-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 Format: 1.8 Date: Thu, 06 Jun 2019 18:37:25 +0100 Source: gvfs Architecture: source Version: 1.40.1-2 Distribution: experimental Urgency: medium Maintainer: Debian GNOME Maintainers <pkg-gnome-maintain...@lists.alioth.debian.org> Changed-By: Simon McVittie <s...@debian.org> Closes: 927221 929755 Changes: gvfs (1.40.1-2) experimental; urgency=medium . * Team upload * Update from upstream gnome-3-32 branch, commit 1.40.1-9-gec939a01, to fix the admin backend (Closes: #929755) - Implement query_info_on_read/write to fix some race conditions (CVE-2019-12448) - Ensure that created files get the correct ownership (CVE-2019-12247) - Ensure that copied files get the correct ownership (CVE-2019-12449) - Fix deadlocks in synchronous API - Various fixes for afc backend - Update translation: zh_CN * Remove obsolete version number from fuse dependency. gvfs needs fuse (>= 2.8.4), but that version is older than oldstable, so we can safely simplify to "Depends: fuse". The versioned dependency is not satisfied by fuse3's unversioned "Provides: fuse", but the unversioned dependency is. (Closes: #927221) Checksums-Sha1: 2eed030080b7e430c4dd88ceb51fac243048b426 3341 gvfs_1.40.1-2.dsc 9a7d6ca6b105b29f578a7bf0a38cf4971840306a 53172 gvfs_1.40.1-2.debian.tar.xz 955757f11952faac11effd13f10d9ebc4399ee20 18648 gvfs_1.40.1-2_source.buildinfo Checksums-Sha256: 6ac076a14b7bd11079bee31fe63bc2c2e440b8b1582427f7c46d63c9292bb408 3341 gvfs_1.40.1-2.dsc cdc6eb93888f6970dd828cc467aaef29495bec52751649caa0a802c01c9dbfdf 53172 gvfs_1.40.1-2.debian.tar.xz 04ae66519940e2591a5986fb2a03e7bda05c858afa04db1f9212646904ffef0c 18648 gvfs_1.40.1-2_source.buildinfo Files: f1d05d21825f55ef0d8ba53b5144396f 3341 gnome optional gvfs_1.40.1-2.dsc 224067e15639abcbbe28ea05c0e908e6 53172 gnome optional gvfs_1.40.1-2.debian.tar.xz bc0305c20c0b479eb159a126cb3c34bc 18648 gnome optional gvfs_1.40.1-2_source.buildinfo
-----BEGIN PGP SIGNATURE----- iQIzBAEBCAAdFiEENuxaZEik9e95vv6Y4FrhR4+BTE8FAlz5fGUACgkQ4FrhR4+B TE95cA/+M0Usk3PhU+8Y30KwyO5zqN3qRTMy5RxklEwc8Y9hsFkOVyxAral+2kZQ 9sHL9CnjigIeaWymvKrCxLL+qYfg4iyGJX88zG3nd9V9RxRX5CZphW+MDvYvpCpM UY8GGZxwEryIkhpxlKwlT7StoF+pZQkrtZEG47ws1moCqht+r2gk/o5HMYL11nUm 7S0dn2/hgA88fVp2xGW+400HL9h6vLBZsKZtHp8umT5b00gsT3/7n+q/f13mWqXG /DLP4k3Bsf+H8V1SdLNtGYDOvyxu5zXAlQPSXjmqEzVZUJkR0enQSGf5dWaLGnte CIlgVPLGy4jhM7Yk8bJtcgJnaW4mz8qtuorlxE5Gv0pbYgA2DCynh+vveUxHaGo3 A1sdCmEIIYLWC0IMYHVabmu4m0/KfNizbmgDOVji2lCxmPnAX4Xvko9AOjaQjmPu WiYa2DzimMJj6oJawWv1RCXP9ro/IjEfbm0cekBXIbaSxPeWdx7YHNRe1USU/BnS 1UwD/0tAxpgqs8/xd4uo30vZ3XSCnE9f9I4XmNIaVv2bn8CH/pmAevQ4ZzmTisAF r0grNP11rP3KIZwPx30g/3kt2iq5shV3O5l3D9ZnL/03cj8eqZB3V010mpbEXlW0 4/uo221XaKZJK9RfyS9Drs7FDRf9qhi1oJvz7lCuec2/0mXArYc= =0NJL -----END PGP SIGNATURE-----