Alpine/gvfs: high 7.8
daemon/gvfsdaemon.c in gvfsd from GNOME gvfs before 1.38.3, 1.40.x before 1.40.2, and 1.41.x before 1.41.3 opened a private D-Bus server socket without configuring an authorization rule. A local attac
Action: Upgrade gvfs to 1.36.1-r1 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 1.40.0 | - | - |
Fixed versions
| 1.36.1-r1 |
Sources
published · modified · JSON