Red Hat Security AdvisoryRHSA-2019:2145
gvfs security and bug fix update
Released 2019-08-06 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux Client (v. 7) gvfs-1.36.2-3.el7, gvfs-afc-1.36.2-3.el7, gvfs-afp-1.36.2-3.el7 +7
- Red Hat Enterprise Linux Client Optional (v. 7) gvfs-devel-1.36.2-3.el7, gvfs-tests-1.36.2-3.el7
- Red Hat Enterprise Linux ComputeNode Optional (v. 7) gvfs-1.36.2-3.el7, gvfs-afc-1.36.2-3.el7, gvfs-afp-1.36.2-3.el7 +9
- Red Hat Enterprise Linux Server (v. 7) gvfs-1.36.2-3.el7, gvfs-1.36.2-3.el7.ppc, gvfs-afc-1.36.2-3.el7 +11
- Red Hat Enterprise Linux Server Optional (v. 7) gvfs-tests-1.36.2-3.el7
- Red Hat Enterprise Linux Workstation (v. 7) gvfs-1.36.2-3.el7, gvfs-afc-1.36.2-3.el7, gvfs-afp-1.36.2-3.el7 +8
- Red Hat Enterprise Linux Workstation Optional (v. 7) gvfs-tests-1.36.2-3.el7
Fixes 1 record
Priority LOW 31
An incorrect permission check in the admin backend in gvfs before version 1.39.4 was found that allows reading and modify arbitrary files by privileged users without asking for password when no authentication agent is ru…
CVSS 3.1HIGH 7.0· Local · Low privileges · No interaction · EPSS 0.00364 · Published 2019-03-25 · Fixed CWE-863
