Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

suse-cvrf логотип

openSUSE-SU-2021:4209-1

Опубликовано: 31 дек. 2021
Источник: suse-cvrf

Описание

Security update for gegl

This update for gegl fixes the following issues:

  • CVE-2021-45463: fixed shell expansion via crafted pathname in the ImageMagick convert fallback (bsc#1194045).

Список пакетов

openSUSE Leap 15.3
gegl-0.4.16-3.3.1
gegl-0_4-0.4.16-3.3.1
gegl-0_4-lang-0.4.16-3.3.1
gegl-devel-0.4.16-3.3.1
gegl-doc-0.4.16-3.3.1
libgegl-0_4-0-0.4.16-3.3.1
libgegl-0_4-0-32bit-0.4.16-3.3.1
typelib-1_0-Gegl-0_4-0.4.16-3.3.1

Ссылки

Описание

load_cache in GEGL before 0.4.34 allows shell expansion when a pathname in a constructed command line is not escaped or filtered. This is caused by use of the system library function for execution of the ImageMagick convert fallback in magick-load. NOTE: GEGL releases before 0.4.34 are used in GIMP releases before 2.10.30; however, this does not imply that GIMP builds enable the vulnerable feature.

Затронутые продукты
openSUSE Leap 15.3:gegl-0.4.16-3.3.1
openSUSE Leap 15.3:gegl-0_4-0.4.16-3.3.1
openSUSE Leap 15.3:gegl-0_4-lang-0.4.16-3.3.1
openSUSE Leap 15.3:gegl-devel-0.4.16-3.3.1
Ссылки