CVE catalog
CVE-2021-42522
anjuta: CVE-2021-42522
- Severity
- Low
- Published
- Source
- [NVD] · [CVE record]
- EPSS
- 0.83% · Oct 25, 2026
There is a Information Disclosure vulnerability in anjuta/plugins/document-manager/anjuta-bookmarks.c. This issue was caused by the incorrect use of libxml2 API. The vendor forgot to call 'g_free()' to release the return value of 'xmlGetProp()'.
Vulnerable and fixed packages
Distribution-reported package versions and fixes. These do not depend on matching against the OpenFactory package catalog.
| Distribution | Package | Release | Version | Status |
|---|---|---|---|---|
| Debian | anjuta | bookworm | 2:3.34.0-8 | vulnerable |
| Ubuntu | anjuta | 16.04 | 2:3.16.0-1 | vulnerable |
| Ubuntu | anjuta | 16.04 | 2:3.18.0-1 | vulnerable |
| Ubuntu | anjuta | 16.04 | 2:3.18.2-1 | vulnerable |
| Ubuntu | anjuta | 18.04 | 2:3.26.0-1 | vulnerable |
| Ubuntu | anjuta | 18.04 | 2:3.26.0-2 | vulnerable |
| Ubuntu | anjuta | 18.04 | 2:3.26.0-3 | vulnerable |
| Ubuntu | anjuta | 18.04 | 2:3.26.0-4 | vulnerable |
| Ubuntu | anjuta | 18.04 | 2:3.26.0-4ubuntu1 | vulnerable |
| Ubuntu | anjuta | 18.04 | 2:3.26.0-5 | vulnerable |
| Ubuntu | anjuta | 18.04 | 2:3.28.0-1 | vulnerable |
| Ubuntu | anjuta | 20.04 | 2:3.34.0-2 | vulnerable |
| Ubuntu | anjuta | 20.04 | 2:3.34.0-3 | vulnerable |
| Ubuntu | anjuta | 20.04 | 2:3.34.0-3build1 | vulnerable |
| Ubuntu | anjuta | 20.04 | 2:3.34.0-3build2 | vulnerable |
| Ubuntu | anjuta | 20.04 | 2:3.34.0-3ubuntu1 | vulnerable |
| Ubuntu | anjuta | 22.04 | 2:3.34.0-3ubuntu3 | vulnerable |
| Ubuntu | anjuta | 22.04 | 2:3.34.0-4 | vulnerable |
| Ubuntu | anjuta | 22.04 | 2:3.34.0-5 | vulnerable |
Fixed-version evidence
| Distribution | Package | Type | Release | Fixed version | Urgency | Origin | Bugs |
|---|---|---|---|---|---|---|---|
| Debian | anjuta | source | bookworm | (unfixed) | unimportant | Not reported | Not reported |
OpenFactory catalog packages
[Debian 12 (Bookworm)]
- [anjuta]Affected
Details (2)
2:3.34.0-8· amd64 · bookwormAffected
dsa · anjuta · debian · bookworm; dsa · anjuta · debian · 12
2:3.34.0-8· arm64 · bookwormAffected
dsa · anjuta · debian · bookworm; dsa · anjuta · debian · 12
- [anjuta-common]Affected
Source package: [anjuta]
Details (2)
2:3.34.0-8· all · bookwormAffected
dsa · anjuta · debian · bookworm; dsa · anjuta · debian · 12
2:3.34.0-8· all · bookwormAffected
dsa · anjuta · debian · bookworm; dsa · anjuta · debian · 12
- [gir1.2-anjuta-3.0]Affected
Source package: [anjuta]
Details (2)
2:3.34.0-8· amd64 · bookwormAffected
dsa · anjuta · debian · bookworm; dsa · anjuta · debian · 12
2:3.34.0-8· arm64 · bookwormAffected
dsa · anjuta · debian · bookworm; dsa · anjuta · debian · 12
- [libanjuta-3-0]Affected
Source package: [anjuta]
Details (2)
2:3.34.0-8· amd64 · bookwormAffected
dsa · anjuta · debian · bookworm; dsa · anjuta · debian · 12
2:3.34.0-8· arm64 · bookwormAffected
dsa · anjuta · debian · bookworm; dsa · anjuta · debian · 12
- [libanjuta-dev]Affected
Source package: [anjuta]
Details (2)
2:3.34.0-8· amd64 · bookwormAffected
dsa · anjuta · debian · bookworm; dsa · anjuta · debian · 12
2:3.34.0-8· arm64 · bookwormAffected
dsa · anjuta · debian · bookworm; dsa · anjuta · debian · 12
Observed: