Red Hat Product Errata RHSA-2026:86606 - Security Advisory
Issued:
2026-10-21
Updated:
2026-10-21

RHSA-2026:86606 - Security Advisory

Synopsis

Important: gvfs security update

Type/Severity

Security Advisory: Important

Red Hat Lightspeed patch analysis

Identify and remediate systems affected by this advisory.

View affected systems

Topic

An update for gvfs is now available for Red Hat Enterprise Linux 7 Extended Lifecycle Support.

Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.

Description

GVFS is the GNOME Desktop Virtual File System layer that allows users to easily access local and remote data using File Transfer Protocol (FTP), Secure Shell File Transfer Protocol (SFTP), Web Distributed Authoring and Versioning (WebDAV), Common Internet File System (CIFS), Server Message Block (SMB), and other protocols. GVFS integrates with the GNOME I/O (GIO) abstraction layer.

Security Fix(es):

  • gvfs: SFTP: heap-based buffer overflow in read_reply() (CVE-2026-84268)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Solution

For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258

Affected Products

  • Red Hat Enterprise Linux Server - Extended Life Cycle Support 7 x86_64
  • Red Hat Enterprise Linux Server - Extended Life Cycle Support (for IBM z Systems) 7 s390x
  • Red Hat Enterprise Linux Server - Extended Life Cycle Support for IBM Power, big endian 7 ppc64
  • Red Hat Enterprise Linux Server - Extended Life Cycle Support for IBM Power, little endian 7 ppc64le

Fixes

  • BZ - 2526485 - CVE-2026-84268 gvfs: SFTP: heap-based buffer overflow in read_reply()

Red Hat Enterprise Linux Server - Extended Life Cycle Support 7

SRPM
gvfs-1.36.2-7.el7_9.1.src.rpm SHA-256: 18af18e9a24018bc5f0a45afb8b284d98b40bad3b91f5d897ae161bbba35b9d3
x86_64
gvfs-1.36.2-7.el7_9.1.i686.rpm SHA-256: 3487989b757a64d2fde524daf22ae678e629d204e6c498007001d819f7a56284
gvfs-1.36.2-7.el7_9.1.x86_64.rpm SHA-256: c1fcb0e7a873aafda0a3f3b002427ff14ed29355695955c9fb31648857a48a6c
gvfs-afc-1.36.2-7.el7_9.1.x86_64.rpm SHA-256: c9aae7f7475f34a1cf42438208a63c6b004cb07aa8bbe67f42b0046b3b81be1d
gvfs-afp-1.36.2-7.el7_9.1.x86_64.rpm SHA-256: 74fb2c633165c7c6cabdcaeca33be7b942a70673ec2bec75652f542dcb97ecb3
gvfs-archive-1.36.2-7.el7_9.1.x86_64.rpm SHA-256: 183edb40690821a230989b525ebf986d83c9aa4e4d49b9001874d7c144432e93
gvfs-client-1.36.2-7.el7_9.1.i686.rpm SHA-256: 7c1edc7777cfff180caf20c5b50346ac32fca2a928315aefd3d45f8aa7d30a39
gvfs-client-1.36.2-7.el7_9.1.x86_64.rpm SHA-256: ba4687f55a9a2224401e19b184906d786d167f6b884dd837f578746c69512919
gvfs-debuginfo-1.36.2-7.el7_9.1.i686.rpm SHA-256: 6d601d190cb17ce9a6d5c3f275855c688cf78e4068c6621cae924f3dc346b9ab
gvfs-debuginfo-1.36.2-7.el7_9.1.x86_64.rpm SHA-256: 010f4bc84fe6b2ab49e3771996c873dfc8f713fd7c89f7e1fd456d86ea8e1718
gvfs-debuginfo-1.36.2-7.el7_9.1.x86_64.rpm SHA-256: 010f4bc84fe6b2ab49e3771996c873dfc8f713fd7c89f7e1fd456d86ea8e1718
gvfs-devel-1.36.2-7.el7_9.1.i686.rpm SHA-256: cc89e060fd2fbe03c48a7180a890e11e5436afb79da55a5f4a812fe009d90ce0
gvfs-devel-1.36.2-7.el7_9.1.x86_64.rpm SHA-256: 9f8e00d9005a2282034b081a03aad76460fe9a4eb43d054b3bfcba6e68b8f7b7
gvfs-fuse-1.36.2-7.el7_9.1.x86_64.rpm SHA-256: 16e51987939029960ea8b2980cc58fd5e306d97c9abb417debef5839acdc049b
gvfs-goa-1.36.2-7.el7_9.1.x86_64.rpm SHA-256: 10b0322143434a1e8f2e24500c6496d794cd95651a07ced1608e014e8f6e8850
gvfs-gphoto2-1.36.2-7.el7_9.1.x86_64.rpm SHA-256: f8adfeb9cd0a3d4ea8edb5c4cd13cc5c7e1beda1522e208243e8ef1c5aee192a
gvfs-mtp-1.36.2-7.el7_9.1.x86_64.rpm SHA-256: af17a3f488c5f9ba2cd8fc2e73574f37664cb8b8121a07a23db1c0c5ae6964fa
gvfs-smb-1.36.2-7.el7_9.1.x86_64.rpm SHA-256: 53d11fd8254989ff8366ab5363e465e163c05e56453f59aca9d3bea4547efe64
gvfs-tests-1.36.2-7.el7_9.1.x86_64.rpm SHA-256: 1bbd0659655085956cb392e6d2dce88d2402f45ec21aed0a90860eab380f58c1

Red Hat Enterprise Linux Server - Extended Life Cycle Support (for IBM z Systems) 7

SRPM
gvfs-1.36.2-7.el7_9.1.src.rpm SHA-256: 18af18e9a24018bc5f0a45afb8b284d98b40bad3b91f5d897ae161bbba35b9d3
s390x
gvfs-1.36.2-7.el7_9.1.s390.rpm SHA-256: a2ff11f3d0ced7111e332350d157f025edbe1b225cc35a8bb9a35f6449bccfce
gvfs-1.36.2-7.el7_9.1.s390x.rpm SHA-256: 807e99be286c4d18b67c4b68b951d8dcb903ab7b104e75940901fc58fc3fd0b8
gvfs-afp-1.36.2-7.el7_9.1.s390x.rpm SHA-256: 0aa910d1bc65c2154e427478810ce4102e12fa2cb63ddf7d8fe5664225ed51e7
gvfs-archive-1.36.2-7.el7_9.1.s390x.rpm SHA-256: a1d967cf4e0c1aa1ed224f5ca4d963636a1ec5c7d822bb36e477f2c4f75ce1c5
gvfs-client-1.36.2-7.el7_9.1.s390.rpm SHA-256: a549aaf7533674e7e4aa94683e2edfd5188df186e872da81a4ee8c06d68cf264
gvfs-client-1.36.2-7.el7_9.1.s390x.rpm SHA-256: 4b4356f7c1f481d34d0d839eeff692b9030e0646f928cd3fd3aa6967849981b9
gvfs-debuginfo-1.36.2-7.el7_9.1.s390.rpm SHA-256: e453cc07f7ca8d61e4fda6640f1f45ac9d072a9b10fdc2bfbea454937cdbda25
gvfs-debuginfo-1.36.2-7.el7_9.1.s390x.rpm SHA-256: a9114e8789470f641f23520a909498075cb02b1ef14dac774467bd1dee4980e5
gvfs-debuginfo-1.36.2-7.el7_9.1.s390x.rpm SHA-256: a9114e8789470f641f23520a909498075cb02b1ef14dac774467bd1dee4980e5
gvfs-devel-1.36.2-7.el7_9.1.s390.rpm SHA-256: 5de75c785cf0650863bbb13800867dac673b62a11e1b9fb529bb571c2919e526
gvfs-devel-1.36.2-7.el7_9.1.s390x.rpm SHA-256: 8a502bac1ae278b1b715f9001644f32daeacbfe96b3a454c7b9bf91e034bd4d7
gvfs-fuse-1.36.2-7.el7_9.1.s390x.rpm SHA-256: ed6f2551b32ab686748010ec9ee231e22739174c02ce28ad950fcd7ad5c2d983
gvfs-goa-1.36.2-7.el7_9.1.s390x.rpm SHA-256: 811f603f5a8b5da4e323a58eb77dfd1807e307cb3982a9e9fbe6c261ae2f5e38
gvfs-gphoto2-1.36.2-7.el7_9.1.s390x.rpm SHA-256: d31f715b12a5525f7b92116ec3edefce10f8ebec3ff8739e61a1c53e856ac389
gvfs-mtp-1.36.2-7.el7_9.1.s390x.rpm SHA-256: bf8172228af6fe29f703f996666711f52a2a95fc697feec8a9ac28fe935e576d
gvfs-smb-1.36.2-7.el7_9.1.s390x.rpm SHA-256: 32e1f5a6d982dc58db773fc8f56ab6e1c142f8d685994de2a2f10671d27bc3bb
gvfs-tests-1.36.2-7.el7_9.1.s390x.rpm SHA-256: 7ecd63fd2099a5b5761bbd2737669f6b5144366d271d5a9e69de7ad3f6ef74e4

Red Hat Enterprise Linux Server - Extended Life Cycle Support for IBM Power, big endian 7

SRPM
gvfs-1.36.2-7.el7_9.1.src.rpm SHA-256: 18af18e9a24018bc5f0a45afb8b284d98b40bad3b91f5d897ae161bbba35b9d3
ppc64
gvfs-1.36.2-7.el7_9.1.ppc.rpm SHA-256: 2cdc7a46fa29eed98c276ed7272ecdfea51bfff828be66cc5154d5dae4337a2b
gvfs-1.36.2-7.el7_9.1.ppc64.rpm SHA-256: 3bff9db6818b6812cc745d665162aa8940dd58a52804c901ef69424bf5d2ab35
gvfs-afc-1.36.2-7.el7_9.1.ppc64.rpm SHA-256: 41cb12bf1d02781875b7f0d4e2ebc0ce6c6659719fc290aecdbf831b06b94f9c
gvfs-afp-1.36.2-7.el7_9.1.ppc64.rpm SHA-256: e1a7aa9cdc34f36df3739c86a099c63748751f0b7ebc2cdebf5dd0964a940e5c
gvfs-archive-1.36.2-7.el7_9.1.ppc64.rpm SHA-256: 158d5ee7cef6a04b9789fa21ee40d8d04fc39732b6279de62e735f1ab857bc36
gvfs-client-1.36.2-7.el7_9.1.ppc.rpm SHA-256: 0ad03d1d69c2bf5670f4398cc0247376545915f33858cfd17ab1284fda046d7b
gvfs-client-1.36.2-7.el7_9.1.ppc64.rpm SHA-256: 5a9f2d9cbdb0d3697f316fa07288dd62f51460afa7086b0040f3930a1d51a7f4
gvfs-debuginfo-1.36.2-7.el7_9.1.ppc.rpm SHA-256: ef2f02fc9435df2d656723322b2a9461d93c663aafb2f122714c1e792da5f88d
gvfs-debuginfo-1.36.2-7.el7_9.1.ppc64.rpm SHA-256: 760ef5573bd28af0d1c965cd570c7de7165bfecfc6400ed6044d8966f0c971cb
gvfs-debuginfo-1.36.2-7.el7_9.1.ppc64.rpm SHA-256: 760ef5573bd28af0d1c965cd570c7de7165bfecfc6400ed6044d8966f0c971cb
gvfs-devel-1.36.2-7.el7_9.1.ppc.rpm SHA-256: 6e35654844f2b4cc2d67913104c390d547e4cba1b710f42e1ce3b49b9a550ba4
gvfs-devel-1.36.2-7.el7_9.1.ppc64.rpm SHA-256: 917ab0af67a12af754ed37a70c88b1e6da07dac7cdb0d180f3cd7522b3a952cf
gvfs-fuse-1.36.2-7.el7_9.1.ppc64.rpm SHA-256: 4b5a65b4fc12bf31605323a94d98353e271ffd31eaf31b64eaa81c95692fd84b
gvfs-goa-1.36.2-7.el7_9.1.ppc64.rpm SHA-256: 816741c3458264acce5f30b5b28b52eb5beebeec38b3a3bef546afed52689ea4
gvfs-gphoto2-1.36.2-7.el7_9.1.ppc64.rpm SHA-256: 338d8939c45781af5dbf4661f950c07b9d4fad7606d8de20e09381eb6d758b78
gvfs-mtp-1.36.2-7.el7_9.1.ppc64.rpm SHA-256: 20f51ac792552ee5cbc3bb7837564f78da4071ecd1d1ff0870d1315c26920716
gvfs-smb-1.36.2-7.el7_9.1.ppc64.rpm SHA-256: af916bc3fe4a7578e78820e44f7b2ad4fd96a125854120fbb618b67ddfb118cb
gvfs-tests-1.36.2-7.el7_9.1.ppc64.rpm SHA-256: 6178a991648e58f0e6b2a0dda3b473e134078d1ff6a034dc008c82a1c1d669e8

Red Hat Enterprise Linux Server - Extended Life Cycle Support for IBM Power, little endian 7

SRPM
gvfs-1.36.2-7.el7_9.1.src.rpm SHA-256: 18af18e9a24018bc5f0a45afb8b284d98b40bad3b91f5d897ae161bbba35b9d3
ppc64le
gvfs-1.36.2-7.el7_9.1.ppc64le.rpm SHA-256: 12d73508fe62bc2c9f7e091d444d3cf5bdbd77b1cd2141302f8a4b8275f72b53
gvfs-afc-1.36.2-7.el7_9.1.ppc64le.rpm SHA-256: 021cde592dce5d04c9b10640d2fc0a898e1d1a1ffcf547492d4ffe645a9cc4a1
gvfs-afp-1.36.2-7.el7_9.1.ppc64le.rpm SHA-256: c00ff4b16961ec38f655b218c5cfea2319325edeed55e57dd319b61e4b2d4ff3
gvfs-archive-1.36.2-7.el7_9.1.ppc64le.rpm SHA-256: fbe72587fbfc5a57bdb41bae25969f4428a18672995f5d441a3ecdf23c21d963
gvfs-client-1.36.2-7.el7_9.1.ppc64le.rpm SHA-256: 5807bf075a2c88df905b4ef8e0f6d618b0656119607c07c63b39974d2d4f8679
gvfs-debuginfo-1.36.2-7.el7_9.1.ppc64le.rpm SHA-256: a6af0cd08680cecd46dd29f93ab1f9480a3f342099c3109d0bc7d6d720a48c25
gvfs-debuginfo-1.36.2-7.el7_9.1.ppc64le.rpm SHA-256: a6af0cd08680cecd46dd29f93ab1f9480a3f342099c3109d0bc7d6d720a48c25
gvfs-devel-1.36.2-7.el7_9.1.ppc64le.rpm SHA-256: 37903ed901c808ab1997054b62c89be4aa5f281494ef59853ef9f30478dbe27b
gvfs-fuse-1.36.2-7.el7_9.1.ppc64le.rpm SHA-256: 62b5c29e1eb43053f915a74b700174bba1a03956ee440619852410067f7c94a7
gvfs-goa-1.36.2-7.el7_9.1.ppc64le.rpm SHA-256: d5a5e92f3836f14a97c00fe70cfcf2ab90a93c950460b1b9605fcf0cb911c5e1
gvfs-gphoto2-1.36.2-7.el7_9.1.ppc64le.rpm SHA-256: 32a459d793eab4a74d1c54d5712f4beea6f293e62809282fad4362cbefbc63d3
gvfs-mtp-1.36.2-7.el7_9.1.ppc64le.rpm SHA-256: a94a5733c339e6e7e09edff67a4ca623974bf55aca5dfc21a4444679ab3f6f89
gvfs-smb-1.36.2-7.el7_9.1.ppc64le.rpm SHA-256: 1722e97ded8b5749c56242651507ae68b21e0d8119967c7ee19e0e2a9e57cb0f
gvfs-tests-1.36.2-7.el7_9.1.ppc64le.rpm SHA-256: 8b8009af40249d4cf594e43276a53c2d62067ce4b2a8252241eaf102ff9bcb10

The Red Hat security contact is secalert@redhat.com. More contact details at https://access.redhat.com/security/team/contact/.