Lucene search

K
alpinelinuxAlpine Linux Development TeamALPINE:CVE-2021-45463
HistoryDec 23, 2021 - 6:15 a.m.

CVE-2021-45463

2021-12-2306:15:00
Alpine Linux Development Team
security.alpinelinux.org
19

0.002 Low

EPSS

Percentile

54.7%

load_cache in GEGL before 0.4.34 allows shell expansion when a pathname in a constructed command line is not escaped or filtered. This is caused by use of the system library function for execution of the ImageMagick convert fallback in magick-load. NOTE: GEGL releases before 0.4.34 are used in GIMP releases before 2.10.30; however, this does not imply that GIMP builds enable the vulnerable feature.