Summary
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2019-13734: Out of bounds write in SQLite in Google Chrome prior to 79.0.3945.79 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. 1781980: CVE-2019-13734 sqlite: fts3: improve shadow table corruption detection
Fixed packages 6
| Release | Package | Fixed in |
|---|---|---|
| Amazon Linux · 2 | lemon | 0:3.7.17-8.amzn2.1.1 |
| Amazon Linux · 2 | sqlite | 0:3.7.17-8.amzn2.1.1 |
| Amazon Linux · 2 | sqlite-debuginfo | 0:3.7.17-8.amzn2.1.1 |
| Amazon Linux · 2 | sqlite-devel | 0:3.7.17-8.amzn2.1.1 |
| Amazon Linux · 2 | sqlite-doc | 0:3.7.17-8.amzn2.1.1 |
| Amazon Linux · 2 | sqlite-tcl | 0:3.7.17-8.amzn2.1.1 |
Vulnerabilities 1
-
Unscored —
Out of bounds write in SQLite in Google Chrome prior to 79.0.3945.79 allowed a remote attacker to potentially exploit h…
References
-
web
https://alas.aws.amazon.com/cve/html/CVE-2019-13734.html