Package : libgda2 Vulnerability : format string Problem type : local Debian-specific: no CVE ID : CAN-2005-2958
Steve Kemp discovered two format string vulnerabilities in libgda2, the GNOME Data Access library for GNOME2, which may lead to the execution of arbitrary code in programs that use this library.
The old stable distribution (woody) is not affected by these problems.
For the stable distribution (sarge) these problems have been fixed in version 1.2.1-2sarge1.
For the unstable distribution (sid) these problems will be fixed soon.
We recommend that you upgrade your libgda2 packages.
Upgrade Instructions - --------------------
wget url will fetch the file for you dpkg -i file.deb will install the referenced file.
If you are using the apt-get package manager, use the line for sources.list as given below:
apt-get update will update the internal database apt-get upgrade will install corrected packages
You may use an automated update by adding the resources from the footer to the proper configuration.
Debian GNU/Linux 3.1 alias sarge - --------------------------------