[Git][security-tracker-team/security-tracker][master] Update status for CVE-2026-88924/gvfs

[Salvatore Bonaccorso (@carnil)]

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
a7c547d7 by Salvatore Bonaccorso at 2026-09-11T21:49:47+02:00
Update status for CVE-2026-88924/gvfs

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -636,11 +636,12 @@ CVE-2026-88938 (knowns through 0.33.0 fails to confine the path argument of the
 CVE-2026-88937 (knowns through 0.33.0 fails to properly validate template destination  ...)
 	NOT-FOR-US: knowns-dev/knowns
 CVE-2026-88924 (A flaw was found in the admin backend of gvfs. The privileged gvfsd-ad ...)
-	- gvfs <unfixed> (bug #1147399)
+	- gvfs 1.62.0-1 (bug #1147399)
 	[trixie] - gvfs <no-dsa> (Minor issue)
 	NOTE: https://gitlab.gnome.org/GNOME/gvfs/-/issues/875
 	NOTE: https://gitlab.gnome.org/GNOME/gvfs/-/merge_requests/352
 	NOTE: Introduced with: https://gitlab.gnome.org/GNOME/gvfs/-/commit/5f9cffd11dc69a9422726a059c7c31bae4b46338 (1.48.1)
+	NOTE: Fixed by: https://gitlab.gnome.org/GNOME/gvfs/-/commit/371909dd201eb66c5c4d18d9e88fdae4a070b76a (1.62.0)
 CVE-2026-88921 (MISP contains an HTML injection vulnerability in the MISPElementHTMLFo ...)
 	- misp <itp> (bug #1144317)
 CVE-2026-88915 (Affected versions of MISP do not consistently enforce the acting user' ...)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/a7c547d7a691ec884e7d3685646296b44bded547

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/a7c547d7a691ec884e7d3685646296b44bded547
You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20260911/12dfa6b4/attachment.htm>