Moderate: sqlite security and bug fix update (Oracle Linux 8)

Summary

Fixed packages 5

Vulnerabilities 7

• Unscored —
  CVE-2019-13752

  Out of bounds read in SQLite in Google Chrome prior to 79.0.3945.79 allowed a remote attacker to obtain potentially sen…

  Google Chrome chromium chromium-browser Browsers Debian Ubuntu
  Dec 10, 2019
• Unscored —
  CVE-2019-13753

  Out of bounds read in SQLite in Google Chrome prior to 79.0.3945.79 allowed a remote attacker to obtain potentially sen…

  Google Chrome chromium chromium-browser Browsers Debian Ubuntu
  Dec 10, 2019
• Unscored —
  CVE-2019-19923

  flattenSubquery in select.c in SQLite 3.30.1 mishandles certain uses of SELECT DISTINCT involving a LEFT JOIN in which …

  chromium sqlite3 sqlite3 Debian Ubuntu
  Dec 24, 2019
• Unscored —
  CVE-2019-19924 EPSS 11%

  SQLite 3.30.1 mishandles certain parser-tree rewriting, related to expr.c, vdbeaux.c, and window.c. This is caused by i…

  sqlite3 Debian
  Dec 24, 2019
• Unscored —
  CVE-2019-19925

  zipfileUpdate in ext/misc/zipfile.c in SQLite 3.30.1 mishandles a NULL pathname during an update of a ZIP archive.

  chromium sqlite3 sqlite3 Debian Ubuntu
  Dec 24, 2019
• Unscored —
  CVE-2019-19959

  ext/misc/zipfile.c in SQLite 3.30.1 mishandles certain uses of INSERT INTO in situations involving embedded '\0' charac…

  sqlite3 sqlite3 Debian Ubuntu
  Jan 3, 2020
• Unscored —
  CVE-2019-8457 EPSS 45%

  SQLite3 from 3.6.0 to and including 3.27.2 is vulnerable to heap out-of-bound read in the rtreenode() function when han…

  qtwebengine-opensource-src sqlite3 sqlite3 ceph Debian Ubuntu Azure Linux Alpine
  May 30, 2019