CVE-2019-12447: Canonical Ubuntu Linux

High severity, CVSS 7.3. EPSS: 1.8% chance of exploitation in the next 30 days.

An issue was discovered in GNOME gvfs 1.29.4 through 1.41.2. daemon/gvfsbackendadmin.c mishandles file ownership because setfsuid is not used.

Affected products

• Canonical Ubuntu Linux: version 16.04 only; version 18.04 only; version 18.10 only; version 19.04 only
• Fedoraproject Fedora: version 29 only; version 30 only
• Gnome Gvfs: from 1.29.4, up to and including 1.41.2
• Opensuse Leap: version 15.0 only; version 15.1 only

Published 2019-05-29. Last modified 2026-06-17.