Security Advisories (MDKSA-2005:203): gda2.0

[aru]

Mandriva Security Advisories MDKSA-2005:203 : gda2.0

 

Updated gda2.0 packages fix string format vulnerability

November 1st, 2005

 

Steve Kemp discovered two format string vulnerabilities in libgda2, the GNOME Data Access library for GNOME2, which may lead to the execution of arbitrary code in programs that use this library. The updated packages have been patched to correct this issue.

 

 

The released versions of Mandriva GNU/Linux affected are:

• CS3.0
  
• 10.2
  
• 2006.0
  

Full information about this advisory, including the updated packages, is available at:

www.mandriva.com/security/advisories?name=MDKSA-2005:203

 

Other references:

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CAN-2005-2958

 

Posted automatically by aru (mdksec2mub v: mdksec2mub,v 0.14 2005/05/15 18:06:11 aru Exp aru $)