Summary
It was discovered that GEGL incorrectly filtered and escaped file path input
data when using the C system() function for execution of the ImageMagick convert
command. An attacker could possibly use this to execute arbitrary code.
Fixed packages 4
| Release | Package | Fixed in |
|---|---|---|
| Ubuntu · Pro 14.04 LTS Pro:14.04:LTS | gegl | 0.2.0-4ubuntu1+esm1 |
| Ubuntu · Pro 16.04 LTS Pro:16.04:LTS | gegl | 0.3.4-1ubuntu2+esm1 |
| Ubuntu · Pro 18.04 LTS Pro:18.04:LTS | gegl | 0.3.30-1ubuntu1+esm1 |
| Ubuntu · Pro 20.04 LTS Pro:20.04:LTS | gegl | 0.4.22-3ubuntu0.1~esm1 |
Vulnerabilities 1
-
Unscored —
load_cache in GEGL before 0.4.34 allows shell expansion when a pathname in a constructed command line is not escaped or…
References
-
report
https://ubuntu.com/security/CVE-2021-45463