-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Sun, 29 Mar 2026 04:23:19 +0200
Source: gvfs
Architecture: source
Version: 1.57.2-2+deb13u1
Distribution: trixie
Urgency: high
Maintainer: Debian GNOME Maintainers <pkg-gnome-maintainers@lists.alioth.debian.org>
Changed-By: Andreas Henriksson <andreas@fatal.se>
Closes: 1129285 1129286
Changes:
 gvfs (1.57.2-2+deb13u1) trixie; urgency=high
 .
   * Non-maintainer upload by the LTS Security Team.
   * CVE-2026-28295 ftp: Use control connection address for PASV data
     (Closes: #1129285)
   * CVE-2026-28296 ftp: Reject paths containing CR/LF characters
     (Closes: #1129286)
   * debian/gbp.conf: Set debian branch to debian/trixie
Checksums-Sha1:
 c075abc92b2a82037555833d0d67eeead18ee06f 3564 gvfs_1.57.2-2+deb13u1.dsc
 2dd9bbf63f7340bf5f6ef3ccf16ba583e251baaf 1281772 gvfs_1.57.2.orig.tar.xz
 2d38c6f47c5efa473fa3c88f749c1731b52c5e3c 31368 gvfs_1.57.2-2+deb13u1.debian.tar.xz
 b0e7bdee2374569f53151abe31cc3c2f3a7a89e0 9404 gvfs_1.57.2-2+deb13u1_source.buildinfo
Checksums-Sha256:
 493a05704381c0e8d94e0928e396f3ab411a0e1251c3560392acaf17e0a6c660 3564 gvfs_1.57.2-2+deb13u1.dsc
 f16bef8eca1fd6c117e85db011d21e915669790d55867349c5f1b291299e9585 1281772 gvfs_1.57.2.orig.tar.xz
 37a9b1006623a72ebc69af20f80195535d45381f5d8af2deaa8126f8ab5c753d 31368 gvfs_1.57.2-2+deb13u1.debian.tar.xz
 07d16bc47116c6e2506b4ee546f63864fb20ed8d9ee2eceb830bb488d2377d4a 9404 gvfs_1.57.2-2+deb13u1_source.buildinfo
Files:
 0294d37c120510e6c880668d2a70ef79 3564 gnome optional gvfs_1.57.2-2+deb13u1.dsc
 057389c83ca13ccdb459c249105ee00b 1281772 gnome optional gvfs_1.57.2.orig.tar.xz
 8c73a5f878df060f25b0172d68359699 31368 gnome optional gvfs_1.57.2-2+deb13u1.debian.tar.xz
 c937252c592d1b86c1bee02b59a0de95 9404 gnome optional gvfs_1.57.2-2+deb13u1_source.buildinfo

-----BEGIN PGP SIGNATURE-----
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=077z
-----END PGP SIGNATURE-----