Headline

RHSA-2022:0178: Red Hat Security Advisory: gegl04 security update

An update for gegl04 is now available for Red Hat Enterprise Linux 8.4 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.

Related CVEs:

CVE-2021-45463: gegl: shell expansion via a crafted pathname

3 years ago

Red Hat Security Data

Open in Source

#vulnerability #web #linux #red_hat #nodejs #js #java #kubernetes

Skip to navigation Skip to main content

Utilities

Subscriptions
Downloads
Containers
Support Cases

Red Hat Customer Portal

Infrastructure and Management

Red Hat Enterprise Linux
Red Hat Virtualization
Red Hat Identity Management
Red Hat Directory Server
Red Hat Certificate System
Red Hat Satellite
Red Hat Subscription Management
Red Hat Update Infrastructure
Red Hat Insights
Red Hat Ansible Automation Platform

Cloud Computing

Red Hat OpenShift
Red Hat CloudForms
Red Hat OpenStack Platform
Red Hat OpenShift Container Platform
Red Hat OpenShift Data Science
Red Hat OpenShift Online
Red Hat OpenShift Dedicated
Red Hat Advanced Cluster Security for Kubernetes
Red Hat Advanced Cluster Management for Kubernetes
Red Hat Quay
Red Hat CodeReady Workspaces
Red Hat OpenShift Service on AWS

Storage

Red Hat Gluster Storage
Red Hat Hyperconverged Infrastructure
Red Hat Ceph Storage
Red Hat OpenShift Data Foundation

Runtimes

Red Hat Runtimes
Red Hat JBoss Enterprise Application Platform
Red Hat Data Grid
Red Hat JBoss Web Server
Red Hat Single Sign On
Red Hat support for Spring Boot
Red Hat build of Node.js
Red Hat build of Thorntail
Red Hat build of Eclipse Vert.x
Red Hat build of OpenJDK
Red Hat build of Quarkus
Red Hat CodeReady Studio

Integration and Automation

Red Hat Process Automation
Red Hat Process Automation Manager
Red Hat Decision Manager

All Products

Issued:

2022-01-19

Updated:

2022-01-19

RHSA-2022:0178 - Security Advisory

Overview
Updated Packages

Synopsis

Important: gegl04 security update

Type/Severity

Security Advisory: Important

Red Hat Insights patch analysis

Identify and remediate systems affected by this advisory.

View affected systems

Topic

An update for gegl04 is now available for Red Hat Enterprise Linux 8.4 Extended Update Support.

Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.

Description

GEGL (Generic Graphics Library) is a graph-based image processing framework.

Security Fix(es):

gegl: shell expansion via a crafted pathname (CVE-2021-45463)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Affected Products

Red Hat Enterprise Linux for x86_64 - Extended Update Support 8.4 x86_64
Red Hat Enterprise Linux Server - AUS 8.4 x86_64
Red Hat Enterprise Linux for Power, little endian - Extended Update Support 8.4 ppc64le
Red Hat Enterprise Linux Server - TUS 8.4 x86_64
Red Hat Enterprise Linux Server (for IBM Power LE) - Update Services for SAP Solutions 8.4 ppc64le
Red Hat Enterprise Linux Server - Update Services for SAP Solutions 8.4 x86_64
Red Hat CodeReady Linux Builder for x86_64 - Extended Update Support 8.4 x86_64
Red Hat CodeReady Linux Builder for Power, little endian - Extended Update Support 8.4 ppc64le

Fixes

BZ - 2035383 - CVE-2021-45463 gegl: shell expansion via a crafted pathname

Red Hat Enterprise Linux for x86_64 - Extended Update Support 8.4

SRPM

gegl04-0.4.4-6.el8_4.1.src.rpm

SHA-256: d7a1cb30158e93ab0ed063fdcabdbe45ed3e41c7d475c8366eaef8da27ebe574

x86_64

gegl04-0.4.4-6.el8_4.1.i686.rpm

SHA-256: d5c2a7e913915f42235fda67c946fb5ab47aaddccc85a9351ca338a6559ebeef

gegl04-0.4.4-6.el8_4.1.x86_64.rpm

SHA-256: 8fe7466cc51893ec206072702dc2a4f48238fd28c89b472834f43d628968b76c

gegl04-debuginfo-0.4.4-6.el8_4.1.i686.rpm

SHA-256: 5e5480c42211337456d48bf3a809360f04054159bd0f9888b6c09a81c439c22c

gegl04-debuginfo-0.4.4-6.el8_4.1.x86_64.rpm

SHA-256: f6f54943f6552a2de7a9351340202b831a01b35d404b3c47d827185c8966e4e5

gegl04-debugsource-0.4.4-6.el8_4.1.i686.rpm

SHA-256: e365cb14429559a27f99411d7efa08a00e2ec3b39c81cae481abd697d55d2d4e

gegl04-debugsource-0.4.4-6.el8_4.1.x86_64.rpm

SHA-256: ef35dc9bb8fedb169cd60ac4fdea59f958953c049fe21aa32a1c8a37e8f79049

gegl04-tools-debuginfo-0.4.4-6.el8_4.1.i686.rpm

SHA-256: 05f2f1fa03c2156a904a7a4174e07bca40070215d29d4aaf3ef579170630f5c0

gegl04-tools-debuginfo-0.4.4-6.el8_4.1.x86_64.rpm

SHA-256: 92f9d662f0f92f3fe1d1993c017e61a53af94891ce87dc2fd048153014600336

Red Hat Enterprise Linux Server - AUS 8.4

SRPM

gegl04-0.4.4-6.el8_4.1.src.rpm

SHA-256: d7a1cb30158e93ab0ed063fdcabdbe45ed3e41c7d475c8366eaef8da27ebe574

x86_64

gegl04-0.4.4-6.el8_4.1.i686.rpm

SHA-256: d5c2a7e913915f42235fda67c946fb5ab47aaddccc85a9351ca338a6559ebeef

gegl04-0.4.4-6.el8_4.1.x86_64.rpm

SHA-256: 8fe7466cc51893ec206072702dc2a4f48238fd28c89b472834f43d628968b76c

gegl04-debuginfo-0.4.4-6.el8_4.1.i686.rpm

SHA-256: 5e5480c42211337456d48bf3a809360f04054159bd0f9888b6c09a81c439c22c

gegl04-debuginfo-0.4.4-6.el8_4.1.x86_64.rpm

SHA-256: f6f54943f6552a2de7a9351340202b831a01b35d404b3c47d827185c8966e4e5

gegl04-debugsource-0.4.4-6.el8_4.1.i686.rpm

SHA-256: e365cb14429559a27f99411d7efa08a00e2ec3b39c81cae481abd697d55d2d4e

gegl04-debugsource-0.4.4-6.el8_4.1.x86_64.rpm

SHA-256: ef35dc9bb8fedb169cd60ac4fdea59f958953c049fe21aa32a1c8a37e8f79049

gegl04-tools-debuginfo-0.4.4-6.el8_4.1.i686.rpm

SHA-256: 05f2f1fa03c2156a904a7a4174e07bca40070215d29d4aaf3ef579170630f5c0

gegl04-tools-debuginfo-0.4.4-6.el8_4.1.x86_64.rpm

SHA-256: 92f9d662f0f92f3fe1d1993c017e61a53af94891ce87dc2fd048153014600336

Red Hat Enterprise Linux for Power, little endian - Extended Update Support 8.4

SRPM

gegl04-0.4.4-6.el8_4.1.src.rpm

SHA-256: d7a1cb30158e93ab0ed063fdcabdbe45ed3e41c7d475c8366eaef8da27ebe574

ppc64le

gegl04-0.4.4-6.el8_4.1.ppc64le.rpm

SHA-256: 10d22d188e2fed8f13663c2fb3e0576e1b6e65aee5c10089698b6377ada919df

gegl04-debuginfo-0.4.4-6.el8_4.1.ppc64le.rpm

SHA-256: 4668da32154589a94484ab37d67ac03b3aeb914caf69100324781eb4491a2041

gegl04-debugsource-0.4.4-6.el8_4.1.ppc64le.rpm

SHA-256: 5c5a98640b2a3733103a8057b2ed3d05b1ebc90240e6453f15a6ff3020961c05

gegl04-tools-debuginfo-0.4.4-6.el8_4.1.ppc64le.rpm

SHA-256: 5fc0f0beae77b1badd21614a9c858e285d6b1cdbba138d41b96f3f91b6cf0fa0

Red Hat Enterprise Linux Server - TUS 8.4

SRPM

gegl04-0.4.4-6.el8_4.1.src.rpm

SHA-256: d7a1cb30158e93ab0ed063fdcabdbe45ed3e41c7d475c8366eaef8da27ebe574

x86_64

gegl04-0.4.4-6.el8_4.1.i686.rpm

SHA-256: d5c2a7e913915f42235fda67c946fb5ab47aaddccc85a9351ca338a6559ebeef

gegl04-0.4.4-6.el8_4.1.x86_64.rpm

SHA-256: 8fe7466cc51893ec206072702dc2a4f48238fd28c89b472834f43d628968b76c

gegl04-debuginfo-0.4.4-6.el8_4.1.i686.rpm

SHA-256: 5e5480c42211337456d48bf3a809360f04054159bd0f9888b6c09a81c439c22c

gegl04-debuginfo-0.4.4-6.el8_4.1.x86_64.rpm

SHA-256: f6f54943f6552a2de7a9351340202b831a01b35d404b3c47d827185c8966e4e5

gegl04-debugsource-0.4.4-6.el8_4.1.i686.rpm

SHA-256: e365cb14429559a27f99411d7efa08a00e2ec3b39c81cae481abd697d55d2d4e

gegl04-debugsource-0.4.4-6.el8_4.1.x86_64.rpm

SHA-256: ef35dc9bb8fedb169cd60ac4fdea59f958953c049fe21aa32a1c8a37e8f79049

gegl04-tools-debuginfo-0.4.4-6.el8_4.1.i686.rpm

SHA-256: 05f2f1fa03c2156a904a7a4174e07bca40070215d29d4aaf3ef579170630f5c0

gegl04-tools-debuginfo-0.4.4-6.el8_4.1.x86_64.rpm

SHA-256: 92f9d662f0f92f3fe1d1993c017e61a53af94891ce87dc2fd048153014600336

Red Hat Enterprise Linux Server (for IBM Power LE) - Update Services for SAP Solutions 8.4

SRPM

gegl04-0.4.4-6.el8_4.1.src.rpm

SHA-256: d7a1cb30158e93ab0ed063fdcabdbe45ed3e41c7d475c8366eaef8da27ebe574

ppc64le

gegl04-0.4.4-6.el8_4.1.ppc64le.rpm

SHA-256: 10d22d188e2fed8f13663c2fb3e0576e1b6e65aee5c10089698b6377ada919df

gegl04-debuginfo-0.4.4-6.el8_4.1.ppc64le.rpm

SHA-256: 4668da32154589a94484ab37d67ac03b3aeb914caf69100324781eb4491a2041

gegl04-debugsource-0.4.4-6.el8_4.1.ppc64le.rpm

SHA-256: 5c5a98640b2a3733103a8057b2ed3d05b1ebc90240e6453f15a6ff3020961c05

gegl04-tools-debuginfo-0.4.4-6.el8_4.1.ppc64le.rpm

SHA-256: 5fc0f0beae77b1badd21614a9c858e285d6b1cdbba138d41b96f3f91b6cf0fa0

Red Hat Enterprise Linux Server - Update Services for SAP Solutions 8.4

SRPM

gegl04-0.4.4-6.el8_4.1.src.rpm

SHA-256: d7a1cb30158e93ab0ed063fdcabdbe45ed3e41c7d475c8366eaef8da27ebe574

x86_64

gegl04-0.4.4-6.el8_4.1.i686.rpm

SHA-256: d5c2a7e913915f42235fda67c946fb5ab47aaddccc85a9351ca338a6559ebeef

gegl04-0.4.4-6.el8_4.1.x86_64.rpm

SHA-256: 8fe7466cc51893ec206072702dc2a4f48238fd28c89b472834f43d628968b76c

gegl04-debuginfo-0.4.4-6.el8_4.1.i686.rpm

SHA-256: 5e5480c42211337456d48bf3a809360f04054159bd0f9888b6c09a81c439c22c

gegl04-debuginfo-0.4.4-6.el8_4.1.x86_64.rpm

SHA-256: f6f54943f6552a2de7a9351340202b831a01b35d404b3c47d827185c8966e4e5

gegl04-debugsource-0.4.4-6.el8_4.1.i686.rpm

SHA-256: e365cb14429559a27f99411d7efa08a00e2ec3b39c81cae481abd697d55d2d4e

gegl04-debugsource-0.4.4-6.el8_4.1.x86_64.rpm

SHA-256: ef35dc9bb8fedb169cd60ac4fdea59f958953c049fe21aa32a1c8a37e8f79049

gegl04-tools-debuginfo-0.4.4-6.el8_4.1.i686.rpm

SHA-256: 05f2f1fa03c2156a904a7a4174e07bca40070215d29d4aaf3ef579170630f5c0

gegl04-tools-debuginfo-0.4.4-6.el8_4.1.x86_64.rpm

SHA-256: 92f9d662f0f92f3fe1d1993c017e61a53af94891ce87dc2fd048153014600336

Red Hat CodeReady Linux Builder for x86_64 - Extended Update Support 8.4

SRPM

x86_64

gegl04-debuginfo-0.4.4-6.el8_4.1.i686.rpm

SHA-256: 5e5480c42211337456d48bf3a809360f04054159bd0f9888b6c09a81c439c22c

gegl04-debuginfo-0.4.4-6.el8_4.1.x86_64.rpm

SHA-256: f6f54943f6552a2de7a9351340202b831a01b35d404b3c47d827185c8966e4e5

gegl04-debugsource-0.4.4-6.el8_4.1.i686.rpm

SHA-256: e365cb14429559a27f99411d7efa08a00e2ec3b39c81cae481abd697d55d2d4e

gegl04-debugsource-0.4.4-6.el8_4.1.x86_64.rpm

SHA-256: ef35dc9bb8fedb169cd60ac4fdea59f958953c049fe21aa32a1c8a37e8f79049

gegl04-devel-0.4.4-6.el8_4.1.i686.rpm

SHA-256: 5f20de89993abed1777eee78de38cc3ca27942fde460dcc35db3acffff1e0791

gegl04-devel-0.4.4-6.el8_4.1.x86_64.rpm

SHA-256: 020ed730e37196345b4683b56bcdda4aafc94b72dd9574e85bdcac633db6b2b3

gegl04-tools-debuginfo-0.4.4-6.el8_4.1.i686.rpm

SHA-256: 05f2f1fa03c2156a904a7a4174e07bca40070215d29d4aaf3ef579170630f5c0

gegl04-tools-debuginfo-0.4.4-6.el8_4.1.x86_64.rpm

SHA-256: 92f9d662f0f92f3fe1d1993c017e61a53af94891ce87dc2fd048153014600336

Red Hat CodeReady Linux Builder for Power, little endian - Extended Update Support 8.4

SRPM

ppc64le

gegl04-debuginfo-0.4.4-6.el8_4.1.ppc64le.rpm

SHA-256: 4668da32154589a94484ab37d67ac03b3aeb914caf69100324781eb4491a2041

gegl04-debugsource-0.4.4-6.el8_4.1.ppc64le.rpm

SHA-256: 5c5a98640b2a3733103a8057b2ed3d05b1ebc90240e6453f15a6ff3020961c05

gegl04-devel-0.4.4-6.el8_4.1.ppc64le.rpm

SHA-256: 7a6258a26b0c722a3f171fcfc02faba903174592540484ca04676536d3ee76fc

gegl04-tools-debuginfo-0.4.4-6.el8_4.1.ppc64le.rpm

SHA-256: 5fc0f0beae77b1badd21614a9c858e285d6b1cdbba138d41b96f3f91b6cf0fa0

The Red Hat security contact is secalert@redhat.com. More contact details at https://access.redhat.com/security/team/contact/.

Red Hat Security Data: Latest News

RHSA-2023:5627: Red Hat Security Advisory: kernel security, bug fix, and enhancement update

2 years ago

Red Hat Security Data

RHSA-2023:5628: Red Hat Security Advisory: kernel security and bug fix update

2 years ago

Red Hat Security Data

RHSA-2023:5622: Red Hat Security Advisory: kernel security and bug fix update

2 years ago

Red Hat Security Data

RHSA-2023:5615: Red Hat Security Advisory: libssh2 security update

2 years ago

Red Hat Security Data

RHSA-2023:5616: Red Hat Security Advisory: python-reportlab security update

2 years ago

Red Hat Security Data