Skip to content
OpenAdvisories
High RHSA-2026:61697 2 CVEs

Red Hat Security Advisory: sqlite security update

Published Sep 1, 2026 · Updated Oct 20, 2026

Ecosystem: Red Hat

Fixed packages 10

ReleasePackageFixed in
Red Hat · RHEL 10.0 EUS enterprise_linux_eus:10.0 lemon-debuginfo 0:3.46.1-5.el10_0.1
Red Hat · RHEL 10.0 EUS enterprise_linux_eus:10.0 sqlite 0:3.46.1-5.el10_0.1
Red Hat · RHEL 10.0 EUS enterprise_linux_eus:10.0 sqlite-analyzer-debuginfo 0:3.46.1-5.el10_0.1
Red Hat · RHEL 10.0 EUS enterprise_linux_eus:10.0 sqlite-debuginfo 0:3.46.1-5.el10_0.1
Red Hat · RHEL 10.0 EUS enterprise_linux_eus:10.0 sqlite-debugsource 0:3.46.1-5.el10_0.1
Red Hat · RHEL 10.0 EUS enterprise_linux_eus:10.0 sqlite-devel 0:3.46.1-5.el10_0.1
Red Hat · RHEL 10.0 EUS enterprise_linux_eus:10.0 sqlite-libs 0:3.46.1-5.el10_0.1
Red Hat · RHEL 10.0 EUS enterprise_linux_eus:10.0 sqlite-libs-debuginfo 0:3.46.1-5.el10_0.1
Red Hat · RHEL 10.0 EUS enterprise_linux_eus:10.0 sqlite-tcl-debuginfo 0:3.46.1-5.el10_0.1
Red Hat · RHEL 10.0 EUS enterprise_linux_eus:10.0 sqlite-tools-debuginfo 0:3.46.1-5.el10_0.1

Vulnerabilities 2

  • High 7.8
    CVE-2026-11824

    SQLite before 3.53.2 Heap Buffer Overflow via FTS5 fts5ChunkIterate

    SQLite before 3.53.2 contains a heap-based buffer overflow vulnerability in the FTS5 full-text search extension that allows attackers to cause a crash or execute arbitrary code by supplying a crafted database with malicious continuation page metadata specifyi…

    SQLite SQLite sqlite3 sqlite3 Debian Ubuntu Azure Linux Alpine
  • Medium 5.5
    CVE-2026-11822

    SQLite before 3.53.2 Out-of-Bounds Read in FTS5 fts5LeafSeek

    SQLite before 3.53.2 contains an out-of-bounds read vulnerability in the FTS5 full-text search extension that allows attackers to crash the process by supplying a crafted database with a malformed FTS5 leaf page. Attackers can set an oversized term length in …

    SQLite SQLite sqlite3 sqlite3 Debian Ubuntu Azure Linux Alpine

References

  • article
    https://access.redhat.com/security/updates/classification/#important
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2487258
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2487269
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_61697.json
  • report
    https://access.redhat.com/security/cve/CVE-2026-11822
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2026-11822
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2026-11822
  • article
    https://sqlite.org/releaselog/3_53_2.html
  • article
    https://sqlite.org/src/info/061febcf41ca
  • article
    https://sqlite.org/src/info/4a5ad516ea93
  • article
    https://www.vulncheck.com/advisories/sqlite-before-memory-corruption-in-fts5-extension
  • report
    https://access.redhat.com/security/cve/CVE-2026-11824
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2026-11824
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2026-11824
  • article
    https://www.vulncheck.com/advisories/sqlite-before-heap-buffer-overflow-via-fts5-fts5chunkiterate