Debian/gvfs: high 7.8
daemon/gvfsdaemon.c in gvfsd from GNOME gvfs before 1.38.3, 1.40.x before 1.40.2, and 1.41.x before 1.41.3 opened a private D-Bus server socket without configuring an authorization rule. A local attac
Action: Upgrade gvfs to 1.38.1-5 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 1.38.1-5 | - |
Fixed versions
| 1.38.1-5 |
Sources
published · modified · JSON