Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
GVFS may let malicious SFTP server cause crash
published 19 days ago
Summary
The GVFS software on AlmaLinux (including the client, development, Fuse, and GOA packages) can be tricked by a dishonest SFTP server into reading more data than expected, which can corrupt memory and potentially crash the program. This could disrupt file transfers or allow further attacks on the system. Install the latest AlmaLinux updates for GVFS to apply the fix and prevent the issue.
What to do
- Update almalinux gvfs to version 1.48.1-4.el9_2.tuxcare.els1.
- Update almalinux gvfs-client to version 1.48.1-4.el9_2.tuxcare.els1.
- Update almalinux gvfs-devel to version 1.48.1-4.el9_2.tuxcare.els1.
- Update almalinux gvfs-fuse to version 1.48.1-4.el9_2.tuxcare.els1.
- Update almalinux gvfs-goa to version 1.48.1-4.el9_2.tuxcare.els1.
- Update almalinux gvfs-gphoto2 to version 1.48.1-4.el9_2.tuxcare.els1.
- Update almalinux gvfs-mtp to version 1.48.1-4.el9_2.tuxcare.els1.
- Update almalinux gvfs-smb to version 1.48.1-4.el9_2.tuxcare.els1.
- Update almalinux gvfs-tests to version 1.48.1-4.el9_2.tuxcare.els1.
Affected software
| Ecosystem | Vendor | Product | Affected versions |
|---|---|---|---|
| TuxCare:AlmaLinux:9.2 | almalinux | gvfs |
< 1.48.1-4.el9_2.tuxcare.els1 Fix: upgrade to 1.48.1-4.el9_2.tuxcare.els1
|
| TuxCare:AlmaLinux:9.2 | almalinux | gvfs-client |
< 1.48.1-4.el9_2.tuxcare.els1 Fix: upgrade to 1.48.1-4.el9_2.tuxcare.els1
|
| TuxCare:AlmaLinux:9.2 | almalinux | gvfs-devel |
< 1.48.1-4.el9_2.tuxcare.els1 Fix: upgrade to 1.48.1-4.el9_2.tuxcare.els1
|
| TuxCare:AlmaLinux:9.2 | almalinux | gvfs-fuse |
< 1.48.1-4.el9_2.tuxcare.els1 Fix: upgrade to 1.48.1-4.el9_2.tuxcare.els1
|
| TuxCare:AlmaLinux:9.2 | almalinux | gvfs-goa |
< 1.48.1-4.el9_2.tuxcare.els1 Fix: upgrade to 1.48.1-4.el9_2.tuxcare.els1
|
| TuxCare:AlmaLinux:9.2 | almalinux | gvfs-gphoto2 |
< 1.48.1-4.el9_2.tuxcare.els1 Fix: upgrade to 1.48.1-4.el9_2.tuxcare.els1
|
| TuxCare:AlmaLinux:9.2 | almalinux | gvfs-mtp |
< 1.48.1-4.el9_2.tuxcare.els1 Fix: upgrade to 1.48.1-4.el9_2.tuxcare.els1
|
| TuxCare:AlmaLinux:9.2 | almalinux | gvfs-smb |
< 1.48.1-4.el9_2.tuxcare.els1 Fix: upgrade to 1.48.1-4.el9_2.tuxcare.els1
|
| TuxCare:AlmaLinux:9.2 | almalinux | gvfs-tests |
< 1.48.1-4.el9_2.tuxcare.els1 Fix: upgrade to 1.48.1-4.el9_2.tuxcare.els1
|
Original advisory text
gvfs: Fix of CVE-2026-84268
- Fix CVE-2026-84268: sftp backend read_reply() used the server-supplied
data length without checking it against the requested size, allowing
a malicious SFTP server to overflow the read buffer; reject such
replies with an error (upstream ea1322da, 1590471a)
data length without checking it against the requested size, allowing
a malicious SFTP server to overflow the read buffer; reject such
replies with an error (upstream ea1322da, 1590471a)
References
- https://errata.tuxcare.com/els_os/almalinux9.2esu/CLSA-2026-1792186767.html Vendor Advisory
- https://nvd.nist.gov/vuln/detail/CVE-2026-84268 Vendor Advisory
Timeline
Published17 Oct 2026
Updated26 Oct 2026
First seen26 Oct 2026
Sources
CLSA-2026-1792186767 · OSV
Track software like this
Free during beta