[CLSA-2026:1791563692] Fix CVE(s): CVE-2021-45463
Type:
security
Severity:
Important
Release date:
2026-10-09 16:35:10 UTC
Description:
* SECURITY UPDATE: shell command injection via the image path - debian/patches/CVE-2021-45463.patch: run convert with g_spawn_sync() instead of system() in load_cache() (operations/common/magick-load.c) - CVE-2021-45463
CVEs fixed:
Updated packages:
  • gegl_0.3.30-1ubuntu1+tuxcare.els1_amd64.deb
    sha:b63481efb0aab40ed391a1124c8e666233d06183
  • gir1.2-gegl-0.3_0.3.30-1ubuntu1+tuxcare.els1_amd64.deb
    sha:0442ce7f1e493a7405e0b825f747a60ea049df54
  • libgegl-0.3-0_0.3.30-1ubuntu1+tuxcare.els1_amd64.deb
    sha:072ebacb0a2350bc4bd7c7a1295a3934fa3650fb
  • libgegl-dev_0.3.30-1ubuntu1+tuxcare.els1_amd64.deb
    sha:72c9cfd7633ea06bb5b7879238e69ce632c4da4c
  • libgegl-doc_0.3.30-1ubuntu1+tuxcare.els1_all.deb
    sha:54c02336e8e29505399d9cddc93889561797022a
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.