{ "document": { "aggregate_severity": { "namespace": "https://access.redhat.com/security/updates/classification/", "text": "Low" }, "category": "csaf_vex", "csaf_version": "2.0", "publisher": { "category": "vendor", "contact_details": "https://access.redhat.com/security/team/contact/", "issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.", "name": "Red Hat Product Security", "namespace": "https://www.redhat.com" }, "title": "potential memory leak, forgetting to free error message of libsqlite3 API 'sqlite3_exec' -1", "tracking": { "current_release_date": "2026-08-11T15:00:57+00:00", "generator": { "date": "2026-08-11T15:00:57+00:00", "engine": { "name": "CSAF Generator", "version": "3.3.0" } }, "id": "CVE-2021-42523", "initial_release_date": "2022-10-06T00:00:00+00:00", "revision_history": [ { "date": "2026-08-11T15:00:57+00:00", "number": "1", "summary": "Last generated version" } ], "status": "final", "version": "1" } }, "product_tree": { "branches": [ { "category": "vendor", "name": "Red Hat", "branches": [ { "category": "product_name", "name": "OpenShift Developer Tools & Services 4.12", "product": { "name": "OpenShift Developer Tools & Services 4.12", "product_id": "ocp-tools-4.12", "product_identification_helper": { "cpe": "cpe:/a:redhat:ocp_tools:4.12" } } }, { "category": "product_name", "name": "OpenShift Developer Tools & Services 4.13", "product": { "name": "OpenShift Developer Tools & Services 4.13", "product_id": "ocp-tools-4.13", "product_identification_helper": { "cpe": "cpe:/a:redhat:ocp_tools:4.13" } } }, { "category": "product_name", "name": "OpenShift Developer Tools & Services 4.14", "product": { "name": "OpenShift Developer Tools & Services 4.14", "product_id": "ocp-tools-4.14", "product_identification_helper": { "cpe": "cpe:/a:redhat:ocp_tools:4.14" } } }, { "category": "product_name", "name": "OpenShift Developer Tools & Services 4.15", "product": { "name": "OpenShift Developer Tools & Services 4.15", "product_id": "ocp-tools-4.15", "product_identification_helper": { "cpe": "cpe:/a:redhat:ocp_tools:4.15" } } }, { "category": "product_name", "name": "OpenShift Developer Tools & Services 4.16", "product": { "name": "OpenShift Developer Tools & Services 4.16", "product_id": "ocp-tools-4.16", "product_identification_helper": { "cpe": "cpe:/a:redhat:ocp_tools:4.16" } } }, { "category": "product_name", "name": "OpenShift Developer Tools & Services 4.17", "product": { "name": "OpenShift Developer Tools & Services 4.17", "product_id": "ocp-tools-4.17", "product_identification_helper": { "cpe": "cpe:/a:redhat:ocp_tools:4.17" } } }, { "category": "product_name", "name": "OpenShift Developer Tools & Services 4.18", "product": { "name": "OpenShift Developer Tools & Services 4.18", "product_id": "ocp-tools-4.18", "product_identification_helper": { "cpe": "cpe:/a:redhat:ocp_tools:4.18" } } }, { "category": "product_name", "name": "OpenShift Developer Tools & Services 4.19", "product": { "name": "OpenShift Developer Tools & Services 4.19", "product_id": "ocp-tools-4.19", "product_identification_helper": { "cpe": "cpe:/a:redhat:ocp_tools:4.19" } } }, { "category": "product_name", "name": "Red Hat Enterprise Linux 7-els", "product": { "name": "Red Hat Enterprise Linux 7-els", "product_id": "rhel-7-els.els", "product_identification_helper": { "cpe": "cpe:/o:redhat:rhel_els:7" } } }, { "category": "product_name", "name": "Red Hat Enterprise Linux 8.10.z", "product": { "name": "Red Hat Enterprise Linux 8.10.z", "product_id": "rhel-8.10.z", "product_identification_helper": { "cpe": "cpe:/a:redhat:enterprise_linux:8" } } }, { "category": "product_name", "name": "Red Hat Enterprise Linux 8.2.0.z", "product": { "name": "Red Hat Enterprise Linux 8.2.0.z", "product_id": "rhel-8.2.0.z.aus", "product_identification_helper": { "cpe": "cpe:/a:redhat:rhel_aus:8.2" } } }, { "category": "product_name", "name": "Red Hat Enterprise Linux 8.4.0.z", "product": { "name": "Red Hat Enterprise Linux 8.4.0.z", "product_id": "rhel-8.4.0.z.eus", "product_identification_helper": { "cpe": "cpe:/a:redhat:rhel_eus:8.4" } } }, { "category": "product_name", "name": "Red Hat Enterprise Linux 8.6.0.z", "product": { "name": "Red Hat Enterprise Linux 8.6.0.z", "product_id": "rhel-8.6.0.z.aus", "product_identification_helper": { "cpe": "cpe:/a:redhat:rhel_aus:8.6" } } }, { "category": "product_name", "name": "Red Hat Enterprise Linux 8.8.0.z", "product": { "name": "Red Hat Enterprise Linux 8.8.0.z", "product_id": "rhel-8.8.0.z.eus", "product_identification_helper": { "cpe": "cpe:/a:redhat:rhel_eus:8.8" } } }, { "category": "product_name", "name": "Red Hat Enterprise Linux 9.0.0.z", "product": { "name": "Red Hat Enterprise Linux 9.0.0.z", "product_id": "rhel-9.0.0.z.eus", "product_identification_helper": { "cpe": "cpe:/a:redhat:rhel_eus:9.0" } } }, { "category": "product_name", "name": "Red Hat Enterprise Linux 9.2.0.z", "product": { "name": "Red Hat Enterprise Linux 9.2.0.z", "product_id": "rhel-9.2.0.z.eus", "product_identification_helper": { "cpe": "cpe:/a:redhat:rhel_eus:9.2" } } }, { "category": "product_name", "name": "Red Hat Enterprise Linux 9.4.z", "product": { "name": "Red Hat Enterprise Linux 9.4.z", "product_id": "rhel-9.4.z.eus", "product_identification_helper": { "cpe": "cpe:/a:redhat:rhel_eus:9.4" } } }, { "category": "product_name", "name": "Red Hat Enterprise Linux 9.6.z", "product": { "name": "Red Hat Enterprise Linux 9.6.z", "product_id": "rhel-9.6.z.eus", "product_identification_helper": { "cpe": "cpe:/a:redhat:rhel_eus:9.6" } } }, { "category": "product_name", "name": "Red Hat Enterprise Linux 9.7", "product": { "name": "Red Hat Enterprise Linux 9.7", "product_id": "rhel-9.7", "product_identification_helper": { "cpe": "cpe:/a:redhat:enterprise_linux:9" } } }, { "category": "product_name", "name": "Red Hat Enterprise Linux 9.7.z", "product": { "name": "Red Hat Enterprise Linux 9.7.z", "product_id": "rhel-9.7.z", "product_identification_helper": { "cpe": "cpe:/a:redhat:enterprise_linux:9" } } }, { "category": "product_name", "name": "Red Hat Enterprise Linux 9.8", "product": { "name": "Red Hat Enterprise Linux 9.8", "product_id": "rhel-9.8", "product_identification_helper": { "cpe": "cpe:/a:redhat:enterprise_linux:9" } } }, { "category": "product_version", "name": "colord", "product": { "name": "colord", "product_id": "colord", "product_identification_helper": { "purl": "pkg:rpm/redhat/colord" } } }, { "category": "product_version", "name": "colord-debuginfo", "product": { "name": "colord-debuginfo", "product_id": "colord-debuginfo", "product_identification_helper": { "purl": "pkg:rpm/redhat/colord-debuginfo" } } }, { "category": "product_version", "name": "colord-debugsource", "product": { "name": "colord-debugsource", "product_id": "colord-debugsource", "product_identification_helper": { "purl": "pkg:rpm/redhat/colord-debugsource" } } }, { "category": "product_version", "name": "colord-devel", "product": { "name": "colord-devel", "product_id": "colord-devel", "product_identification_helper": { "purl": "pkg:rpm/redhat/colord-devel" } } }, { "category": "product_version", "name": "colord-devel-docs", "product": { "name": "colord-devel-docs", "product_id": "colord-devel-docs", "product_identification_helper": { "purl": "pkg:rpm/redhat/colord-devel-docs" } } }, { "category": "product_version", "name": "colord-extra-profiles", "product": { "name": "colord-extra-profiles", "product_id": "colord-extra-profiles", "product_identification_helper": { "purl": "pkg:rpm/redhat/colord-extra-profiles" } } }, { "category": "product_version", "name": "colord-libs", "product": { "name": "colord-libs", "product_id": "colord-libs", "product_identification_helper": { "purl": "pkg:rpm/redhat/colord-libs" } } }, { "category": "product_version", "name": "colord-libs-debuginfo", "product": { "name": "colord-libs-debuginfo", "product_id": "colord-libs-debuginfo", "product_identification_helper": { "purl": "pkg:rpm/redhat/colord-libs-debuginfo" } } }, { "category": "product_version", "name": "colord-tests", "product": { "name": "colord-tests", "product_id": "colord-tests", "product_identification_helper": { "purl": "pkg:rpm/redhat/colord-tests" } } }, { "category": "product_version", "name": "colord-tests-debuginfo", "product": { "name": "colord-tests-debuginfo", "product_id": "colord-tests-debuginfo", "product_identification_helper": { "purl": "pkg:rpm/redhat/colord-tests-debuginfo" } } }, { "category": "product_version", "name": "colord", "product": { "name": "colord", "product_id": "colord.src", "product_identification_helper": { "purl": "pkg:rpm/redhat/colord?arch=src" } } }, { "category": "product_version", "name": "compat-colord10", "product": { "name": "compat-colord10", "product_id": "compat-colord10", "product_identification_helper": { "purl": "pkg:rpm/redhat/compat-colord10" } } }, { "category": "product_version", "name": "compat-colord10-debuginfo", "product": { "name": "compat-colord10-debuginfo", "product_id": "compat-colord10-debuginfo", "product_identification_helper": { "purl": "pkg:rpm/redhat/compat-colord10-debuginfo" } } }, { "category": "product_version", "name": "compat-colord10", "product": { "name": "compat-colord10", "product_id": "compat-colord10.src", "product_identification_helper": { "purl": "pkg:rpm/redhat/compat-colord10?arch=src" } } }, { "category": "product_version", "name": "compat-libcolord1", "product": { "name": "compat-libcolord1", "product_id": "compat-libcolord1", "product_identification_helper": { "purl": "pkg:rpm/redhat/compat-libcolord1" } } }, { "category": "product_version", "name": "odo", "product": { "name": "odo", "product_id": "odo", "product_identification_helper": { "purl": "pkg:rpm/redhat/odo" } } }, { "category": "product_version", "name": "odo-redistributable", "product": { "name": "odo-redistributable", "product_id": "odo-redistributable", "product_identification_helper": { "purl": "pkg:rpm/redhat/odo-redistributable" } } }, { "category": "product_version", "name": "odo", "product": { "name": "odo", "product_id": "odo.src", "product_identification_helper": { "purl": "pkg:rpm/redhat/odo?arch=src" } } } ] } ], "relationships": [ { "category": "default_component_of", "full_product_name": { "name": "colord as a component of Red Hat Enterprise Linux 8.8.0.z", "product_id": "rhel-8.8.0.z.eus:colord" }, "product_reference": "colord", "relates_to_product_reference": "rhel-8.8.0.z.eus" }, { "category": "default_component_of", "full_product_name": { "name": "colord as a component of Red Hat Enterprise Linux 9.7.z", "product_id": "rhel-9.7.z:colord" }, "product_reference": "colord", "relates_to_product_reference": "rhel-9.7.z" }, { "category": "default_component_of", "full_product_name": { "name": "colord as a component of Red Hat Enterprise Linux 9.8", "product_id": "rhel-9.8:colord" }, "product_reference": "colord", "relates_to_product_reference": "rhel-9.8" }, { "category": "default_component_of", "full_product_name": { "name": "colord as a component of Red Hat Enterprise Linux 9.0.0.z", "product_id": "rhel-9.0.0.z.eus:colord" }, "product_reference": "colord", "relates_to_product_reference": "rhel-9.0.0.z.eus" }, { "category": "default_component_of", "full_product_name": { "name": "colord as a component of Red Hat Enterprise Linux 9.6.z", "product_id": "rhel-9.6.z.eus:colord" }, "product_reference": "colord", "relates_to_product_reference": "rhel-9.6.z.eus" }, { "category": "default_component_of", "full_product_name": { "name": "colord as a component of Red Hat Enterprise Linux 7-els", "product_id": "rhel-7-els.els:colord" }, "product_reference": "colord", "relates_to_product_reference": "rhel-7-els.els" }, { "category": "default_component_of", "full_product_name": { "name": "colord as a component of Red Hat Enterprise Linux 9.7", "product_id": "rhel-9.7:colord" }, "product_reference": "colord", "relates_to_product_reference": "rhel-9.7" }, { "category": "default_component_of", "full_product_name": { "name": "colord as a component of Red Hat Enterprise Linux 8.6.0.z", "product_id": "rhel-8.6.0.z.aus:colord" }, "product_reference": "colord", "relates_to_product_reference": "rhel-8.6.0.z.aus" }, { "category": "default_component_of", "full_product_name": { "name": "colord as a component of Red Hat Enterprise Linux 9.4.z", "product_id": "rhel-9.4.z.eus:colord" }, "product_reference": "colord", "relates_to_product_reference": "rhel-9.4.z.eus" }, { "category": "default_component_of", "full_product_name": { "name": "colord as a component of Red Hat Enterprise Linux 8.10.z", "product_id": "rhel-8.10.z:colord" }, "product_reference": "colord", "relates_to_product_reference": "rhel-8.10.z" }, { "category": "default_component_of", "full_product_name": { "name": "colord as a component of Red Hat Enterprise Linux 8.4.0.z", "product_id": "rhel-8.4.0.z.eus:colord" }, "product_reference": "colord", "relates_to_product_reference": "rhel-8.4.0.z.eus" }, { "category": "default_component_of", "full_product_name": { "name": "colord as a component of Red Hat Enterprise Linux 8.2.0.z", "product_id": "rhel-8.2.0.z.aus:colord" }, "product_reference": "colord", "relates_to_product_reference": "rhel-8.2.0.z.aus" }, { "category": "default_component_of", "full_product_name": { "name": "colord as a component of Red Hat Enterprise Linux 9.2.0.z", "product_id": "rhel-9.2.0.z.eus:colord" }, "product_reference": "colord", "relates_to_product_reference": "rhel-9.2.0.z.eus" }, { "category": "default_component_of", "full_product_name": { "name": "colord-debuginfo as a component of Red Hat Enterprise Linux 8.10.z", "product_id": "rhel-8.10.z:colord-debuginfo" }, "product_reference": "colord-debuginfo", "relates_to_product_reference": "rhel-8.10.z" }, { "category": "default_component_of", "full_product_name": { "name": "colord-debuginfo as a component of Red Hat Enterprise Linux 8.4.0.z", "product_id": "rhel-8.4.0.z.eus:colord-debuginfo" }, "product_reference": "colord-debuginfo", "relates_to_product_reference": "rhel-8.4.0.z.eus" }, { "category": "default_component_of", "full_product_name": { "name": "colord-debuginfo as a component of Red Hat Enterprise Linux 8.6.0.z", "product_id": "rhel-8.6.0.z.aus:colord-debuginfo" }, "product_reference": "colord-debuginfo", "relates_to_product_reference": "rhel-8.6.0.z.aus" }, { "category": "default_component_of", "full_product_name": { "name": "colord-debuginfo as a component of Red Hat Enterprise Linux 9.6.z", "product_id": "rhel-9.6.z.eus:colord-debuginfo" }, "product_reference": "colord-debuginfo", "relates_to_product_reference": "rhel-9.6.z.eus" }, { "category": "default_component_of", "full_product_name": { "name": "colord-debuginfo as a component of Red Hat Enterprise Linux 9.2.0.z", "product_id": "rhel-9.2.0.z.eus:colord-debuginfo" }, "product_reference": "colord-debuginfo", "relates_to_product_reference": "rhel-9.2.0.z.eus" }, { "category": "default_component_of", "full_product_name": { "name": "colord-debuginfo as a component of Red Hat Enterprise Linux 9.4.z", "product_id": "rhel-9.4.z.eus:colord-debuginfo" }, "product_reference": "colord-debuginfo", "relates_to_product_reference": "rhel-9.4.z.eus" }, { "category": "default_component_of", "full_product_name": { "name": "colord-debuginfo as a component of Red Hat Enterprise Linux 7-els", "product_id": "rhel-7-els.els:colord-debuginfo" }, "product_reference": "colord-debuginfo", "relates_to_product_reference": "rhel-7-els.els" }, { "category": "default_component_of", "full_product_name": { "name": "colord-debuginfo as a component of Red Hat Enterprise Linux 8.8.0.z", "product_id": "rhel-8.8.0.z.eus:colord-debuginfo" }, "product_reference": "colord-debuginfo", "relates_to_product_reference": "rhel-8.8.0.z.eus" }, { "category": "default_component_of", "full_product_name": { "name": "colord-debugsource as a component of Red Hat Enterprise Linux 8.6.0.z", "product_id": "rhel-8.6.0.z.aus:colord-debugsource" }, "product_reference": "colord-debugsource", "relates_to_product_reference": "rhel-8.6.0.z.aus" }, { "category": "default_component_of", "full_product_name": { "name": "colord-debugsource as a component of Red Hat Enterprise Linux 9.4.z", "product_id": "rhel-9.4.z.eus:colord-debugsource" }, "product_reference": "colord-debugsource", "relates_to_product_reference": "rhel-9.4.z.eus" }, { "category": "default_component_of", "full_product_name": { "name": "colord-debugsource as a component of Red Hat Enterprise Linux 8.4.0.z", "product_id": "rhel-8.4.0.z.eus:colord-debugsource" }, "product_reference": "colord-debugsource", "relates_to_product_reference": "rhel-8.4.0.z.eus" }, { "category": "default_component_of", "full_product_name": { "name": "colord-debugsource as a component of Red Hat Enterprise Linux 8.10.z", "product_id": "rhel-8.10.z:colord-debugsource" }, "product_reference": "colord-debugsource", "relates_to_product_reference": "rhel-8.10.z" }, { "category": "default_component_of", "full_product_name": { "name": "colord-debugsource as a component of Red Hat Enterprise Linux 8.8.0.z", "product_id": "rhel-8.8.0.z.eus:colord-debugsource" }, "product_reference": "colord-debugsource", "relates_to_product_reference": "rhel-8.8.0.z.eus" }, { "category": "default_component_of", "full_product_name": { "name": "colord-debugsource as a component of Red Hat Enterprise Linux 9.6.z", "product_id": "rhel-9.6.z.eus:colord-debugsource" }, "product_reference": "colord-debugsource", "relates_to_product_reference": "rhel-9.6.z.eus" }, { "category": "default_component_of", "full_product_name": { "name": "colord-debugsource as a component of Red Hat Enterprise Linux 9.2.0.z", "product_id": "rhel-9.2.0.z.eus:colord-debugsource" }, "product_reference": "colord-debugsource", "relates_to_product_reference": "rhel-9.2.0.z.eus" }, { "category": "default_component_of", "full_product_name": { "name": "colord-devel as a component of Red Hat Enterprise Linux 9.7.z", "product_id": "rhel-9.7.z:colord-devel" }, "product_reference": "colord-devel", "relates_to_product_reference": "rhel-9.7.z" }, { "category": "default_component_of", "full_product_name": { "name": "colord-devel as a component of Red Hat Enterprise Linux 9.8", "product_id": "rhel-9.8:colord-devel" }, "product_reference": "colord-devel", "relates_to_product_reference": "rhel-9.8" }, { "category": "default_component_of", "full_product_name": { "name": "colord-devel as a component of Red Hat Enterprise Linux 9.6.z", "product_id": "rhel-9.6.z.eus:colord-devel" }, "product_reference": "colord-devel", "relates_to_product_reference": "rhel-9.6.z.eus" }, { "category": "default_component_of", "full_product_name": { "name": "colord-devel as a component of Red Hat Enterprise Linux 9.2.0.z", "product_id": "rhel-9.2.0.z.eus:colord-devel" }, "product_reference": "colord-devel", "relates_to_product_reference": "rhel-9.2.0.z.eus" }, { "category": "default_component_of", "full_product_name": { "name": "colord-devel as a component of Red Hat Enterprise Linux 9.4.z", "product_id": "rhel-9.4.z.eus:colord-devel" }, "product_reference": "colord-devel", "relates_to_product_reference": "rhel-9.4.z.eus" }, { "category": "default_component_of", "full_product_name": { "name": "colord-devel as a component of Red Hat Enterprise Linux 7-els", "product_id": "rhel-7-els.els:colord-devel" }, "product_reference": "colord-devel", "relates_to_product_reference": "rhel-7-els.els" }, { "category": "default_component_of", "full_product_name": { "name": "colord-devel as a component of Red Hat Enterprise Linux 8.10.z", "product_id": "rhel-8.10.z:colord-devel" }, "product_reference": "colord-devel", "relates_to_product_reference": "rhel-8.10.z" }, { "category": "default_component_of", "full_product_name": { "name": "colord-devel as a component of Red Hat Enterprise Linux 9.7", "product_id": "rhel-9.7:colord-devel" }, "product_reference": "colord-devel", "relates_to_product_reference": "rhel-9.7" }, { "category": "default_component_of", "full_product_name": { "name": "colord-devel as a component of Red Hat Enterprise Linux 8.2.0.z", "product_id": "rhel-8.2.0.z.aus:colord-devel" }, "product_reference": "colord-devel", "relates_to_product_reference": "rhel-8.2.0.z.aus" }, { "category": "default_component_of", "full_product_name": { "name": "colord-devel as a component of Red Hat Enterprise Linux 8.4.0.z", "product_id": "rhel-8.4.0.z.eus:colord-devel" }, "product_reference": "colord-devel", "relates_to_product_reference": "rhel-8.4.0.z.eus" }, { "category": "default_component_of", "full_product_name": { "name": "colord-devel as a component of Red Hat Enterprise Linux 8.6.0.z", "product_id": "rhel-8.6.0.z.aus:colord-devel" }, "product_reference": "colord-devel", "relates_to_product_reference": "rhel-8.6.0.z.aus" }, { "category": "default_component_of", "full_product_name": { "name": "colord-devel as a component of Red Hat Enterprise Linux 9.0.0.z", "product_id": "rhel-9.0.0.z.eus:colord-devel" }, "product_reference": "colord-devel", "relates_to_product_reference": "rhel-9.0.0.z.eus" }, { "category": "default_component_of", "full_product_name": { "name": "colord-devel as a component of Red Hat Enterprise Linux 8.8.0.z", "product_id": "rhel-8.8.0.z.eus:colord-devel" }, "product_reference": "colord-devel", "relates_to_product_reference": "rhel-8.8.0.z.eus" }, { "category": "default_component_of", "full_product_name": { "name": "colord-devel-docs as a component of Red Hat Enterprise Linux 8.2.0.z", "product_id": "rhel-8.2.0.z.aus:colord-devel-docs" }, "product_reference": "colord-devel-docs", "relates_to_product_reference": "rhel-8.2.0.z.aus" }, { "category": "default_component_of", "full_product_name": { "name": "colord-devel-docs as a component of Red Hat Enterprise Linux 8.4.0.z", "product_id": "rhel-8.4.0.z.eus:colord-devel-docs" }, "product_reference": "colord-devel-docs", "relates_to_product_reference": "rhel-8.4.0.z.eus" }, { "category": "default_component_of", "full_product_name": { "name": "colord-devel-docs as a component of Red Hat Enterprise Linux 7-els", "product_id": "rhel-7-els.els:colord-devel-docs" }, "product_reference": "colord-devel-docs", "relates_to_product_reference": "rhel-7-els.els" }, { "category": "default_component_of", "full_product_name": { "name": "colord-devel-docs as a component of Red Hat Enterprise Linux 9.0.0.z", "product_id": "rhel-9.0.0.z.eus:colord-devel-docs" }, "product_reference": "colord-devel-docs", "relates_to_product_reference": "rhel-9.0.0.z.eus" }, { "category": "default_component_of", "full_product_name": { "name": "colord-devel-docs as a component of Red Hat Enterprise Linux 9.6.z", "product_id": "rhel-9.6.z.eus:colord-devel-docs" }, "product_reference": "colord-devel-docs", "relates_to_product_reference": "rhel-9.6.z.eus" }, { "category": "default_component_of", "full_product_name": { "name": "colord-devel-docs as a component of Red Hat Enterprise Linux 9.2.0.z", "product_id": "rhel-9.2.0.z.eus:colord-devel-docs" }, "product_reference": "colord-devel-docs", "relates_to_product_reference": "rhel-9.2.0.z.eus" }, { "category": "default_component_of", "full_product_name": { "name": "colord-devel-docs as a component of Red Hat Enterprise Linux 8.8.0.z", "product_id": "rhel-8.8.0.z.eus:colord-devel-docs" }, "product_reference": "colord-devel-docs", "relates_to_product_reference": "rhel-8.8.0.z.eus" }, { "category": "default_component_of", "full_product_name": { "name": "colord-devel-docs as a component of Red Hat Enterprise Linux 9.7.z", "product_id": "rhel-9.7.z:colord-devel-docs" }, "product_reference": "colord-devel-docs", "relates_to_product_reference": "rhel-9.7.z" }, { "category": "default_component_of", "full_product_name": { "name": "colord-devel-docs as a component of Red Hat Enterprise Linux 9.8", "product_id": "rhel-9.8:colord-devel-docs" }, "product_reference": "colord-devel-docs", "relates_to_product_reference": "rhel-9.8" }, { "category": "default_component_of", "full_product_name": { "name": "colord-devel-docs as a component of Red Hat Enterprise Linux 9.4.z", "product_id": "rhel-9.4.z.eus:colord-devel-docs" }, "product_reference": "colord-devel-docs", "relates_to_product_reference": "rhel-9.4.z.eus" }, { "category": "default_component_of", "full_product_name": { "name": "colord-devel-docs as a component of Red Hat Enterprise Linux 9.7", "product_id": "rhel-9.7:colord-devel-docs" }, "product_reference": "colord-devel-docs", "relates_to_product_reference": "rhel-9.7" }, { "category": "default_component_of", "full_product_name": { "name": "colord-devel-docs as a component of Red Hat Enterprise Linux 8.6.0.z", "product_id": "rhel-8.6.0.z.aus:colord-devel-docs" }, "product_reference": "colord-devel-docs", "relates_to_product_reference": "rhel-8.6.0.z.aus" }, { "category": "default_component_of", "full_product_name": { "name": "colord-devel-docs as a component of Red Hat Enterprise Linux 8.10.z", "product_id": "rhel-8.10.z:colord-devel-docs" }, "product_reference": "colord-devel-docs", "relates_to_product_reference": "rhel-8.10.z" }, { "category": "default_component_of", "full_product_name": { "name": "colord-extra-profiles as a component of Red Hat Enterprise Linux 9.4.z", "product_id": "rhel-9.4.z.eus:colord-extra-profiles" }, "product_reference": "colord-extra-profiles", "relates_to_product_reference": "rhel-9.4.z.eus" }, { "category": "default_component_of", "full_product_name": { "name": "colord-extra-profiles as a component of Red Hat Enterprise Linux 7-els", "product_id": "rhel-7-els.els:colord-extra-profiles" }, "product_reference": "colord-extra-profiles", "relates_to_product_reference": "rhel-7-els.els" }, { "category": "default_component_of", "full_product_name": { "name": "colord-extra-profiles as a component of Red Hat Enterprise Linux 8.8.0.z", "product_id": "rhel-8.8.0.z.eus:colord-extra-profiles" }, "product_reference": "colord-extra-profiles", "relates_to_product_reference": "rhel-8.8.0.z.eus" }, { "category": "default_component_of", "full_product_name": { "name": "colord-extra-profiles as a component of Red Hat Enterprise Linux 8.6.0.z", "product_id": "rhel-8.6.0.z.aus:colord-extra-profiles" }, "product_reference": "colord-extra-profiles", "relates_to_product_reference": "rhel-8.6.0.z.aus" }, { "category": "default_component_of", "full_product_name": { "name": "colord-extra-profiles as a component of Red Hat Enterprise Linux 8.4.0.z", "product_id": "rhel-8.4.0.z.eus:colord-extra-profiles" }, "product_reference": "colord-extra-profiles", "relates_to_product_reference": "rhel-8.4.0.z.eus" }, { "category": "default_component_of", "full_product_name": { "name": "colord-extra-profiles as a component of Red Hat Enterprise Linux 8.10.z", "product_id": "rhel-8.10.z:colord-extra-profiles" }, "product_reference": "colord-extra-profiles", "relates_to_product_reference": "rhel-8.10.z" }, { "category": "default_component_of", "full_product_name": { "name": "colord-extra-profiles as a component of Red Hat Enterprise Linux 9.2.0.z", "product_id": "rhel-9.2.0.z.eus:colord-extra-profiles" }, "product_reference": "colord-extra-profiles", "relates_to_product_reference": "rhel-9.2.0.z.eus" }, { "category": "default_component_of", "full_product_name": { "name": "colord-extra-profiles as a component of Red Hat Enterprise Linux 9.6.z", "product_id": "rhel-9.6.z.eus:colord-extra-profiles" }, "product_reference": "colord-extra-profiles", "relates_to_product_reference": "rhel-9.6.z.eus" }, { "category": "default_component_of", "full_product_name": { "name": "colord-libs as a component of Red Hat Enterprise Linux 8.2.0.z", "product_id": "rhel-8.2.0.z.aus:colord-libs" }, "product_reference": "colord-libs", "relates_to_product_reference": "rhel-8.2.0.z.aus" }, { "category": "default_component_of", "full_product_name": { "name": "colord-libs as a component of Red Hat Enterprise Linux 8.4.0.z", "product_id": "rhel-8.4.0.z.eus:colord-libs" }, "product_reference": "colord-libs", "relates_to_product_reference": "rhel-8.4.0.z.eus" }, { "category": "default_component_of", "full_product_name": { "name": "colord-libs as a component of Red Hat Enterprise Linux 7-els", "product_id": "rhel-7-els.els:colord-libs" }, "product_reference": "colord-libs", "relates_to_product_reference": "rhel-7-els.els" }, { "category": "default_component_of", "full_product_name": { "name": "colord-libs as a component of Red Hat Enterprise Linux 8.8.0.z", "product_id": "rhel-8.8.0.z.eus:colord-libs" }, "product_reference": "colord-libs", "relates_to_product_reference": "rhel-8.8.0.z.eus" }, { "category": "default_component_of", "full_product_name": { "name": "colord-libs as a component of Red Hat Enterprise Linux 9.0.0.z", "product_id": "rhel-9.0.0.z.eus:colord-libs" }, "product_reference": "colord-libs", "relates_to_product_reference": "rhel-9.0.0.z.eus" }, { "category": "default_component_of", "full_product_name": { "name": "colord-libs as a component of Red Hat Enterprise Linux 9.2.0.z", "product_id": "rhel-9.2.0.z.eus:colord-libs" }, "product_reference": "colord-libs", "relates_to_product_reference": "rhel-9.2.0.z.eus" }, { "category": "default_component_of", "full_product_name": { "name": "colord-libs as a component of Red Hat Enterprise Linux 9.7.z", "product_id": "rhel-9.7.z:colord-libs" }, "product_reference": "colord-libs", "relates_to_product_reference": "rhel-9.7.z" }, { "category": "default_component_of", "full_product_name": { "name": "colord-libs as a component of Red Hat Enterprise Linux 9.8", "product_id": "rhel-9.8:colord-libs" }, "product_reference": "colord-libs", "relates_to_product_reference": "rhel-9.8" }, { "category": "default_component_of", "full_product_name": { "name": "colord-libs as a component of Red Hat Enterprise Linux 9.6.z", "product_id": "rhel-9.6.z.eus:colord-libs" }, "product_reference": "colord-libs", "relates_to_product_reference": "rhel-9.6.z.eus" }, { "category": "default_component_of", "full_product_name": { "name": "colord-libs as a component of Red Hat Enterprise Linux 9.4.z", "product_id": "rhel-9.4.z.eus:colord-libs" }, "product_reference": "colord-libs", "relates_to_product_reference": "rhel-9.4.z.eus" }, { "category": "default_component_of", "full_product_name": { "name": "colord-libs as a component of Red Hat Enterprise Linux 8.10.z", "product_id": "rhel-8.10.z:colord-libs" }, "product_reference": "colord-libs", "relates_to_product_reference": "rhel-8.10.z" }, { "category": "default_component_of", "full_product_name": { "name": "colord-libs as a component of Red Hat Enterprise Linux 9.7", "product_id": "rhel-9.7:colord-libs" }, "product_reference": "colord-libs", "relates_to_product_reference": "rhel-9.7" }, { "category": "default_component_of", "full_product_name": { "name": "colord-libs as a component of Red Hat Enterprise Linux 8.6.0.z", "product_id": "rhel-8.6.0.z.aus:colord-libs" }, "product_reference": "colord-libs", "relates_to_product_reference": "rhel-8.6.0.z.aus" }, { "category": "default_component_of", "full_product_name": { "name": "colord-libs-debuginfo as a component of Red Hat Enterprise Linux 8.8.0.z", "product_id": "rhel-8.8.0.z.eus:colord-libs-debuginfo" }, "product_reference": "colord-libs-debuginfo", "relates_to_product_reference": "rhel-8.8.0.z.eus" }, { "category": "default_component_of", "full_product_name": { "name": "colord-libs-debuginfo as a component of Red Hat Enterprise Linux 9.2.0.z", "product_id": "rhel-9.2.0.z.eus:colord-libs-debuginfo" }, "product_reference": "colord-libs-debuginfo", "relates_to_product_reference": "rhel-9.2.0.z.eus" }, { "category": "default_component_of", "full_product_name": { "name": "colord-libs-debuginfo as a component of Red Hat Enterprise Linux 9.6.z", "product_id": "rhel-9.6.z.eus:colord-libs-debuginfo" }, "product_reference": "colord-libs-debuginfo", "relates_to_product_reference": "rhel-9.6.z.eus" }, { "category": "default_component_of", "full_product_name": { "name": "colord-libs-debuginfo as a component of Red Hat Enterprise Linux 8.6.0.z", "product_id": "rhel-8.6.0.z.aus:colord-libs-debuginfo" }, "product_reference": "colord-libs-debuginfo", "relates_to_product_reference": "rhel-8.6.0.z.aus" }, { "category": "default_component_of", "full_product_name": { "name": "colord-libs-debuginfo as a component of Red Hat Enterprise Linux 9.4.z", "product_id": "rhel-9.4.z.eus:colord-libs-debuginfo" }, "product_reference": "colord-libs-debuginfo", "relates_to_product_reference": "rhel-9.4.z.eus" }, { "category": "default_component_of", "full_product_name": { "name": "colord-libs-debuginfo as a component of Red Hat Enterprise Linux 8.4.0.z", "product_id": "rhel-8.4.0.z.eus:colord-libs-debuginfo" }, "product_reference": "colord-libs-debuginfo", "relates_to_product_reference": "rhel-8.4.0.z.eus" }, { "category": "default_component_of", "full_product_name": { "name": "colord-libs-debuginfo as a component of Red Hat Enterprise Linux 8.10.z", "product_id": "rhel-8.10.z:colord-libs-debuginfo" }, "product_reference": "colord-libs-debuginfo", "relates_to_product_reference": "rhel-8.10.z" }, { "category": "default_component_of", "full_product_name": { "name": "colord-tests as a component of Red Hat Enterprise Linux 9.6.z", "product_id": "rhel-9.6.z.eus:colord-tests" }, "product_reference": "colord-tests", "relates_to_product_reference": "rhel-9.6.z.eus" }, { "category": "default_component_of", "full_product_name": { "name": "colord-tests as a component of Red Hat Enterprise Linux 9.2.0.z", "product_id": "rhel-9.2.0.z.eus:colord-tests" }, "product_reference": "colord-tests", "relates_to_product_reference": "rhel-9.2.0.z.eus" }, { "category": "default_component_of", "full_product_name": { "name": "colord-tests as a component of Red Hat Enterprise Linux 9.4.z", "product_id": "rhel-9.4.z.eus:colord-tests" }, "product_reference": "colord-tests", "relates_to_product_reference": "rhel-9.4.z.eus" }, { "category": "default_component_of", "full_product_name": { "name": "colord-tests-debuginfo as a component of Red Hat Enterprise Linux 9.6.z", "product_id": "rhel-9.6.z.eus:colord-tests-debuginfo" }, "product_reference": "colord-tests-debuginfo", "relates_to_product_reference": "rhel-9.6.z.eus" }, { "category": "default_component_of", "full_product_name": { "name": "colord-tests-debuginfo as a component of Red Hat Enterprise Linux 9.2.0.z", "product_id": "rhel-9.2.0.z.eus:colord-tests-debuginfo" }, "product_reference": "colord-tests-debuginfo", "relates_to_product_reference": "rhel-9.2.0.z.eus" }, { "category": "default_component_of", "full_product_name": { "name": "colord-tests-debuginfo as a component of Red Hat Enterprise Linux 9.4.z", "product_id": "rhel-9.4.z.eus:colord-tests-debuginfo" }, "product_reference": "colord-tests-debuginfo", "relates_to_product_reference": "rhel-9.4.z.eus" }, { "category": "default_component_of", "full_product_name": { "name": "colord.src as a component of Red Hat Enterprise Linux 9.0.0.z", "product_id": "rhel-9.0.0.z.eus:colord.src" }, "product_reference": "colord.src", "relates_to_product_reference": "rhel-9.0.0.z.eus" }, { "category": "default_component_of", "full_product_name": { "name": "colord.src as a component of Red Hat Enterprise Linux 8.10.z", "product_id": "rhel-8.10.z:colord.src" }, "product_reference": "colord.src", "relates_to_product_reference": "rhel-8.10.z" }, { "category": "default_component_of", "full_product_name": { "name": "colord.src as a component of Red Hat Enterprise Linux 7-els", "product_id": "rhel-7-els.els:colord.src" }, "product_reference": "colord.src", "relates_to_product_reference": "rhel-7-els.els" }, { "category": "default_component_of", "full_product_name": { "name": "colord.src as a component of Red Hat Enterprise Linux 8.8.0.z", "product_id": "rhel-8.8.0.z.eus:colord.src" }, "product_reference": "colord.src", "relates_to_product_reference": "rhel-8.8.0.z.eus" }, { "category": "default_component_of", "full_product_name": { "name": "colord.src as a component of Red Hat Enterprise Linux 9.7.z", "product_id": "rhel-9.7.z:colord.src" }, "product_reference": "colord.src", "relates_to_product_reference": "rhel-9.7.z" }, { "category": "default_component_of", "full_product_name": { "name": "colord.src as a component of Red Hat Enterprise Linux 9.8", "product_id": "rhel-9.8:colord.src" }, "product_reference": "colord.src", "relates_to_product_reference": "rhel-9.8" }, { "category": "default_component_of", "full_product_name": { "name": "colord.src as a component of Red Hat Enterprise Linux 9.6.z", "product_id": "rhel-9.6.z.eus:colord.src" }, "product_reference": "colord.src", "relates_to_product_reference": "rhel-9.6.z.eus" }, { "category": "default_component_of", "full_product_name": { "name": "colord.src as a component of Red Hat Enterprise Linux 9.2.0.z", "product_id": "rhel-9.2.0.z.eus:colord.src" }, "product_reference": "colord.src", "relates_to_product_reference": "rhel-9.2.0.z.eus" }, { "category": "default_component_of", "full_product_name": { "name": "colord.src as a component of Red Hat Enterprise Linux 8.6.0.z", "product_id": "rhel-8.6.0.z.aus:colord.src" }, "product_reference": "colord.src", "relates_to_product_reference": "rhel-8.6.0.z.aus" }, { "category": "default_component_of", "full_product_name": { "name": "colord.src as a component of Red Hat Enterprise Linux 9.4.z", "product_id": "rhel-9.4.z.eus:colord.src" }, "product_reference": "colord.src", "relates_to_product_reference": "rhel-9.4.z.eus" }, { "category": "default_component_of", "full_product_name": { "name": "colord.src as a component of Red Hat Enterprise Linux 9.7", "product_id": "rhel-9.7:colord.src" }, "product_reference": "colord.src", "relates_to_product_reference": "rhel-9.7" }, { "category": "default_component_of", "full_product_name": { "name": "colord.src as a component of Red Hat Enterprise Linux 8.2.0.z", "product_id": "rhel-8.2.0.z.aus:colord.src" }, "product_reference": "colord.src", "relates_to_product_reference": "rhel-8.2.0.z.aus" }, { "category": "default_component_of", "full_product_name": { "name": "colord.src as a component of Red Hat Enterprise Linux 8.4.0.z", "product_id": "rhel-8.4.0.z.eus:colord.src" }, "product_reference": "colord.src", "relates_to_product_reference": "rhel-8.4.0.z.eus" }, { "category": "default_component_of", "full_product_name": { "name": "compat-colord10 as a component of Red Hat Enterprise Linux 7-els", "product_id": "rhel-7-els.els:compat-colord10" }, "product_reference": "compat-colord10", "relates_to_product_reference": "rhel-7-els.els" }, { "category": "default_component_of", "full_product_name": { "name": "compat-colord10-debuginfo as a component of Red Hat Enterprise Linux 7-els", "product_id": "rhel-7-els.els:compat-colord10-debuginfo" }, "product_reference": "compat-colord10-debuginfo", "relates_to_product_reference": "rhel-7-els.els" }, { "category": "default_component_of", "full_product_name": { "name": "compat-colord10.src as a component of Red Hat Enterprise Linux 7-els", "product_id": "rhel-7-els.els:compat-colord10.src" }, "product_reference": "compat-colord10.src", "relates_to_product_reference": "rhel-7-els.els" }, { "category": "default_component_of", "full_product_name": { "name": "compat-libcolord1 as a component of Red Hat Enterprise Linux 7-els", "product_id": "rhel-7-els.els:compat-libcolord1" }, "product_reference": "compat-libcolord1", "relates_to_product_reference": "rhel-7-els.els" }, { "category": "default_component_of", "full_product_name": { "name": "odo as a component of OpenShift Developer Tools & Services 4.15", "product_id": "ocp-tools-4.15:odo" }, "product_reference": "odo", "relates_to_product_reference": "ocp-tools-4.15" }, { "category": "default_component_of", "full_product_name": { "name": "odo as a component of OpenShift Developer Tools & Services 4.12", "product_id": "ocp-tools-4.12:odo" }, "product_reference": "odo", "relates_to_product_reference": "ocp-tools-4.12" }, { "category": "default_component_of", "full_product_name": { "name": "odo as a component of OpenShift Developer Tools & Services 4.13", "product_id": "ocp-tools-4.13:odo" }, "product_reference": "odo", "relates_to_product_reference": "ocp-tools-4.13" }, { "category": "default_component_of", "full_product_name": { "name": "odo-redistributable as a component of OpenShift Developer Tools & Services 4.15", "product_id": "ocp-tools-4.15:odo-redistributable" }, "product_reference": "odo-redistributable", "relates_to_product_reference": "ocp-tools-4.15" }, { "category": "default_component_of", "full_product_name": { "name": "odo.src as a component of OpenShift Developer Tools & Services 4.18", "product_id": "ocp-tools-4.18:odo.src" }, "product_reference": "odo.src", "relates_to_product_reference": "ocp-tools-4.18" }, { "category": "default_component_of", "full_product_name": { "name": "odo.src as a component of OpenShift Developer Tools & Services 4.17", "product_id": "ocp-tools-4.17:odo.src" }, "product_reference": "odo.src", "relates_to_product_reference": "ocp-tools-4.17" }, { "category": "default_component_of", "full_product_name": { "name": "odo.src as a component of OpenShift Developer Tools & Services 4.15", "product_id": "ocp-tools-4.15:odo.src" }, "product_reference": "odo.src", "relates_to_product_reference": "ocp-tools-4.15" }, { "category": "default_component_of", "full_product_name": { "name": "odo.src as a component of OpenShift Developer Tools & Services 4.12", "product_id": "ocp-tools-4.12:odo.src" }, "product_reference": "odo.src", "relates_to_product_reference": "ocp-tools-4.12" }, { "category": "default_component_of", "full_product_name": { "name": "odo.src as a component of OpenShift Developer Tools & Services 4.14", "product_id": "ocp-tools-4.14:odo.src" }, "product_reference": "odo.src", "relates_to_product_reference": "ocp-tools-4.14" }, { "category": "default_component_of", "full_product_name": { "name": "odo.src as a component of OpenShift Developer Tools & Services 4.16", "product_id": "ocp-tools-4.16:odo.src" }, "product_reference": "odo.src", "relates_to_product_reference": "ocp-tools-4.16" }, { "category": "default_component_of", "full_product_name": { "name": "odo.src as a component of OpenShift Developer Tools & Services 4.13", "product_id": "ocp-tools-4.13:odo.src" }, "product_reference": "odo.src", "relates_to_product_reference": "ocp-tools-4.13" }, { "category": "default_component_of", "full_product_name": { "name": "odo.src as a component of OpenShift Developer Tools & Services 4.19", "product_id": "ocp-tools-4.19:odo.src" }, "product_reference": "odo.src", "relates_to_product_reference": "ocp-tools-4.19" } ] }, "vulnerabilities": [ { "cve": "CVE-2021-42523", "cwe": { "id": "CWE-200", "name": "Exposure of Sensitive Information to an Unauthorized Actor" }, "discovery_date": "2022-10-11T00:00:00+00:00", "flags": [ { "label": "vulnerable_code_not_present", "product_ids": [ "ocp-tools-4.12:odo", "ocp-tools-4.12:odo.src", "ocp-tools-4.13:odo", "ocp-tools-4.13:odo.src", "ocp-tools-4.14:odo.src", "ocp-tools-4.15:odo", "ocp-tools-4.15:odo-redistributable", "ocp-tools-4.15:odo.src", "ocp-tools-4.16:odo.src", "ocp-tools-4.17:odo.src", "ocp-tools-4.18:odo.src", "ocp-tools-4.19:odo.src", "rhel-7-els.els:colord", "rhel-7-els.els:colord-debuginfo", "rhel-7-els.els:colord-devel", "rhel-7-els.els:colord-devel-docs", "rhel-7-els.els:colord-extra-profiles", "rhel-7-els.els:colord-libs", "rhel-7-els.els:colord.src", "rhel-7-els.els:compat-colord10", "rhel-7-els.els:compat-colord10-debuginfo", "rhel-7-els.els:compat-colord10.src", "rhel-7-els.els:compat-libcolord1", "rhel-8.10.z:colord", "rhel-8.10.z:colord-debuginfo", "rhel-8.10.z:colord-debugsource", "rhel-8.10.z:colord-devel", "rhel-8.10.z:colord-devel-docs", "rhel-8.10.z:colord-extra-profiles", "rhel-8.10.z:colord-libs", "rhel-8.10.z:colord-libs-debuginfo", "rhel-8.10.z:colord.src", "rhel-8.2.0.z.aus:colord", "rhel-8.2.0.z.aus:colord-devel", "rhel-8.2.0.z.aus:colord-devel-docs", "rhel-8.2.0.z.aus:colord-libs", "rhel-8.2.0.z.aus:colord.src", "rhel-8.4.0.z.eus:colord", "rhel-8.4.0.z.eus:colord-debuginfo", "rhel-8.4.0.z.eus:colord-debugsource", "rhel-8.4.0.z.eus:colord-devel", "rhel-8.4.0.z.eus:colord-devel-docs", "rhel-8.4.0.z.eus:colord-extra-profiles", "rhel-8.4.0.z.eus:colord-libs", "rhel-8.4.0.z.eus:colord-libs-debuginfo", "rhel-8.4.0.z.eus:colord.src", "rhel-8.6.0.z.aus:colord", "rhel-8.6.0.z.aus:colord-debuginfo", "rhel-8.6.0.z.aus:colord-debugsource", "rhel-8.6.0.z.aus:colord-devel", "rhel-8.6.0.z.aus:colord-devel-docs", "rhel-8.6.0.z.aus:colord-extra-profiles", "rhel-8.6.0.z.aus:colord-libs", "rhel-8.6.0.z.aus:colord-libs-debuginfo", "rhel-8.6.0.z.aus:colord.src", "rhel-8.8.0.z.eus:colord", "rhel-8.8.0.z.eus:colord-debuginfo", "rhel-8.8.0.z.eus:colord-debugsource", "rhel-8.8.0.z.eus:colord-devel", "rhel-8.8.0.z.eus:colord-devel-docs", "rhel-8.8.0.z.eus:colord-extra-profiles", "rhel-8.8.0.z.eus:colord-libs", "rhel-8.8.0.z.eus:colord-libs-debuginfo", "rhel-8.8.0.z.eus:colord.src", "rhel-9.0.0.z.eus:colord", "rhel-9.0.0.z.eus:colord-devel", "rhel-9.0.0.z.eus:colord-devel-docs", "rhel-9.0.0.z.eus:colord-libs", "rhel-9.0.0.z.eus:colord.src", "rhel-9.2.0.z.eus:colord", "rhel-9.2.0.z.eus:colord-debuginfo", "rhel-9.2.0.z.eus:colord-debugsource", "rhel-9.2.0.z.eus:colord-devel", "rhel-9.2.0.z.eus:colord-devel-docs", "rhel-9.2.0.z.eus:colord-extra-profiles", "rhel-9.2.0.z.eus:colord-libs", "rhel-9.2.0.z.eus:colord-libs-debuginfo", "rhel-9.2.0.z.eus:colord-tests", "rhel-9.2.0.z.eus:colord-tests-debuginfo", "rhel-9.2.0.z.eus:colord.src", "rhel-9.4.z.eus:colord", "rhel-9.4.z.eus:colord-debuginfo", "rhel-9.4.z.eus:colord-debugsource", "rhel-9.4.z.eus:colord-devel", "rhel-9.4.z.eus:colord-devel-docs", "rhel-9.4.z.eus:colord-extra-profiles", "rhel-9.4.z.eus:colord-libs", "rhel-9.4.z.eus:colord-libs-debuginfo", "rhel-9.4.z.eus:colord-tests", "rhel-9.4.z.eus:colord-tests-debuginfo", "rhel-9.4.z.eus:colord.src", "rhel-9.6.z.eus:colord", "rhel-9.6.z.eus:colord-debuginfo", "rhel-9.6.z.eus:colord-debugsource", "rhel-9.6.z.eus:colord-devel", "rhel-9.6.z.eus:colord-devel-docs", "rhel-9.6.z.eus:colord-extra-profiles", "rhel-9.6.z.eus:colord-libs", "rhel-9.6.z.eus:colord-libs-debuginfo", "rhel-9.6.z.eus:colord-tests", "rhel-9.6.z.eus:colord-tests-debuginfo", "rhel-9.6.z.eus:colord.src", "rhel-9.7.z:colord", "rhel-9.7.z:colord-devel", "rhel-9.7.z:colord-devel-docs", "rhel-9.7.z:colord-libs", "rhel-9.7.z:colord.src", "rhel-9.7:colord", "rhel-9.7:colord-devel", "rhel-9.7:colord-devel-docs", "rhel-9.7:colord-libs", "rhel-9.7:colord.src", "rhel-9.8:colord", "rhel-9.8:colord-devel", "rhel-9.8:colord-devel-docs", "rhel-9.8:colord-libs", "rhel-9.8:colord.src" ] } ], "notes": [ { "category": "description", "text": "There are two Information Disclosure vulnerabilities in colord, and they lie in colord/src/cd-device-db.c and colord/src/cd-profile-db.c separately. They exist because the 'err_msg' of 'sqlite3_exec' is not releasing after use, while libxml2 emphasizes that the caller needs to release it.", "title": "Vulnerability description" } ], "product_status": { "known_not_affected": [ "ocp-tools-4.12:odo", "ocp-tools-4.12:odo.src", "ocp-tools-4.13:odo", "ocp-tools-4.13:odo.src", "ocp-tools-4.14:odo.src", "ocp-tools-4.15:odo", "ocp-tools-4.15:odo-redistributable", "ocp-tools-4.15:odo.src", "ocp-tools-4.16:odo.src", "ocp-tools-4.17:odo.src", "ocp-tools-4.18:odo.src", "ocp-tools-4.19:odo.src", "rhel-7-els.els:colord", "rhel-7-els.els:colord-debuginfo", "rhel-7-els.els:colord-devel", "rhel-7-els.els:colord-devel-docs", "rhel-7-els.els:colord-extra-profiles", "rhel-7-els.els:colord-libs", "rhel-7-els.els:colord.src", "rhel-7-els.els:compat-colord10", "rhel-7-els.els:compat-colord10-debuginfo", "rhel-7-els.els:compat-colord10.src", "rhel-7-els.els:compat-libcolord1", "rhel-8.10.z:colord", "rhel-8.10.z:colord-debuginfo", "rhel-8.10.z:colord-debugsource", "rhel-8.10.z:colord-devel", "rhel-8.10.z:colord-devel-docs", "rhel-8.10.z:colord-extra-profiles", "rhel-8.10.z:colord-libs", "rhel-8.10.z:colord-libs-debuginfo", "rhel-8.10.z:colord.src", "rhel-8.2.0.z.aus:colord", "rhel-8.2.0.z.aus:colord-devel", "rhel-8.2.0.z.aus:colord-devel-docs", "rhel-8.2.0.z.aus:colord-libs", "rhel-8.2.0.z.aus:colord.src", "rhel-8.4.0.z.eus:colord", "rhel-8.4.0.z.eus:colord-debuginfo", "rhel-8.4.0.z.eus:colord-debugsource", "rhel-8.4.0.z.eus:colord-devel", "rhel-8.4.0.z.eus:colord-devel-docs", "rhel-8.4.0.z.eus:colord-extra-profiles", "rhel-8.4.0.z.eus:colord-libs", "rhel-8.4.0.z.eus:colord-libs-debuginfo", "rhel-8.4.0.z.eus:colord.src", "rhel-8.6.0.z.aus:colord", "rhel-8.6.0.z.aus:colord-debuginfo", "rhel-8.6.0.z.aus:colord-debugsource", "rhel-8.6.0.z.aus:colord-devel", "rhel-8.6.0.z.aus:colord-devel-docs", "rhel-8.6.0.z.aus:colord-extra-profiles", "rhel-8.6.0.z.aus:colord-libs", "rhel-8.6.0.z.aus:colord-libs-debuginfo", "rhel-8.6.0.z.aus:colord.src", "rhel-8.8.0.z.eus:colord", "rhel-8.8.0.z.eus:colord-debuginfo", "rhel-8.8.0.z.eus:colord-debugsource", "rhel-8.8.0.z.eus:colord-devel", "rhel-8.8.0.z.eus:colord-devel-docs", "rhel-8.8.0.z.eus:colord-extra-profiles", "rhel-8.8.0.z.eus:colord-libs", "rhel-8.8.0.z.eus:colord-libs-debuginfo", "rhel-8.8.0.z.eus:colord.src", "rhel-9.0.0.z.eus:colord", "rhel-9.0.0.z.eus:colord-devel", "rhel-9.0.0.z.eus:colord-devel-docs", "rhel-9.0.0.z.eus:colord-libs", "rhel-9.0.0.z.eus:colord.src", "rhel-9.2.0.z.eus:colord", "rhel-9.2.0.z.eus:colord-debuginfo", "rhel-9.2.0.z.eus:colord-debugsource", "rhel-9.2.0.z.eus:colord-devel", "rhel-9.2.0.z.eus:colord-devel-docs", "rhel-9.2.0.z.eus:colord-extra-profiles", "rhel-9.2.0.z.eus:colord-libs", "rhel-9.2.0.z.eus:colord-libs-debuginfo", "rhel-9.2.0.z.eus:colord-tests", "rhel-9.2.0.z.eus:colord-tests-debuginfo", "rhel-9.2.0.z.eus:colord.src", "rhel-9.4.z.eus:colord", "rhel-9.4.z.eus:colord-debuginfo", "rhel-9.4.z.eus:colord-debugsource", "rhel-9.4.z.eus:colord-devel", "rhel-9.4.z.eus:colord-devel-docs", "rhel-9.4.z.eus:colord-extra-profiles", "rhel-9.4.z.eus:colord-libs", "rhel-9.4.z.eus:colord-libs-debuginfo", "rhel-9.4.z.eus:colord-tests", "rhel-9.4.z.eus:colord-tests-debuginfo", "rhel-9.4.z.eus:colord.src", "rhel-9.6.z.eus:colord", "rhel-9.6.z.eus:colord-debuginfo", "rhel-9.6.z.eus:colord-debugsource", "rhel-9.6.z.eus:colord-devel", "rhel-9.6.z.eus:colord-devel-docs", "rhel-9.6.z.eus:colord-extra-profiles", "rhel-9.6.z.eus:colord-libs", "rhel-9.6.z.eus:colord-libs-debuginfo", "rhel-9.6.z.eus:colord-tests", "rhel-9.6.z.eus:colord-tests-debuginfo", "rhel-9.6.z.eus:colord.src", "rhel-9.7.z:colord", "rhel-9.7.z:colord-devel", "rhel-9.7.z:colord-devel-docs", "rhel-9.7.z:colord-libs", "rhel-9.7.z:colord.src", "rhel-9.7:colord", "rhel-9.7:colord-devel", "rhel-9.7:colord-devel-docs", "rhel-9.7:colord-libs", "rhel-9.7:colord.src", "rhel-9.8:colord", "rhel-9.8:colord-devel", "rhel-9.8:colord-devel-docs", "rhel-9.8:colord-libs", "rhel-9.8:colord.src" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2021-42523" }, { "category": "external", "summary": "nvd.nist.gov", "url": "https://nvd.nist.gov/vuln/detail/CVE-2021-42523" }, { "category": "external", "summary": "www.cve.org", "url": "https://www.cve.org/CVERecord?id=CVE-2021-42523" } ], "scores": [ { "cvss_v3": { "version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "baseScore": 7.5, "baseSeverity": "HIGH" }, "products": [ "ocp-tools-4.12:odo", "ocp-tools-4.12:odo.src", "ocp-tools-4.13:odo", "ocp-tools-4.13:odo.src", "ocp-tools-4.14:odo.src", "ocp-tools-4.15:odo", "ocp-tools-4.15:odo-redistributable", "ocp-tools-4.15:odo.src", "ocp-tools-4.16:odo.src", "ocp-tools-4.17:odo.src", "ocp-tools-4.18:odo.src", "ocp-tools-4.19:odo.src", "rhel-7-els.els:colord", "rhel-7-els.els:colord-debuginfo", "rhel-7-els.els:colord-devel", "rhel-7-els.els:colord-devel-docs", "rhel-7-els.els:colord-extra-profiles", "rhel-7-els.els:colord-libs", "rhel-7-els.els:colord.src", "rhel-7-els.els:compat-colord10", "rhel-7-els.els:compat-colord10-debuginfo", "rhel-7-els.els:compat-colord10.src", "rhel-7-els.els:compat-libcolord1", "rhel-8.10.z:colord", "rhel-8.10.z:colord-debuginfo", "rhel-8.10.z:colord-debugsource", "rhel-8.10.z:colord-devel", "rhel-8.10.z:colord-devel-docs", "rhel-8.10.z:colord-extra-profiles", "rhel-8.10.z:colord-libs", "rhel-8.10.z:colord-libs-debuginfo", "rhel-8.10.z:colord.src", "rhel-8.2.0.z.aus:colord", "rhel-8.2.0.z.aus:colord-devel", "rhel-8.2.0.z.aus:colord-devel-docs", "rhel-8.2.0.z.aus:colord-libs", "rhel-8.2.0.z.aus:colord.src", "rhel-8.4.0.z.eus:colord", "rhel-8.4.0.z.eus:colord-debuginfo", "rhel-8.4.0.z.eus:colord-debugsource", "rhel-8.4.0.z.eus:colord-devel", "rhel-8.4.0.z.eus:colord-devel-docs", "rhel-8.4.0.z.eus:colord-extra-profiles", "rhel-8.4.0.z.eus:colord-libs", "rhel-8.4.0.z.eus:colord-libs-debuginfo", "rhel-8.4.0.z.eus:colord.src", "rhel-8.6.0.z.aus:colord", "rhel-8.6.0.z.aus:colord-debuginfo", "rhel-8.6.0.z.aus:colord-debugsource", "rhel-8.6.0.z.aus:colord-devel", "rhel-8.6.0.z.aus:colord-devel-docs", "rhel-8.6.0.z.aus:colord-extra-profiles", "rhel-8.6.0.z.aus:colord-libs", "rhel-8.6.0.z.aus:colord-libs-debuginfo", "rhel-8.6.0.z.aus:colord.src", "rhel-8.8.0.z.eus:colord", "rhel-8.8.0.z.eus:colord-debuginfo", "rhel-8.8.0.z.eus:colord-debugsource", "rhel-8.8.0.z.eus:colord-devel", "rhel-8.8.0.z.eus:colord-devel-docs", "rhel-8.8.0.z.eus:colord-extra-profiles", "rhel-8.8.0.z.eus:colord-libs", "rhel-8.8.0.z.eus:colord-libs-debuginfo", "rhel-8.8.0.z.eus:colord.src", "rhel-9.0.0.z.eus:colord", "rhel-9.0.0.z.eus:colord-devel", "rhel-9.0.0.z.eus:colord-devel-docs", "rhel-9.0.0.z.eus:colord-libs", "rhel-9.0.0.z.eus:colord.src", "rhel-9.2.0.z.eus:colord", "rhel-9.2.0.z.eus:colord-debuginfo", "rhel-9.2.0.z.eus:colord-debugsource", "rhel-9.2.0.z.eus:colord-devel", "rhel-9.2.0.z.eus:colord-devel-docs", "rhel-9.2.0.z.eus:colord-extra-profiles", "rhel-9.2.0.z.eus:colord-libs", "rhel-9.2.0.z.eus:colord-libs-debuginfo", "rhel-9.2.0.z.eus:colord-tests", "rhel-9.2.0.z.eus:colord-tests-debuginfo", "rhel-9.2.0.z.eus:colord.src", "rhel-9.4.z.eus:colord", "rhel-9.4.z.eus:colord-debuginfo", "rhel-9.4.z.eus:colord-debugsource", "rhel-9.4.z.eus:colord-devel", "rhel-9.4.z.eus:colord-devel-docs", "rhel-9.4.z.eus:colord-extra-profiles", "rhel-9.4.z.eus:colord-libs", "rhel-9.4.z.eus:colord-libs-debuginfo", "rhel-9.4.z.eus:colord-tests", "rhel-9.4.z.eus:colord-tests-debuginfo", "rhel-9.4.z.eus:colord.src", "rhel-9.6.z.eus:colord", "rhel-9.6.z.eus:colord-debuginfo", "rhel-9.6.z.eus:colord-debugsource", "rhel-9.6.z.eus:colord-devel", "rhel-9.6.z.eus:colord-devel-docs", "rhel-9.6.z.eus:colord-extra-profiles", "rhel-9.6.z.eus:colord-libs", "rhel-9.6.z.eus:colord-libs-debuginfo", "rhel-9.6.z.eus:colord-tests", "rhel-9.6.z.eus:colord-tests-debuginfo", "rhel-9.6.z.eus:colord.src", "rhel-9.7.z:colord", "rhel-9.7.z:colord-devel", "rhel-9.7.z:colord-devel-docs", "rhel-9.7.z:colord-libs", "rhel-9.7.z:colord.src", "rhel-9.7:colord", "rhel-9.7:colord-devel", "rhel-9.7:colord-devel-docs", "rhel-9.7:colord-libs", "rhel-9.7:colord.src", "rhel-9.8:colord", "rhel-9.8:colord-devel", "rhel-9.8:colord-devel-docs", "rhel-9.8:colord-libs", "rhel-9.8:colord.src" ] } ], "threats": [ { "category": "impact", "details": "Low", "product_ids": [ "ocp-tools-4.12:odo", "ocp-tools-4.12:odo.src", "ocp-tools-4.13:odo", "ocp-tools-4.13:odo.src", "ocp-tools-4.14:odo.src", "ocp-tools-4.15:odo", "ocp-tools-4.15:odo-redistributable", "ocp-tools-4.15:odo.src", "ocp-tools-4.16:odo.src", "ocp-tools-4.17:odo.src", "ocp-tools-4.18:odo.src", "ocp-tools-4.19:odo.src", "rhel-7-els.els:colord", "rhel-7-els.els:colord-debuginfo", "rhel-7-els.els:colord-devel", "rhel-7-els.els:colord-devel-docs", "rhel-7-els.els:colord-extra-profiles", "rhel-7-els.els:colord-libs", "rhel-7-els.els:colord.src", "rhel-7-els.els:compat-colord10", "rhel-7-els.els:compat-colord10-debuginfo", "rhel-7-els.els:compat-colord10.src", "rhel-7-els.els:compat-libcolord1", "rhel-8.10.z:colord", "rhel-8.10.z:colord-debuginfo", "rhel-8.10.z:colord-debugsource", "rhel-8.10.z:colord-devel", "rhel-8.10.z:colord-devel-docs", "rhel-8.10.z:colord-extra-profiles", "rhel-8.10.z:colord-libs", "rhel-8.10.z:colord-libs-debuginfo", "rhel-8.10.z:colord.src", "rhel-8.2.0.z.aus:colord", "rhel-8.2.0.z.aus:colord-devel", "rhel-8.2.0.z.aus:colord-devel-docs", "rhel-8.2.0.z.aus:colord-libs", "rhel-8.2.0.z.aus:colord.src", "rhel-8.4.0.z.eus:colord", "rhel-8.4.0.z.eus:colord-debuginfo", "rhel-8.4.0.z.eus:colord-debugsource", "rhel-8.4.0.z.eus:colord-devel", "rhel-8.4.0.z.eus:colord-devel-docs", "rhel-8.4.0.z.eus:colord-extra-profiles", "rhel-8.4.0.z.eus:colord-libs", "rhel-8.4.0.z.eus:colord-libs-debuginfo", "rhel-8.4.0.z.eus:colord.src", "rhel-8.6.0.z.aus:colord", "rhel-8.6.0.z.aus:colord-debuginfo", "rhel-8.6.0.z.aus:colord-debugsource", "rhel-8.6.0.z.aus:colord-devel", "rhel-8.6.0.z.aus:colord-devel-docs", "rhel-8.6.0.z.aus:colord-extra-profiles", "rhel-8.6.0.z.aus:colord-libs", "rhel-8.6.0.z.aus:colord-libs-debuginfo", "rhel-8.6.0.z.aus:colord.src", "rhel-8.8.0.z.eus:colord", "rhel-8.8.0.z.eus:colord-debuginfo", "rhel-8.8.0.z.eus:colord-debugsource", "rhel-8.8.0.z.eus:colord-devel", "rhel-8.8.0.z.eus:colord-devel-docs", "rhel-8.8.0.z.eus:colord-extra-profiles", "rhel-8.8.0.z.eus:colord-libs", "rhel-8.8.0.z.eus:colord-libs-debuginfo", "rhel-8.8.0.z.eus:colord.src", "rhel-9.0.0.z.eus:colord", "rhel-9.0.0.z.eus:colord-devel", "rhel-9.0.0.z.eus:colord-devel-docs", "rhel-9.0.0.z.eus:colord-libs", "rhel-9.0.0.z.eus:colord.src", "rhel-9.2.0.z.eus:colord", "rhel-9.2.0.z.eus:colord-debuginfo", "rhel-9.2.0.z.eus:colord-debugsource", "rhel-9.2.0.z.eus:colord-devel", "rhel-9.2.0.z.eus:colord-devel-docs", "rhel-9.2.0.z.eus:colord-extra-profiles", "rhel-9.2.0.z.eus:colord-libs", "rhel-9.2.0.z.eus:colord-libs-debuginfo", "rhel-9.2.0.z.eus:colord-tests", "rhel-9.2.0.z.eus:colord-tests-debuginfo", "rhel-9.2.0.z.eus:colord.src", "rhel-9.4.z.eus:colord", "rhel-9.4.z.eus:colord-debuginfo", "rhel-9.4.z.eus:colord-debugsource", "rhel-9.4.z.eus:colord-devel", "rhel-9.4.z.eus:colord-devel-docs", "rhel-9.4.z.eus:colord-extra-profiles", "rhel-9.4.z.eus:colord-libs", "rhel-9.4.z.eus:colord-libs-debuginfo", "rhel-9.4.z.eus:colord-tests", "rhel-9.4.z.eus:colord-tests-debuginfo", "rhel-9.4.z.eus:colord.src", "rhel-9.6.z.eus:colord", "rhel-9.6.z.eus:colord-debuginfo", "rhel-9.6.z.eus:colord-debugsource", "rhel-9.6.z.eus:colord-devel", "rhel-9.6.z.eus:colord-devel-docs", "rhel-9.6.z.eus:colord-extra-profiles", "rhel-9.6.z.eus:colord-libs", "rhel-9.6.z.eus:colord-libs-debuginfo", "rhel-9.6.z.eus:colord-tests", "rhel-9.6.z.eus:colord-tests-debuginfo", "rhel-9.6.z.eus:colord.src", "rhel-9.7.z:colord", "rhel-9.7.z:colord-devel", "rhel-9.7.z:colord-devel-docs", "rhel-9.7.z:colord-libs", "rhel-9.7.z:colord.src", "rhel-9.7:colord", "rhel-9.7:colord-devel", "rhel-9.7:colord-devel-docs", "rhel-9.7:colord-libs", "rhel-9.7:colord.src", "rhel-9.8:colord", "rhel-9.8:colord-devel", "rhel-9.8:colord-devel-docs", "rhel-9.8:colord-libs", "rhel-9.8:colord.src" ] } ], "title": "potential memory leak, forgetting to free error message of libsqlite3 API 'sqlite3_exec' -1" } ] }