Updated gegl packages fix security vulnerability

Fix shell expansion via crafted pathname in the ImageMagick convert fallback...

MGASA-2022-0003 Updated gegl packages fix security vulnerability

Fix shell expansion via crafted pathname in the ImageMagick convert fallback...

openSUSE 15 Security Update : gegl (openSUSE-SU-2021:4210-1)

The remote SUSE Linux SUSE15 host has packages installed that are affected by a vulnerability as referenced in the openSUSE-SU-2021:4210-1 advisory. - GEGL before 0.4.34, as used for example in GIMP before 2.10.30, allows shell expansion when a pathname in a constructed command line is not escape...

SUSE SLED15 / SLES15 Security Update : gegl (SUSE-SU-2021:4210-1)

The remote SUSE Linux SLED15 / SLES15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2021:4210-1 advisory. - CVE-2021-45463: fixed shell expansion via crafted pathname in the ImageMagick convert fallback bsc1194045. Tenable has extracted the precedin...

openSUSE 15 Security Update : gegl (openSUSE-SU-2021:4209-1)

The remote SUSE Linux SUSE15 host has packages installed that are affected by a vulnerability as referenced in the openSUSE-SU-2021:4209-1 advisory. - GEGL before 0.4.34, as used for example in GIMP before 2.10.30, allows shell expansion when a pathname in a constructed command line is not escape...

SUSE: Security Advisory (SUSE-SU-2021:4209-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SUSE SLED15: gegl / gegl-0_4 / gegl-0_4-lang / gegl-devel / gegl-doc / etc (SUSE-SU-2021:4209-1)

The remote SUSE Linux SLED15 / SLES15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2021:4209-1 advisory. - CVE-2021-45463: fixed shell expansion via crafted pathname in the ImageMagick convert fallback bsc1194045. Tenable has extracted the precedin...

OPENSUSE-SU-2021:4210-1 Security update for gegl

This update for gegl fixes the following issues: - CVE-2021-45463: fixed shell expansion via crafted pathname in the ImageMagick convert fallback bsc1194045...

SUSE-SU-2021:4210-1 Security update for gegl

This update for gegl fixes the following issues: - CVE-2021-45463: fixed shell expansion via crafted pathname in the ImageMagick convert fallback bsc1194045...

OPENSUSE-SU-2021:4209-1 Security update for gegl

This update for gegl fixes the following issues: - CVE-2021-45463: fixed shell expansion via crafted pathname in the ImageMagick convert fallback bsc1194045...

SUSE-SU-2021:4209-1 Security update for gegl

This update for gegl fixes the following issues: - CVE-2021-45463: fixed shell expansion via crafted pathname in the ImageMagick convert fallback bsc1194045...

Security update for gegl (important)

openSUSE Security Update: Security update for gegl Announcement ID: openSUSE-SU-2021:4209-1 Rating: important References: 1194045 Cross-References: CVE-2021-45463 CVSS scores: CVE-2021-45463 SUSE: 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H Affected Products: openSUSE Leap 15.3 An update tha...

Security update for gegl (important)

openSUSE Security Update: Security update for gegl Announcement ID: openSUSE-SU-2021:4210-1 Rating: important References: 1194045 Cross-References: CVE-2021-45463 CVSS scores: CVE-2021-45463 SUSE: 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H Affected Products: openSUSE Leap 15.3 An update tha...

SUSE SLED12 / SLES12 Security Update : gegl (SUSE-SU-2021:4193-1)

The remote SUSE Linux SLED12 / SLES12 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2021:4193-1 advisory. - CVE-2021-45463: fixed shell expansion via crafted pathname in the ImageMagick convert fallback bsc1194045. Tenable has extracted the precedin...

SUSE-SU-2021:4193-1 Security update for gegl

This update for gegl fixes the following issues: - CVE-2021-45463: fixed shell expansion via crafted pathname in the ImageMagick convert fallback bsc1194045...

Command Injection

GEGL is vulnerable to command injection. The vulnerability exists due to a pathname in a constructed command line is not escaped or filtered...

CVE-2021-45463

Due to the use of the system command in the Magick-Load op used by gegl an attacker is able to craft a command line path that is able to lead to the execution of arbitrary shell commands that impacts availability, confidentiality and integrity...

CVE-2021-45463

loadcache in GEGL before 0.4.34 allows shell expansion when a pathname in a constructed command line is not escaped or filtered. This is caused by use of the system library function for execution of the ImageMagick convert fallback in magick-load. NOTE: GEGL releases before 0.4.34 are used in GIM...

DEBIAN-CVE-2021-45463

loadcache in GEGL before 0.4.34 allows shell expansion when a pathname in a constructed command line is not escaped or filtered. This is caused by use of the system library function for execution of the ImageMagick convert fallback in magick-load. NOTE: GEGL releases before 0.4.34 are used in GIM...

CVE-2021-45463

loadcache in GEGL before 0.4.34 allows shell expansion when a pathname in a constructed command line is not escaped or filtered. This is caused by use of the system library function for execution of the ImageMagick convert fallback in magick-load. NOTE: GEGL releases before 0.4.34 are used in GIM...