Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

suse-cvrf логотип

SUSE-SU-2022:3496-1

Опубликовано: 04 окт. 2022
Источник: suse-cvrf

Описание

Security update for colord

This update for colord fixes the following issues:

  • CVE-2021-42523: Fixed a small memory leak in sqlite3_exec (bsc#1202802).

Список пакетов

Image SLES15-SP4-SAP-Azure-LI-BYOS
libcolord2-1.4.5-150400.4.3.1
Image SLES15-SP4-SAP-Azure-LI-BYOS-Production
libcolord2-1.4.5-150400.4.3.1
Image SLES15-SP4-SAP-Azure-VLI-BYOS
libcolord2-1.4.5-150400.4.3.1
Image SLES15-SP4-SAP-Azure-VLI-BYOS-Production
libcolord2-1.4.5-150400.4.3.1
Image SLES15-SP5-SAP-Azure-LI-BYOS
libcolord2-1.4.5-150400.4.3.1
Image SLES15-SP5-SAP-Azure-LI-BYOS-Production
libcolord2-1.4.5-150400.4.3.1
Image SLES15-SP5-SAP-Azure-VLI-BYOS
libcolord2-1.4.5-150400.4.3.1
Image SLES15-SP5-SAP-Azure-VLI-BYOS-Production
libcolord2-1.4.5-150400.4.3.1
SUSE Linux Enterprise Micro 5.3
libcolord2-1.4.5-150400.4.3.1
SUSE Linux Enterprise Module for Basesystem 15 SP4
libcolord2-1.4.5-150400.4.3.1
SUSE Linux Enterprise Module for Desktop Applications 15 SP4
colord-color-profiles-1.4.5-150400.4.3.1
libcolord-devel-1.4.5-150400.4.3.1
libcolorhug2-1.4.5-150400.4.3.1
typelib-1_0-Colord-1_0-1.4.5-150400.4.3.1
typelib-1_0-Colorhug-1_0-1.4.5-150400.4.3.1
SUSE Linux Enterprise Workstation Extension 15 SP4
colord-1.4.5-150400.4.3.1
colord-lang-1.4.5-150400.4.3.1
openSUSE Leap 15.4
colord-1.4.5-150400.4.3.1
colord-color-profiles-1.4.5-150400.4.3.1
colord-lang-1.4.5-150400.4.3.1
libcolord-devel-1.4.5-150400.4.3.1
libcolord2-1.4.5-150400.4.3.1
libcolord2-32bit-1.4.5-150400.4.3.1
libcolorhug2-1.4.5-150400.4.3.1
typelib-1_0-Colord-1_0-1.4.5-150400.4.3.1
typelib-1_0-Colorhug-1_0-1.4.5-150400.4.3.1

Ссылки

Описание

There are two Information Disclosure vulnerabilities in colord, and they lie in colord/src/cd-device-db.c and colord/src/cd-profile-db.c separately. They exist because the 'err_msg' of 'sqlite3_exec' is not releasing after use, while libxml2 emphasizes that the caller needs to release it.

Затронутые продукты
Image SLES15-SP4-SAP-Azure-LI-BYOS-Production:libcolord2-1.4.5-150400.4.3.1
Image SLES15-SP4-SAP-Azure-LI-BYOS:libcolord2-1.4.5-150400.4.3.1
Image SLES15-SP4-SAP-Azure-VLI-BYOS-Production:libcolord2-1.4.5-150400.4.3.1
Image SLES15-SP4-SAP-Azure-VLI-BYOS:libcolord2-1.4.5-150400.4.3.1
Ссылки