Medium ELSA-2022-7108 2 CVEs

Moderate: sqlite security update (Oracle Linux 8)

Published Oct 26, 2022 · Updated Oct 26, 2022

Ecosystem: Oracle Linux

Summary

[3.26.0-16]
- Fixed CVE-2020-35527
- Fixed CVE-2020-35525

Fixed packages 5

Release	Package	Fixed in
Oracle Linux · 8	lemon	0:3.26.0-16.el8_6
Oracle Linux · 8	sqlite	0:3.26.0-16.el8_6
Oracle Linux · 8	sqlite-devel	0:3.26.0-16.el8_6
Oracle Linux · 8	sqlite-doc	0:3.26.0-16.el8_6
Oracle Linux · 8	sqlite-libs	0:3.26.0-16.el8_6

Vulnerabilities 2

Unscored —

CVE-2020-35525

In SQlite 3.31.1, a potential null pointer derreference was found in the INTERSEC query processing.

sqlite3 sqlite3 Debian Ubuntu

Sep 1, 2022
Unscored —

CVE-2020-35527

In SQLite 3.31.1, there is an out of bounds access problem through ALTER TABLE for views that have a nested FROM clause.

sqlite3 sqlite3 Debian Ubuntu

Sep 1, 2022