Red Hat Security Advisory: sqlite security and bug fix update

Fixed packages 17

Vulnerabilities 7

• Unscored —
  CVE-2019-13752

  Out of bounds read in SQLite in Google Chrome prior to 79.0.3945.79 allowed a remote attacker to obtain potentially sen…

  Google Chrome chromium chromium-browser Browsers Debian Ubuntu
  Dec 10, 2019
• Unscored —
  CVE-2019-13753

  Out of bounds read in SQLite in Google Chrome prior to 79.0.3945.79 allowed a remote attacker to obtain potentially sen…

  Google Chrome chromium chromium-browser Browsers Debian Ubuntu
  Dec 10, 2019
• Unscored —
  CVE-2019-19923

  flattenSubquery in select.c in SQLite 3.30.1 mishandles certain uses of SELECT DISTINCT involving a LEFT JOIN in which …

  chromium sqlite3 sqlite3 Debian Ubuntu
  Dec 24, 2019
• Unscored —
  CVE-2019-19924 EPSS 11%

  SQLite 3.30.1 mishandles certain parser-tree rewriting, related to expr.c, vdbeaux.c, and window.c. This is caused by i…

  sqlite3 Debian
  Dec 24, 2019
• Unscored —
  CVE-2019-19925

  zipfileUpdate in ext/misc/zipfile.c in SQLite 3.30.1 mishandles a NULL pathname during an update of a ZIP archive.

  chromium sqlite3 sqlite3 Debian Ubuntu
  Dec 24, 2019
• Unscored —
  CVE-2019-19959

  ext/misc/zipfile.c in SQLite 3.30.1 mishandles certain uses of INSERT INTO in situations involving embedded '\0' charac…

  sqlite3 sqlite3 Debian Ubuntu
  Jan 3, 2020
• Unscored —
  CVE-2019-8457 EPSS 45%

  SQLite3 from 3.6.0 to and including 3.27.2 is vulnerable to heap out-of-bound read in the rtreenode() function when han…

  qtwebengine-opensource-src sqlite3 sqlite3 ceph Debian Ubuntu Azure Linux Alpine
  May 30, 2019

References

• article
  https://access.redhat.com/security/updates/classification/#moderate
• article
  https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/8/html/8.2_release_notes/index
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1716881
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1781999
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1782000
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1788842
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1788846
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1788866
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1789595
• advisory
  https://security.access.redhat.com/data/csaf/v2/advisories/2020/rhsa-2020_1810.json
• report
  https://access.redhat.com/security/cve/CVE-2019-8457
• advisory
  https://www.cve.org/CVERecord?id=CVE-2019-8457
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2019-8457
• report
  https://access.redhat.com/security/cve/CVE-2019-13752
• advisory
  https://www.cve.org/CVERecord?id=CVE-2019-13752
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2019-13752
• article
  https://chromereleases.googleblog.com/2019/12/stable-channel-update-for-desktop.html
• report
  https://access.redhat.com/security/cve/CVE-2019-13753
• advisory
  https://www.cve.org/CVERecord?id=CVE-2019-13753
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2019-13753
• report
  https://access.redhat.com/security/cve/CVE-2019-19923
• advisory
  https://www.cve.org/CVERecord?id=CVE-2019-19923
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2019-19923
• report
  https://access.redhat.com/security/cve/CVE-2019-19924
• advisory
  https://www.cve.org/CVERecord?id=CVE-2019-19924
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2019-19924
• report
  https://access.redhat.com/security/cve/CVE-2019-19925
• advisory
  https://www.cve.org/CVERecord?id=CVE-2019-19925
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2019-19925
• report
  https://access.redhat.com/security/cve/CVE-2019-19959
• advisory
  https://www.cve.org/CVERecord?id=CVE-2019-19959
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2019-19959