Oval Definition:oval:com.redhat.rhsa:def:20191517
Revision Date:2019-06-18Version:635
Title:RHSA-2019:1517: gvfs security update (Moderate)
Description:GVFS is the GNOME Desktop Virtual File System layer that allows users to easily access local and remote data using File Transfer Protocol (FTP), Secure Shell File Transfer Protocol (SFTP), Web Distributed Authoring and Versioning (WebDAV), Common Internet File System (CIFS), Server Message Block (SMB), and other protocols. GVFS integrates with the GNOME I/O (GIO) abstraction layer.

Security Fix(es):

  • gvfs: Incorrect authorization in admin backend allows privileged users to read and modify arbitrary files without prompting for password (CVE-2019-3827)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
  • Family:unixClass:patch
    Status:Reference(s):CVE-2019-3827
    RHSA-2019:1517
    Platform(s):Red Hat Enterprise Linux 8
    Product(s):
    Definition Synopsis
  • Red Hat Enterprise Linux must be installed
  • OR Package Information
  • Red Hat Enterprise Linux 8 is installed
  • OR Red Hat CoreOS 4 is installed
  • AND
  • gvfs is earlier than 0:1.36.2-2.el8_0.1
  • AND gvfs is signed with Red Hat redhatrelease2 key
  • gvfs-afc is earlier than 0:1.36.2-2.el8_0.1
  • AND gvfs-afc is signed with Red Hat redhatrelease2 key
  • gvfs-afp is earlier than 0:1.36.2-2.el8_0.1
  • AND gvfs-afp is signed with Red Hat redhatrelease2 key
  • gvfs-archive is earlier than 0:1.36.2-2.el8_0.1
  • AND gvfs-archive is signed with Red Hat redhatrelease2 key
  • gvfs-client is earlier than 0:1.36.2-2.el8_0.1
  • AND gvfs-client is signed with Red Hat redhatrelease2 key
  • gvfs-devel is earlier than 0:1.36.2-2.el8_0.1
  • AND gvfs-devel is signed with Red Hat redhatrelease2 key
  • gvfs-fuse is earlier than 0:1.36.2-2.el8_0.1
  • AND gvfs-fuse is signed with Red Hat redhatrelease2 key
  • gvfs-goa is earlier than 0:1.36.2-2.el8_0.1
  • AND gvfs-goa is signed with Red Hat redhatrelease2 key
  • gvfs-gphoto2 is earlier than 0:1.36.2-2.el8_0.1
  • AND gvfs-gphoto2 is signed with Red Hat redhatrelease2 key
  • gvfs-mtp is earlier than 0:1.36.2-2.el8_0.1
  • AND gvfs-mtp is signed with Red Hat redhatrelease2 key
  • gvfs-smb is earlier than 0:1.36.2-2.el8_0.1
  • AND gvfs-smb is signed with Red Hat redhatrelease2 key
  • BACK