Approved changes feed: RSS · Atom

cpe:2.3:a:ubuntu:accountsservice:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorUbuntu (54779f98-997b-58ec-a561-52dfa4086aae)
ProductAccountsservice (60f33517-7d20-58a0-a7da-c55ef3d63c5e)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from purl2cpe mapping

PURL mappings

PURLSourceLast updated
pkg:deb/debian/accountsservice purl2cpe 2026-06-01 10:12:02.504174
pkg:deb/ubuntu/accountsservice purl2cpe 2026-06-01 10:12:02.504175
pkg:github/magcius/accountsservice purl2cpe 2026-06-01 10:12:02.504177
pkg:rpm/fedora/accountsservice purl2cpe 2026-06-01 10:12:02.504178
pkg:rpm/opensuse/accountsservice purl2cpe 2026-06-01 10:12:02.504179

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2021-3939 vulnerable 2026-06-03 14:45:13.517741 Free of static data in accountsservice
HIGH (7.8)
Ubuntu-specific modifications to accountsservice (in patch file debian/patches/0010-set-language.patch) caused the fallback_locale variable, pointing to static storage, to be freed, in the user_change_language_authorized_cb function. This is reachable via the SetLanguage dbus function. This is fixed in versions 0.6.55-0ubuntu12~20.04.5, 0.6.55-0ubuntu13.3, 0.6.55-0ubuntu14.1.
Published: 2021-11-17T03:15:10.949Z
Updated: 2024-09-16T18:02:58.362Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.