gnome-vfs2-2.16.2-10.AXS3

GNOME VFS is the GNOME virtual file system. It is the foundation of the Nautilus file manager. It provides a modular architecture and ships with several modules that implement support for file systems, http, ftp, and others. It provides a URI-based API, backend supporting asynchronous file operations, a MIME type manipulation library, and other features.

Security issues fixed with this release:

• CVE-2009-2473
neon before 0.28.6, when expat is used, does not properly detect recursion during entity expansion, which allows context-dependent attackers to cause a denial of service (memory and CPU consumption) via a crafted XML document containing a large number of nested entity references, a similar issue to CVE-2003-1564.

Fixed bugs:

• gnome-vfs2 did not correctly parse some paths when extracted from the Uniform Resource Identifier (URI). This has bee fixed.

• The trash info file sometimes contained some foreign entries pointing to live data. Emptying the trash could result in valuable data being deleted. This has been fixed.

• Nautilus could not delete a symbolic link to a folder on a different file system. This has been fixed.

• When attempting to copy directories without a read permission, Nautilus skipped those without informing the user; it now displays an informative error message.

• gnome-vfs2 now uses less stat() function calls for files on the MultiVersion File System (used on IBM Rational ClearCase, among others), which results in Nautilus being more responsive.