Skip to content
OpenAdvisories
High ELSA-2026-58936 2 CVEs

Important: sqlite security update (Oracle Linux 9)

Published Aug 24, 2026 · Updated Aug 24, 2026

Ecosystem: Oracle Linux

Summary

[3.34.1-11]
- Fixes CVE-2026-11822
- Fixes CVE-2026-11824
- Resolves: RHEL-218247
- Resolves: RHEL-218282

Fixed packages 3

ReleasePackageFixed in
Oracle Linux · 9 sqlite 0:3.34.1-11.el9_8
Oracle Linux · 9 sqlite-devel 0:3.34.1-11.el9_8
Oracle Linux · 9 sqlite-libs 0:3.34.1-11.el9_8

Vulnerabilities 2

  • High 7.8
    CVE-2026-11824

    SQLite before 3.53.2 Heap Buffer Overflow via FTS5 fts5ChunkIterate

    SQLite before 3.53.2 contains a heap-based buffer overflow vulnerability in the FTS5 full-text search extension that allows attackers to cause a crash or execute arbitrary code by supplying a crafted database with malicious continuation page metadata specifyi…

    SQLite SQLite sqlite3 sqlite3 Debian Ubuntu Azure Linux Alpine
  • Medium 5.5
    CVE-2026-11822

    SQLite before 3.53.2 Out-of-Bounds Read in FTS5 fts5LeafSeek

    SQLite before 3.53.2 contains an out-of-bounds read vulnerability in the FTS5 full-text search extension that allows attackers to crash the process by supplying a crafted database with a malformed FTS5 leaf page. Attackers can set an oversized term length in …

    SQLite SQLite sqlite3 sqlite3 Debian Ubuntu Azure Linux Alpine