Red Hat Security AdvisoryRHSA-2021:1581
sqlite security update
Released 2021-05-18 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux AppStream (v. 8) lemon-3.26.0-13.el8
- Red Hat Enterprise Linux BaseOS (v. 8) sqlite-3.26.0-13.el8, sqlite-devel-3.26.0-13.el8, sqlite-doc-3.26.0-13.el8 +1
Fixes 2 records
Priority LOW 27
In SQLite before 3.32.3, select.c mishandles query-flattener optimization, leading to a multiSelectOrderBy heap overflow because of misuse of transitive properties for constant propagation.
CVSS 3.1MEDIUM 5.5· Local · Low privileges · No interaction · EPSS 0.01018 · Published 2020-06-27 · Fixed CWE-787
Priority LOW 27
SQLite through 3.32.0 has an integer overflow in sqlite3_str_vappendf in printf.c.
CVSS 3.1MEDIUM 5.5· Local · Low privileges · No interaction · EPSS 0.01004 · Published 2020-05-24 · Partial fix CWE-190
