Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

altlinux логотип

ALT-PU-2022-3181

Высокий

ALT-PU-2022-3181: package colord update to version 1.4.6-alt1

Источник
errata.altlinux.org
Дата публикации
21.11.2022
Дата обновления
21.11.2022
Устраненные уязвимости
1

ALT Linux branch p10
ALT Server
ALT Virtualization Server
ALT Workstation
ALT Workstation K
ALT Education
Simply Linux
Starterkit
ALT Container

Описание

This update upgrades colord to version 1.4.6-alt1.

Устраненные уязвимости1

Связанные уязвимости

CVSS3: 7.5
ubuntu
около 4 лет назад

There are two Information Disclosure vulnerabilities in colord, and they lie in colord/src/cd-device-db.c and colord/src/cd-profile-db.c separately. They exist because the 'err_msg' of 'sqlite3_exec' is not releasing after use, while libxml2 emphasizes that the caller needs to release it.

CVSS3: 7.5
redhat
около 4 лет назад

There are two Information Disclosure vulnerabilities in colord, and they lie in colord/src/cd-device-db.c and colord/src/cd-profile-db.c separately. They exist because the 'err_msg' of 'sqlite3_exec' is not releasing after use, while libxml2 emphasizes that the caller needs to release it.

CVSS3: 7.5
nvd
около 4 лет назад

There are two Information Disclosure vulnerabilities in colord, and they lie in colord/src/cd-device-db.c and colord/src/cd-profile-db.c separately. They exist because the 'err_msg' of 'sqlite3_exec' is not releasing after use, while libxml2 emphasizes that the caller needs to release it.

CVSS3: 7.5
msrc
около 4 лет назад

There are two Information Disclosure vulnerabilities in colord and they lie in colord/src/cd-device-db.c and colord/src/cd-profile-db.c separately. They exist because the 'err_msg' of 'sqlite3_exec' is not releasing after use while libxml2 emphasizes that the caller needs to release it.

CVSS3: 7.5
debian
около 4 лет назад

There are two Information Disclosure vulnerabilities in colord, and th ...