GCVE - cpe:2.3:a:gnome:libgda:*:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:gnome:libgda:*:*:*:*:*:*:*:*

part: a version: * update: *

Vendor	Gnome (`0ee6d85f-ce9a-5064-936c-231d12a60ad5`)
Product	Libgda (`2bc929ee-9882-5f54-ab38-9a21bac1d871`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from purl2cpe mapping

PURL mappings

PURL	Source	Last updated
`pkg:deb/debian/libgda`	purl2cpe	2026-06-01 10:17:21.139218
`pkg:deb/ubuntu/libgda`	purl2cpe	2026-06-01 10:17:21.139221
`pkg:github/gnome/libgda`	purl2cpe	2026-06-01 10:17:21.139225
`pkg:gitlab/redhat/libgda`	purl2cpe	2026-06-01 10:17:21.139229
`pkg:rpm/fedora/libgda`	purl2cpe	2026-06-01 10:17:21.139232
`pkg:rpm/opensuse/libgda`	purl2cpe	2026-06-01 10:17:21.139236

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2021-39359`	vulnerable	2026-06-08 05:33:50.138363	Details available In GNOME libgda through 6.0.0, gda-web-provider.c does not enable TLS certificate verification on the SoupSessionSync objects it creates, leaving users vulnerable to network MITM attacks. NOTE: this is similar to CVE-2016-20011. Published: 2021-08-22T00:00:00.000Z Updated: 2024-08-04T02:06:42.175Z Open on db.gcve.eu Reference links https://blogs.gnome.org/mcatanzaro/2021/05/25/reminder-soupsessionsync-and-soupsessionasync-default-to-no-tls-certificate-verification/ https://gitlab.gnome.org/GNOME/libgda/-/issues/249 https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/WLMVVIJNY5NMOT3FH36RFBWOTPVW7GME/ https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/HRPPP47WRCAPAEJGRMEKYYJZBQCYXTLQ/ https://github.com/GNOME/libgda/commit/bd7b9568bcd9f6d3e6680bb04323a670c842a62d	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.