Skip to content
OpenAdvisories
Medium ELSA-2015-1635 3 CVEs

Moderate: sqlite security update (Oracle Linux 7)

Published Aug 17, 2015 · Updated Aug 17, 2015

Ecosystem: Oracle Linux

Summary

[3.7.17-6.1]
- Fixes for CVE-2015-3415 CVE-2015-3414 CVE-2015-3416
Resolves: rhbz#1244731

[3.7.17-6]
- Release bump for ppc64le

[3.7.17-5]
- Release bump

[3.7.17-4.1]
- Backport 64k page fix from latest upstream (#1118151)

Fixed packages 5

ReleasePackageFixed in
Oracle Linux · 7 lemon 0:3.7.17-6.el7_1.1
Oracle Linux · 7 sqlite 0:3.7.17-6.el7_1.1
Oracle Linux · 7 sqlite-devel 0:3.7.17-6.el7_1.1
Oracle Linux · 7 sqlite-doc 0:3.7.17-6.el7_1.1
Oracle Linux · 7 sqlite-tcl 0:3.7.17-6.el7_1.1

Vulnerabilities 3

  • Unscored —
    CVE-2015-3414

    SQLite before 3.8.9 does not properly implement the dequoting of collation-sequence names, which allows context-depende…

    sqlite3 sqlite3 Debian Ubuntu
  • Unscored —
    CVE-2015-3415

    The sqlite3VdbeExec function in vdbe.c in SQLite before 3.8.9 does not properly implement comparison operators, which a…

    sqlite3 Debian
  • Unscored —
    CVE-2015-3416

    The sqlite3VXPrintf function in printf.c in SQLite before 3.8.9 does not properly handle precision and width values dur…

    sqlite3 sqlite3 sqlite Debian Ubuntu