CLEANSTART-2023-WM40998 combination of primitives offered by SMB and AFP in their default configuration allows the arbitrary writing of files

Security vulnerability affects the netatalk package. The combination of primitives offered by SMB and AFP in their default configuration allows the arbitrary writing of files...

Wireshark 1.6.x < 1.6.10 Multiple Vulnerabilities (macOS)

The version of Wireshark installed on the remote macOS / Mac OS X host is prior to 1.6.10. It is, therefore, affected by multiple vulnerabilities as referenced in the wireshark-1.6.10 advisory. - Buffer overflow in the dissectgsmrlcmacdownlink function in epan/dissectors/packet-gsmrlcmac.c in the...

Rocky Linux 9.6 [TuxCare] Security Update: wireshark / wireshark-cli / wireshark-devel Multiple Vulnerabilities (ALMALINUX9.6:CLSA-2026:1785518972)

The Rocky Linux 9.6 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1785518972 advisory. - AFP Spotlight protocol dissector crash in Wireshark 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 allows denial of service CVE-2026-5401 -...

AlmaLinux 9.6 [TuxCare] Security Update: wireshark / wireshark-cli / wireshark-devel Multiple Vulnerabilities (ALMALINUX9.6:CLSA-2026:1785518972)

The AlmaLinux 9.6 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1785518972 advisory. - AFP Spotlight protocol dissector crash in Wireshark 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 allows denial of service CVE-2026-5401 -...

Security update for gvfs (important)

openSUSE security update: security update for gvfs ------------------------------------------------------------- Announcement ID: openSUSE-SU-2026:21875-1 Rating: important References: bsc1278156 bsc1278157 bsc1278158 bsc1278159 Cross-References: CVE-2026-84267 CVE-2026-84268 CVE-2026-84269...

OESA-2026-3925 gvfs security update

Gvfs is a userspace virtual filesystem implementation for GIO a library available in GLib. It comes with a set of backends, including trash support, SFTP, SMB, HTTP, DAV, and many others. Gvfs also contains modules for GIO that implement volume monitors and persistent metadata storage. Security...

OPENSUSE-SU-2026:21875-1 Security update for gvfs

This update for gvfs fixes the following issues: - CVE-2026-84267: readstring allocates buffers withouth verifying that the buffer is completely filled when communicating with a malicious SFTP server, which can lead to uninitialized heap memory leaks bsc1278157. - CVE-2026-84268: readreply...

SUSE SLES15: gvfs / gvfs-backend-afc / gvfs-backend-samba / gvfs-backends / etc (SUSE-SU-2026:4238-1)

The remote SUSE Linux SLES15 / SLESSAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:4238-1 advisory. - CVE-2026-84267: readstring allocates buffers withouth verifying that the buffer is completely filled when communicating with a...

SUSE SLED15: gvfs / gvfs-backend-afc / gvfs-backend-samba / gvfs-backends / etc (SUSE-SU-2026:4240-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:4240-1 advisory. - CVE-2026-84267: readstring allocates buffers withouth verifying that the buffer is completely filled when...

Security update for gvfs

This update for gvfs fixes the following issues: CVE-2026-84267: readstring allocates buffers withouth verifying that the buffer is completely filled when communicating with a malicious SFTP server, which can lead to uninitialized heap memory leaks bsc1278157. CVE-2026-84268: readreply processes...

SUSE SLES12: gvfs / gvfs-backend-samba / gvfs-backends / gvfs-devel / gvfs-fuse / etc (SUSE-SU-2026:4200-1)

The remote SUSE Linux SLES12 / SLESSAP12 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:4200-1 advisory. - CVE-2026-84267: readstring allocates buffers withouth verifying that the buffer is completely filled when communicating with a...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: gvfs (UTSA-2026-109816)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-109816 advisory. A flaw was found in the AFP backend in gvfs. When mounting a share, a malicious AFP server can cause the DSI read path to process a length that exceeds the size...

Security update for gvfs

This update for gvfs fixes the following issues: CVE-2026-84267: readstring allocates buffers withouth verifying that the buffer is completely filled when communicating with a malicious SFTP server, which can lead to uninitialized heap memory leaks bsc1278157. CVE-2026-84268: readreply processes...

SUSE-SU-2026:4200-1 Security update for gvfs

This update for gvfs fixes the following issues: - CVE-2026-84267: readstring allocates buffers withouth verifying that the buffer is completely filled when communicating with a malicious SFTP server, which can lead to uninitialized heap memory leaks bsc1278157. - CVE-2026-84268: readreply...

OESA-2026-3823 gvfs security update

Gvfs is a userspace virtual filesystem implementation for GIO a library available in GLib. It comes with a set of backends, including trash support, SFTP, SMB, HTTP, DAV, and many others. Gvfs also contains modules for GIO that implement volume monitors and persistent metadata storage. Security...

OESA-2026-3821 gvfs security update

Gvfs is a userspace virtual filesystem implementation for GIO a library available in GLib. It comes with a set of backends, including trash support, SFTP, SMB, HTTP, DAV, and many others. Gvfs also contains modules for GIO that implement volume monitors and persistent metadata storage. Security...

Astra Linux – Vulnerability in Wireshark

The AFP Spotlight protocol dissector in Wireshark versions 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 allows for denial of service attacks...

SUSE CVE-2026-84269

A flaw was found in the AFP backend in gvfs. When mounting a share, a malicious AFP server can cause the DSI read path to process a length that exceeds the size requested by the client. The function does not verify the server-provided length against the pre-sized reply buffer, causing the operati...

CVE-2026-84269

A flaw was found in the AFP backend in gvfs. When mounting a share, a malicious AFP server can cause the DSI read path to process a length that exceeds the size requested by the client. The function does not verify the server-provided length against the pre-sized reply buffer, causing the operati...

DEBIAN-CVE-2026-84269

A flaw was found in the AFP backend in gvfs. When mounting a share, a malicious AFP server can cause the DSI read path to process a length that exceeds the size requested by the client. The function does not verify the server-provided length against the pre-sized reply buffer, causing the operati...