Bug#1147399: gvfs: CVE-2026-88924

[Salvatore Bonaccorso]

Hi Simon, hi Jeremy,

On Fri, Sep 11, 2026 at 04:23:44PM +0100, Simon McVittie wrote:
> Version: 1.62.0-1
> 
> On Fri, 11 Sep 2026 at 16:53:08 +0200, Salvatore Bonaccorso wrote:
> > CVE-2026-88924[0]:
> > [0] https://security-tracker.debian.org/tracker/CVE-2026-88924
> >    https://www.cve.org/CVERecord?id=CVE-2026-88924
> > [1] https://gitlab.gnome.org/GNOME/gvfs/-/issues/875
> > [2] https://gitlab.gnome.org/GNOME/gvfs/-/merge_requests/352
> 
> Looks like Jeremy uploaded the new release already.

Indeed I seem to have raced with that when triaging, and filling the
bug report and then not checking if there was anything newer in
archive.

Apologies for having added work to you.

Regards,
Salvatore