CVE and update status of the FreeBSD ports tree4,826 unaddressed CVEs in 618 portsAll times are CET

Port details

filesystems/gvfs1.58.4_1

GNOME virtual file system

Maintainer
gnome@FreeBSD.org
Packages
gvfs 1.58.4_1
Upstream
Higher version available: 1.62.0
CPE
gnome:gvfs from the port
WWW
https://gitlab.gnome.org/GNOME/gvfs
Links
cgit · VuXML

Unaddressed (0) · The CVE record lists this version as affected, no VuXML entry names the CVE

None. There is no CVE without a VuXML entry for this version.

VuXML only (0) · listed, port not fixed yet

None. pkg audit reports nothing for this version.

Fixed (0)

No VuXML entries for this package.

Commits (12)

Guido Falsi (madpilot) · 1.58.4_1
filesystems/gvfs: Use fuser(1) in place of lsof(1) by default

- Import patch accepted upstream to allow using fuser(1) to check
  for busy mountpoints [1]
- Add option to allow choosing between fuser and lsof (fuser by
  default

This removes an hard dependency on lsof for this very commonly used
port.

[1] https://gitlab.gnome.org/GNOME/gvfs/-/merge_requests/321

Reviewed by:		gnome (fluffy)
Approved by:		gnome (fluffy)
Differential Revision:	https://reviews.freebsd.org/D56224
90b054438b
Torsten Zuehlsdorff (tz) · 1.58.4
filesystems/gvfs: add conditional openssh-portable dependency

Same pattern as security/gnome-keyring: add openssh-portable
dependency when base ssh is absent.

PR:		254089
9e78259011
Don Lewis (truckman) · 1.58.4
filesystems/gvfs: update to 1.58.4

update to 1.58.4

  Major changes in 1.58.4
  =======================
  * Re-release of 1.58.3 due to incorrect release tag; no code changes.

  Major changes in 1.58.3
  =======================
  * CVE-2026-28296: ftp: Reject paths with CR/LF in g_vfs_ftp_file_new_from_ftp (Ondrej Holy)
  * monitor: Do not load monitors when GIO_USE_VFS=local (Ondrej Holy)

  Major changes in 1.58.2
  =======================
  * client: Fix use-after-free when creating async proxy failed (Ondrej Holy)
  * daemon: Fix race on subscribers list when on thread (Ondrej Holy)
  * ftp: Validate fe_size when parsing symlink target (Ondrej Holy)
  * ftp: Check localtime() return value before use (Ondrej Holy)
  * CVE-2026-28295: ftp: Use control connection address for PASV data (Ondrej Holy)
  * CVE-2026-28296: ftp: Reject paths containing CR/LF characters (Ondrej Holy)
  * gphoto2: Use g_try_realloc() instead of g_realloc() (Ondrej Holy)
  * cdda: Reject path traversal in mount URI host (Ondrej Holy)
  * client: Fail when URI has invalid UTF-8 chars (Ondrej Holy)
  * Some other fixes (correctmost, Ondrej Holy)

  Major changes in 1.58.1
  =======================
  * cdda: Fix duration of last track for some media (Bastien Nocera)
  * build: Fix build when google option is disabled (Ondrej Holy)
  * Fix various memory leaks (Milan Crha)
  * Some other fixes (wangrong, Jan-Michael Brummer, Simon Poirier)
  * Translation updates (GNOME Translation Project contributors)

  Major changes in 1.58.0
  =======================
  * mtp: Allow cancelling ongoing folder enumerations
  * wsdd: Use socket-activated service if available
  * onedrive: Set emblem for remote data
  * fix: Add file rename support in MTP backend move operation
  * mtp: Fix -Wmaybe-uninitialized warning in pad_file
  * fuse: use fuse_(un)set_feature_flag for libfuse 3.17+
  * smbbrowse: Purge server cache for next auth try
  * metatree: Open files with O_CLOEXEC
  * cdda: Fix incorrect track duration for 99-track CDs
  * metadata: Fix journal file permissions inconsistency (#808)
  * dav: recognize 308 Permanent Redirect

  Major changes in 1.57.2
  =======================
  * onedrive: Use presentation id as host to adapt to the change in GOA (Jan-Michael Brummer)
  * onedrive: Fix incorrect include path for msgraph header (sid)

  Major changes in 1.57.1
  =======================
  * nfs: Support libnfs 6 (Jan Alexander Steffens)
  * onedrive: Support Sharepoint drives (Jan-Michael Brummer)
  * trash/udisks: Port from g_unix_mount_ to g_unix_mount_entry_ (Ondrej Holy)
  * afp/mtp/nfs/sftp/smb: Add edit mode implementation (Ondrej Holy)
  * fuse: Use edit mode when neither O_TRUNC, nor O_APPEND is used (Ondrej Holy)
  * afp/mtp/nfs/smb: Various output stream related fixes (Ondrej Holy)
  * udisks2: Update volume when setting/unsetting mount (Ondrej Holy)
  * Translation updates (GNOME Translation Project contributors)

  Major changes in 1.56.3
  =======================
  * ci: Add release service support (Ondrej Holy)
  * CVE-2026-28296: ftp: Reject paths with CR/LF in g_vfs_ftp_file_new_from_ftp (Ondrej Holy)

  Major changes in 1.56.2
  =======================
  * CVE-2026-28295: ftp: Use control connection address for PASV data (Ondrej Holy)
  * CVE-2026-28296: ftp: Reject paths containing CR/LF characters (Ondrej Holy)
  * nfs: Support libnfs 6 (Jan Alexander Steffens)
  * onedrive: Fix incorrect include path for msgraph header (sid)
  * afp/mtp/nfs/smb: Various output stream related fixes (Ondrej Holy)
  * udisks2: Update volume when setting/unsetting mount (Ondrej Holy)
  * Translation updates (GNOME Translation Project contributors)

fix LICENSE

adjust WWW entry

switch to USES= gettext-tools

sort OPTIONS_DEFAULT

remove OPTIONS_EXCLUDE

PR:		293808
999609202e
Charlie Li (vishwin) · 1.56.1_1
filesystems/gvfs: split and exclude OneDrive option

...until port is updated to 1.58, due to net/msgraph API break:

Run-time dependency msgraph-0.1 found: NO (tried pkgconfig)

meson.build:434:16: ERROR: Dependency "msgraph-0.1" not found, tried pkgconfig

While here, sort OPTIONS_DEFINE
0064677924
Don Lewis (truckman) · 1.56.1_1
filesystems/gvfs: tweak LIB_DEPENDS for new msgraph

Tweak LIB_DEPENDS for net/msgraph 0.3.X.

Regenerate patches. (truckman)

Pet portlint and portclippy. (truckman)

PR:		292047
9144e4aa73
Baptiste Daroussin (bapt) · 1.56.1_1
libxml2: chase libxml soversion bump
3068854dd0
Baptiste Daroussin (bapt) · 1.56.1
filesystems/gvfs: update to 1.56.1

PR:	286697
ec9b1260d3
Stefan Eßer (se) · 1.56.0_2
filesystems/fusefs-libs3: bump portrevision of dependent ports

Bump PORTREVISION of all ports depending on libfuse3.so after upgrade
to version 3.17.1.

Reported by:	vvd
e9d17a6122
Gleb Popov (arrowd) · 1.56.0_1
*: Bump revisions after dbus update

PR:		285253
Reported by:	Martin Birgmeier <d8zNeCFG@aon.at>
a347a92e6e
Gleb Popov (arrowd) · 1.56.0
filesystems/gvfs: Update to 1.56.0

Sponsored by:	Future Crew, LLC
Pull Request:	https://github.com/freebsd/freebsd-ports/pull/332
d4b37fc951
Jason E. Hale (jhale) · 1.50.2_4
*/*: Chase sysutils/libcdio shlib version bump
a14870bbca
Robert Clausecker (fuz) · 1.50.2_3
filesystems: add new category for file systems and related utilities

The filesystems category houses file systems and file system utilities.
It is added mainly to turn the sysutils/fusefs-* pseudo-category into
a proper one, but is also useful for the sundry of other file systems
related ports found in the tree.

Ports that seem like they belong there are moved to the new category.
Two ports, sysutils/fusefs-funionfs and sysutils/fusefs-fusepak are
not moved as they currently don't fetch and don't have TIMESTAMP set
in their distinfo, but that is required to be able to push a rename
of the port by the pre-receive hook.

Approved by:	portmgr (rene)
Reviewed by:	mat
Pull Request:	https://github.com/freebsd/freebsd-ports/pull/302
PR:		281988
6e2da9672f