GTK+ 3: Search path vulnerability — GLSA 202506-05

A vulnerability has been discovered in Gtk+, which can lead to arbitrary code execution.

Package	x11-libs/gtk+ on all architectures
Affected versions	< 3.24.48 in slot 3
Unaffected versions	>= 3.24.48 in slot 3

GTK+ (GIMP Toolkit +) is a toolkit for creating graphical user interfaces.

A vulnerability has been discovered in GTK+ 3. Please review the CVE identifiers referenced below for details.

Please review the referenced CVE identifier for details.

There is no known workaround at this time.

All GTK+ 3 users should upgrade to the latest version:

 # emerge --sync
 # emerge --ask --oneshot --verbose ">=x11-libs/gtk+-3.24.48:3"

Release date
June 12, 2025

Latest revision
June 12, 2025: 2

Severity
high

Exploitable
local

Bugzilla entries