Summary
GEGL (Generic Graphics Library) is a graph-based image processing framework.
Security Fix(es):
* gegl: shell expansion via a crafted pathname (CVE-2021-45463)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Fixed packages 2
| Release | Package | Fixed in |
|---|---|---|
| AlmaLinux · 8 | gegl04 | 0.4.4-6.el8_5.2 |
| AlmaLinux · 8 | gegl04-devel | 0.4.4-6.el8_5.2 |
Vulnerabilities 1
-
Unscored —
load_cache in GEGL before 0.4.34 allows shell expansion when a pathname in a constructed command line is not escaped or…
References
-
report
https://vulners.com/cve/CVE-2021-45463