EUVD-2021-32229

Malicious code in bioql PyPI...

Linux Distros Unpatched Vulnerability : CVE-2017-14650

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A Remote Code Execution vulnerability has been found in the HordeImage library when using the Im backend that utilizes ImageMagick's convert utility. It's not...

Ubuntu 16.04 ESM / 18.04 ESM / 20.04 ESM : GEGL vulnerability (USN-5251-1)

The remote Ubuntu 16.04 ESM / 18.04 ESM / 20.04 ESM host has packages installed that are affected by a vulnerability as referenced in the USN-5251-1 advisory. It was discovered that GEGL incorrectly filtered and escaped file path input data when using the C system function for execution of the...

EulerOS 2.0 SP5 : gegl (EulerOS-SA-2022-1321)

According to the versions of the gegl package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - loadcache in GEGL before 0.4.34 allows shell expansion when a pathname in a constructed command line is not escaped or filtered. This is caused by...

Amazon Linux 2 : gegl (ALAS-2022-1755)

The version of gegl installed on the remote host is prior to 0.2.0-19. It is, therefore, affected by a vulnerability as referenced in the ALAS2-2022-1755 advisory. Due to the use of the system command in the Magick-Load op used by gegl an attacker is able to craft a command line path that is able...

openSUSE: Security Advisory for gegl (openSUSE-SU-2021:4209-1)

The remote host is missing an update for the Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

Mageia: Security Advisory (MGASA-2022-0003)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Oracle Linux 7 : gegl (ELSA-2022-0162)

The remote Oracle Linux 7 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2022-0162 advisory. 0.2.0-19.1 - fix CVE-2021-45463 2035416 Tenable has extracted the preceding description block directly from the Oracle Linux security advisory. Note that Nessus...

Updated gegl packages fix security vulnerability

Fix shell expansion via crafted pathname in the ImageMagick convert fallback...

MGASA-2022-0003 Updated gegl packages fix security vulnerability

Fix shell expansion via crafted pathname in the ImageMagick convert fallback...

SUSE: Security Advisory (SUSE-SU-2021:4209-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

openSUSE 15 Security Update : gegl (openSUSE-SU-2021:4210-1)

The remote SUSE Linux SUSE15 host has packages installed that are affected by a vulnerability as referenced in the openSUSE-SU-2021:4210-1 advisory. - GEGL before 0.4.34, as used for example in GIMP before 2.10.30, allows shell expansion when a pathname in a constructed command line is not escape...

OPENSUSE-SU-2021:4210-1 Security update for gegl

This update for gegl fixes the following issues: - CVE-2021-45463: fixed shell expansion via crafted pathname in the ImageMagick convert fallback bsc1194045...

SUSE-SU-2021:4210-1 Security update for gegl

This update for gegl fixes the following issues: - CVE-2021-45463: fixed shell expansion via crafted pathname in the ImageMagick convert fallback bsc1194045...

OPENSUSE-SU-2021:4209-1 Security update for gegl

This update for gegl fixes the following issues: - CVE-2021-45463: fixed shell expansion via crafted pathname in the ImageMagick convert fallback bsc1194045...

SUSE-SU-2021:4209-1 Security update for gegl

This update for gegl fixes the following issues: - CVE-2021-45463: fixed shell expansion via crafted pathname in the ImageMagick convert fallback bsc1194045...

Security update for gegl (important)

openSUSE Security Update: Security update for gegl Announcement ID: openSUSE-SU-2021:4209-1 Rating: important References: 1194045 Cross-References: CVE-2021-45463 CVSS scores: CVE-2021-45463 SUSE: 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H Affected Products: openSUSE Leap 15.3 An update tha...

Security update for gegl (important)

openSUSE Security Update: Security update for gegl Announcement ID: openSUSE-SU-2021:4210-1 Rating: important References: 1194045 Cross-References: CVE-2021-45463 CVSS scores: CVE-2021-45463 SUSE: 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H Affected Products: openSUSE Leap 15.3 An update tha...

CVE-2021-45463

loadcache in GEGL before 0.4.34 allows shell expansion when a pathname in a constructed command line is not escaped or filtered. This is caused by use of the system library function for execution of the ImageMagick convert fallback in magick-load. NOTE: GEGL releases before 0.4.34 are used in GIM...

CVE-2021-45463

loadcache in GEGL before 0.4.34 allows shell expansion when a pathname in a constructed command line is not escaped or filtered. This is caused by use of the system library function for execution of the ImageMagick convert fallback in magick-load. NOTE: GEGL releases before 0.4.34 are used in GIM...