High ALAS2-2024-2603 1 CVE

Important: gtk2 security update (Amazon Linux 2)

Published Aug 1, 2024 · Updated Aug 13, 2024

Ecosystem: Amazon Linux

Summary

Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2024-6655: gtk3: gtk2: Library injection from CWD

Fixed packages 6

Release	Package	Fixed in
Amazon Linux · 2	gtk2	0:2.24.31-1.amzn2.0.3
Amazon Linux · 2	gtk2-debuginfo	0:2.24.31-1.amzn2.0.3
Amazon Linux · 2	gtk2-devel	0:2.24.31-1.amzn2.0.3
Amazon Linux · 2	gtk2-devel-docs	0:2.24.31-1.amzn2.0.3
Amazon Linux · 2	gtk2-immodule-xim	0:2.24.31-1.amzn2.0.3
Amazon Linux · 2	gtk2-immodules	0:2.24.31-1.amzn2.0.3

Vulnerabilities 1

High 7.0

CVE-2024-6655

Gtk3: gtk2: library injection from cwd

A flaw was found in the GTK library. Under certain conditions, it is possible for a library to be injected into a GTK application from the current working directory.

Red Hat Red Hat Enterprise Linux 9 Red Hat Enterprise Linux 8 Red Hat Enterprise Linux 7 Linux Debian Ubuntu Azure Linux

Jul 16, 2024

References

web
https://alas.aws.amazon.com/cve/html/CVE-2024-6655.html