SUSE-SU-2021:4210-1

HIGH7.8

Security update for gegl

Published Dec 31, 2021

Modified 4 years ago

Fix available

Details

Description of the patch:

This update for gegl fixes the following issues:

CVE-2021-45463: fixed shell expansion via crafted pathname in the ImageMagick convert fallback (bsc#1194045).

Affected Packages

gegl-0_3

SUSE Linux Enterprise Desktop 15 SP2SUSE Linux Enterprise Desktop 15 SP3SUSE Linux Enterprise Server 15 SP2SUSE Linux Enterprise Server 15 SP3SUSE Linux Enterprise Server for SAP Applications 15 SP2

Fixed in:

0.3.34-3.3.1

libgegl-0_3-0

SUSE Linux Enterprise Desktop 15 SP2SUSE Linux Enterprise Desktop 15 SP3SUSE Linux Enterprise Server 15 SP2SUSE Linux Enterprise Server 15 SP3SUSE Linux Enterprise Server for SAP Applications 15 SP2

Fixed in:

0.3.34-3.3.1

typelib-1_0-Gegl-0_3

SUSE Linux Enterprise Desktop 15 SP2SUSE Linux Enterprise Desktop 15 SP3SUSE Linux Enterprise Server 15 SP2SUSE Linux Enterprise Server 15 SP3SUSE Linux Enterprise Server for SAP Applications 15 SP2

Fixed in:

0.3.34-3.3.1

References

ADVISORY

https://bugzilla.suse.com/1194045

ADVISORY

https://lists.suse.com/pipermail/sle-security-updates/2021-December/009960.html

ADVISORY

https://www.suse.com/security/cve/CVE-2021-45463/

WEB

https://www.suse.com/support/security/rating/

ADVISORY