vulnerability
SUSE: CVE-2021-45463: SUSE Linux Security Advisory
| Severity | CVSS | Published | Added | Modified |
|---|---|---|---|---|
| 7 | (AV:N/AC:M/Au:N/C:P/I:P/A:P) | Dec 23, 2021 | Dec 29, 2021 | Oct 26, 2022 |
Severity
7
CVSS
(AV:N/AC:M/Au:N/C:P/I:P/A:P)
Published
Dec 23, 2021
Added
Dec 29, 2021
Modified
Oct 26, 2022
Description
load_cache in GEGL before 0.4.34 allows shell expansion when a pathname in a constructed command line is not escaped or filtered. This is caused by use of the system library function for execution of the ImageMagick convert fallback in magick-load. NOTE: GEGL releases before 0.4.34 are used in GIMP releases before 2.10.30; however, this does not imply that GIMP builds enable the vulnerable feature.
Solutions
suse-upgrade-geglsuse-upgrade-gegl-0_2suse-upgrade-gegl-0_2-langsuse-upgrade-gegl-0_3suse-upgrade-gegl-0_3-langsuse-upgrade-gegl-0_4suse-upgrade-gegl-0_4-langsuse-upgrade-gegl-develsuse-upgrade-gegl-docsuse-upgrade-libgegl-0_2-0suse-upgrade-libgegl-0_3-0suse-upgrade-libgegl-0_4-0suse-upgrade-libgegl-0_4-0-32bitsuse-upgrade-typelib-1_0-gegl-0_3suse-upgrade-typelib-1_0-gegl-0_4
Rapid7 Labs
2026 Global Threat Landscape Report
The predictive window has collapsed. Exploitation follows disclosure in days. See how attackers are accelerating and how to stay ahead.