Alerts This Week
Warning Icon 1 692
Alerts This Week
Warning Icon 1 692

Mageia 9: MGASA-2024-0312 critical: gtk lib injection flaw

mageia
Calendar Grey September 25, 2024
Dist Mageia Esm H88
Mageia Announcement: Revised gtk+2.0 and gtk+3.0 packages resolve security vulnerability related to library injection problems.
A flaw was found in the GTK library

Summary

A flaw was found in the GTK library. Under certain conditions, it is possible for a library to be injected into a GTK application from the current working directory. (CVE-2024-6655)

References

- https://bugs.mageia.org/show_bug.cgi?id=33409

- https://ubuntu.com/security/notices/USN-6899-1

- https://www.cve.org/CVERecord?id=CVE-2024-6655

Topics%20covered

Topics Covered

security advisory security update software patch application vulnerability gtk library Mageia application injection

Resolution

SRPMS

- 9/core/gtk+2.0-2.24.33-5.1.mga9

- 9/core/gtk+3.0-3.24.38-1.1.mga9

Severity
critical
Lowest
Low
Medium
High
Critical

Publication date: 25 Sep 2024
URL: https://advisories.mageia.org/MGASA-2024-0312.html
Type: security
CVE: CVE-2024-6655

Topics%20covered

Topics Covered

security advisory security update software patch application vulnerability gtk library Mageia application injection

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Related News

Your message here