[ALSA-2026:73997] Important: gvfs security update
Type:
security
Severity:
important
Release date:
2026-10-01
Description:
GVFS is the GNOME Desktop Virtual File System layer that allows users to easily access local and remote data using File Transfer Protocol (FTP), Secure Shell File Transfer Protocol (SFTP), Web Distributed Authoring and Versioning (WebDAV), Common Internet File System (CIFS), Server Message Block (SMB), and other protocols. GVFS integrates with the GNOME I/O (GIO) abstraction layer. Security Fix(es): * gvfs: SFTP: heap-based buffer overflow in read_reply() (CVE-2026-84268) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
References:
Updated packages listed below:
Architecture Package Checksum
aarch64 gvfs-gphoto2-1.36.2-22.el8_10.aarch64.rpm 0bae41af823a634d25aad6b5e44dde5fb841f0ef6eabe31665cb19d973fd8055
aarch64 gvfs-smb-1.36.2-22.el8_10.aarch64.rpm 1434ba78500959859d3567f245f00aac6b737798baace39d864dc5044acadd31
aarch64 gvfs-client-1.36.2-22.el8_10.aarch64.rpm 3011c7c92e5322cd94bd7b4331deadbac8be4501f580703bb8b76c24a519f371
aarch64 gvfs-archive-1.36.2-22.el8_10.aarch64.rpm 401f8c0361200a4655fcef23d1232c9d558eac8a371b31574228ea4e62e0b569
aarch64 gvfs-fuse-1.36.2-22.el8_10.aarch64.rpm 5398248e1ca7d228e84276f7bef580b63b29c03eb22c66806ef54b7b21a97c7c
aarch64 gvfs-goa-1.36.2-22.el8_10.aarch64.rpm 68de06049bc8a168ee3ef92d6fa0359f66ea2e9c2445ee386da2999731e55e20
aarch64 gvfs-mtp-1.36.2-22.el8_10.aarch64.rpm 7b3c3a3047c9316c77ae3c3c896018edfe307f22847b1e81d5210a4f0e1507c3
aarch64 gvfs-afc-1.36.2-22.el8_10.aarch64.rpm a85f146d240a7b3146cfeb4011f9d2cb927d1844e4026906b711f6efa5d37e54
aarch64 gvfs-devel-1.36.2-22.el8_10.aarch64.rpm ccba3ac37acc0ecc837dd3a00a4bce40f611abbd108d35a24ba99494a71da733
aarch64 gvfs-afp-1.36.2-22.el8_10.aarch64.rpm e249fb987967f4e6c4abbc504b16ab203a0903adb384b0dc729ae5754902bef6
aarch64 gvfs-1.36.2-22.el8_10.aarch64.rpm e459334524dc9a3d84427453bd21667399db993e5580f4323f743fbc65db5a52
i686 gvfs-client-1.36.2-22.el8_10.i686.rpm 2c0d491288f2078b87ed8b2765920d98ae65b839232bdf8b8f062a7a4b86dee1
i686 gvfs-devel-1.36.2-22.el8_10.i686.rpm 51f674a7ce163befcaecf7edab6b924258274de8dd0602083a11724fa2b16e6e
i686 gvfs-1.36.2-22.el8_10.i686.rpm f0ac76756e3e09b4712711f39a4c4d6099ede13dfb2fcdba46983d57fe286175
ppc64le gvfs-afp-1.36.2-22.el8_10.ppc64le.rpm 419075990e65af89f3cdcaa658b9e4ca19806fdee8632d57963528f7073342da
ppc64le gvfs-client-1.36.2-22.el8_10.ppc64le.rpm 502d9dfe029c9fa19b436e4be3de3b8553e043e0bc825db2cff95c2eb6c9bdca
ppc64le gvfs-smb-1.36.2-22.el8_10.ppc64le.rpm 535be25901c4ba6371240fc2b18919139051eea45be833b95d99176063cee45c
ppc64le gvfs-gphoto2-1.36.2-22.el8_10.ppc64le.rpm 8399384c145c78e20ea74a9ff3f8961495fce8f521dec73b5d3ce7da85cd2250
ppc64le gvfs-1.36.2-22.el8_10.ppc64le.rpm 9114a897c8c5a6b8757dbbd8baca46f1d0a6cd02f8706bc58af5b6ae5b2fca50
ppc64le gvfs-fuse-1.36.2-22.el8_10.ppc64le.rpm 9301d323b07c2bd1ff55f587496608ef32df3c3fea8da47340d647395c968ef7
ppc64le gvfs-devel-1.36.2-22.el8_10.ppc64le.rpm c1d52ab59b5889acfca0f74439f7f5afc9e26fa5e080ca35c0accd5e352121a0
ppc64le gvfs-afc-1.36.2-22.el8_10.ppc64le.rpm e65f82b59bf8469a67c49d2cf8cbcfa43de7c7abbd90db38667db36c255aedde
ppc64le gvfs-archive-1.36.2-22.el8_10.ppc64le.rpm ed37679d8fbab8d97627d6f4e45d2682d182100c5306e9a7e19f25522167e3ea
ppc64le gvfs-mtp-1.36.2-22.el8_10.ppc64le.rpm f0f9cee8fa2deb84f61d2c502d3d7a7029cd1a26de3dc3ca320ac5e3f1eba851
ppc64le gvfs-goa-1.36.2-22.el8_10.ppc64le.rpm fe3ade0f1f78b8d0914d6f69d52d4d9faf70edcc8b14c55ded5aecd368fed881
s390x gvfs-archive-1.36.2-22.el8_10.s390x.rpm 1753fda69c268a311718d983e34b735f886dd05b05df75d2754f0c24a96e2de5
s390x gvfs-gphoto2-1.36.2-22.el8_10.s390x.rpm 6eef2ec1feaaba08293064615b779f4baa1caf0f8436b651585be316cb3d5548
s390x gvfs-goa-1.36.2-22.el8_10.s390x.rpm 7f162b8e203834e194b7d9c930061e34241722a08bf27d2e076e47da153305f0
s390x gvfs-mtp-1.36.2-22.el8_10.s390x.rpm a4ed7512a0e78d32ad3a4b54aca439e38033da54ce0e39d3e81dbebda133e700
s390x gvfs-fuse-1.36.2-22.el8_10.s390x.rpm ae607e8e56565e719154ed38d9b58655a86605ce046660bd85bdf87afb51039f
s390x gvfs-smb-1.36.2-22.el8_10.s390x.rpm bd6527a7b32308765c7aeeb3d45f491c21666110afc2e8dca4b58e5023dbb2cf
s390x gvfs-1.36.2-22.el8_10.s390x.rpm c2639bac5109de88cac922a6701d8473e3abe12e3f9bd0872b5008f69de5bb41
s390x gvfs-afp-1.36.2-22.el8_10.s390x.rpm d42f1b568ce1cf3847cf27939edba939be2a4c7dcdae1f41ecab924ce6211e7a
s390x gvfs-client-1.36.2-22.el8_10.s390x.rpm daf315031051a38059aaa3832d4b5628748f5456ef5e14b887d03688a16625bc
s390x gvfs-devel-1.36.2-22.el8_10.s390x.rpm e5cbd348a47621a187376a42b3b1bd4440a3fc242de90da99b672bc515496048
x86_64 gvfs-1.36.2-22.el8_10.x86_64.rpm 0075175bd2f5749ccf39998e68f718a89414c93bd1cf29985456c959e3a63905
x86_64 gvfs-gphoto2-1.36.2-22.el8_10.x86_64.rpm 2ca645351f5452a79b5703c4d2cf996f06baba3f179b0f719865544c1ae0d9fd
x86_64 gvfs-goa-1.36.2-22.el8_10.x86_64.rpm 361a3f25a2c75a3206fe9570505592a9a67fe7e329b135d02031cafa10785527
x86_64 gvfs-fuse-1.36.2-22.el8_10.x86_64.rpm 69356dac010433c97e8525d0f2dc7083bf992fc5dd22d882cc55cdfea92ba43e
x86_64 gvfs-smb-1.36.2-22.el8_10.x86_64.rpm 79a118dddab2ba7a079c5cce0e4f13d500fcaed423b69886241fa38310b9a3d2
x86_64 gvfs-client-1.36.2-22.el8_10.x86_64.rpm 91448c71981b4dc2835378a266a99d02a878c512aa081d561adcb06ae368e7b3
x86_64 gvfs-afp-1.36.2-22.el8_10.x86_64.rpm a966453d5e22cdf8f488265f3d386eada8be63dfe87eb5624d2dcf8bff2550a0
x86_64 gvfs-afc-1.36.2-22.el8_10.x86_64.rpm ac3c0246d2e99774ba8634e3a6bf8445f47aafc87f203134fa21cc53280028d3
x86_64 gvfs-devel-1.36.2-22.el8_10.x86_64.rpm d08502613e84b35c0f1c1bd7b3cf6745251a38cf50547347488f8e69741a113c
x86_64 gvfs-mtp-1.36.2-22.el8_10.x86_64.rpm f4d4975a0441baec0ba6724c944c24f6c23dd77790bb20e6e605d0893d0e7ebb
x86_64 gvfs-archive-1.36.2-22.el8_10.x86_64.rpm ff67fa65ab6735222d4d4b31baaea1aec102fe850e0500e94dec5ddbf95cdcfc
Notes:
This page is generated automatically from Red Hat security data and has not been checked for errors. For clarification or corrections please contact the AlmaLinux Packaging Team.