Has all the patches for the CVE's plus an additional further fix. https://gitlab.gnome.org/GNOME/gvfs/blob/1.40.2/NEWS