CLSA-2026-1791563692
See a problem?- Import Source
- https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu18.04els/CLSA-2026-1791563692.json
- JSON Data
- https://api.osv.dev/v1/vulns/CLSA-2026-1791563692
- Upstream
- Published
- 2026-10-09T16:35:10Z
- Modified
- 2026-10-26T09:32:04Z
- Summary
- Fix CVE(s): CVE-2021-45463
- Details
-
- SECURITY UPDATE: shell command injection via the image path
- debian/patches/CVE-2021-45463.patch: run convert with g_spawn_sync() instead of system() in load_cache() (operations/common/magick-load.c)
- CVE-2021-45463
- SECURITY UPDATE: shell command injection via the image path
- References
Affected packages
TuxCare:Ubuntu:18.04 / gegl
Package
- Name
- gegl
- Purl
- pkg:deb/tuxcare/gegl?distro=ubuntu-18.04
TuxCare:Ubuntu:18.04 / gir1.2-gegl-0.3
Package
- Name
- gir1.2-gegl-0.3
- Purl
- pkg:deb/tuxcare/gir1.2-gegl-0.3?distro=ubuntu-18.04
TuxCare:Ubuntu:18.04 / libgegl-0.3-0
Package
- Name
- libgegl-0.3-0
- Purl
- pkg:deb/tuxcare/libgegl-0.3-0?distro=ubuntu-18.04
TuxCare:Ubuntu:18.04 / libgegl-dev
Package
- Name
- libgegl-dev
- Purl
- pkg:deb/tuxcare/libgegl-dev?distro=ubuntu-18.04