Non évaluée
load_cache in GEGL before 0.4.34 allows shell expansion when a pathname in a constructed command line is not escaped or filtered. This is caused by us...
CVE-2021-45463
Première détection SecPulse
État des correctifs par distribution
Paquets corrigés publiés par chaque distribution pour cette CVE
- Debian DEBIAN-CVE-2021-45463 gegl Corrigé dans: 1:0.4.34-1
Description d'origine La description telle que publiée par la source (souvent en anglais).
load_cache in GEGL before 0.4.34 allows shell expansion when a pathname in a constructed command line is not escaped or filtered. This is caused by use of the system library function for execution of the ImageMagick convert fallback in magick-load. NOTE: GEGL releases before 0.4.34 are used in GIMP releases before 2.10.30; however, this does not imply that GIMP builds enable the vulnerable feature.
Références
- advisory gitlab.gnome.org
- advisory gitlab.gnome.org
- advisory gimp.org
- patch gitlab.gnome.org
- patch gitlab.gnome.org
- web lists.debian.org
- web lists.fedoraproject.org
- web lists.fedoraproject.org