Debian/colord: high 7.5
There are two Information Disclosure vulnerabilities in colord, and they lie in colord/src/cd-device-db.c and colord/src/cd-profile-db.c separately. They exist because the 'err_msg' of 'sqlite3_exec'
Action: Upgrade colord to 1.4.6-1 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 1.4.6-1 | - |
Fixed versions
| 1.4.6-1 |
Sources
- osv: DEBIAN-CVE-2021-42523#Debian:13/colord
- https://security-tracker.debian.org/tracker/CVE-2021-42523
published · modified · JSON