gvfs (1.48.2-0ubuntu1.1) jammy-security; urgency=medium

  * SECURITY UPDATE: open port probe via FTP backend
    - debian/patches/CVE-2026-28295.patch: use control connection address
      for PASV data in daemon/gvfsbackendftp.c, daemon/gvfsbackendftp.h,
      daemon/gvfsftptask.c.
    - CVE-2026-28295
  * SECURITY UPDATE: arbitrary FTP command injection via CRLF
    - debian/patches/CVE-2026-28296.patch: reject paths containing CR/LF
      characters in daemon/gvfsbackendftp.c, daemon/gvfsftpfile.c,
      daemon/gvfsftpfile.h.
    - CVE-2026-28296

 -- Marc Deslauriers <marc.deslauriers@ubuntu.com>  Wed, 18 Mar 2026 12:17:40 -0400

gvfs (1.48.2-0ubuntu1) jammy; urgency=medium

  * New upstream release (LP: #1977467)

 -- Jeremy Bicha <jbicha@ubuntu.com>  Fri, 03 Jun 2022 14:53:45 -0400

gvfs (1.48.1-4) unstable; urgency=medium

  [ Simon McVittie ]
  * Remove deprecated gvfs-bin package.
    Upstream removed the gvfs-foo(1) tools in 2018, before Debian 10.

 -- Jeremy Bicha <jeremy.bicha@canonical.com>  Tue, 15 Feb 2022 15:43:16 -0500

gvfs (1.48.1-3) unstable; urgency=medium

  * Cherry-pick commit to fix build with latest meson

 -- Jeremy Bicha <jeremy.bicha@canonical.com>  Fri, 11 Feb 2022 14:59:27 -0500

gvfs (1.48.1-2) unstable; urgency=medium

  * Team upload
  * Release to unstable

 -- Simon McVittie <smcv@debian.org>  Tue, 24 Aug 2021 13:53:46 +0100

gvfs (1.48.1-1) experimental; urgency=medium

  [ Simon McVittie ]
  * New upstream stable release
    - Prevent socket leaks if socket dir is inaccessible from client
    - admin: Fix regressions caused by port to named sockets
    - udisks2: Report unmount progress after showing blocking processes
    - Translation updates
  * d/p/admin-Make-the-privileged-group-configurable.patch:
    Add patch from upstream to make the privileged group
    build-time-configurable
  * d/rules: Configure 'sudo' to be the privileged group
  * d/p/02_polkit_sudo_group.patch:
    Remove patch previously used to replace hard-coded 'wheel' group with
    'sudo', no longer needed
  * d/p/admin-Fix-mount-operation-hang-caused-by-pkexec-failure.patch:
    Fix a hang if the authentication prompt for pkexec is cancelled while
    trying to mount the admin:// backend
  * d/extra: Fix "whatis" entry for generated man pages
  * Override Lintian breakout-link false positives.
    We still need these symlinks for now (at least gvfsd-archive, because
    nemo hard-codes it), and Lintian is being over-zealous to diagnose a
    symlink from /usr/lib into /usr/libexec as an error.

  [ Laurent Bigonville ]
  * Do not BD on polkit on non-linux architectures, admin backend is disabled
  * debian/gvfs-common.install: tmpfiles.d file is only installed on linux
    archs
  * debian/control.in: Mark libgphoto2-dev, libcdio-paranoia-dev and
    libmtp-dev BD as linux-any
  * Disable USB support on kfreebsd as well as it requires a newer libusb

 -- Simon McVittie <smcv@debian.org>  Mon, 16 Aug 2021 10:58:38 +0100

gvfs (1.47.91-1) experimental; urgency=medium

  * New upstream release

 -- Sebastien Bacher <seb128@debian.org>  Mon, 15 Mar 2021 10:51:42 +0100

gvfs (1.47.90-1) experimental; urgency=medium

  * New upstream release
  * debian/control.in:
    - updated meson and libgdata requirements

 -- Sebastien Bacher <seb128@ubuntu.com>  Thu, 25 Feb 2021 16:23:19 +0100

gvfs (1.46.2-1) unstable; urgency=medium

  * New upstream release
    - Drop all patches added in previous upload, they are in this new release
  * debian/control.in: Bump Standards-Version to 4.5.1 (no further changes)

 -- Laurent Bigonville <bigon@debian.org>  Sat, 16 Jan 2021 09:50:03 +0100

gvfs (1.46.1-2) unstable; urgency=medium

  * Team upload
  * Re-export patch series with gbp pq
  * Update to upstream commit 1.46.1-6-gddd89654 from gnome-3-38 branch
    - Report content type more reliably on SMB
    - Report 100% progress after moving a file on SMB
    - Ensure a display name is set for Google Drive root directory, fixing
      file-chooser crashes
    - Translation updates
  * Add patch from upstream to fix intermittent deadlock

 -- Simon McVittie <smcv@debian.org>  Fri, 11 Dec 2020 17:47:21 +0000

# For older changelog entries, run 'apt-get changelog gvfs-libs'
