Most recent entries from all

ALSA-2022:0177 — Important: gegl04 security update

Affected: AlmaLinux:8: gegl04, AlmaLinux:8: gegl04-devel

GEGL (Generic Graphics Library) is a graph-based image processing framework.

Security Fix(es):

* gegl: shell expansion via a crafted pathname (CVE-2021-45463)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

bdu:2022-02388

CLEANSTART-2024-VE53254 — load_cache in GEGL before 0

Affected: CleanStart: gegl

Security vulnerability affects the gegl package. load_cache in GEGL before 0.

EUVD-2026-257442

fkie_cve-2021-45463

load_cache in GEGL before 0.4.34 allows shell expansion when a pathname in a constructed command line is not escaped or filtered. This is caused by use of the system library function for execution of the ImageMagick convert fallback in magick-load. NOTE: GEGL releases before 0.4.34 are used in GIMP releases before 2.10.30; however, this does not imply that GIMP builds enable the vulnerable feature.

GHSA-g9gv-9646-jvp8

GEGL before 0.4.34, as used (for example) in GIMP before 2.10.30, allows shell expansion when a pathname in a constructed command line is not escaped or filtered. This is caused by use of the system library function for execution of the ImageMagick convert fallback in magick-load.

gsd-2021-45463

OESA-2022-1488 — gimp security update

Affected: openEuler:20.03-LTS-SP1: gimp, openEuler:20.03-LTS-SP2: gimp, openEuler:20.03-LTS-SP3: gimp

GIMP is a cross-platform image editor available for GNU/Linux, OS X, Windows and more operating systems. It is free software, you can change its source code and distribute your changes. Whether you are a graphic designer, photographer, illustrator, or scientist, GIMP provides you with sophisticated tools to get your job done. You can further enhance your productivity with GIMP thanks to many customization options and 3rd party plugins. Security Fix(es): GEGL before 0.4.34, as used (for example) in GIMP before 2.10.30, allows shell expansion when a pathname in a constructed command line is not escaped or filtered. This is caused by use of the system library function for execution of the ImageMagick convert fallback in magick-load.(CVE-2021-45463)

openSUSE-SU-2021:4209-1 — Security update for gegl

Security update for gegl

RHSA-2022:0178 — Red Hat Security Advisory: gegl04 security update

gegl: shell expansion via a crafted pathname

SUSE-SU-2021:4193-1 — Security update for gegl

Security update for gegl

UBUNTU-CVE-2021-45463

Affected: Ubuntu:Pro:14.04:LTS: gegl, Ubuntu:Pro:16.04:LTS: gegl, Ubuntu:Pro:18.04:LTS: gegl, Ubuntu:Pro:20.04:LTS: gegl, Ubuntu:22.04:LTS: gegl

WID-SEC-W-2025-2384 — Red Hat Enterprise Linux: Schwachstelle ermöglicht Privilegieneskalation

Ein lokaler Angreifer kann eine Schwachstelle in Red Hat Enterprise Linux ausnutzen, um seine Privilegien zu erhöhen.