[Debian] Medium CVE: CVE-2024-6655 gtk+3.0: a library to be injected
Bug #2078666 reported by
Yue Tao
This bug affects 1 person
Affects | Status | Importance | Assigned to | Milestone | |
---|---|---|---|---|---|
StarlingX |
In Progress
|
Undecided
|
Peng Zhang |
Bug Description
CVE-2024-6655: https:/
A flaw was found in the GTK library. Under certain conditions, it is possible for a library to be injected into a GTK application from the current working directory.
Base Score: Medium
Reference:
['libgtk-
Changed in starlingx: | |
assignee: | nobody → Peng Zhang (pzhang2) |
To post a comment you must log in.
Fix proposed to branch: master /review. opendev. org/c/starlingx /tools/ +/928105
Review: https:/