Gentoo Linux Security Advisory GLSA 200903-01 – A format string error in Vinagre may allow for the execution of arbitrary code. Alfredo Ortega (Core Security Technologies) reported a format string error in the vinagre_utils_show_error() function in src/vinagre-utils.c. Versions less than 0.5.2 are affected.
You can download this advisory from the following link: https://packetstormsecurity.com/files/download/75496/glsa-200903-01.txt
Source: https://packetstormsecurity.com/files/75496/Gentoo-Linux-Security-Advisory-200903-1.html