Untrusted search path in GTK+ - CVE-2024-6655

Vulnerability identifier: #VU94791

CSH Severity: Low

CVSS v4: 8.5 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N]

CVE-ID: CVE-2024-6655

CWE-ID: CWE-426

Exploitation vector: Local access

Exploit availability: No public exploit available

The vulnerability allows a local user to escalate privileges on the system.

The vulnerability exists due to usage of an untrusted search path. A local user can place a malicious binary into a current working directory and execute arbitrary code with escalated privileges.

GTK+
Gentoo Linux
Oracle Linux
SUSE Linux Enterprise Server for SAP Applications 15
SUSE Linux Enterprise High Performance Computing 15
SUSE Linux Enterprise Server 15
SUSE Linux Enterprise High Performance Computing LTSS 15
SUSE Linux Enterprise High Performance Computing ESPOS 15
SUSE Linux Enterprise Desktop 15
SUSE Linux Enterprise Real Time 15
SUSE Linux Enterprise High Performance Computing 12
SUSE Linux Enterprise Server 12
SUSE Linux Enterprise Server for SAP Applications 12
SUSE Linux Enterprise Software Development Kit 12
SUSE Manager Proxy
SUSE Manager Server
SUSE Manager Retail Branch Server
SUSE Linux Enterprise Micro for Rancher
SUSE Linux Enterprise Micro
openSUSE Leap Micro
SUSE Enterprise Storage
Red Hat CodeReady Linux Builder for IBM z Systems
Red Hat Enterprise Linux for x86_64
Red Hat Enterprise Linux for IBM z Systems
Red Hat Enterprise Linux for Power, little endian
Red Hat Enterprise Linux for ARM 64
Red Hat CodeReady Linux Builder for x86_64
Red Hat CodeReady Linux Builder for Power, little endian
Red Hat CodeReady Linux Builder for ARM 64
Anolis OS
SUSE Linux Enterprise Workstation Extension 12
SUSE Linux Enterprise High Performance Computing 15 SP2 LTSS
SUSE Linux Enterprise Server 15 SP2 LTSS
SUSE Linux Enterprise Server 15 SP3 LTSS
SUSE Linux Enterprise Desktop 15 SP4 LTSS
SUSE Linux Enterprise Server 15 SP4 LTSS
Desktop Applications Module
Basesystem Module
openSUSE Leap
openEuler
Ubuntu
SmartFabric Manager
RecoverPoint for Virtual Machines
OpenShift API for Data Protection (OADP)
Migration Toolkit for Containers
gtk2-data
gtk2-devel
typelib-1_0-Gtk-2_0
gtk2-devel-debuginfo
gtk2-debugsource
gtk2-tools-32bit
gtk2-lang
libgtk-2_0-0-debuginfo
libgtk-2_0-0
gtk2-tools-debuginfo
gtk2-tools
libgtk-2_0-0-32bit
libgtk-2_0-0-debuginfo-32bit
gtk2-tools-debuginfo-32bit
libgtk2.0-0 (Ubuntu package)
gtk2-immodule-xim
gtk2-help
gtk2-debuginfo
gtk2
libgtk-2_0-0-32bit-debuginfo
gtk2-tools-32bit-debuginfo
libgtk2.0-0t64 (Ubuntu package)
gtk2-devel-docs
gtk2-immodules
gtk2-doc
gtk2-immodule-amharic-debuginfo
gtk2-immodule-multipress
gtk2-immodule-vietnamese-debuginfo
gtk2-immodule-inuktitut-32bit
gtk2-immodule-amharic-32bit-debuginfo
gtk2-immodule-vietnamese-32bit-debuginfo
gtk2-immodule-amharic-32bit
gtk2-immodule-thai-debuginfo
gtk2-immodule-tigrigna-64bit
gtk2-branding-upstream
gtk2-immodule-xim-debuginfo
gtk2-immodule-vietnamese
gtk2-immodule-tigrigna-debuginfo
gtk2-immodule-inuktitut-debuginfo
gtk2-immodule-thai
gtk2-immodule-multipress-debuginfo
gtk2-immodule-inuktitut
gtk2-immodule-tigrigna
gtk2-immodule-amharic
gtk2-immodule-tigrigna-64bit-debuginfo
gtk2-devel-64bit
gtk2-immodule-multipress-64bit-debuginfo
gtk2-tools-64bit-debuginfo
gtk2-devel-64bit-debuginfo
libgtk-2_0-0-64bit-debuginfo
gtk2-immodule-xim-64bit
gtk2-immodule-amharic-64bit-debuginfo
gtk2-immodule-inuktitut-64bit
libgtk-2_0-0-64bit
gtk2-tools-64bit
gtk2-immodule-thai-64bit
gtk2-immodule-thai-64bit-debuginfo
gtk2-immodule-xim-64bit-debuginfo
gtk2-immodule-vietnamese-64bit-debuginfo
gtk2-immodule-vietnamese-64bit
gtk2-immodule-inuktitut-32bit-debuginfo
gtk2-immodule-inuktitut-64bit-debuginfo
gtk2-immodule-amharic-64bit
gtk2-immodule-multipress-64bit
gtk2-immodule-thai-32bit-debuginfo
gtk2-immodule-multipress-32bit
gtk2-immodule-multipress-32bit-debuginfo
gtk2-immodule-xim-32bit
gtk2-devel-32bit-debuginfo
gtk2-immodule-vietnamese-32bit
gtk2-immodule-tigrigna-32bit
gtk2-immodule-tigrigna-32bit-debuginfo
gtk2-immodule-xim-32bit-debuginfo
gtk2-immodule-thai-32bit
gtk2-devel-32bit
gtk3-devel
gtk3-debugsource
gtk3-tools-debuginfo
gtk3-devel-debuginfo
gtk3-data
gtk3-lang
libgtk-3-0
typelib-1_0-Gtk-3_0
libgtk-3-0-32bit
gtk3-tools-debuginfo-32bit
libgtk-3-0-debuginfo-32bit
gtk3-tools-32bit
gtk3-tools
libgtk-3-0-debuginfo
gnome-themes-standard-debugsource
gtk2-theming-engine-adwaita
gtk2-theming-engine-adwaita-32bit-debuginfo
gtk2-theming-engine-adwaita-32bit
gtk3-metatheme-adwaita
metatheme-adwaita-common
gnome-themes-accessibility-gtk2
gtk2-metatheme-adwaita
gnome-themes-accessibility
gtk2-theming-engine-adwaita-debuginfo
gtk3 (Red Hat package)
libgtk-3-0 (Ubuntu package)
gettext-its-gtk3
gtk3-devel-doc
gtk3-schema
gtk3-help
gtk3-immodule-xim
gtk3-debuginfo
gtk3
gtk3-doc
gtk-update-icon-cache
gtk3-devel-docs
gtk3-immodule-inuktitut-32bit
gtk3-tools-32bit-debuginfo
gtk3-immodule-xim-32bit
gtk3-immodule-amharic-32bit
gtk3-immodule-tigrigna-32bit
gtk3-immodule-amharic-32bit-debuginfo
gtk3-devel-32bit-debuginfo
gtk3-immodule-vietnamese-32bit
gtk3-immodule-thai-32bit
gtk3-immodule-wayland-32bit
gtk3-immodule-tigrigna-32bit-debuginfo
gtk3-immodule-vietnamese-32bit-debuginfo
gtk3-branding-upstream
gtk3-immodule-tigrigna-debuginfo
gtk3-immodule-tigrigna
gtk3-immodule-inuktitut
gtk3-immodule-wayland-debuginfo
gtk3-immodule-wayland
gtk3-immodule-xim-64bit
gtk3-immodule-xim-64bit-debuginfo
gtk3-immodule-amharic-64bit-debuginfo
gtk3-immodule-vietnamese-64bit-debuginfo
gtk3-tools-64bit
gtk3-tools-64bit-debuginfo
gtk3-immodule-thai-64bit-debuginfo
gtk3-immodule-thai-64bit
gtk3-devel-64bit
gtk3-immodule-tigrigna-64bit-debuginfo
gtk3-immodule-thai-32bit-debuginfo
gtk3-immodule-wayland-32bit-debuginfo
gtk3-immodule-xim-32bit-debuginfo
libgtk-3-0-32bit-debuginfo
gtk3-devel-32bit
gtk3-immodule-inuktitut-32bit-debuginfo
gtk3-immodule-multipress-32bit
gtk3-immodule-multipress-32bit-debuginfo
gtk3-immodule-wayland-64bit-debuginfo
libgtk-3-0-64bit-debuginfo
gtk3-immodule-vietnamese-64bit
gtk3-immodule-inuktitut-64bit-debuginfo
gtk3-immodule-vietnamese-debuginfo
gtk3-immodule-wayland-64bit
gtk3-devel-64bit-debuginfo
gtk3-immodule-tigrigna-64bit
gtk3-immodule-inuktitut-64bit
libgtk-3-0-64bit
gtk3-immodule-multipress-64bit-debuginfo
gtk3-immodule-multipress-64bit
gtk3-immodule-amharic-64bit
gtk3-immodule-xim-debuginfo
gtk3-immodule-amharic-debuginfo
gtk3-immodule-inuktitut-debuginfo
gtk3-immodule-thai
gtk3-immodule-thai-debuginfo
gtk3-immodule-multipress
gtk3-immodule-vietnamese
gtk3-immodule-multipress-debuginfo
gtk3-immodule-amharic
gtk3-immodule-broadway
gtk3-immodule-broadway-debuginfo
libgail-3-0t64 (Ubuntu package)
x11-libs/gtk+
gtk3-branding-SLE
Red Hat OpenShift Dev Spaces
App Connect Enterprise Certified Container

Install updates from vendor's website.

GTK+ - update to 3.24.43
SmartFabric Manager - update to 1.2.0
RecoverPoint for Virtual Machines - update to 6.0 SP2 P1
OpenShift API for Data Protection (OADP) - addressed in versions 1.3.4, 1.4.2
Migration Toolkit for Containers - update to 1.8.5
gtk2-data - addressed in versions 2.24.31-9.9.1, 2.24.32+67-150200.4.3.1, 2.24.33-150400.4.3.1, 2.24.33-150600.11.3.1
gtk2-devel - addressed in versions 2.24.31-9.9.1, 2.24.32+67-150200.4.3.1, 2.24.33-150400.4.3.1, 2.24.33-150600.11.3.1
typelib-1_0-Gtk-2_0 - addressed in versions 2.24.31-9.9.1, 2.24.32+67-150200.4.3.1, 2.24.33-150400.4.3.1, 2.24.33-150600.11.3.1
gtk2-devel-debuginfo - addressed in versions 2.24.31-9.9.1, 2.24.32+67-150200.4.3.1, 2.24.33-150400.4.3.1, 2.24.33-150600.11.3.1
gtk2-debugsource - addressed in versions 2.24.31-9.9.1, 2.24.32+67-150200.4.3.1, 2.24.33-150400.4.3.1, 2.24.33-150600.11.3.1
gtk2-tools-32bit - addressed in versions 2.24.31-9.9.1, 2.24.32+67-150200.4.3.1, 2.24.33-150400.4.3.1, 2.24.33-150600.11.3.1
gtk2-lang - addressed in versions 2.24.31-9.9.1, 2.24.32+67-150200.4.3.1, 2.24.33-150400.4.3.1, 2.24.33-150600.11.3.1
libgtk-2_0-0-debuginfo - addressed in versions 2.24.31-9.9.1, 2.24.32+67-150200.4.3.1, 2.24.33-150400.4.3.1, 2.24.33-150600.11.3.1
libgtk-2_0-0 - addressed in versions 2.24.31-9.9.1, 2.24.32+67-150200.4.3.1, 2.24.33-150400.4.3.1, 2.24.33-150600.11.3.1
gtk2-tools-debuginfo - addressed in versions 2.24.31-9.9.1, 2.24.32+67-150200.4.3.1, 2.24.33-150400.4.3.1, 2.24.33-150600.11.3.1
gtk2-tools - addressed in versions 2.24.31-9.9.1, 2.24.32+67-150200.4.3.1, 2.24.33-150400.4.3.1, 2.24.33-150600.11.3.1
libgtk-2_0-0-32bit - addressed in versions 2.24.31-9.9.1, 2.24.32+67-150200.4.3.1, 2.24.33-150400.4.3.1, 2.24.33-150600.11.3.1
libgtk-2_0-0-debuginfo-32bit - update to 2.24.31-9.9.1
gtk2-tools-debuginfo-32bit - update to 2.24.31-9.9.1
libgtk2.0-0 (Ubuntu package) - addressed in versions 2.24.32-4ubuntu4.1, 2.24.33-2ubuntu2.1
gtk2-immodule-xim - update to 2.24.32-11
gtk2-help - update to 2.24.32-11
gtk2-devel - update to 2.24.32-11
gtk2-debugsource - update to 2.24.32-11
gtk2-debuginfo - update to 2.24.32-11
gtk2 - update to 2.24.32-11
libgtk-2_0-0-32bit-debuginfo - addressed in versions 2.24.32+67-150200.4.3.1, 2.24.33-150400.4.3.1, 2.24.33-150600.11.3.1
gtk2-tools-32bit-debuginfo - addressed in versions 2.24.32+67-150200.4.3.1, 2.24.33-150400.4.3.1, 2.24.33-150600.11.3.1
libgtk2.0-0t64 (Ubuntu package) - update to 2.24.33-4ubuntu1.1
gtk2-devel - update to 2.24.33-6
gtk2-devel-docs - update to 2.24.33-6
gtk2-immodule-xim - update to 2.24.33-6
gtk2-immodules - update to 2.24.33-6
gtk2-doc - update to 2.24.33-6
gtk2 - update to 2.24.33-6
gtk2-immodule-amharic-debuginfo - addressed in versions 2.24.33-150400.4.3.1, 2.24.33-150600.11.3.1
gtk2-immodule-multipress - addressed in versions 2.24.33-150400.4.3.1, 2.24.33-150600.11.3.1
gtk2-immodule-xim - addressed in versions 2.24.33-150400.4.3.1, 2.24.33-150600.11.3.1
gtk2-immodule-vietnamese-debuginfo - addressed in versions 2.24.33-150400.4.3.1, 2.24.33-150600.11.3.1
gtk2-immodule-inuktitut-32bit - addressed in versions 2.24.33-150400.4.3.1, 2.24.33-150600.11.3.1
gtk2-immodule-amharic-32bit-debuginfo - addressed in versions 2.24.33-150400.4.3.1, 2.24.33-150600.11.3.1
gtk2-immodule-vietnamese-32bit-debuginfo - addressed in versions 2.24.33-150400.4.3.1, 2.24.33-150600.11.3.1
gtk2-immodule-amharic-32bit - addressed in versions 2.24.33-150400.4.3.1, 2.24.33-150600.11.3.1
gtk2-immodule-thai-debuginfo - addressed in versions 2.24.33-150400.4.3.1, 2.24.33-150600.11.3.1
gtk2-immodule-tigrigna-64bit - addressed in versions 2.24.33-150400.4.3.1, 2.24.33-150600.11.3.1
gtk2-branding-upstream - addressed in versions 2.24.33-150400.4.3.1, 2.24.33-150600.11.3.1
gtk2-immodule-xim-debuginfo - addressed in versions 2.24.33-150400.4.3.1, 2.24.33-150600.11.3.1
gtk2-immodule-vietnamese - addressed in versions 2.24.33-150400.4.3.1, 2.24.33-150600.11.3.1
gtk2-immodule-tigrigna-debuginfo - addressed in versions 2.24.33-150400.4.3.1, 2.24.33-150600.11.3.1
gtk2-immodule-inuktitut-debuginfo - addressed in versions 2.24.33-150400.4.3.1, 2.24.33-150600.11.3.1
gtk2-immodule-thai - addressed in versions 2.24.33-150400.4.3.1, 2.24.33-150600.11.3.1
gtk2-immodule-multipress-debuginfo - addressed in versions 2.24.33-150400.4.3.1, 2.24.33-150600.11.3.1
gtk2-immodule-inuktitut - addressed in versions 2.24.33-150400.4.3.1, 2.24.33-150600.11.3.1
gtk2-immodule-tigrigna - addressed in versions 2.24.33-150400.4.3.1, 2.24.33-150600.11.3.1
gtk2-immodule-amharic - addressed in versions 2.24.33-150400.4.3.1, 2.24.33-150600.11.3.1
gtk2-immodule-tigrigna-64bit-debuginfo - addressed in versions 2.24.33-150400.4.3.1, 2.24.33-150600.11.3.1
gtk2-devel-64bit - addressed in versions 2.24.33-150400.4.3.1, 2.24.33-150600.11.3.1
gtk2-immodule-multipress-64bit-debuginfo - addressed in versions 2.24.33-150400.4.3.1, 2.24.33-150600.11.3.1
gtk2-tools-64bit-debuginfo - addressed in versions 2.24.33-150400.4.3.1, 2.24.33-150600.11.3.1
gtk2-devel-64bit-debuginfo - addressed in versions 2.24.33-150400.4.3.1, 2.24.33-150600.11.3.1
libgtk-2_0-0-64bit-debuginfo - addressed in versions 2.24.33-150400.4.3.1, 2.24.33-150600.11.3.1
gtk2-immodule-xim-64bit - addressed in versions 2.24.33-150400.4.3.1, 2.24.33-150600.11.3.1
gtk2-immodule-amharic-64bit-debuginfo - addressed in versions 2.24.33-150400.4.3.1, 2.24.33-150600.11.3.1
gtk2-immodule-inuktitut-64bit - addressed in versions 2.24.33-150400.4.3.1, 2.24.33-150600.11.3.1
libgtk-2_0-0-64bit - addressed in versions 2.24.33-150400.4.3.1, 2.24.33-150600.11.3.1
gtk2-tools-64bit - addressed in versions 2.24.33-150400.4.3.1, 2.24.33-150600.11.3.1
gtk2-immodule-thai-64bit - addressed in versions 2.24.33-150400.4.3.1, 2.24.33-150600.11.3.1
gtk2-immodule-thai-64bit-debuginfo - addressed in versions 2.24.33-150400.4.3.1, 2.24.33-150600.11.3.1
gtk2-immodule-xim-64bit-debuginfo - addressed in versions 2.24.33-150400.4.3.1, 2.24.33-150600.11.3.1
gtk2-immodule-vietnamese-64bit-debuginfo - addressed in versions 2.24.33-150400.4.3.1, 2.24.33-150600.11.3.1
gtk2-immodule-vietnamese-64bit - addressed in versions 2.24.33-150400.4.3.1, 2.24.33-150600.11.3.1
gtk2-immodule-inuktitut-32bit-debuginfo - addressed in versions 2.24.33-150400.4.3.1, 2.24.33-150600.11.3.1
gtk2-immodule-inuktitut-64bit-debuginfo - addressed in versions 2.24.33-150400.4.3.1, 2.24.33-150600.11.3.1
gtk2-immodule-amharic-64bit - addressed in versions 2.24.33-150400.4.3.1, 2.24.33-150600.11.3.1
gtk2-immodule-multipress-64bit - addressed in versions 2.24.33-150400.4.3.1, 2.24.33-150600.11.3.1
gtk2-immodule-thai-32bit-debuginfo - addressed in versions 2.24.33-150400.4.3.1, 2.24.33-150600.11.3.1
gtk2-immodule-multipress-32bit - addressed in versions 2.24.33-150400.4.3.1, 2.24.33-150600.11.3.1
gtk2-immodule-multipress-32bit-debuginfo - addressed in versions 2.24.33-150400.4.3.1, 2.24.33-150600.11.3.1
gtk2-immodule-xim-32bit - addressed in versions 2.24.33-150400.4.3.1, 2.24.33-150600.11.3.1
gtk2-devel-32bit-debuginfo - addressed in versions 2.24.33-150400.4.3.1, 2.24.33-150600.11.3.1
gtk2-immodule-vietnamese-32bit - addressed in versions 2.24.33-150400.4.3.1, 2.24.33-150600.11.3.1
gtk2-immodule-tigrigna-32bit - addressed in versions 2.24.33-150400.4.3.1, 2.24.33-150600.11.3.1
gtk2-immodule-tigrigna-32bit-debuginfo - addressed in versions 2.24.33-150400.4.3.1, 2.24.33-150600.11.3.1
gtk2-immodule-xim-32bit-debuginfo - addressed in versions 2.24.33-150400.4.3.1, 2.24.33-150600.11.3.1
gtk2-immodule-thai-32bit - addressed in versions 2.24.33-150400.4.3.1, 2.24.33-150600.11.3.1
gtk2-devel-32bit - addressed in versions 2.24.33-150400.4.3.1, 2.24.33-150600.11.3.1
Red Hat OpenShift Dev Spaces - update to 3.17.0
gtk3-devel - addressed in versions 3.20.10-17.16.1, 3.24.20-150200.3.9.1, 3.24.34-150400.3.9.1, 3.24.38+111-150600.3.3.1, 3.24.43-150600.3.7.1
gtk3-debugsource - addressed in versions 3.20.10-17.16.1, 3.24.20-150200.3.9.1, 3.24.34-150400.3.9.1, 3.24.38+111-150600.3.3.1, 3.24.43-150600.3.7.1
gtk3-tools-debuginfo - addressed in versions 3.20.10-17.16.1, 3.24.20-150200.3.9.1, 3.24.34-150400.3.9.1, 3.24.38+111-150600.3.3.1, 3.24.43-150600.3.7.1
gtk3-devel-debuginfo - addressed in versions 3.20.10-17.16.1, 3.24.20-150200.3.9.1, 3.24.34-150400.3.9.1, 3.24.38+111-150600.3.3.1, 3.24.43-150600.3.7.1
gtk3-data - addressed in versions 3.20.10-17.16.1, 3.24.20-150200.3.9.1, 3.24.34-150400.3.9.1, 3.24.38+111-150600.3.3.1, 3.24.43-150600.3.7.1
gtk3-lang - addressed in versions 3.20.10-17.16.1, 3.24.20-150200.3.9.1, 3.24.34-150400.3.9.1, 3.24.38+111-150600.3.3.1, 3.24.43-150600.3.7.1
libgtk-3-0 - addressed in versions 3.20.10-17.16.1, 3.24.20-150200.3.9.1, 3.24.34-150400.3.9.1, 3.24.38+111-150600.3.3.1, 3.24.43-150600.3.7.1
typelib-1_0-Gtk-3_0 - addressed in versions 3.20.10-17.16.1, 3.24.20-150200.3.9.1, 3.24.34-150400.3.9.1, 3.24.38+111-150600.3.3.1, 3.24.43-150600.3.7.1
libgtk-3-0-32bit - addressed in versions 3.20.10-17.16.1, 3.24.34-150400.3.9.1, 3.24.38+111-150600.3.3.1, 3.24.43-150600.3.7.1
gtk3-tools-debuginfo-32bit - update to 3.20.10-17.16.1
libgtk-3-0-debuginfo-32bit - update to 3.20.10-17.16.1
gtk3-tools-32bit - addressed in versions 3.20.10-17.16.1, 3.24.34-150400.3.9.1, 3.24.38+111-150600.3.3.1, 3.24.43-150600.3.7.1
gtk3-tools - addressed in versions 3.20.10-17.16.1, 3.24.20-150200.3.9.1, 3.24.34-150400.3.9.1, 3.24.38+111-150600.3.3.1, 3.24.43-150600.3.7.1
libgtk-3-0-debuginfo - addressed in versions 3.20.10-17.16.1, 3.24.20-150200.3.9.1, 3.24.34-150400.3.9.1, 3.24.38+111-150600.3.3.1, 3.24.43-150600.3.7.1
gnome-themes-standard-debugsource - update to 3.22.3-150000.4.5.1
gtk2-theming-engine-adwaita - update to 3.22.3-150000.4.5.1
gtk2-theming-engine-adwaita-32bit-debuginfo - update to 3.22.3-150000.4.5.1
gtk2-theming-engine-adwaita-32bit - update to 3.22.3-150000.4.5.1
gtk3-metatheme-adwaita - update to 3.22.3-150000.4.5.1
metatheme-adwaita-common - update to 3.22.3-150000.4.5.1
gnome-themes-accessibility-gtk2 - update to 3.22.3-150000.4.5.1
gtk2-metatheme-adwaita - update to 3.22.3-150000.4.5.1
gnome-themes-accessibility - update to 3.22.3-150000.4.5.1
gtk2-theming-engine-adwaita-debuginfo - update to 3.22.3-150000.4.5.1
gtk3 (Red Hat package) - addressed in versions 3.22.30-12.el8_10, 3.24.31-5.el9
libgtk-3-0 (Ubuntu package) - addressed in versions 3.24.20-0ubuntu1.2, 3.24.33-1ubuntu2.2
gettext-its-gtk3 - addressed in versions 3.24.20-150200.3.9.1, 3.24.34-150400.3.9.1, 3.24.38+111-150600.3.3.1, 3.24.43-150600.3.7.1
gtk3-devel-doc - addressed in versions 3.24.20-150200.3.9.1, 3.24.34-150400.3.9.1, 3.24.38+111-150600.3.3.1, 3.24.43-150600.3.7.1
gtk3-schema - addressed in versions 3.24.20-150200.3.9.1, 3.24.34-150400.3.9.1, 3.24.38+111-150600.3.3.1, 3.24.43-150600.3.7.1
gtk3-help - update to 3.24.21-6
gtk3-immodule-xim - update to 3.24.21-6
gtk3-devel - update to 3.24.21-6
gtk3-debugsource - update to 3.24.21-6
gtk3-debuginfo - update to 3.24.21-6
gtk3 - update to 3.24.21-6
gtk3-doc - update to 3.24.31-5.0.2
gtk-update-icon-cache - update to 3.24.31-5.0.2
gtk3 - update to 3.24.31-5.0.2
gtk3-devel - update to 3.24.31-5.0.2
gtk3-devel-docs - update to 3.24.31-5.0.2
gtk3-immodule-xim - update to 3.24.31-5.0.2
gtk3-immodule-inuktitut-32bit - addressed in versions 3.24.34-150400.3.9.1, 3.24.38+111-150600.3.3.1, 3.24.43-150600.3.7.1
gtk3-tools-32bit-debuginfo - addressed in versions 3.24.34-150400.3.9.1, 3.24.38+111-150600.3.3.1, 3.24.43-150600.3.7.1
gtk3-immodule-xim-32bit - addressed in versions 3.24.34-150400.3.9.1, 3.24.38+111-150600.3.3.1, 3.24.43-150600.3.7.1
gtk3-immodule-amharic-32bit - addressed in versions 3.24.34-150400.3.9.1, 3.24.38+111-150600.3.3.1, 3.24.43-150600.3.7.1
gtk3-immodule-tigrigna-32bit - addressed in versions 3.24.34-150400.3.9.1, 3.24.38+111-150600.3.3.1, 3.24.43-150600.3.7.1
gtk3-immodule-amharic-32bit-debuginfo - addressed in versions 3.24.34-150400.3.9.1, 3.24.38+111-150600.3.3.1, 3.24.43-150600.3.7.1
gtk3-devel-32bit-debuginfo - addressed in versions 3.24.34-150400.3.9.1, 3.24.38+111-150600.3.3.1, 3.24.43-150600.3.7.1
gtk3-immodule-vietnamese-32bit - addressed in versions 3.24.34-150400.3.9.1, 3.24.38+111-150600.3.3.1, 3.24.43-150600.3.7.1
gtk3-immodule-thai-32bit - addressed in versions 3.24.34-150400.3.9.1, 3.24.38+111-150600.3.3.1, 3.24.43-150600.3.7.1
gtk3-immodule-wayland-32bit - update to 3.24.34-150400.3.9.1
gtk3-immodule-tigrigna-32bit-debuginfo - addressed in versions 3.24.34-150400.3.9.1, 3.24.38+111-150600.3.3.1, 3.24.43-150600.3.7.1
gtk3-immodule-vietnamese-32bit-debuginfo - addressed in versions 3.24.34-150400.3.9.1, 3.24.38+111-150600.3.3.1, 3.24.43-150600.3.7.1
gtk3-branding-upstream - addressed in versions 3.24.34-150400.3.9.1, 3.24.38+111-150600.3.3.1, 3.24.43-150600.3.7.1
gtk3-immodule-tigrigna-debuginfo - addressed in versions 3.24.34-150400.3.9.1, 3.24.38+111-150600.3.3.1, 3.24.43-150600.3.7.1
gtk3-immodule-tigrigna - addressed in versions 3.24.34-150400.3.9.1, 3.24.38+111-150600.3.3.1, 3.24.43-150600.3.7.1
gtk3-immodule-inuktitut - addressed in versions 3.24.34-150400.3.9.1, 3.24.38+111-150600.3.3.1, 3.24.43-150600.3.7.1
gtk3-immodule-wayland-debuginfo - update to 3.24.34-150400.3.9.1
gtk3-immodule-wayland - update to 3.24.34-150400.3.9.1
gtk3-immodule-xim-64bit - addressed in versions 3.24.34-150400.3.9.1, 3.24.38+111-150600.3.3.1, 3.24.43-150600.3.7.1
gtk3-immodule-xim-64bit-debuginfo - addressed in versions 3.24.34-150400.3.9.1, 3.24.38+111-150600.3.3.1, 3.24.43-150600.3.7.1
gtk3-immodule-amharic-64bit-debuginfo - addressed in versions 3.24.34-150400.3.9.1, 3.24.38+111-150600.3.3.1, 3.24.43-150600.3.7.1
gtk3-immodule-vietnamese-64bit-debuginfo - addressed in versions 3.24.34-150400.3.9.1, 3.24.38+111-150600.3.3.1, 3.24.43-150600.3.7.1
gtk3-tools-64bit - addressed in versions 3.24.34-150400.3.9.1, 3.24.38+111-150600.3.3.1, 3.24.43-150600.3.7.1
gtk3-tools-64bit-debuginfo - addressed in versions 3.24.34-150400.3.9.1, 3.24.38+111-150600.3.3.1, 3.24.43-150600.3.7.1
gtk3-immodule-thai-64bit-debuginfo - addressed in versions 3.24.34-150400.3.9.1, 3.24.38+111-150600.3.3.1, 3.24.43-150600.3.7.1
gtk3-immodule-thai-64bit - addressed in versions 3.24.34-150400.3.9.1, 3.24.38+111-150600.3.3.1, 3.24.43-150600.3.7.1
gtk3-devel-64bit - addressed in versions 3.24.34-150400.3.9.1, 3.24.38+111-150600.3.3.1, 3.24.43-150600.3.7.1
gtk3-immodule-tigrigna-64bit-debuginfo - addressed in versions 3.24.34-150400.3.9.1, 3.24.38+111-150600.3.3.1, 3.24.43-150600.3.7.1
gtk3-immodule-thai-32bit-debuginfo - addressed in versions 3.24.34-150400.3.9.1, 3.24.38+111-150600.3.3.1, 3.24.43-150600.3.7.1
gtk3-immodule-wayland-32bit-debuginfo - update to 3.24.34-150400.3.9.1
gtk3-immodule-xim-32bit-debuginfo - addressed in versions 3.24.34-150400.3.9.1, 3.24.38+111-150600.3.3.1, 3.24.43-150600.3.7.1
libgtk-3-0-32bit-debuginfo - addressed in versions 3.24.34-150400.3.9.1, 3.24.38+111-150600.3.3.1, 3.24.43-150600.3.7.1
gtk3-devel-32bit - addressed in versions 3.24.34-150400.3.9.1, 3.24.38+111-150600.3.3.1, 3.24.43-150600.3.7.1
gtk3-immodule-inuktitut-32bit-debuginfo - addressed in versions 3.24.34-150400.3.9.1, 3.24.38+111-150600.3.3.1, 3.24.43-150600.3.7.1
gtk3-immodule-multipress-32bit - addressed in versions 3.24.34-150400.3.9.1, 3.24.38+111-150600.3.3.1, 3.24.43-150600.3.7.1
gtk3-immodule-multipress-32bit-debuginfo - addressed in versions 3.24.34-150400.3.9.1, 3.24.38+111-150600.3.3.1, 3.24.43-150600.3.7.1
gtk3-immodule-wayland-64bit-debuginfo - update to 3.24.34-150400.3.9.1
libgtk-3-0-64bit-debuginfo - addressed in versions 3.24.34-150400.3.9.1, 3.24.38+111-150600.3.3.1, 3.24.43-150600.3.7.1
gtk3-immodule-vietnamese-64bit - addressed in versions 3.24.34-150400.3.9.1, 3.24.38+111-150600.3.3.1, 3.24.43-150600.3.7.1
gtk3-immodule-inuktitut-64bit-debuginfo - addressed in versions 3.24.34-150400.3.9.1, 3.24.38+111-150600.3.3.1, 3.24.43-150600.3.7.1
gtk3-immodule-vietnamese-debuginfo - addressed in versions 3.24.34-150400.3.9.1, 3.24.38+111-150600.3.3.1, 3.24.43-150600.3.7.1
gtk3-immodule-wayland-64bit - update to 3.24.34-150400.3.9.1
gtk3-devel-64bit-debuginfo - addressed in versions 3.24.34-150400.3.9.1, 3.24.38+111-150600.3.3.1, 3.24.43-150600.3.7.1
gtk3-immodule-tigrigna-64bit - addressed in versions 3.24.34-150400.3.9.1, 3.24.38+111-150600.3.3.1, 3.24.43-150600.3.7.1
gtk3-immodule-inuktitut-64bit - addressed in versions 3.24.34-150400.3.9.1, 3.24.38+111-150600.3.3.1, 3.24.43-150600.3.7.1
libgtk-3-0-64bit - addressed in versions 3.24.34-150400.3.9.1, 3.24.38+111-150600.3.3.1, 3.24.43-150600.3.7.1
gtk3-immodule-multipress-64bit-debuginfo - addressed in versions 3.24.34-150400.3.9.1, 3.24.38+111-150600.3.3.1, 3.24.43-150600.3.7.1
gtk3-immodule-multipress-64bit - addressed in versions 3.24.34-150400.3.9.1, 3.24.38+111-150600.3.3.1, 3.24.43-150600.3.7.1
gtk3-immodule-amharic-64bit - addressed in versions 3.24.34-150400.3.9.1, 3.24.38+111-150600.3.3.1, 3.24.43-150600.3.7.1
gtk3-immodule-xim-debuginfo - addressed in versions 3.24.34-150400.3.9.1, 3.24.38+111-150600.3.3.1, 3.24.43-150600.3.7.1
gtk3-immodule-amharic-debuginfo - addressed in versions 3.24.34-150400.3.9.1, 3.24.38+111-150600.3.3.1, 3.24.43-150600.3.7.1
gtk3-immodule-inuktitut-debuginfo - addressed in versions 3.24.34-150400.3.9.1, 3.24.38+111-150600.3.3.1, 3.24.43-150600.3.7.1
gtk3-immodule-thai - addressed in versions 3.24.34-150400.3.9.1, 3.24.38+111-150600.3.3.1, 3.24.43-150600.3.7.1
gtk3-immodule-thai-debuginfo - addressed in versions 3.24.34-150400.3.9.1, 3.24.38+111-150600.3.3.1, 3.24.43-150600.3.7.1
gtk3-immodule-multipress - addressed in versions 3.24.34-150400.3.9.1, 3.24.38+111-150600.3.3.1, 3.24.43-150600.3.7.1
gtk3-immodule-vietnamese - addressed in versions 3.24.34-150400.3.9.1, 3.24.38+111-150600.3.3.1, 3.24.43-150600.3.7.1
gtk3-immodule-xim - addressed in versions 3.24.34-150400.3.9.1, 3.24.38+111-150600.3.3.1, 3.24.43-150600.3.7.1
gtk3-immodule-multipress-debuginfo - addressed in versions 3.24.34-150400.3.9.1, 3.24.38+111-150600.3.3.1, 3.24.43-150600.3.7.1
gtk3-immodule-amharic - addressed in versions 3.24.34-150400.3.9.1, 3.24.38+111-150600.3.3.1, 3.24.43-150600.3.7.1
gtk3-immodule-broadway - addressed in versions 3.24.34-150400.3.9.1, 3.24.38+111-150600.3.3.1, 3.24.43-150600.3.7.1
gtk3-immodule-broadway-debuginfo - addressed in versions 3.24.34-150400.3.9.1, 3.24.38+111-150600.3.3.1, 3.24.43-150600.3.7.1
libgail-3-0t64 (Ubuntu package) - update to 3.24.41-4ubuntu1.1
x11-libs/gtk+ - update to 3.24.48
App Connect Enterprise Certified Container - addressed in versions 5.0.22, 12.0.6, 12.6.0
gtk3-branding-SLE - update to 15.0-150600.21.2.1

• https://access.redhat.com/security/cve/CVE-2024-6655
• https://bugzilla.redhat.com/show_bug.cgi?id=2297098
• https://gitlab.gnome.org/GNOME/gtk/-/merge_requests/7361/diffs?commit_id=3bbf0b6176d42836d23c36a6ac410e807ec0a7a7#diff-content-e3fbe6480add9420b69f82374fb26ccac2c015a0

• Privilege escalation in Gnome GTK library
• Ubuntu update for gtk+2.0
• openEuler update for gtk2
• openEuler update for gtk3
• SUSE update for gtk2
• SUSE update for gtk3
• SUSE update for gtk3
• SUSE update for gtk2
• SUSE update for gtk2
• SUSE update for gtk3
• SUSE update for gtk2
• SUSE update for gtk3
• Red Hat Enterprise Linux 8 update for gtk3
• Multiple vulnerabilities in Oracle Linux
• Red Hat Enterprise Linux 9 update for gtk3
• Multiple vulnerabilities in OpenShift API for Data Protection (OADP) 1.3
• Multiple vulnerabilities in Red Hat OpenShift Dev Spaces 3.17
• Multiple vulnerabilities in IBM App Connect Enterprise Certified Container
• Multiple vulnerabilities in Migration Toolkit for Containers 1.8
• SUSE update for gtk3
• Multiple vulnerabilities in OpenShift API for Data Protection (OADP) 1.4
• Dell SmartFabric Manager update for third-party components
• Anolis OS update for gtk2
• Anolis OS update for gtk3
• Dell RecoverPoint for Virtual Machines update for third-party components
• Gentoo update for GTK+ 3