colord Kernel Unauthenticated Access

The vulnerability of the components colord/src/cd-device-db.c and colord/src/cd-profile-db.c in the Linux operating system’s system daemon colord is related to a memory release error. Exploiting this vulnerability could allow an attacker to gain unauthorized access to protected information...

CVE-2021-42523

Two information disclosure vulnerabilities affect colord (CVE-2021-42523) in files colord/src/cd-device-db.c and colord/src/cd-profile-db.c. The root cause is that sqlite3_exec’s err_msg is not released after use, whereas the consumer (libxml2) requires releasing it. Impact is information disclos...