https://vulnerability.circl.lu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Wed, 07 Oct 2026 22:34:13 +0000 https://vulnerability.circl.lu/vuln/cve-2019-12447 <p>An issue was discovered in GNOME gvfs 1.29.4 through 1.41.2. daemon/gvfsbackendadmin.c mishandles file ownership because setfsuid is not used.</p> <p>An issue was discovered in GNOME gvfs 1.29.4 through 1.41.2. daemon/gvfsbackendadmin.c mishandles file ownership because setfsuid is not used.</p> https://vulnerability.circl.lu/vuln/cve-2019-12447 https://vulnerability.circl.lu/vuln/usn-4053-1 <p><strong>Affected:</strong> Ubuntu:16.04:LTS: gvfs, Ubuntu:18.04:LTS: gvfs</p> <p>It was discovered that GVfs incorrectly handled the admin backend. Files created or moved by the admin backend could end up with the wrong ownership information, contrary to expectations. This issue only affected Ubuntu 18.04 LTS, Ubuntu 18.10, and Ubuntu 19.04. (CVE-2019-12447, CVE-2019-12448, CVE-2019-12449)</p> <p>It was discovered that GVfs incorrectly handled authentication on its private D-Bus socket. A local attacker could possibly connect to this socket and issue D-Bus calls. (CVE-2019-12795)</p> <p><strong>Affected:</strong> Ubuntu:16.04:LTS: gvfs, Ubuntu:18.04:LTS: gvfs</p> <p>It was discovered that GVfs incorrectly handled the admin backend. Files created or moved by the admin backend could end up with the wrong ownership information, contrary to expectations. This issue only affected Ubuntu 18.04 LTS, Ubuntu 18.10, and Ubuntu 19.04. (CVE-2019-12447, CVE-2019-12448, CVE-2019-12449)</p> <p>It was discovered that GVfs incorrectly handled authentication on its private D-Bus socket. A local attacker could possibly connect to this socket and issue D-Bus calls. (CVE-2019-12795)</p> https://vulnerability.circl.lu/vuln/usn-4053-1