4.el10_2.1.ppc64le.rpm 8a11111c61cc779cb566b6b80a7121231284e91c4896fbfd73f136f17a213fba
ppc64le gvfs-mtp-1.54.4-4.el10_2.1.ppc64le.rpm e403363871e1457faaa80031d6857aeba614296b9f076089e21faa52d9b9cf20
s390x gvfs-fuse-1.54.4-4.el10_2.1.s390x.rpm 021802caf27c5ae148673a30c9350185a076c36eca10d02dbca12b7eb15dc72c
s390x gvfs-goa-1.54.4-4.el10_2.1.s390x.rpm 25c33ab30ad5982d706b18880ee60076ec6f35d37b70b97f087ac47df4918386
s390x gvfs-1.54.4-4.el10_2.1.s390x.rpm 371b685ff73c813527157d935b5e8b65c2414ab438c6cd9ee6b07ffb372d4768
s390x gvfs-client-1.54.4-4.el10_2.1.s390x.rpm 425c99e53945e85a0d5458f8889afe6bcf66fd5cac41886adcf406329503ffcf
s390x gvfs-smb-1.54.4-4.el10_2.1.s390x.rpm aad08f1ef49c8b640d1d5d54727c4acabdacd90af86afdc31614e4bfae7e06f1
x86_64 gvfs-smb-1.54.4-4.el10_2.1.x86_64.rpm 008f875727080d5aa37252f31c83bb6105f770965e7c005dbc5c0c9ba7894256
x86_64 gvfs-1.54.4-4.el10_2.1.x86_64.rpm 3ae6abf85911c2dd3992af3024d438ad4aba08f73f0e1fb1ddcd5ef061f3a9d4
x86_64 gvfs-goa-1.54.4-4.el10_2.1.x86_64.rpm 69b1c753b81e0ccca40674467dd29c66346bcbc355c67654dfae4b37d6d7893e
x86_64 gvfs-fuse-1.54.4-4.el10_2.1.x86_64.rpm a3b1903b644b37aacf3faf4c10f58d8f7e7ebfcc70ed82f49c0ed09ba16b2e53
x86_64 gvfs-gphoto2-1.54.4-4.el10_2.1.x86_64.rpm b76d0f459f552a8da92bcf48705f43dcd8a2b0815b8f481f9ad7ce11c447b5f4
x86_64 gvfs-client-1.54.4-4.el10_2.1.x86_64.rpm be2c2f4206e3094316321027867d33309ad2108aef797bb6d1dc9ca22882da35
x86_64 gvfs-mtp-1.54.4-4.el10_2.1.x86_64.rpm ea69fbfb9a1289f7ca3bb126160810db1b5de2d65dce2cc792c3b10a2cc867f4
x86_64_v2 gvfs-gphoto2-1.54.4-4.el10_2.1.x86_64_v2.rpm 10caa8186accad1c40aa1c4d598612debd48ff537b3125c4bd05961a612d3717
x86_64_v2 gvfs-smb-1.54.4-4.el10_2.1.x86_64_v2.rpm 226f5a5d46cd79ad483ffe63a440492bd4b2dbcd91703ec7dee1df62ba489fc2
x86_64_v2 gvfs-1.54.4-4.el10_2.1.x86_64_v2.rpm 2aec7f6288c4b0d1c46b20cbb318a4d03f7f8742264a3a9449e6282432d42a1c
x86_64_v2 gvfs-fuse-1.54.4-4.el10_2.1.x86_64_v2.rpm 38319b6b54ddb9b44218026e437269673da6d136ec3dff24f5960bf2b9fda272
x86_64_v2 gvfs-client-1.54.4-4.el10_2.1.x86_64_v2.rpm 4f84961f68ba65c1291942c7fa07812ec49633ffff32a2fc589832a13fa35d41
x86_64_v2 gvfs-mtp-1.54.4-4.el10_2.1.x86_64_v2.rpm b80c65af52be7e58e2cdfe374dfdf3c27247cfa28fa88498d15d5059ad0a7aa8
x86_64_v2 gvfs-goa-1.54.4-4.el10_2.1.x86_64_v2.rpm c41bde4c5b43895303f8fe798203ebb4bdcdf2758a0c7822fd6da7aaab71b8aa
Notes:
This page is generated automatically from Red Hat security data and has not been checked for errors. For clarification or corrections please contact the AlmaLinux Packaging Team.