Most recent entries from all

ALSA-2024:6963 — Moderate: gtk3 security update

Affected: AlmaLinux:8: gtk-update-icon-cache, AlmaLinux:8: gtk3, AlmaLinux:8: gtk3-devel, AlmaLinux:8: gtk3-devel-docs, AlmaLinux:8: gtk3-immodule-xim

The GTK+ library provides a multi-platform toolkit for creating graphical user interfaces. The gtk3 packages contain GTK+ version 3.

Security Fix(es):

* gtk3: gtk2: Library injection from CWD (CVE-2024-6655)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

bdu:2024-06447

BELL-CVE-2024-6655

Affected: Alpaquita:23: gtk+2.0, Alpaquita:23: gtk+3.0, Alpaquita:stream: gtk+2.0, Alpaquita:stream: gtk+3.0

certfr-2025-avi-0855 — De multiples vulnérabilités ont été découvertes dans les produits Juniper Networks. Certaines d'entre elles permettent…

certfr-2025-avi-0855

EUVD-2026-261560

fkie_cve-2024-6655

A flaw was found in the GTK library. Under certain conditions, it is possible for a library to be injected into a GTK application from the current working directory.

GHSA-v9xm-vjq4-6r8q

A flaw was found in the GTK library. Under certain conditions, it is possible for a library to be injected into a GTK application from the current working directory.

msrc_CVE-2024-6655 — Gtk3: gtk2: library injection from cwd

msrc_CVE-2024-6655

OESA-2024-1886 — gtk2 security update

Affected: openEuler:20.03-LTS-SP4: gtk2, openEuler:22.03-LTS-SP1: gtk2, openEuler:24.03-LTS: gtk2, openEuler:22.03-LTS-SP4: gtk2, openEuler:22.03-LTS-SP3: gtk2

GTK+ is a library for creating graphical user interfaces. The library is created in C programming language. The GTK+ is also called the GIMP Toolkit. Originally, the library was created while developing the GIMP image manipulation program.

Security Fix(es):

A flaw was found in the GTK library. Under certain conditions, it is possible for a library to be injected into a GTK application from the current working directory.(CVE-2024-6655)

openSUSE-SU-2024:14124-1 — gettext-its-gtk3-3.24.43-1.1 on GA media

gettext-its-gtk3-3.24.43-1.1 on GA media

SUSE-SU-2024:2611-1 — Security update for gtk2

Security update for gtk2

UBUNTU-CVE-2024-6655

Affected: Ubuntu:16.04:LTS: gtk+2.0, Ubuntu:16.04:LTS: gtk+3.0, Ubuntu:18.04:LTS: gtk+2.0, Ubuntu:18.04:LTS: gtk+3.0, Ubuntu:20.04:LTS: gtk+2.0, Ubuntu:20.04:LTS: gtk+3.0, Ubuntu:22.04:LTS: gtk+2.0, Ubuntu:22.04:LTS: gtk+3.0, Ubuntu:24.04:LTS: gtk+2.0, Ubuntu:24.04:LTS: gtk+3.0

A flaw was found in the GTK library. Under certain conditions, it is possible for a library to be injected into a GTK application from the current working directory.

WID-SEC-W-2024-2207 — Red Hat Enterprise Linux: Mehrere Schwachstellen ermöglichen Privilegieneskalation und Codeausführung

Ein lokaler Angreifer kann mehrere Schwachstellen in Red Hat Enterprise Linux ausnutzen, um seine Privilegien zu erhöhen und beliebigen Code auszuführen.