https://vulnerability.circl.lu/rss/recent/all/10 Most recent entries from all 2026-10-07T22:34:15.949509+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent entries. https://vulnerability.circl.lu/vuln/cve-2019-12447 CVE-2019-12447 2026-10-07T22:34:15.954648+00:00

An issue was discovered in GNOME gvfs 1.29.4 through 1.41.2. daemon/gvfsbackendadmin.c mishandles file ownership because setfsuid is not used.

 https://vulnerability.circl.lu/vuln/usn-4053-1 USN-4053-1 — gvfs vulnerabilities 2026-10-07T22:34:15.954873+00:00

Affected: Ubuntu:16.04:LTS: gvfs, Ubuntu:18.04:LTS: gvfs

It was discovered that GVfs incorrectly handled the admin backend. Files created or moved by the admin backend could end up with the wrong ownership information, contrary to expectations. This issue only affected Ubuntu 18.04 LTS, Ubuntu 18.10, and Ubuntu 19.04. (CVE-2019-12447, CVE-2019-12448, CVE-2019-12449)

It was discovered that GVfs incorrectly handled authentication on its private D-Bus socket. A local attacker could possibly connect to this socket and issue D-Bus calls. (CVE-2019-12795)