Oval Definition:oval:com.redhat.rhsa:def:20192145
Revision Date:2019-08-06Version:636
Title:RHSA-2019:2145: gvfs security and bug fix update (Moderate)
Description:GVFS is the GNOME Desktop Virtual File System layer that allows users to easily access local and remote data using File Transfer Protocol (FTP), Secure Shell File Transfer Protocol (SFTP), Web Distributed Authoring and Versioning (WebDAV), Common Internet File System (CIFS), Server Message Block (SMB), and other protocols. GVFS integrates with the GNOME I/O (GIO) abstraction layer.

Security Fix(es):

  • gvfs: Incorrect authorization in admin backend allows privileged users to read and modify arbitrary files without prompting for password (CVE-2019-3827)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

    Additional Changes:

    For detailed information on changes in this release, see the Red Hat Enterprise Linux 7.7 Release Notes linked from the References section.
  • Family:unixClass:patch
    Status:Reference(s):CVE-2019-3827
    RHSA-2019:2145
    Platform(s):Red Hat Enterprise Linux 7
    Product(s):
    Definition Synopsis
  • Red Hat Enterprise Linux must be installed
  • OR Package Information
  • Red Hat Enterprise Linux 7 is installed
  • AND
  • gvfs is earlier than 0:1.36.2-3.el7
  • AND gvfs is signed with Red Hat redhatrelease2 key
  • gvfs-afc is earlier than 0:1.36.2-3.el7
  • AND gvfs-afc is signed with Red Hat redhatrelease2 key
  • gvfs-afp is earlier than 0:1.36.2-3.el7
  • AND gvfs-afp is signed with Red Hat redhatrelease2 key
  • gvfs-archive is earlier than 0:1.36.2-3.el7
  • AND gvfs-archive is signed with Red Hat redhatrelease2 key
  • gvfs-client is earlier than 0:1.36.2-3.el7
  • AND gvfs-client is signed with Red Hat redhatrelease2 key
  • gvfs-devel is earlier than 0:1.36.2-3.el7
  • AND gvfs-devel is signed with Red Hat redhatrelease2 key
  • gvfs-fuse is earlier than 0:1.36.2-3.el7
  • AND gvfs-fuse is signed with Red Hat redhatrelease2 key
  • gvfs-goa is earlier than 0:1.36.2-3.el7
  • AND gvfs-goa is signed with Red Hat redhatrelease2 key
  • gvfs-gphoto2 is earlier than 0:1.36.2-3.el7
  • AND gvfs-gphoto2 is signed with Red Hat redhatrelease2 key
  • gvfs-mtp is earlier than 0:1.36.2-3.el7
  • AND gvfs-mtp is signed with Red Hat redhatrelease2 key
  • gvfs-smb is earlier than 0:1.36.2-3.el7
  • AND gvfs-smb is signed with Red Hat redhatrelease2 key
  • gvfs-tests is earlier than 0:1.36.2-3.el7
  • AND gvfs-tests is signed with Red Hat redhatrelease2 key
  • BACK