Red Hat Security AdvisoryRHSA-2021:1968
mingw packages security and bug fix update
Released 2021-05-18 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat CodeReady Linux Builder (v. 8) mingw-binutils-2.30-3.el8, mingw-binutils-generic-2.30-3.el8, mingw-bzip2-1.0.6-14.el8 +15
Fixes 5 records
Priority LOW 36
In SQLite through 3.29.0, whereLoopAddBtreeIndex in sqlite3.c can crash a browser or other application because of missing validation of a sqlite_stat1 sz field, aka a "severe division by zero in the query planner."
CVSS 3.1MEDIUM 6.5· Network · No auth · User interaction · EPSS 0.04219 · Published 2019-09-09 · Fixed CWE-369
Priority LOW 33
ext/fts3/fts3.c in SQLite before 3.32.0 has a use-after-free in fts3EvalNextRow, related to the snippet feature.
CVSS 3.1HIGH 7.0· Local · Low privileges · No interaction · EPSS 0.01021 · Published 2020-05-27 · Partial fix CWE-416
Priority LOW 27
SQLite through 3.32.0 has an integer overflow in sqlite3_str_vappendf in printf.c.
CVSS 3.1MEDIUM 5.5· Local · Low privileges · No interaction · EPSS 0.01004 · Published 2020-05-24 · Partial fix CWE-190
Priority LOW 26
ext/fts3/fts3_snippet.c in SQLite before 3.32.0 has a NULL pointer dereference via a crafted matchinfo() query.
CVSS 3.1MEDIUM 5.5· Local · Low privileges · No interaction · EPSS 0.00596 · Published 2020-05-27 · Partial fix CWE-476
Priority LOW 26
SQLite before 3.32.0 allows a virtual table to be renamed to the name of one of its shadow tables, related to alter.c and build.c.
CVSS 3.1MEDIUM 5.5· Local · Low privileges · No interaction · EPSS 0.00658 · Published 2020-05-27 · Partial fix
THREATIST.IORead the docs