{"id":"CVE-2021-45463","aliases":["ALPINE-CVE-2021-45463","ALSA-2022:0177","CLSA-2026-1791563692","DEBIAN-CVE-2021-45463","DLA-4341-1","EUVD-2021-32229","GHSA-g9gv-9646-jvp8","MGASA-2022-0003","OESA-2022-1488","RHSA-2022:0162","RHSA-2022:0177","RHSA-2022:0178","RHSA-2022:0184","RLSA-2022:0177","SUSE-SU-2021:4193-1","SUSE-SU-2021:4209-1","SUSE-SU-2021:4210-1","UBUNTU-CVE-2021-45463","USN-5251-1","openSUSE-SU-2021:4209-1","openSUSE-SU-2021:4210-1","openSUSE-SU-2024:11788-1"],"status":"published","title":"GEGL before 0.4.34, as used (for example) in GIMP before 2.10.30, allows shell expansion when a...","description":"load_cache in GEGL before 0.4.34 allows shell expansion when a pathname in a constructed command line is not escaped or filtered. This is caused by use of the system library function for execution of the ImageMagick convert fallback in magick-load. NOTE: GEGL releases before 0.4.34 are used in GIMP releases before 2.10.30; however, this does not imply that GIMP builds enable the vulnerable feature.","severity":{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-09","score":0.01487,"percentile":0.74234,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"published":"2021-12-23T06:00:57Z","modified":"2026-11-03T06:32:47Z","fixes":[{"ecosystem":"Alpine:v3.15","package":"gegl","fixed_in":["0.4.34-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.16","package":"gegl","fixed_in":["0.4.34-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.17","package":"gegl","fixed_in":["0.4.34-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.18","package":"gegl","fixed_in":["0.4.34-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.19","package":"gegl","fixed_in":["0.4.34-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.20","package":"gegl","fixed_in":["0.4.34-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.21","package":"gegl","fixed_in":["0.4.34-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.22","package":"gegl","fixed_in":["0.4.34-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.23","package":"gegl","fixed_in":["0.4.34-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.24","package":"gegl","fixed_in":["0.4.34-r0"],"sources":["osv"]},{"ecosystem":"AlmaLinux:8","package":"gegl04","fixed_in":["0.4.4-6.el8_5.2"],"sources":["osv"]},{"ecosystem":"AlmaLinux:8","package":"gegl04-devel","fixed_in":["0.4.4-6.el8_5.2"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:18.04","package":"gegl","fixed_in":["0.3.30-1ubuntu1+tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:18.04","package":"gir1.2-gegl-0.3","fixed_in":["0.3.30-1ubuntu1+tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:18.04","package":"libgegl-0.3-0","fixed_in":["0.3.30-1ubuntu1+tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:18.04","package":"libgegl-dev","fixed_in":["0.3.30-1ubuntu1+tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:18.04","package":"libgegl-doc","fixed_in":["0.3.30-1ubuntu1+tuxcare.els1"],"sources":["osv"]},{"ecosystem":"Debian:12","package":"gegl","fixed_in":["1:0.4.34-1"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"gegl","fixed_in":["1:0.4.34-1"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"gegl","fixed_in":["1:0.4.34-1"],"sources":["osv"]},{"ecosystem":"Mageia:8","package":"gegl","fixed_in":["0.4.34-1.mga8"],"sources":["osv"]},{"ecosystem":"openEuler:20.03-LTS-SP1","package":"gimp","fixed_in":["2.10.6-10.oe1"],"sources":["osv"]},{"ecosystem":"openEuler:20.03-LTS-SP2","package":"gimp","fixed_in":["2.10.6-9.oe1"],"sources":["osv"]},{"ecosystem":"openEuler:20.03-LTS-SP3","package":"gimp","fixed_in":["2.10.6-9.oe1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::client","package":"gegl","fixed_in":["0:0.2.0-19.el7_9.1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::client","package":"gegl-debuginfo","fixed_in":["0:0.2.0-19.el7_9.1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::client","package":"gegl-devel","fixed_in":["0:0.2.0-19.el7_9.1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::server","package":"gegl","fixed_in":["0:0.2.0-19.el7_9.1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::server","package":"gegl-debuginfo","fixed_in":["0:0.2.0-19.el7_9.1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::server","package":"gegl-devel","fixed_in":["0:0.2.0-19.el7_9.1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"gegl","fixed_in":["0:0.2.0-19.el7_9.1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"gegl-debuginfo","fixed_in":["0:0.2.0-19.el7_9.1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"gegl-devel","fixed_in":["0:0.2.0-19.el7_9.1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"gegl04","fixed_in":["0:0.4.4-6.el8_5.2"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"gegl04-debuginfo","fixed_in":["0:0.4.4-6.el8_5.2"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"gegl04-debugsource","fixed_in":["0:0.4.4-6.el8_5.2"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"gegl04-tools-debuginfo","fixed_in":["0:0.4.4-6.el8_5.2"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::crb","package":"gegl04-debuginfo","fixed_in":["0:0.4.4-6.el8_5.2"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::crb","package":"gegl04-debugsource","fixed_in":["0:0.4.4-6.el8_5.2"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::crb","package":"gegl04-devel","fixed_in":["0:0.4.4-6.el8_5.2"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::crb","package":"gegl04-tools-debuginfo","fixed_in":["0:0.4.4-6.el8_5.2"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:8.4::appstream","package":"gegl04","fixed_in":["0:0.4.4-6.el8_4.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:8.4::appstream","package":"gegl04-debuginfo","fixed_in":["0:0.4.4-6.el8_4.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:8.4::appstream","package":"gegl04-debugsource","fixed_in":["0:0.4.4-6.el8_4.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:8.4::appstream","package":"gegl04-tools-debuginfo","fixed_in":["0:0.4.4-6.el8_4.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:8.4::crb","package":"gegl04-debuginfo","fixed_in":["0:0.4.4-6.el8_4.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:8.4::crb","package":"gegl04-debugsource","fixed_in":["0:0.4.4-6.el8_4.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:8.4::crb","package":"gegl04-devel","fixed_in":["0:0.4.4-6.el8_4.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:8.4::crb","package":"gegl04-tools-debuginfo","fixed_in":["0:0.4.4-6.el8_4.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:8.2::appstream","package":"gegl04","fixed_in":["0:0.4.4-6.el8_2.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:8.2::appstream","package":"gegl04-debuginfo","fixed_in":["0:0.4.4-6.el8_2.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:8.2::appstream","package":"gegl04-debugsource","fixed_in":["0:0.4.4-6.el8_2.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:8.2::appstream","package":"gegl04-tools-debuginfo","fixed_in":["0:0.4.4-6.el8_2.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:8.2::crb","package":"gegl04-debuginfo","fixed_in":["0:0.4.4-6.el8_2.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:8.2::crb","package":"gegl04-debugsource","fixed_in":["0:0.4.4-6.el8_2.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:8.2::crb","package":"gegl04-devel","fixed_in":["0:0.4.4-6.el8_2.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:8.2::crb","package":"gegl04-tools-debuginfo","fixed_in":["0:0.4.4-6.el8_2.1"],"sources":["osv"]},{"ecosystem":"Rocky Linux:8","package":"gegl04","fixed_in":["0:0.4.4-6.el8_5.2"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Software Development Kit 12 SP5","package":"gegl","fixed_in":["0.2.0-15.6.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Workstation Extension 12 SP5","package":"gegl","fixed_in":["0.2.0-15.6.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Module for Package Hub 15 SP3","package":"gegl","fixed_in":["0.4.16-3.3.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Workstation Extension 15 SP2","package":"gegl","fixed_in":["0.4.16-3.3.1","0.3.34-3.3.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Workstation Extension 15 SP3","package":"gegl","fixed_in":["0.4.16-3.3.1","0.3.34-3.3.1"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:14.04:LTS","package":"gegl","fixed_in":["0.2.0-4ubuntu1+esm1"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:16.04:LTS","package":"gegl","fixed_in":["0.3.4-1ubuntu2+esm1"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:18.04:LTS","package":"gegl","fixed_in":["0.3.30-1ubuntu1+esm1"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:20.04:LTS","package":"gegl","fixed_in":["0.4.22-3ubuntu0.1~esm1"],"sources":["osv"]},{"ecosystem":"Ubuntu:22.04:LTS","package":"gegl","fixed_in":["1:0.4.34-1"],"sources":["osv"]},{"ecosystem":"openSUSE:Leap 15.3","package":"gegl","fixed_in":["0.4.16-3.3.1","0.3.34-3.3.1"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Alpine:v3.15","package":"gegl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.4.34-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.16","package":"gegl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.4.34-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.17","package":"gegl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.4.34-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.18","package":"gegl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.4.34-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.19","package":"gegl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.4.34-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.20","package":"gegl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.4.34-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.21","package":"gegl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.4.34-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.22","package":"gegl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.4.34-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.23","package":"gegl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.4.34-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.24","package":"gegl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.4.34-r0"}]}]},{"source":"osv","ecosystem":"AlmaLinux:8","package":"gegl04","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.4.4-6.el8_5.2"}]}]},{"source":"osv","ecosystem":"AlmaLinux:8","package":"gegl04-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.4.4-6.el8_5.2"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:18.04","package":"gegl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.3.30-1ubuntu1+tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:18.04","package":"gir1.2-gegl-0.3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.3.30-1ubuntu1+tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:18.04","package":"libgegl-0.3-0","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.3.30-1ubuntu1+tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:18.04","package":"libgegl-dev","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.3.30-1ubuntu1+tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:18.04","package":"libgegl-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.3.30-1ubuntu1+tuxcare.els1"}]}]},{"source":"osv","ecosystem":"Debian:12","package":"gegl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:0.4.34-1"}]}]},{"source":"osv","ecosystem":"Debian:13","package":"gegl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:0.4.34-1"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"gegl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:0.4.34-1"}]}]},{"source":"osv","ecosystem":"Debian:11","package":"gegl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:0.4.26-2+deb11u1"}]}],"versions":["1:0.4.26-2"],"bundled":2},{"source":"osv","ecosystem":"Mageia:8","package":"gegl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.4.34-1.mga8"}]}]},{"source":"osv","ecosystem":"openEuler:20.03-LTS-SP1","package":"gimp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.10.6-10.oe1"}]}]},{"source":"osv","ecosystem":"openEuler:20.03-LTS-SP2","package":"gimp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.10.6-9.oe1"}]}]},{"source":"osv","ecosystem":"openEuler:20.03-LTS-SP3","package":"gimp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.10.6-9.oe1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"gegl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.2.0-19.el7_9.1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"gegl-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.2.0-19.el7_9.1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"gegl-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.2.0-19.el7_9.1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"gegl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.2.0-19.el7_9.1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"gegl-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.2.0-19.el7_9.1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"gegl-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.2.0-19.el7_9.1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"gegl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.2.0-19.el7_9.1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"gegl-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.2.0-19.el7_9.1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"gegl-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.2.0-19.el7_9.1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"gegl04","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.4.4-6.el8_5.2"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"gegl04-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.4.4-6.el8_5.2"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"gegl04-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.4.4-6.el8_5.2"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"gegl04-tools-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.4.4-6.el8_5.2"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::crb","package":"gegl04-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.4.4-6.el8_5.2"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::crb","package":"gegl04-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.4.4-6.el8_5.2"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::crb","package":"gegl04-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.4.4-6.el8_5.2"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::crb","package":"gegl04-tools-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.4.4-6.el8_5.2"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.4::appstream","package":"gegl04","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.4.4-6.el8_4.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.4::appstream","package":"gegl04-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.4.4-6.el8_4.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.4::appstream","package":"gegl04-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.4.4-6.el8_4.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.4::appstream","package":"gegl04-tools-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.4.4-6.el8_4.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.4::crb","package":"gegl04-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.4.4-6.el8_4.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.4::crb","package":"gegl04-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.4.4-6.el8_4.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.4::crb","package":"gegl04-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.4.4-6.el8_4.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.4::crb","package":"gegl04-tools-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.4.4-6.el8_4.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.2::appstream","package":"gegl04","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.4.4-6.el8_2.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.2::appstream","package":"gegl04-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.4.4-6.el8_2.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.2::appstream","package":"gegl04-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.4.4-6.el8_2.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.2::appstream","package":"gegl04-tools-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.4.4-6.el8_2.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.2::crb","package":"gegl04-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.4.4-6.el8_2.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.2::crb","package":"gegl04-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.4.4-6.el8_2.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.2::crb","package":"gegl04-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.4.4-6.el8_2.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.2::crb","package":"gegl04-tools-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.4.4-6.el8_2.1"}]}]},{"source":"osv","ecosystem":"Rocky Linux:8","package":"gegl04","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.4.4-6.el8_5.2"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Software Development Kit 12 SP5","package":"gegl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.2.0-15.6.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Workstation Extension 12 SP5","package":"gegl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.2.0-15.6.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Package Hub 15 SP3","package":"gegl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.4.16-3.3.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Workstation Extension 15 SP2","package":"gegl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.4.16-3.3.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Workstation Extension 15 SP3","package":"gegl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.4.16-3.3.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Workstation Extension 15 SP2","package":"gegl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.3.34-3.3.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Workstation Extension 15 SP3","package":"gegl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.3.34-3.3.1"}]}]},{"source":"osv","ecosystem":"Ubuntu:Pro:14.04:LTS","package":"gegl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.2.0-4ubuntu1+esm1"}]}],"versions":["0.2.0-3ubuntu1","0.2.0-4ubuntu1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:16.04:LTS","package":"gegl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.3.4-1ubuntu2+esm1"}]}],"versions":["0.3.0-4ubuntu2","0.3.2-1ubuntu1","0.3.2-1ubuntu2","0.3.4-1ubuntu1","0.3.4-1ubuntu2"]},{"source":"osv","ecosystem":"Ubuntu:Pro:18.04:LTS","package":"gegl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.3.30-1ubuntu1+esm1"}]}],"versions":["0.3.20-1","0.3.20-3","0.3.24-1","0.3.28-3","0.3.30-1","0.3.30-1ubuntu1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:20.04:LTS","package":"gegl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.4.22-3ubuntu0.1~esm1"}]}],"versions":["0.4.14-1","0.4.18-1ubuntu1","0.4.18-2","0.4.18-2build1","0.4.22-1","0.4.22-3"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"gegl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:0.4.34-1"}]}],"versions":["1:0.4.32-1","1:0.4.32-2"]},{"source":"osv","ecosystem":"Ubuntu:Pro:14.04:LTS","package":"gegl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.2.0-4ubuntu1+esm1"}]}],"versions":["0.2.0-3ubuntu1","0.2.0-4ubuntu1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:16.04:LTS","package":"gegl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.3.4-1ubuntu2+esm1"}]}],"versions":["0.3.0-4ubuntu2","0.3.2-1ubuntu1","0.3.2-1ubuntu2","0.3.4-1ubuntu1","0.3.4-1ubuntu2"]},{"source":"osv","ecosystem":"Ubuntu:Pro:18.04:LTS","package":"gegl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.3.30-1ubuntu1+esm1"}]}],"versions":["0.3.20-1","0.3.20-3","0.3.24-1","0.3.28-3","0.3.30-1","0.3.30-1ubuntu1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:20.04:LTS","package":"gegl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.4.22-3ubuntu0.1~esm1"}]}],"versions":["0.4.14-1","0.4.18-1ubuntu1","0.4.18-2","0.4.18-2build1","0.4.22-1","0.4.22-3"]},{"source":"osv","ecosystem":"openSUSE:Leap 15.3","package":"gegl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.4.16-3.3.1"}]}]},{"source":"osv","ecosystem":"openSUSE:Leap 15.3","package":"gegl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.3.34-3.3.1"}]}]}],"products":[{"vendor":"fedoraproject","product":"fedora"},{"vendor":"gegl","product":"gegl"},{"vendor":"gimp","product":"gimp"},{"vendor":"redhat","product":"enterprise_linux"}],"references":[{"url":"https://gitlab.gnome.org/GNOME/gegl/-/blob/master/docs/NEWS.adoc","tags":["x_refsource_MISC","x_transferred","Release Notes","Third Party Advisory","advisory","report"]},{"url":"https://gitlab.gnome.org/GNOME/gegl/-/commit/bfce470f0f2f37968862129d5038b35429f2909b","tags":["x_refsource_MISC","x_transferred","Patch","Third Party Advisory","fix","report"]},{"url":"https://gitlab.gnome.org/GNOME/gimp/-/commit/e8a31ba4f2ce7e6bc34882dc27c97fba993f5868","tags":["x_refsource_MISC","x_transferred","Patch","Third Party Advisory","fix","report"]},{"url":"https://www.gimp.org/news/2021/12/21/gimp-2-10-30-released/","tags":["x_refsource_MISC","x_transferred","Release Notes","Vendor Advisory","advisory","report"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/CG635WJCNXHJM5U4BGMAAP4NK2YFTQXK/","tags":["vendor-advisory","x_refsource_FEDORA","x_transferred","web"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ZP5NDNOTMPI335FXE7VUPW7FXYTT7PYN/","tags":["vendor-advisory","x_refsource_FEDORA","x_transferred","web"]},{"url":"https://gitlab.gnome.org/GNOME/gegl/-/issues/298","tags":["x_refsource_CONFIRM","x_transferred","Vendor Advisory","advisory"]},{"url":"https://lists.debian.org/debian-lts-announce/2025/10/msg00021.html","tags":["web"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-45463","tags":["advisory"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/CG635WJCNXHJM5U4BGMAAP4NK2YFTQXK"},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ZP5NDNOTMPI335FXE7VUPW7FXYTT7PYN"},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/CG635WJCNXHJM5U4BGMAAP4NK2YFTQXK"},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/ZP5NDNOTMPI335FXE7VUPW7FXYTT7PYN"},{"url":"https://www.gimp.org/news/2021/12/21/gimp-2-10-30-released"},{"url":"https://github.com/advisories/GHSA-g9gv-9646-jvp8"},{"url":"https://security.alpinelinux.org/vuln/CVE-2021-45463","tags":["advisory"]},{"url":"https://vulners.com/cve/CVE-2021-45463","tags":["report"]},{"url":"https://errata.tuxcare.com/els_os/ubuntu18.04els/CLSA-2026-1791563692.html","tags":["advisory"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2021-45463","tags":["advisory"]},{"url":"https://advisories.mageia.org/MGASA-2022-0003.html","tags":["advisory"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=29829","tags":["report"]},{"url":"https://lists.suse.com/pipermail/sle-security-updates/2021-December/009954.html","tags":["web"]},{"url":"https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/G3NMUTGIH3QYFBHM25LC7HLI7HKVOYCU/","tags":["web","advisory"]},{"url":"https://www.openeuler.org/en/security/safety-bulletin/detail.html?id=openEuler-SA-2022-1488","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2022:0162","tags":["advisory"]},{"url":"https://access.redhat.com/security/updates/classification/#important","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2035383","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2022/rhsa-2022_0162.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2021-45463","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2021-45463","tags":["advisory","report"]},{"url":"https://access.redhat.com/errata/RHSA-2022:0177","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2022/rhsa-2022_0177.json","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2022:0178","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2022/rhsa-2022_0178.json","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2022:0184","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2022/rhsa-2022_0184.json","tags":["advisory"]},{"url":"https://errata.rockylinux.org/RLSA-2022:0177","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2021/suse-su-20214193-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1194045","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2021-45463","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2021/suse-su-20214209-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2021/suse-su-20214210-1/","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2021-45463","tags":["report"]},{"url":"https://ubuntu.com/security/notices/USN-5251-1","tags":["advisory"]},{"url":"https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/RX6HXJTBZCMRDZYVM6S3UTQCHL44WX35/","tags":["advisory"]},{"url":"","tags":["advisory"]}],"sources":{"cve":[{"id":"CVE-2021-45463","description":"load_cache in GEGL before 0.4.34 allows shell expansion when a pathname in a constructed command line is not escaped or filtered. This is caused by use of the system library function for execution of the ImageMagick convert fallback in magick-load. NOTE: GEGL releases before 0.4.34 are used in GIMP releases before 2.10.30; however, this does not imply that GIMP builds enable the vulnerable feature.","status":"published","published":"2021-12-23T06:00:57Z","modified":"2025-11-03T17:30:48.933Z","updated_at":"2026-11-02T14:33:02.580561Z"}],"euvd":[{"id":"EUVD-2021-32229","description":"load_cache in GEGL before 0.4.34 allows shell expansion when a pathname in a constructed command line is not escaped or filtered. This is caused by use of the system library function for execution of the ImageMagick convert fallback in magick-load. NOTE: GEGL releases before 0.4.34 are used in GIMP releases before 2.10.30; however, this does not imply that GIMP builds enable the vulnerable feature.","status":"published","published":"2021-12-23T06:00:57Z","modified":"2025-11-03T17:30:48Z","updated_at":"2026-11-02T19:49:35.000596Z"}],"ghsa":[{"id":"GHSA-g9gv-9646-jvp8","title":"GEGL before 0.4.34, as used (for example) in GIMP before 2.10.30, allows shell expansion when a...","description":"GEGL before 0.4.34, as used (for example) in GIMP before 2.10.30, allows shell expansion when a pathname in a constructed command line is not escaped or filtered. This is caused by use of the system library function for execution of the ImageMagick convert fallback in magick-load.","status":"published","published":"2021-12-24T00:00:45Z","modified":"2025-11-03T18:32:14Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:04:17.65818Z"}],"nvd":[{"id":"CVE-2021-45463","description":"load_cache in GEGL before 0.4.34 allows shell expansion when a pathname in a constructed command line is not escaped or filtered. This is caused by use of the system library function for execution of the ImageMagick convert fallback in magick-load. NOTE: GEGL releases before 0.4.34 are used in GIMP releases before 2.10.30; however, this does not imply that GIMP builds enable the vulnerable feature.","status":"published","published":"2021-12-23T06:15:06.787Z","modified":"2026-06-17T04:13:24.87Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high","assessor":"primary"},{"version":"2.0","score":6.8,"vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","level":"medium","assessor":"primary"}],"updated_at":"2026-11-02T14:07:02.566991Z"}],"osv":[{"id":"ALPINE-CVE-2021-45463","description":"load_cache in GEGL before 0.4.34 allows shell expansion when a pathname in a constructed command line is not escaped or filtered. This is caused by use of the system library function for execution of the ImageMagick convert fallback in magick-load. NOTE: GEGL releases before 0.4.34 are used in GIMP releases before 2.10.30; however, this does not imply that GIMP builds enable the vulnerable feature.","status":"published","published":"2021-12-23T06:15:06.787Z","modified":"2026-11-03T06:32:47.986404783Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-03T07:16:46.202932Z"},{"id":"CVE-2021-45463","description":"load_cache in GEGL before 0.4.34 allows shell expansion when a pathname in a constructed command line is not escaped or filtered. This is caused by use of the system library function for execution of the ImageMagick convert fallback in magick-load. NOTE: GEGL releases before 0.4.34 are used in GIMP releases before 2.10.30; however, this does not imply that GIMP builds enable the vulnerable feature.","status":"published","published":"2021-12-23T06:15:06.787Z","modified":"2026-10-24T14:31:43.167503363Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:44:22.18434Z"},{"id":"DEBIAN-CVE-2021-45463","description":"load_cache in GEGL before 0.4.34 allows shell expansion when a pathname in a constructed command line is not escaped or filtered. This is caused by use of the system library function for execution of the ImageMagick convert fallback in magick-load. NOTE: GEGL releases before 0.4.34 are used in GIMP releases before 2.10.30; however, this does not imply that GIMP builds enable the vulnerable feature.","status":"published","published":"2021-12-23T06:15:06.787Z","modified":"2026-10-23T18:04:56.805135481Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:45:35.799676Z"},{"id":"OESA-2022-1488","title":"gimp security update","description":"GIMP is a cross-platform image editor available for GNU/Linux, OS X, Windows and more operating systems. It is free software, you can change its source code and distribute your changes. Whether you are a graphic designer, photographer, illustrator, or scientist, GIMP provides you with sophisticated tools to get your job done. You can further enhance your productivity with GIMP thanks to many customization options and 3rd party plugins.\r\n\r\nSecurity Fix(es):\r\n\r\nGEGL before 0.4.34, as used (for example) in GIMP before 2.10.30, allows shell expansion when a pathname in a constructed command line is not escaped or filtered. This is caused by use of the system library function for execution of the ImageMagick convert fallback in magick-load.(CVE-2021-45463)","status":"published","published":"2022-01-14T11:04:45Z","modified":"2026-08-18T01:16:17.76823156Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:52:38.987987Z"},{"id":"RHSA-2022:0162","title":"Red Hat Security Advisory: gegl security update","status":"published","published":"2024-09-16T07:06:21Z","modified":"2026-06-26T10:57:29Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:09.077222Z"},{"id":"RHSA-2022:0177","title":"Red Hat Security Advisory: gegl04 security update","status":"published","published":"2024-09-16T07:06:37Z","modified":"2026-06-26T12:22:05.849170851Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:09.077222Z"},{"id":"RHSA-2022:0178","title":"Red Hat Security Advisory: gegl04 security update","status":"published","published":"2024-09-16T07:06:28Z","modified":"2026-06-26T12:21:59.231135781Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:09.077222Z"},{"id":"RHSA-2022:0184","title":"Red Hat Security Advisory: gegl04 security update","status":"published","published":"2024-09-16T07:06:45Z","modified":"2026-06-26T12:21:59.200219082Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:09.077222Z"},{"id":"RLSA-2022:0177","title":"Important: gegl04 security update","description":"GEGL (Generic Graphics Library) is a graph-based image processing framework.\n\nSecurity Fix(es):\n\n* gegl: shell expansion via a crafted pathname (CVE-2021-45463)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.","status":"published","published":"2022-01-19T09:43:42Z","modified":"2026-02-04T18:45:06.668057Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:23.969672Z"},{"id":"UBUNTU-CVE-2021-45463","description":"load_cache in GEGL before 0.4.34 allows shell expansion when a pathname in a constructed command line is not escaped or filtered. This is caused by use of the system library function for execution of the ImageMagick convert fallback in magick-load. NOTE: GEGL releases before 0.4.34 are used in GIMP releases before 2.10.30; however, this does not imply that GIMP builds enable the vulnerable feature.","status":"published","published":"2021-12-23T06:15:00Z","modified":"2026-04-22T13:03:53.777054Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:54:30.277322Z"},{"id":"ALSA-2022:0177","title":"Important: gegl04 security update","description":"GEGL (Generic Graphics Library) is a graph-based image processing framework.\n\nSecurity Fix(es):\n\n* gegl: shell expansion via a crafted pathname (CVE-2021-45463)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.","status":"published","published":"2022-01-19T09:43:42Z","modified":"2026-10-29T11:00:37.703790097Z","updated_at":"2026-11-02T15:27:51.196609Z"},{"id":"CLSA-2026-1791563692","title":"Fix CVE(s): CVE-2021-45463","description":"   * SECURITY UPDATE: shell command injection via the image path\n     - debian/patches/CVE-2021-45463.patch: run convert with g_spawn_sync()\n       instead of system() in load_cache() (operations/common/magick-load.c)\n     - CVE-2021-45463","status":"published","published":"2026-10-09T16:35:10Z","modified":"2026-10-26T09:32:04.626886133Z","updated_at":"2026-11-02T15:43:50.599064Z"},{"id":"DLA-4341-1","title":"gegl - security update","status":"published","published":"2025-10-22T00:00:00Z","modified":"2025-10-22T19:17:52.772831Z","updated_at":"2026-11-02T15:46:12.7027Z"},{"id":"MGASA-2022-0003","title":"Updated gegl packages fix security vulnerability","description":"Fix shell expansion via crafted pathname in the ImageMagick convert\nfallback\n","status":"published","published":"2022-01-03T07:36:40Z","modified":"2026-04-16T04:41:05.502397365Z","updated_at":"2026-11-02T15:49:41.849028Z"},{"id":"openSUSE-SU-2021:4209-1","title":"Security update for gegl","description":"This update for gegl fixes the following issues:\n\n- CVE-2021-45463: fixed shell expansion via crafted pathname in the ImageMagick convert fallback (bsc#1194045).\n","status":"published","published":"2021-12-31T08:55:03Z","modified":"2026-02-04T04:06:03.596932Z","updated_at":"2026-11-02T16:58:32.653274Z"},{"id":"openSUSE-SU-2021:4210-1","title":"Security update for gegl","description":"This update for gegl fixes the following issues:\n\n- CVE-2021-45463: fixed shell expansion via crafted pathname in the ImageMagick convert fallback (bsc#1194045).\n","status":"published","published":"2021-12-31T08:55:37Z","modified":"2026-02-04T02:39:17.190308Z","updated_at":"2026-11-02T16:58:32.653274Z"},{"id":"openSUSE-SU-2024:11788-1","title":"gegl-0.4.34-2.1 on GA media","description":"These are all security issues fixed in the gegl-0.4.34-2.1 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2024-06-15T00:00:00Z","modified":"2026-02-04T02:59:46.766284Z","updated_at":"2026-11-02T16:58:35.195147Z"},{"id":"SUSE-SU-2021:4193-1","title":"Security update for gegl","description":"This update for gegl fixes the following issues:\n\n- CVE-2021-45463: fixed shell expansion via crafted pathname in the ImageMagick convert fallback (bsc#1194045).\n","status":"published","published":"2021-12-28T15:13:59Z","modified":"2026-02-04T03:37:23.08182Z","updated_at":"2026-11-02T15:53:50.066806Z"},{"id":"SUSE-SU-2021:4209-1","title":"Security update for gegl","description":"This update for gegl fixes the following issues:\n\n- CVE-2021-45463: fixed shell expansion via crafted pathname in the ImageMagick convert fallback (bsc#1194045).\n","status":"published","published":"2021-12-31T08:55:02Z","modified":"2026-02-04T04:26:53.06404Z","updated_at":"2026-11-02T15:53:50.066806Z"},{"id":"SUSE-SU-2021:4210-1","title":"Security update for gegl","description":"This update for gegl fixes the following issues:\n\n- CVE-2021-45463: fixed shell expansion via crafted pathname in the ImageMagick convert fallback (bsc#1194045).\n","status":"published","published":"2021-12-31T08:55:36Z","modified":"2026-02-04T02:37:46.007229Z","updated_at":"2026-11-02T15:53:50.066806Z"},{"id":"USN-5251-1","title":"gegl vulnerability","description":"It was discovered that GEGL incorrectly filtered and escaped file path input\ndata when using the C system() function for execution of the ImageMagick convert\ncommand. An attacker could possibly use this to execute arbitrary code.\n","status":"published","published":"2022-07-27T10:08:37Z","modified":"2026-06-29T13:49:35.763746463Z","updated_at":"2026-11-02T16:58:15.683829Z"}]}}