File colord-CVE-2021-42523.patch of Package colord.41086
diff -urp colord-1.4.6.orig/src/cd-common.h colord-1.4.6/src/cd-common.h
--- colord-1.4.6.orig/src/cd-common.h 2022-02-16 09:35:10.475235000 -0600
+++ colord-1.4.6/src/cd-common.h 2025-10-01 16:32:19.043605853 -0500
@@ -26,6 +26,7 @@
#include <gio/gio.h>
#include <colord-private.h>
+#include <sqlite3.h>
#define COLORD_DBUS_SERVICE "org.freedesktop.ColorManager"
#define COLORD_DBUS_PATH "/org/freedesktop/ColorManager"
@@ -37,6 +38,8 @@
#define CD_DBUS_METADATA_KEY_LEN_MAX 256 /* chars */
#define CD_DBUS_METADATA_VALUE_LEN_MAX 4096 /* chars */
+typedef char sqlite_str;
+G_DEFINE_AUTOPTR_CLEANUP_FUNC (sqlite_str, sqlite3_free)
#define CD_CLIENT_ERROR cd_client_error_quark()
diff -urp colord-1.4.6.orig/src/cd-profile-db.c colord-1.4.6/src/cd-profile-db.c
--- colord-1.4.6.orig/src/cd-profile-db.c 2022-02-16 09:35:10.476235200 -0600
+++ colord-1.4.6/src/cd-profile-db.c 2025-10-01 16:33:19.197099961 -0500
@@ -48,7 +48,7 @@ cd_profile_db_load (CdProfileDb *pdb,
{
CdProfileDbPrivate *priv = GET_PRIVATE (pdb);
const gchar *statement;
- gchar *error_msg = NULL;
+ g_autoptr(sqlite_str) error_msg = NULL;
gint rc;
g_autofree gchar *path = NULL;