Red Hat Enterprise Linux (gvfs): Mehrere Schwachstellen

Summary

Product

Vulnerabilities 2

• High 8.8
  CVE-2026-84268

  Gvfs: sftp: heap-based buffer overflow in read_reply()

  A flaw was found in the SFTP backend in gvfs. When mounting a share and reading a file, a malicious SFTP server can cause read_reply() to process a length that exceeds the size requested by the client. The function does not verify the server-provided length a…

  Red Hat GNOME Red Hat Enterprise Linux 9 Red Hat Enterprise Linux 8 Linux Debian Ubuntu
  Sep 1, 2026
• High 7.0
  CVE-2026-88924

  Gvfs: gvfs-admin socket ownership race permits local root

  A flaw was found in the admin backend of gvfs. The privileged gvfsd-admin daemon changes the ownership of newly created private D-Bus sockets by calling the link-following chown() function on a pathname inside a user-controlled directory. A local attacker can…

  Red Hat GNOME Red Hat Enterprise Linux 9 Red Hat Enterprise Linux 8 Linux Debian Ubuntu
  Sep 10, 2026

Revision history

1. 2026-11-12 #8

   Neue Updates von Rocky Enterprise Software Foundation aufgenommen

2. 2026-11-11 #7

   Neue Updates von Red Hat aufgenommen

3. 2026-11-04 #6

   Neue Updates von Oracle Linux aufgenommen

4. 2026-11-03 #5

   Neue Updates von SUSE aufgenommen

5. 2026-11-01 #4

   Neue Updates von openSUSE aufgenommen

6. 2026-10-20 #3

   Neue Updates von Red Hat aufgenommen

7. 2026-10-01 #2

   Neue Updates von Oracle Linux und Rocky Enterprise Software Foundation aufgenommen

8. 2026-09-30 #1

   Initiale Fassung

References

• Red Hat Security Advisory RHSA-2026:73998 vom 2026-09-30
  https://access.redhat.com/errata/RHSA-2026:73998
• Red Hat Security Advisory RHSA-2026:73997 vom 2026-09-30
  https://access.redhat.com/errata/RHSA-2026:73997
• Red Hat Security Advisory RHSA-2026:74370 vom 2026-09-30
  https://access.redhat.com/errata/RHSA-2026:74370
• Oracle Linux Security Advisory ELSA-2026-73997 vom 2026-10-01
  https://linux.oracle.com/errata/ELSA-2026-73997.html
• Rocky Linux Security Advisory RLSA-2026:74370 vom 2026-10-02
  https://errata.build.resf.org/RLSA-2026:74370
• Oracle Linux Security Advisory ELSA-2026-74370 vom 2026-10-01
  https://linux.oracle.com/errata/ELSA-2026-74370.html
• Oracle Linux Security Advisory ELSA-2026-73998 vom 2026-10-01
  https://linux.oracle.com/errata/ELSA-2026-73998.html
• Rocky Linux Security Advisory RLSA-2026:73998 vom 2026-10-01
  https://errata.build.resf.org/RLSA-2026:73998
• Red Hat Security Advisory RHSA-2026:85941 vom 2026-10-20
  https://access.redhat.com/errata/RHSA-2026:85941
• Red Hat Security Advisory RHSA-2026:86606 vom 2026-10-21
  https://access.redhat.com/errata/RHSA-2026:86606
• Red Hat Security Advisory RHSA-2026:85939 vom 2026-10-20
  https://access.redhat.com/errata/RHSA-2026:85939
• Red Hat Security Advisory RHSA-2026:85942 vom 2026-10-20
  https://access.redhat.com/errata/RHSA-2026:85942
• Red Hat Security Advisory RHSA-2026:85943 vom 2026-10-20
  https://access.redhat.com/errata/RHSA-2026:85943
• Red Hat Security Advisory RHSA-2026:85945 vom 2026-10-20
  https://access.redhat.com/errata/RHSA-2026:85945
• Red Hat Security Advisory RHSA-2026:85944 vom 2026-10-20
  https://access.redhat.com/errata/RHSA-2026:85944
• Red Hat Security Advisory RHSA-2026:85940 vom 2026-10-20
  https://access.redhat.com/errata/RHSA-2026:85940
• openSUSE Security Update OPENSUSE-SU-2026:22174-1 vom 2026-10-31
  https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/P56WZIYSORY2SXLWFBI6SFU2X3CENU2Y/
• SUSE Security Update SUSE-SU-2026:5080-1 vom 2026-11-03
  https://lists.suse.com/pipermail/sle-security-updates/2026-November/030378.html
• SUSE Security Update SUSE-SU-2026:24466-1 vom 2026-11-03
  https://lists.suse.com/pipermail/sle-security-updates/2026-November/030313.html
• SUSE Security Update SUSE-SU-2026:5065-1 vom 2026-11-03
  https://lists.suse.com/pipermail/sle-security-updates/2026-November/030325.html
• Oracle Linux Security Advisory ELSA-2026-86606 vom 2026-11-04
  https://linux.oracle.com/errata/ELSA-2026-86606.html
• Red Hat Security Advisory RHSA-2026:98623 vom 2026-11-11
  https://access.redhat.com/errata/RHSA-2026:98623
• Red Hat Security Advisory RHSA-2026:98513 vom 2026-11-11
  https://access.redhat.com/errata/RHSA-2026:98513
• Rocky Linux Security Advisory RLSA-2026:98623 vom 2026-11-13
  https://errata.build.resf.org/RLSA-2026:98623