Description
Multiple format string vulnerabilities in the GNOME Data Access library for GNOME2 (libgda2) 1.2.1 and earlier allow attackers to execute arbitrary code.
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Debian
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Debian 3.1 | libgda2 | 1.2.1-2sarge1 | DSA-871-1 |
Advisories 1
- DSA-871-1 libgda2 - format string Debian Security (DSA / DLA) · Mar 9, 2026
References
- DSA-871 vendor-advisory
- 17426 third-party-advisory
- 1015107 vdb-entry
- 17500 third-party-advisory
- GLSA-200511-01 vendor-advisory
- MDKSA-2005:203 vendor-advisory
- 17323 third-party-advisory
- 17391 third-party-advisory
- 17559 third-party-advisory
- FEDORA-2005-1029 vendor-advisory
- USN-212-1 vendor-advisory
- 15200 vdb-entry
- 17339 third-party-advisory
- SUSE-SR:2005:027 vendor-advisory