USN-2475-1

See a problem?
Please try reporting it to the source first.

Source

https://ubuntu.com/security/notices/USN-2475-1

Import Source

https://github.com/canonical/ubuntu-security-notices/blob/main/osv/usn/USN-2475-1.json

JSON Data

https://api.osv.dev/v1/vulns/USN-2475-1

Published

2015-01-15T14:56:45Z

Modified

2026-04-22T09:05:57.806087Z

Summary

gtk+3.0 update

Details

Clemens Fries discovered that GTK+ allowed bypassing certain screen locks by using the menu key. An attacker with physical access could possibly use this flaw to gain access to a locked session.

References

Affected packages

Ubuntu:14.04:LTS / gtk+3.0

Package

Name: gtk+3.0
Purl: pkg:deb/ubuntu/gtk+3.0@3.10.8-0ubuntu1.4?arch=source&distro=trusty

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

3.10.8-0ubuntu1.4

Affected versions

3.*

3.8.4-0ubuntu3

3.8.6-0ubuntu2

3.8.6-0ubuntu4

3.8.7-0ubuntu1

3.10.6-0ubuntu2

3.10.6-0ubuntu3

3.10.7-0ubuntu1

3.10.7-0ubuntu2

3.10.7-0ubuntu3

3.10.7-0ubuntu4

3.10.7-0ubuntu5

3.10.8-0ubuntu1

3.10.8-0ubuntu1.1

3.10.8-0ubuntu1.2

3.10.8-0ubuntu1.3

Ecosystem specific

{
    "availability": "No subscription required",
    "binaries": [
        {
            "binary_version": "3.10.8-0ubuntu1.4",
            "binary_name": "gir1.2-gtk-3.0"
        },
        {
            "binary_version": "3.10.8-0ubuntu1.4",
            "binary_name": "gtk-3-examples"
        },
        {
            "binary_version": "3.10.8-0ubuntu1.4",
            "binary_name": "libgail-3-0"
        },
        {
            "binary_version": "3.10.8-0ubuntu1.4",
            "binary_name": "libgtk-3-0"
        },
        {
            "binary_version": "3.10.8-0ubuntu1.4",
            "binary_name": "libgtk-3-bin"
        },
        {
            "binary_version": "3.10.8-0ubuntu1.4",
            "binary_name": "libgtk-3-common"
        }
    ]
}

Database specific

source

"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/usn/USN-2475-1.json"

cves_map

{
    "ecosystem": "Ubuntu:14.04:LTS",
    "cves": []
}