Red Hat Security Advisory

RHSA-2022:0178

gegl04 security update

Released 2022-01-19 · Red Hat rating Important · View on Red Hat →

Fixed in

TI-2021-20550 CVE-2021-45463 · GHSA-g9gv-9646-jvp8

LOW 37

load_cache in GEGL before 0.4.34 allows shell expansion when a pathname in a constructed command line is not escaped or filtered.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.01548 Published 2021-12-23 Partial fix