Skip to content
OpenAdvisories
Medium ALSA-2021:1968 5 CVEs

Moderate: mingw packages security and bug fix update

Published May 18, 2021 · Updated Oct 29, 2026

Ecosystem: AlmaLinux

Summary

MinGW is a free and open source software development environment to create Microsoft Windows applications.

The following packages have been upgraded to a later upstream version: mingw-sqlite (3.26.0.0). (BZ#1845475)

Security Fix(es):

* sqlite: Division by zero in whereLoopAddBtreeIndex in sqlite3.c (CVE-2019-16168)

* sqlite: Integer overflow in sqlite3_str_vappendf function in printf.c (CVE-2020-13434)

* sqlite: Use-after-free in fts3EvalNextRow in ext/fts3/fts3.c (CVE-2020-13630)

* sqlite: Virtual table can be renamed into the name of one of its shadow tables (CVE-2020-13631)

* sqlite: NULL pointer dereference in ext/fts3/fts3_snippet.c via a crafted matchinfo() query (CVE-2020-13632)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.

Fixed packages 14

ReleasePackageFixed in
AlmaLinux · 8 mingw-binutils-generic 2.30-3.el8
AlmaLinux · 8 mingw-filesystem-base 104-2.el8
AlmaLinux · 8 mingw32-binutils 2.30-3.el8
AlmaLinux · 8 mingw32-bzip2 1.0.6-14.el8
AlmaLinux · 8 mingw32-bzip2-static 1.0.6-14.el8
AlmaLinux · 8 mingw32-filesystem 104-2.el8
AlmaLinux · 8 mingw32-sqlite 3.26.0.0-1.el8
AlmaLinux · 8 mingw32-sqlite-static 3.26.0.0-1.el8
AlmaLinux · 8 mingw64-binutils 2.30-3.el8
AlmaLinux · 8 mingw64-bzip2 1.0.6-14.el8
AlmaLinux · 8 mingw64-bzip2-static 1.0.6-14.el8
AlmaLinux · 8 mingw64-filesystem 104-2.el8
AlmaLinux · 8 mingw64-sqlite 3.26.0.0-1.el8
AlmaLinux · 8 mingw64-sqlite-static 3.26.0.0-1.el8

Vulnerabilities 5

References

  • report
    https://bugzilla.redhat.com/1768986
  • report
    https://bugzilla.redhat.com/1841223
  • report
    https://bugzilla.redhat.com/1841562
  • report
    https://bugzilla.redhat.com/1841568
  • report
    https://bugzilla.redhat.com/1841574
  • report
    https://bugzilla.redhat.com/1918306
  • advisory
    https://errata.almalinux.org/8/ALSA-2021-1968.html
  • report
    https://vulners.com/cve/CVE-2019-16168
  • report
    https://vulners.com/cve/CVE-2020-13434
  • report
    https://vulners.com/cve/CVE-2020-13630
  • report
    https://vulners.com/cve/CVE-2020-13631
  • report
    https://vulners.com/cve/CVE-2020-13632