portage-ng / portage / dev-util / glade / 3.40.0-r3
portage-ng glsa
1 advisory reference dev-util/glade · none place version 3.40.0-r3 in a vulnerable range
▸ GLSA 202402-27 Glade: Denial of Service this version unaffected normal local and remote 2024-02-19

A vulnerability has been discovered in Glade which can lead to a denial of service.

Announced
2024-02-19
Revised
2024-02-19
Access
local and remote
Bugs
#747451
Advisory
https://security.gentoo.org/glsa/202402-27

Affected packages

PackageArchVulnerableUnaffected
dev-util/glade*< 3.38.2>= 3.38.2

Background

Glade is a RAD tool to enable quick & easy development of user interfaces for the GTK+ toolkit (Version 3 only) and the GNOME desktop environment.

Description

A vulnerability has been found in Glade which can lead to a denial of service when working with specific glade files.

Impact

A crafted file may lead to crashes in Glade.

Workaround

There is no known workaround at this time.

Resolution

All Glade users should upgrade to the latest version:

# emerge --sync
# emerge --ask --oneshot --verbose ">=dev-util/glade-3.38.2"

References