Oval Definition:	oval:org.opensuse.security:def:202142523
Revision Date: 2023-06-22 Version: 1 Title: CVE-2021-42523 Description: There are two Information Disclosure vulnerabilities in colord, and they lie in colord/src/cd-device-db.c and colord/src/cd-profile-db.c separately. They exist because the 'err_msg' of 'sqlite3_exec' is not releasing after use, while libxml2 emphasizes that the caller needs to release it. Family: unix Class: vulnerability Status: Reference(s): Mitre CVE-2021-42523 SUSE CVE-2021-42523 SUSE-SU-2022:3496-1 SUSE-SU-2022:4170-1 SUSE-SU-2022:4410-1 Platform(s): SUSE Linux Enterprise Desktop 12 SP5 SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 12 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Micro 5.3 SUSE Linux Enterprise Module for Basesystem 15 SP5 SUSE Linux Enterprise Module for Desktop Applications 15 SP5 SUSE Linux Enterprise Server 12 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 12 SP4 SUSE Linux Enterprise Server for SAP Applications 12 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP2 SUSE Linux Enterprise Server for SAP Applications 15 SP5 SUSE Linux Enterprise Workstation Extension 12 SP5 Product(s): Definition Synopsis SUSE Linux Enterprise Micro 5.3 is installed AND libcolord2-1.4.5-150400.4.3.1 is installed Definition Synopsis SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed AND Package Information libcolord2 is affected OR libcolord2-32bit is affected OR libcolorhug2 is affected Definition Synopsis Release Information SUSE Linux Enterprise High Performance Computing 12 SP5 is installed OR SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed AND colord is affected OR Package Information SUSE Linux Enterprise Server 12 SP5 is installed AND libcolord2 is affected OR libcolord2-32bit is affected OR libcolorhug2 is affected OR Package Information SUSE Linux Enterprise Desktop 12 SP5 is installed OR SUSE Linux Enterprise Server 12 SP5 is installed OR SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed OR SUSE Linux Enterprise Workstation Extension 12 SP5 is installed AND colord is affected OR colord-lang is affected Definition Synopsis SUSE Linux Enterprise Server for SAP Applications 15 SP2 is installed AND Package Information colord-color-profiles is affected OR libcolord-devel is affected OR libcolord2 is affected OR libcolorhug2 is affected OR typelib-1_0-Colord-1_0 is affected OR typelib-1_0-Colorhug-1_0 is affected Definition Synopsis Release Information SUSE Linux Enterprise Desktop 15 SP5 is installed OR SUSE Linux Enterprise High Performance Computing 15 SP5 is installed OR SUSE Linux Enterprise Module for Basesystem 15 SP5 is installed OR SUSE Linux Enterprise Server 15 SP5 is installed OR SUSE Linux Enterprise Server for SAP Applications 15 SP5 is installed AND libcolord2-1.4.5-150400.4.3.1 is installed OR Package Information SUSE Linux Enterprise Desktop 15 SP5 is installed OR SUSE Linux Enterprise High Performance Computing 15 SP5 is installed OR SUSE Linux Enterprise Module for Desktop Applications 15 SP5 is installed OR SUSE Linux Enterprise Server 15 SP5 is installed OR SUSE Linux Enterprise Server for SAP Applications 15 SP5 is installed AND colord-color-profiles-1.4.5-150400.4.3.1 is installed OR libcolord-devel-1.4.5-150400.4.3.1 is installed OR libcolorhug2-1.4.5-150400.4.3.1 is installed OR typelib-1_0-Colord-1_0-1.4.5-150400.4.3.1 is installed OR typelib-1_0-Colorhug-1_0-1.4.5-150400.4.3.1 is installed
BACK