https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-09T11:05:15.597037+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/alsa-2022:0177 ALSA-2022:0177 — Important: gegl04 security update 2026-10-09T11:05:15.640731+00:00

Affected: AlmaLinux:8: gegl04, AlmaLinux:8: gegl04-devel

GEGL (Generic Graphics Library) is a graph-based image processing framework.

Security Fix(es):

* gegl: shell expansion via a crafted pathname (CVE-2021-45463)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

 https://cve.radiocsirt.org/vuln/bdu:2022-02388 bdu:2022-02388 2026-10-09T11:05:15.640793+00:00 bdu:2022-02388 https://cve.radiocsirt.org/vuln/cleanstart-2024-ve53254 CLEANSTART-2024-VE53254 — load_cache in GEGL before 0 2026-10-09T11:05:15.640810+00:00

Affected: CleanStart: gegl

Security vulnerability affects the gegl package. load_cache in GEGL before 0.

 https://cve.radiocsirt.org/vuln/euvd-2026-257442 EUVD-2026-257442 2026-10-09T11:05:15.640829+00:00 EUVD-2026-257442 https://cve.radiocsirt.org/vuln/fkie_cve-2021-45463 fkie_cve-2021-45463 2026-10-09T11:05:15.640840+00:00

load_cache in GEGL before 0.4.34 allows shell expansion when a pathname in a constructed command line is not escaped or filtered. This is caused by use of the system library function for execution of the ImageMagick convert fallback in magick-load. NOTE: GEGL releases before 0.4.34 are used in GIMP releases before 2.10.30; however, this does not imply that GIMP builds enable the vulnerable feature.

 https://cve.radiocsirt.org/vuln/ghsa-g9gv-9646-jvp8 GHSA-g9gv-9646-jvp8 2026-10-09T11:05:15.640861+00:00

GEGL before 0.4.34, as used (for example) in GIMP before 2.10.30, allows shell expansion when a pathname in a constructed command line is not escaped or filtered. This is caused by use of the system library function for execution of the ImageMagick convert fallback in magick-load.

 https://cve.radiocsirt.org/vuln/gsd-2021-45463 gsd-2021-45463 2026-10-09T11:05:15.640884+00:00 gsd-2021-45463 https://cve.radiocsirt.org/vuln/oesa-2022-1488 OESA-2022-1488 — gimp security update 2026-10-09T11:05:15.640895+00:00

Affected: openEuler:20.03-LTS-SP1: gimp, openEuler:20.03-LTS-SP2: gimp, openEuler:20.03-LTS-SP3: gimp

GIMP is a cross-platform image editor available for GNU/Linux, OS X, Windows and more operating systems. It is free software, you can change its source code and distribute your changes. Whether you are a graphic designer, photographer, illustrator, or scientist, GIMP provides you with sophisticated tools to get your job done. You can further enhance your productivity with GIMP thanks to many customization options and 3rd party plugins. Security Fix(es): GEGL before 0.4.34, as used (for example) in GIMP before 2.10.30, allows shell expansion when a pathname in a constructed command line is not escaped or filtered. This is caused by use of the system library function for execution of the ImageMagick convert fallback in magick-load.(CVE-2021-45463)

 https://cve.radiocsirt.org/vuln/opensuse-su-2021:4209-1 openSUSE-SU-2021:4209-1 — Security update for gegl 2026-10-09T11:05:15.640957+00:00

Security update for gegl

 https://cve.radiocsirt.org/vuln/rhsa-2022:0178 RHSA-2022:0178 — Red Hat Security Advisory: gegl04 security update 2026-10-09T11:05:15.640974+00:00

gegl: shell expansion via a crafted pathname

 https://cve.radiocsirt.org/vuln/suse-su-2021:4193-1 SUSE-SU-2021:4193-1 — Security update for gegl 2026-10-09T11:05:15.640988+00:00

Security update for gegl

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2021-45463 UBUNTU-CVE-2021-45463 2026-10-09T11:05:15.641000+00:00

Affected: Ubuntu:Pro:14.04:LTS: gegl, Ubuntu:Pro:16.04:LTS: gegl, Ubuntu:Pro:18.04:LTS: gegl, Ubuntu:Pro:20.04:LTS: gegl, Ubuntu:22.04:LTS: gegl

load_cache in GEGL before 0.4.34 allows shell expansion when a pathname in a constructed command line is not escaped or filtered. This is caused by use of the system library function for execution of the ImageMagick convert fallback in magick-load. NOTE: GEGL releases before 0.4.34 are used in GIMP releases before 2.10.30; however, this does not imply that GIMP builds enable the vulnerable feature.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2025-2384 WID-SEC-W-2025-2384 — Red Hat Enterprise Linux: Schwachstelle ermöglicht Privilegieneskalation 2026-10-09T11:05:15.641023+00:00

Ein lokaler Angreifer kann eine Schwachstelle in Red Hat Enterprise Linux ausnutzen, um seine Privilegien zu erhöhen.