[ALSA-2026:74370] Important: gvfs security update
Type:
security
Severity:
important
Release date:
2026-10-01
Description:
GVFS is the GNOME Desktop Virtual File System layer that allows users to easily access local and remote data using File Transfer Protocol (FTP), Secure Shell File Transfer Protocol (SFTP), Web Distributed Authoring and Versioning (WebDAV), Common Internet File System (CIFS), Server Message Block (SMB), and other protocols. GVFS integrates with the GNOME I/O (GIO) abstraction layer. Security Fix(es): * gvfs: SFTP: heap-based buffer overflow in read_reply() (CVE-2026-84268) * gvfs: gvfs-admin socket ownership race permits local root (CVE-2026-88924) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
References:
Updated packages listed below:
Architecture Package Checksum
aarch64 gvfs-devel-1.48.1-8.el9_8.1.aarch64.rpm 5d94fe03d46c83482d57294125273563ed5945f995b62c9d1c8038ecd91506e9
aarch64 gvfs-client-1.48.1-8.el9_8.1.aarch64.rpm 777c2a6a0d3ea1149c91c254f549fc49da7c55d996b78581aae022a027f7e726
aarch64 gvfs-goa-1.48.1-8.el9_8.1.aarch64.rpm 7a68e37a22f134dd92c13e9fa4954c2c298c21a53419f2fe213fa752fbba50fc
aarch64 gvfs-mtp-1.48.1-8.el9_8.1.aarch64.rpm 881a985e63034677389efc03699f03f227c8ba68ace9697310ba3442a6acff61
aarch64 gvfs-1.48.1-8.el9_8.1.aarch64.rpm aa30a141f0872376092f22a3b9176726385695571310ed55498d43e2da7c0356
aarch64 gvfs-fuse-1.48.1-8.el9_8.1.aarch64.rpm aee2eda8942cb3d106d07ed46c7343c52bca86e8e1f7cd5599921cf11aa01ba5
aarch64 gvfs-smb-1.48.1-8.el9_8.1.aarch64.rpm d0ef58821e2c5d99a065989ea5eb551e7ded0c6d33f44c9547cc3aa8749fe5e9
aarch64 gvfs-gphoto2-1.48.1-8.el9_8.1.aarch64.rpm fa116d28d986092a139816725fc0d5118164973fa455ed272883cb5155792272
i686 gvfs-client-1.48.1-8.el9_8.1.i686.rpm 39c8b99667292574ac35c0cede62bb1af1dd80790e8b41982afbae8c8e45931c
i686 gvfs-1.48.1-8.el9_8.1.i686.rpm 698ca572923a53bdd29ee72edb8f47592896a1b61d806d41fcb23f205160b1b2
i686 gvfs-devel-1.48.1-8.el9_8.1.i686.rpm b067b2f069c415c09ad10b463ef111b951e63c6337134f2fcf91a9f5648d7f6e
ppc64le gvfs-client-1.48.1-8.el9_8.1.ppc64le.rpm 01513253f0920e0fa90e3d972e50466f28dd9bab7129632b7c79fc2b343077c5
ppc64le gvfs-goa-1.48.1-8.el9_8.1.ppc64le.rpm 4ffad60e67d21451e032433ecad17dcb23e9714972717dda1d71486c27ca44ff
ppc64le gvfs-smb-1.48.1-8.el9_8.1.ppc64le.rpm 6ba8b4cd6fa7a81d51be3b1764c498119d019baa224ba26da7394aad3c0e5eb2
ppc64le gvfs-gphoto2-1.48.1-8.el9_8.1.ppc64le.rpm 87c78d0c1880537f5399ba0a713757d4daef803f04d5d28c825c52552a073b3f
ppc64le gvfs-mtp-1.48.1-8.el9_8.1.ppc64le.rpm 9af19491f9ec1f4b453ddde625dc27676ce276f676fafe5a4b8764114d43d33c
ppc64le gvfs-fuse-1.48.1-8.el9_8.1.ppc64le.rpm c5b91fcd60b4ad6e988a78029f18e53d749074875e4a0b132af23668fcfa6eec
ppc64le gvfs-1.48.1-8.el9_8.1.ppc64le.rpm cdf96284ea6df47c6a7d0de4c76cbce4ba51fa9f7ce8a015d688339ce25aa70d
ppc64le gvfs-devel-1.48.1-8.el9_8.1.ppc64le.rpm eca55d763c0488e45d1daca1b16ee98bcfb27f98b5ce6b57a87cce218207c040
s390x gvfs-devel-1.48.1-8.el9_8.1.s390x.rpm 06afeed44a7779089795e83a524fbecf68d6b482770a518aab038f0929f8360b
s390x gvfs-mtp-1.48.1-8.el9_8.1.s390x.rpm 52ab8627d7af474ddd91e3d15f72a3e71e0745d1bca04e3889eca190c1bec99c
s390x gvfs-smb-1.48.1-8.el9_8.1.s390x.rpm 745e4c29621fa5dcb0fe0639c7b5db6da7643ba0e7000fe75503ff15d7897a45
s390x gvfs-goa-1.48.1-8.el9_8.1.s390x.rpm 74fb8a92dae91f3a257d10c9b5a8cffb02b7216b66b0b223fa13285fae307df3
s390x gvfs-gphoto2-1.48.1-8.el9_8.1.s390x.rpm 7a274dc6197c8ac5edc257bdab2f1f224d3b0da685d564b46ed1580e28c1b9c1
s390x gvfs-fuse-1.48.1-8.el9_8.1.s390x.rpm 8729db523548cf1f0680e0a2d82b497a844fbb99c1cc815bc8519482797d002c
s390x gvfs-1.48.1-8.el9_8.1.s390x.rpm b1a9fce41e28bac95c727cc2c506282154aefa056c346a23b24334f3270699db
s390x gvfs-client-1.48.1-8.el9_8.1.s390x.rpm e3e46e256c1a0f60ca6fab51e4b32b0f72b2ed80722d8c52e42bb879d3a27cb3
x86_64 gvfs-mtp-1.48.1-8.el9_8.1.x86_64.rpm 3206043dde27f932c8c19f18f2c80a93af54d0fa552c3163b8675a60935e4f1d
x86_64 gvfs-devel-1.48.1-8.el9_8.1.x86_64.rpm 3880d6932f256550fe5eb94023e51c926f1f3180685d5a186cc52af442f29685
x86_64 gvfs-goa-1.48.1-8.el9_8.1.x86_64.rpm 3b1cda4d64266d34a408ff7345b81aff04d637951a6b03431057e7300555b351
x86_64 gvfs-1.48.1-8.el9_8.1.x86_64.rpm 722641bd316912889c259c04e788953e923b0e579950a58182a0d9e2824fd7ee
x86_64 gvfs-smb-1.48.1-8.el9_8.1.x86_64.rpm 7be1bbc95ec9e3d8e96c0c319703ac156b29872153f321019fe067a259e6b319
x86_64 gvfs-client-1.48.1-8.el9_8.1.x86_64.rpm 9a469a5c7179df3fb558d3198fc58672938c258f245a703a5676eb056a9124e4
x86_64 gvfs-fuse-1.48.1-8.el9_8.1.x86_64.rpm a2ab8810f722132a62790944b5601a2d7a34040aeac6a9459cc2b82eefea8a91
x86_64 gvfs-gphoto2-1.48.1-8.el9_8.1.x86_64.rpm bf482d17d833a12468a5984be2c8f18396e6f3024502ae85fddde480161b739b
Notes:
This page is generated automatically from Red Hat security data and has not been checked for errors. For clarification or corrections please contact the AlmaLinux Packaging Team.