-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Sun, 29 Mar 2026 04:23:19 +0200 Source: gvfs Binary: gvfs-common Architecture: all Version: 1.57.2-2+deb13u1 Distribution: trixie Urgency: high Maintainer: all Build Daemon (x86-csail-02) Changed-By: Andreas Henriksson Description: gvfs-common - userspace virtual filesystem - common data files Closes: 1129285 1129286 Changes: gvfs (1.57.2-2+deb13u1) trixie; urgency=high . * Non-maintainer upload by the LTS Security Team. * CVE-2026-28295 ftp: Use control connection address for PASV data (Closes: #1129285) * CVE-2026-28296 ftp: Reject paths containing CR/LF characters (Closes: #1129286) * debian/gbp.conf: Set debian branch to debian/trixie Checksums-Sha1: 5dda4b1d83e5b59b151cac00f234711681a73292 497084 gvfs-common_1.57.2-2+deb13u1_all.deb cfd7e125381dd1ead6187ea3cb3251e1a2bbff4f 15771 gvfs_1.57.2-2+deb13u1_all-buildd.buildinfo Checksums-Sha256: 8744ed0cebea670dbce38f72ba8bedbd7b8c66a02468b8e043a5fe8c6c75433b 497084 gvfs-common_1.57.2-2+deb13u1_all.deb 5da3c5baa6210906a909b21902eb10e9f34752175562c7e929fc451899fad559 15771 gvfs_1.57.2-2+deb13u1_all-buildd.buildinfo Files: 244da7bf833e8cacdd504959f7392c15 497084 libs optional gvfs-common_1.57.2-2+deb13u1_all.deb 117e2e75389efe3e646d416087832194 15771 gnome optional gvfs_1.57.2-2+deb13u1_all-buildd.buildinfo -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEXLxUpUHQBQBTDtd4aBVi67oXtfkFAmnQG/gACgkQaBVi67oX tflQ3Q/+JeXAcblO00hUVlgWK4Aw5GlWXxBH+MNfe1N8A5o86THvtEDf/GWhxAvj ++zggb3vGmwDYiPxau3AYPI7BebZ7+Jwik7PoBEffuGhZETDX0GIHzWulJoskzRI or2Nj4I4zSlUNtfDfph3YAlhnvI2xp5R+IA3NHmQLf+T1hSemtfyiAKjKn61Nq3J /UypGhpPQMcz5ep2fGnfdl7Q/MH4ca+YbXpI/JxnBZ+xyoniFILUiR/JFCN5/LOQ jK5B8DmMzWtAiX9QXs8EHNWHzBWC4Q5KqicWeNxGNb39NL0Mbt4jHa9cBVm/ces0 SXtOS4wJ/GsAT7gNBWf+10eTf9cDYe341lQYQjBf25jhJo4S6A2G7EUeEphuw7Mg njZSCrSzbf8K2fFTUyHVDnYJ8tlT9SnNx+oKmF0SBVMZMd+BFetXK7fJOPzA+jxC rm4/mLvmQF+zKpOMh6LOXXQvietL41YnM54M1tLWdJF2uI0VsWdXtfHzYsmY6Re+ n+qDmaixmrRMvXP6L42+xn92Rn3x8Mn7Vwcz0ImmsQLoq4H6+9sBTAAnERh91ZyC 88hyoXWZfJBxV1Vo1mB3eEHi+fqyxw9+mJsiApEabxLXeTw/D/mWWzXlcKZ8MlIh xGaclIjLQKV435rw4oN3us51InHEClnbOZhFlbnMO/OgYnFiNSw= =zVHk -----END PGP SIGNATURE-----