Every CVESearch/Get API key

SUSE-SU-2024:3219-1

Security update for colord

No scoreFix available

SUSE-SU-2024:3219-1 is a vulnerability with no CVSS score yet in colord, published September 12, 2024. No source lists public exploit code. Fixed in colord 1.4.6-150600.3.3.1.

What does this mean?
Severity
UnratedNo CVSS score yet
Exploit chance
UnscoredNo EPSS score yet
Exploitation
None knownNot on CISA’s or ENISA’s lists
Fixed in
1.4.6-150600.3.3.1colord +3 more

Description

This update for colord fixes the following issues:

  • Fixed a potential local privilege escalation by removing the script in the specfile which changes the ownership of /var/lib/colord. (bsc#1208056)

Affected packages

Affected packages
PackageAffectedFixed
colord
SUSE:Linux Enterprise Module for Basesystem 15 SP6
before 1.4.6-150600.3.3.1
1.4.6-150600.3.3.1
colord
SUSE:Linux Enterprise Module for Desktop Applications 15 SP6
before 1.4.6-150600.3.3.1
1.4.6-150600.3.3.1
colord
SUSE:Linux Enterprise Workstation Extension 15 SP6
before 1.4.6-150600.3.3.1
1.4.6-150600.3.3.1
colord
openSUSE:Leap 15.6
before 1.4.6-150600.3.3.1
1.4.6-150600.3.3.1

What each source reports

OSVNo score

Security update for colord

This update for colord fixes the following issues:

  • Fixed a potential local privilege escalation by removing the script in the specfile which changes the ownership of /var/lib/colord. (bsc#1208056)
Record
SUSE-SU-2024:3219-1
Updated
2026-11-02

History

History
RecordedChangedSources
first indexedOSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

References

MoveEnter Open