Most recent entries from all

bdu:2023-05666

EUVD-2026-32127

fkie_cve-2021-42523

There are two Information Disclosure vulnerabilities in colord, and they lie in colord/src/cd-device-db.c and colord/src/cd-profile-db.c separately. They exist because the 'err_msg' of 'sqlite3_exec' is not releasing after use, while libxml2 emphasizes that the caller needs to release it.

GHSA-r93j-wmmw-g27p

gsd-2021-42523

msrc_CVE-2021-42523 — There are two Information Disclosure vulnerabilities in colord and they lie in colord/src/cd-device-db.c and colord/src…

msrc_CVE-2021-42523

OESA-2022-1914 — colord security update

Affected: openEuler:20.03-LTS-SP1: colord, openEuler:20.03-LTS-SP3: colord, openEuler:22.03-LTS: colord

colord is a system service that makes it easy to manage, install and generate color profiles to accurately color manage input and output devices. Security Fix(es): There are two Information Disclosure vulnerabilities in colord, and they lie in colord/src/cd-device-db.c and colord/src/cd-profile-db.c separately. They exist because the 'err_msg' of 'sqlite3_exec' is not releasing after use, while libxml2 emphasizes that the caller needs to release it.(CVE-2021-42523)

openSUSE-SU-2024:12353-1 — colord-1.4.6-2.1 on GA media

colord-1.4.6-2.1 on GA media

SUSE-SU-2022:4170-1 — Security update for colord

Security update for colord

Withdrawn: UBUNTU-CVE-2021-42523

Withdrawn by the publisher.

Affected: Ubuntu:22.04:LTS: colord