[CLSA-2026:1789479755] Fix CVE(s): CVE-2021-42523
Type:
security
Severity:
Important
Release date:
2026-09-15 13:42:45 UTC
Description:
* SECURITY UPDATE: Memory leak in the sqlite3_exec() error message on colord database open - debian/patches/CVE-2021-42523.patch: Pass NULL instead of an error message buffer to the properties_v2 schema check in cd_device_db_load() in src/cd-device-db.c and to the properties_pu schema check in cd_profile_db_load() in src/cd-profile-db.c, so SQLite no longer allocates an error message that neither function frees - CVE-2021-42523 * Stop colord-test-private timing out on the 32-bit builders - debian/rules: pass --timeout-multiplier 10 to meson test; the suite only reached 9 of its 38 subtests inside meson's default 30s ceiling on armel, while amd64 completes it in 6s
CVEs fixed:
Updated packages:
  • colord_1.4.5-3+tuxcare.els1_amd64.deb
    sha:e59990982761a10a350ece30d79461fb1e3bd068
  • colord-data_1.4.5-3+tuxcare.els1_all.deb
    sha:ba1ff101adf91a01182e57ac823a70cadeed806c
  • colord-tests_1.4.5-3+tuxcare.els1_amd64.deb
    sha:fd3a681d0b70595b5099afdc5250420f0fd51af1
  • gir1.2-colord-1.0_1.4.5-3+tuxcare.els1_amd64.deb
    sha:48b4218ed4b6862b0808f82e8f1b8f6cf62fa466
  • gir1.2-colorhug-1.0_1.4.5-3+tuxcare.els1_amd64.deb
    sha:75c2fe4870d7a4954d2fca6e84761e302437aaa2
  • libcolord-dev_1.4.5-3+tuxcare.els1_amd64.deb
    sha:4c0687b079be5313d17927faa47cc4e8bde12f46
  • libcolord2_1.4.5-3+tuxcare.els1_amd64.deb
    sha:831cd7c1d3b635bf7ec5862dceaca81ab2b79340
  • libcolorhug-dev_1.4.5-3+tuxcare.els1_amd64.deb
    sha:77eeff6dea00a178f9eef6b63a3d3c90b29e36cf
  • libcolorhug2_1.4.5-3+tuxcare.els1_amd64.deb
    sha:a854c5d9fc4675819f0ab8e9ebbcf519adbf99ee
  • colord_1.4.5-3+tuxcare.els1_arm64.deb
    sha:0c69251d261b1b233b201700c2e3d97f22f82e7b
  • colord-tests_1.4.5-3+tuxcare.els1_arm64.deb
    sha:f5370f5e6bd40f52c39e5cae2ffe607545c6c91a
  • gir1.2-colord-1.0_1.4.5-3+tuxcare.els1_arm64.deb
    sha:69f128a8218b27c87021a0f8208b238d5c4798eb
  • gir1.2-colorhug-1.0_1.4.5-3+tuxcare.els1_arm64.deb
    sha:5ba5e95864e2b2f935121bb3fb9d9f6e4b56d32b
  • libcolord-dev_1.4.5-3+tuxcare.els1_arm64.deb
    sha:7fce223b6bc48667efede78543cb7a4712b6792a
  • libcolord2_1.4.5-3+tuxcare.els1_arm64.deb
    sha:ad07801360185b38168784cd77dc0b69e9a762a1
  • libcolorhug-dev_1.4.5-3+tuxcare.els1_arm64.deb
    sha:ed513401abf4c46f0f569cdad07101b9534423ff
  • libcolorhug2_1.4.5-3+tuxcare.els1_arm64.deb
    sha:14eb91ea34b911b9f30e2d8566f9b77990465c62
  • colord_1.4.5-3+tuxcare.els1_armel.deb
    sha:3d2c3f28c0afbb0ba67130d6e1f4d68b77ff7fc3
  • colord-tests_1.4.5-3+tuxcare.els1_armel.deb
    sha:f81a9e6897e9907c053389b00582f762e08960cf
  • gir1.2-colord-1.0_1.4.5-3+tuxcare.els1_armel.deb
    sha:2a5ebde5586b2fa81b9b4938bb5e6544d4a2d5e2
  • gir1.2-colorhug-1.0_1.4.5-3+tuxcare.els1_armel.deb
    sha:42e826dbfa9580080f72295047993d34c78bf8f9
  • libcolord-dev_1.4.5-3+tuxcare.els1_armel.deb
    sha:965d33d4ed7dd36cbd6b59085aed78ff462445a8
  • libcolord2_1.4.5-3+tuxcare.els1_armel.deb
    sha:6239f957952607369db20b0ffa19749e090bea55
  • libcolorhug-dev_1.4.5-3+tuxcare.els1_armel.deb
    sha:5c59ef194395b61cf6884747006d678e7f5f5d5e
  • libcolorhug2_1.4.5-3+tuxcare.els1_armel.deb
    sha:de8318bd663856f0269ca94c0b63510937272c0c
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.