A vulnerability has been discovered in Gtk+, which can lead to arbitrary code execution.. - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Gentoo Linux Security Advisory GLSA 202506-05 - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - https://security.gentoo.org/ - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Severity: High Title: GTK+ 3: Search path vulnerability Date: June 12, 2025 Bugs: #949825 ID: 202506-05 - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Synopsis ======== A vulnerability has been discovered in Gtk+, which can lead to arbitrary code execution. Background ========== GTK+ (GIMP Toolkit +) is a toolkit for creating graphical user interfaces. Affected packages ================= Package Vulnerable Unaffected ------------- ------------ ------------ x11-libs/gtk+ < 3.24.48 > = 3.24.48 Description =========== A vulnerability has been discovered in GTK+ 3. Please review the CVE identifiers referenced below for details. Impact ====== Please review the referenced CVE identifier for details. Workaround ========== There is no known workaround at this time. Resolution ========== All GTK+ 3 users should upgrade to the latest version: # emerge --sync # emerge --ask --oneshot --verbose "> =x11-libs/gtk+-3.24.48" References ========== [ 1 ] CVE-2024-6655 https://nvd.nist.gov/vuln/detail/CVE-2024-6655 Availability ============ This GLSA and any updates to it are available for viewing at the Gentoo Security Website: https://security.gentoo.org/glsa/202506-05 Concerns? ========= Security is a primary focus of Gentoo Linux and ensuring the confidentiality and security of our users' machines is of utmost importance to us. Any security concerns should be addressed to
PDFjam scripts previously create temporary files with predictable names, and are also susceptible to the search path being modified. This update fixes the two issues.. --------------------------------------------------------------------------------Fedora Update Notification FEDORA-2009-2655 2009-03-13 18:03:29 --------------------------------------------------------------------------------Name : pdfjam Product : Fedora 9 Version : 1.21 Release : 1.fc9 URL : Summary : Utilities for join, rotate and align PDFs Description : PDFjam is a small collection of shell scripts which provide a simple interface to some of the functionality of the excellent pdfpages package (by Andreas Matthias) for pdfLaTeX. At present the utilities available are: * pdfnup, which allows PDF files to be "n-upped" in roughly the way that psnup does for PostScript files; * pdfjoin, which concatenates the pages of multiple PDF files together into a single file; * pdf90, which rotates the pages of one or more PDF files through 90 degrees (anti-clockwise). In every case, source files are left unchanged. A potential drawback of these utilities is that any hyperlinks in the source PDF are lost. On the positive side, there is no appreciable degradation of image quality in processing PDF files with these programs, unlike some other indirect methods such as "pdf2ps | psnup | ps2pdf" (in the author's experience). --------------------------------------------------------------------------------Update Information: PDFjam scripts previously create temporary files with predictable names, and are also susceptible to the search path being modified. This update fixes the two issues. --------------------------------------------------------------------------------References: [ 1 ] Bug #480174 - pdfjam: multiple security issues (CVE-2008-5743, CVE-2008-5843) https://bugzilla.redhat.com/show_bug.cgi?id=480174 --------------------------------------------------------------------------------This update can be installed with the "yum" update program. Use su -c 'yum update pdfjam' at the command line. For more information, refer to "Managing Software with yum", available at . All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/security/ --------------------------------------------------------------------------------_______________________________________________ Fedora-package-announce mailing list
Get the latest Linux and open source security news straight to your inbox.