Skip to content
OpenAdvisories
High ELSA-2026-58938 2 CVEs

Important: sqlite security update (Oracle Linux 8)

Published Aug 25, 2026 · Updated Aug 25, 2026

Ecosystem: Oracle Linux

Summary

[3.26.0-21]
- Fixes CVE-2026-11822 and CVE-2026-11824

Fixed packages 5

ReleasePackageFixed in
Oracle Linux · 8 lemon 0:3.26.0-21.el8_10
Oracle Linux · 8 sqlite 0:3.26.0-21.el8_10
Oracle Linux · 8 sqlite-devel 0:3.26.0-21.el8_10
Oracle Linux · 8 sqlite-doc 0:3.26.0-21.el8_10
Oracle Linux · 8 sqlite-libs 0:3.26.0-21.el8_10

Vulnerabilities 2

  • High 7.8
    CVE-2026-11824

    SQLite before 3.53.2 Heap Buffer Overflow via FTS5 fts5ChunkIterate

    SQLite before 3.53.2 contains a heap-based buffer overflow vulnerability in the FTS5 full-text search extension that allows attackers to cause a crash or execute arbitrary code by supplying a crafted database with malicious continuation page metadata specifyi…

    SQLite SQLite sqlite3 sqlite3 Debian Ubuntu Azure Linux Alpine
  • Medium 5.5
    CVE-2026-11822

    SQLite before 3.53.2 Out-of-Bounds Read in FTS5 fts5LeafSeek

    SQLite before 3.53.2 contains an out-of-bounds read vulnerability in the FTS5 full-text search extension that allows attackers to crash the process by supplying a crafted database with a malformed FTS5 leaf page. Attackers can set an oversized term length in …

    SQLite SQLite sqlite3 sqlite3 Debian Ubuntu Azure Linux Alpine