[Deepin Integration]~[v25-Release] fix(cve): CVE-2026-88924 - daemon: Set socket ownership before creation by deepin-ci-robot@deepin-community/gvfs by deepin-community-ci-bot[bot]

[deepin-bot]

Package information | 软件包信息

包名	版本
gvfs	1.54.2-2deepin6

Package repository address | 软件包仓库地址

deb [trusted=yes] https://ci.deepin.com/repo/obs/deepin:/CI:/TestingIntegration:/test-integration-pr-4574/testing/ ./

Changelog | 更新信息

gvfs (1.54.2-2deepin6) unstable; urgency=medium

• fix(cve): CVE-2026-88924 (high) - daemon: Set socket ownership
  before creation Upstream: https://gitlab.gnome.org/GNOME/gvfs/-
  /commit/371909dd201eb66c5c4d18d9e88fdae4a070b76a.patch
• fix(cve): CVE-2026-84268 (high) - sftp: Clamp count to requested
  buffer size Upstream: https://gitlab.gnome.org/GNOME/gvfs/-
  /commit/ea1322daab1979b30cf96b3e39ed6db5e45fc041,https://gitlab.gnom
  e.org/GNOME/gvfs/-/commit/1590471ad9c382de4fc544bdf49c8f424eea96f8
• fix(cve): CVE-2026-84269 (medium) - afp: Validate reply size in DSI
  read reply handling Upstream:
  https://gitlab.gnome.org/GNOME/gvfs/-
  /commit/072a7e02d11f5b7dfa324b70dd0e16d60f9b9e60.patch
• fix(cve): CVE-2026-84270 (medium) - [PATCH] mtp: Validate read size
  returned by device Upstream: https://gitlab.gnome.org/GNOME/gvfs/-
  /commit/070e5e4223c97f7e793a342ba6e64df1095ccb0d

[deepin-bot]

Integration Test Info

Test suggestion | 测试建议

Influence | 影响范围

ADDITIONAL INFORMATION | 额外补充

[deepin-bot]

IntegrationProjector Notify the author
@deepin: Integrated issue updated

[deepin-bot]

IntegrationProjector Bot
Deepin Testing Integration Project Manager Info
Link to deepin-community/Repository-Integration#4574