Red Hat Security Advisory

RHSA-2022:0162

gegl security update

Released 2022-01-18 · Red Hat rating Important · View on Red Hat →

Fixed in

Red Hat Enterprise Linux Client (v. 7) gegl-0.2.0-19.el7_9.1
Red Hat Enterprise Linux Client Optional (v. 7) gegl-devel-0.2.0-19.el7_9.1
Red Hat Enterprise Linux Server (v. 7) gegl-0.2.0-19.el7_9.1
Red Hat Enterprise Linux Server Optional (v. 7) gegl-0.2.0-19.el7_9.1, gegl-0.2.0-19.el7_9.1.ppc, gegl-devel-0.2.0-19.el7_9.1 +1
Red Hat Enterprise Linux Workstation (v. 7) gegl-0.2.0-19.el7_9.1
Red Hat Enterprise Linux Workstation Optional (v. 7) gegl-devel-0.2.0-19.el7_9.1

TI-2021-20550 CVE-2021-45463 · GHSA-g9gv-9646-jvp8

LOW 37

load_cache in GEGL before 0.4.34 allows shell expansion when a pathname in a constructed command line is not escaped or filtered.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.01548 Published 2021-12-23 Partial fix