* Sat Feb 28 2026 dimstar@opensuse.org
- Update to version 1.59.90:
+ client: Fix use-after-free when creating async proxy failed
+ udisks2: Emit changed signals from update_all()
+ daemon: Fix race on subscribers list when on thread
+ ftp: Validate fe_size when parsing symlink target
+ ftp: Check localtime() return value before use
+ gphoto2: Use g_try_realloc() instead of g_realloc()
+ cdda: Reject path traversal in mount URI host
+ client: Fail when URI has invalid UTF-8 chars
+ udisks2: Fix memory corruption with duplicate mount paths
+ build: Update GOA dependency to > 3.57.0
+ Some other fixes
+ ftp: Use control connection address for PASV data.
(CVE-2026-28295, bsc#1258953)
+ ftp: Reject paths containing CR/LF characters
(CVE-2026-28296, bsc#1258954)
* Sat Feb 28 2026 dimstar@opensuse.org
- Update to version 1.59.1:
+ mtp: replace Android extension checks with capability checks
+ dav: Add X-OC-Mtime header on push to preserve last modified
time
+ udisks2: Use hash tables in the volume monitor to improve
performance
+ onedrive: Check for identity instead of presentation identity
+ build: Disable google option and mark as deprecated
- Guard google build behind a bcond to easily enable it. Disabled
by upstream as this depends on unmaintained libgdata and
libsoup2.
* Sat Feb 28 2026 dimstar@opensuse.org
- Update to version 1.58.2:
+ client: Fix use-after-free when creating async proxy failed
+ daemon: Fix race on subscribers list when on thread
+ ftp: Validate fe_size when parsing symlink target
+ ftp: Check localtime() return value before use
+ CVE-2026-28295: ftp: Use control connection address for PASV
data
+ CVE-2026-28296: ftp: Reject paths containing CR/LF characters
+ gphoto2: Use g_try_realloc() instead of g_realloc()
+ cdda: Reject path traversal in mount URI host
+ client: Fail when URI has invalid UTF-8 chars
+ Some other fixes
* Sat Jan 31 2026 bjorn.lie@gmail.com
- Update to version 1.58.1:
+ cdda: Fix duration of last track for some media
+ build: Fix build when google option is disabled
+ Fix various memory leaks
+ Some other fixes
+ Updated translations.
* Tue Sep 09 2025 bjorn.lie@gmail.com
- Update to version 1.58.0:
+ mtp: Allow cancelling ongoing folder enumerations
+ wsdd: Use socket-activated service if available
+ onedrive: Set emblem for remote data
+ fix: Add file rename support in MTP backend move operation
+ mtp: Fix -Wmaybe-uninitialized warning in pad_file
+ fuse: use fuse_(un)set_feature_flag for libfuse 3.17+
+ smbbrowse: Purge server cache for next auth try
+ metatree: Open files with O_CLOEXEC
+ cdda: Fix incorrect track duration for 99-track CDs
+ metadata: Fix journal file permissions inconsistency
+ dav: recognize 308 Permanent Redirect
* Tue Sep 02 2025 bjorn.lie@gmail.com
- Split out new gvfs-backend-gphoto sub-package.
- Supplement this new package to gvfs and the libgphoto2 library.
Version: 1.57.2-160000.2.2
* Mon Feb 24 2025 bjorn.lie@gmail.com
- Update to version 1.57.2 (Unstable):
+ onedrive:
- Use presentation id as host to adapt to the change in GOA.
- Fix incorrect include path for msgraph header.
* Mon Feb 24 2025 dimstar@opensuse.org
- Update to version 1.57.1 (Unstable):
+ nfs: Support libnfs 6.
+ onedrive: Support Sharepoint drives.
+ trash/udisks: Port from g_unix_mount_ to g_unix_mount_entry.
+ afp/mtp/nfs/sftp/smb: Add edit mode implementation.
+ fuse: Use edit mode when neither O_TRUNC, nor O_APPEND is used.
+ afp/mtp/nfs/smb: Various output stream related fixes.
+ udisks2: Update volume when setting/unsetting mount.
+ Updated translations.
- Replace pkgconfig(msgraph-0.1) BuildRequires with
pkgconfig(msgraph-1), following upstreams changes.
* Mon Feb 24 2025 matthias.gerstner@suse.com
- add README.SUSE about security concerns in gvfs (bsc#1205607)
* Wed Dec 11 2024 bjorn.lie@gmail.com
- Drop unused and obsolete pkgconfig(gcr-base-3) BuildRequires and
replace it with pkgconfig(gcr-4) BuildRequires already pulled in
via libgdata dependency.
* Fri Oct 18 2024 bjorn.lie@gmail.com
- Update to version 1.56.1:
+ udisks2: Increasing reference count when updating volume to fix
crashes
+ onedrive:
- Use names instead of id for events to fix monitoring
- Add missing replace stream to fix crashes
- onedrive: Fix double free during cache rebuild to fix crashes
+ dav: Recognize the 409 status to fix creation of parent
directories
+ Updated translations.
* Sun Sep 15 2024 dimstar@opensuse.org
- Update to version 1.56.0:
+ udisks2: Run update synchronously for internal changes.
+ onedrive: Set name of drive root.
+ onedrive: Handle multiple drives with same IDs.
- Changes from version 1.55.90:
+ fuse: Fill stat info during readdir to improve performance.
+ smb: Fix access over FUSE when root dir is not accessible.
+ onedrive: Guess mime type locally if not set by the server.
+ trash: Add support for x-gvfs-trash mount option.
+ onedrive: Add seek on write functionality.
+ Updated translations.
* Sat Sep 14 2024 bjorn.lie@gmail.com
- Update to version 1.55.1:
+ ftp:
- Change cwd to root before renaming to prevent failures
- Obtain correct modification time for old files using MDTM cmd
- Use timegm instead of mktime to not shift dates by timezone
- Add support for setting mtime attribute using MFMT cmd
- Preserve mtime when copying to local
+ udisks2:
- Ignore autofs mounts to prevent duplicated entries
- Show only direct descendats of /media unless $USER
- Do not schedule update if pending already to improve
performance
+ build:
- Add deprecated_apis option and disable installation of
headers
- Disable burn backend by default
+ dav: Disable query_info_on_read method to fix mtime
preservation
+ network: Disable usage of smbbrowse backend by default
+ smbbrowse: Don't enforce NT1 to fix mounting in certain cases
+ onedrive: Fix various memory leaks
+ Updated translations.
- Drop devel subpackage, and obsolete it from main package. The
header files are no longer built.
* Fri Sep 13 2024 bjorn.lie@gmail.com
- Update to version 1.54.3:
+ onedrive:
- Set name of drive root
- Handle multiple drives with same IDs
- Guess mime type locally if not set by the server
+ Updated translations.
* Fri Jun 28 2024 bjorn.lie@gmail.com
- Update to version 1.54.2:
+ ftp:
- Change cwd to root before renaming to prevent failures
- Use timegm instead of mktime to not shift dates by timezone
- Preserve mtime when copying to local
+ udisks2: Ignore autofs mounts to prevent duplicated entries
+ build:
- Add deprecated_apis option to control installation of headers
- Disable burn backend by default
+ dav: Disable query_info_on_read method to fix mtime
preservation
+ network: Disable usage of smbbrowse backend by default
+ smbbrowse: Don't enforce NT1 to fix mounting in certain cases
+ onedrive: Fix various memory leaks
+ Updated translations.
- Pass burn=true to meson, we still want to build the burn backend,
at least for now.
* Fri May 24 2024 dimstar@opensuse.org
- Update to version 1.54.1:
+ network: Request content-type attribute to suppress critical
errors.
+ metadata: Check g_stat result to avoid using of uninitialized
value.
+ ftp: Fix data connection to IPv6 link-local address.
+ Updated translations.