This update for colord fixes the following issues:
* CVE-2021-42523: The original fix was wrong and did not properly free the
error, resulting in a crash that has now been addressed (bsc#1250750).
## Patch Instructions:
To install this SUSE update use the SUSE recommended installation methods like
YaST online_update or "zypper patch".
Alternatively you can run the command listed for your product:
* openSUSE Leap 15.4
zypper in -t patch SUSE-2025-3899=1
* SUSE Linux Enterprise Micro for Rancher 5.3
zypper in -t patch SUSE-SLE-Micro-5.3-2025-3899=1
* SUSE Linux Enterprise Micro 5.3
zypper in -t patch SUSE-SLE-Micro-5.3-2025-3899=1
* SUSE Linux Enterprise Micro for Rancher 5.4
zypper in -t patch SUSE-SLE-Micro-5.4-2025-3899=1
* SUSE Linux Enterprise Micro 5.4
zypper in -t patch SUSE-SLE-Micro-5.4-2025-3899=1
* SUSE Linux Enterprise Micro 5.5
zypper in -t patch SUSE-SLE-Micro-5.5-2025-3899=1
* openSUSE Leap 15.4 (aarch64 ppc64le s390x x86_64 i586)
* libcolorhug2-1.4.5-150400.4.9.1
* libcolorhug2-debuginfo-1.4.5-150400.4.9.1
* typelib-1_0-Colord-1_0-1.4.5-150400.4.9.1
* colord-color-profiles-1.4.5-150400.4.9.1
* colord-debuginfo-1.4.5-150400.4.9.1
* typelib-1_0-Colorhug-1_0-1.4.5-150400.4.9.1
* libcolord-devel-1.4.5-150400.4.9.1
* colord-1.4.5-150400.4.9.1
* libcolord2-1.4.5-150400.4.9.1
* libcolord2-debuginfo-1.4.5-150400.4.9.1
* colord-debugsource-1.4.5-150400.4.9.1
* openSUSE Leap 15.4 (noarch)
* colord-lang-1.4.5-150400.4.9.1
* openSUSE Leap 15.4 (x86_64)
* libcolord2-32bit-debuginfo-1.4.5-150400.4.9.1
* libcolord2-32bit-1.4.5-150400.4.9.1
* openSUSE Leap 15.4 (aarch64_ilp32)
* libcolord2-64bit-debuginfo-1.4.5-150400.4.9.1
* libcolord2-64bit-1.4.5-150400.4.9.1
* SUSE Linux Enterprise Micro for Rancher 5.3 (aarch64 s390x x86_64)
* colord-debugsource-1.4.5-150400.4.9.1
* libcolord2-1.4.5-150400.4.9.1
* colord-debuginfo-1.4.5-150400.4.9.1
* libcolord2-debuginfo-1.4.5-150400.4.9.1
* SUSE Linux...
Read the Full Advisory* bsc#1250750
## References:
* https://www.suse.com/security/cve/CVE-2021-42523.html
* https://bugzilla.suse.com/show_bug.cgi?id=1250750
Get the latest Linux and open source security news straight to your inbox.