High ALAS2-2024-2602 1 CVE

Important: gtk3 security update (Amazon Linux 2)

Published Aug 1, 2024 · Updated Aug 13, 2024

Ecosystem: Amazon Linux

Summary

Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2024-6655: gtk3: gtk2: Library injection from CWD

Fixed packages 8

Release	Package	Fixed in
Amazon Linux · 2	gtk-update-icon-cache	0:3.22.30-3.amzn2.0.1
Amazon Linux · 2	gtk3	0:3.22.30-3.amzn2.0.1
Amazon Linux · 2	gtk3-debuginfo	0:3.22.30-3.amzn2.0.1
Amazon Linux · 2	gtk3-devel	0:3.22.30-3.amzn2.0.1
Amazon Linux · 2	gtk3-devel-docs	0:3.22.30-3.amzn2.0.1
Amazon Linux · 2	gtk3-immodule-xim	0:3.22.30-3.amzn2.0.1
Amazon Linux · 2	gtk3-immodules	0:3.22.30-3.amzn2.0.1
Amazon Linux · 2	gtk3-tests	0:3.22.30-3.amzn2.0.1

Vulnerabilities 1

High 7.0

CVE-2024-6655

Gtk3: gtk2: library injection from cwd

A flaw was found in the GTK library. Under certain conditions, it is possible for a library to be injected into a GTK application from the current working directory.

Red Hat Red Hat Enterprise Linux 9 Red Hat Enterprise Linux 8 Red Hat Enterprise Linux 7 Linux Debian Ubuntu Azure Linux

Jul 16, 2024

References

web
https://alas.aws.amazon.com/cve/html/CVE-2024-6655.html