load_cache in GEGL before 0.4.34 allows shell expansion when a pathname in a constructed command line is not escaped or filtered. This is caused by use of the system library function for execution of the ImageMagick convert fallback in magick-load. NOTE: GEGL releases before 0.4.34 are used in GIMP releases before 2.10.30; however, this does not imply that GIMP builds enable the vulnerable feature.
{ "binaries": [ { "binary_name": "gegl", "binary_version": "0.2.0-4ubuntu1+esm1" }, { "binary_name": "gegl-dbgsym", "binary_version": "0.2.0-4ubuntu1+esm1" }, { "binary_name": "libgegl-0.2-0", "binary_version": "0.2.0-4ubuntu1+esm1" }, { "binary_name": "libgegl-0.2-0-dbg", "binary_version": "0.2.0-4ubuntu1+esm1" }, { "binary_name": "libgegl-0.2-0-dbgsym", "binary_version": "0.2.0-4ubuntu1+esm1" }, { "binary_name": "libgegl-dev", "binary_version": "0.2.0-4ubuntu1+esm1" }, { "binary_name": "libgegl-dev-dbgsym", "binary_version": "0.2.0-4ubuntu1+esm1" }, { "binary_name": "libgegl-doc", "binary_version": "0.2.0-4ubuntu1+esm1" } ], "ubuntu_priority": "medium", "availability": "Available with Ubuntu Pro (Infra-only): https://ubuntu.com/pro" }
{ "binaries": [ { "binary_name": "gegl", "binary_version": "0.3.4-1ubuntu2+esm1" }, { "binary_name": "gegl-dbgsym", "binary_version": "0.3.4-1ubuntu2+esm1" }, { "binary_name": "libgegl-0.3-0", "binary_version": "0.3.4-1ubuntu2+esm1" }, { "binary_name": "libgegl-0.3-0-dbg", "binary_version": "0.3.4-1ubuntu2+esm1" }, { "binary_name": "libgegl-0.3-0-dbgsym", "binary_version": "0.3.4-1ubuntu2+esm1" }, { "binary_name": "libgegl-dev", "binary_version": "0.3.4-1ubuntu2+esm1" }, { "binary_name": "libgegl-dev-dbgsym", "binary_version": "0.3.4-1ubuntu2+esm1" }, { "binary_name": "libgegl-doc", "binary_version": "0.3.4-1ubuntu2+esm1" } ], "ubuntu_priority": "medium", "availability": "Available with Ubuntu Pro: https://ubuntu.com/pro" }
{ "binaries": [ { "binary_name": "gegl", "binary_version": "0.3.30-1ubuntu1+esm1" }, { "binary_name": "gegl-dbgsym", "binary_version": "0.3.30-1ubuntu1+esm1" }, { "binary_name": "gir1.2-gegl-0.3", "binary_version": "0.3.30-1ubuntu1+esm1" }, { "binary_name": "libgegl-0.3-0", "binary_version": "0.3.30-1ubuntu1+esm1" }, { "binary_name": "libgegl-0.3-0-dbgsym", "binary_version": "0.3.30-1ubuntu1+esm1" }, { "binary_name": "libgegl-dev", "binary_version": "0.3.30-1ubuntu1+esm1" }, { "binary_name": "libgegl-doc", "binary_version": "0.3.30-1ubuntu1+esm1" } ], "ubuntu_priority": "medium", "availability": "Available with Ubuntu Pro: https://ubuntu.com/pro" }
{ "binaries": [ { "binary_name": "gegl", "binary_version": "0.4.22-3ubuntu0.1~esm1" }, { "binary_name": "gegl-dbgsym", "binary_version": "0.4.22-3ubuntu0.1~esm1" }, { "binary_name": "gir1.2-gegl-0.4", "binary_version": "0.4.22-3ubuntu0.1~esm1" }, { "binary_name": "libgegl-0.4-0", "binary_version": "0.4.22-3ubuntu0.1~esm1" }, { "binary_name": "libgegl-0.4-0-dbgsym", "binary_version": "0.4.22-3ubuntu0.1~esm1" }, { "binary_name": "libgegl-common", "binary_version": "0.4.22-3ubuntu0.1~esm1" }, { "binary_name": "libgegl-dev", "binary_version": "0.4.22-3ubuntu0.1~esm1" }, { "binary_name": "libgegl-doc", "binary_version": "0.4.22-3ubuntu0.1~esm1" } ], "ubuntu_priority": "medium", "availability": "Available with Ubuntu Pro: https://ubuntu.com/pro" }
{ "binaries": [ { "binary_name": "gegl", "binary_version": "1:0.4.34-1" }, { "binary_name": "gegl-dbgsym", "binary_version": "1:0.4.34-1" }, { "binary_name": "gir1.2-gegl-0.4", "binary_version": "1:0.4.34-1" }, { "binary_name": "libgegl-0.4-0", "binary_version": "1:0.4.34-1" }, { "binary_name": "libgegl-0.4-0-dbgsym", "binary_version": "1:0.4.34-1" }, { "binary_name": "libgegl-common", "binary_version": "1:0.4.34-1" }, { "binary_name": "libgegl-dev", "binary_version": "1:0.4.34-1" }, { "binary_name": "libgegl-doc", "binary_version": "1:0.4.34-1" } ], "ubuntu_priority": "medium", "availability": "No subscription required" }