Medium ELSA-2021-1581 2 CVEs

Moderate: sqlite security update (Oracle Linux 8)

Published May 25, 2021 · Updated May 25, 2021

Ecosystem: Oracle Linux

Summary

[3.26.0-13]
- enabled fts3conf.test on s390x and ppc64 architectures

[3.26.0-12]
- Fixed CVE-2020-13434 (#1845843)
- Fixed CVE-2020-15358 (#1855208)

Fixed packages 5

Release	Package	Fixed in
Oracle Linux · 8	lemon	0:3.26.0-13.el8
Oracle Linux · 8	sqlite	0:3.26.0-13.el8
Oracle Linux · 8	sqlite-devel	0:3.26.0-13.el8
Oracle Linux · 8	sqlite-doc	0:3.26.0-13.el8
Oracle Linux · 8	sqlite-libs	0:3.26.0-13.el8

Vulnerabilities 2

Unscored —

CVE-2020-13434

SQLite through 3.32.0 has an integer overflow in sqlite3_str_vappendf in printf.c.

sqlite3 sqlite3 ceph sqlite Debian Ubuntu Azure Linux Alpine

May 24, 2020
Unscored —

CVE-2020-15358

In SQLite before 3.32.3, select.c mishandles query-flattener optimization, leading to a multiSelectOrderBy heap overflo…

sqlite3 sqlite3 sqlite Debian Ubuntu Alpine

Jun 27, 2020