Red Hat Security AdvisoryRHSA-2025:16504
Red Hat OpenShift Data Foundation 4.19 security, enhancement & bug fix update
Released 2025-09-23 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat Openshift Data Foundation 4.19 registry.redhat.io/odf4/cephcsi-rhel9, registry.redhat.io/odf4/cephcsi-rhel9-operator, registry.redhat.io/odf4/mcg-core-rhel9 +17
Fixes 9 records
Priority MEDIUM 53
In SQLite through 3.31.1, the ALTER TABLE implementation has a use-after-free, as demonstrated by an ORDER BY clause that belongs to a compound SELECT statement.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.08723 · Published 2020-04-09 · Fixed CWE-416
Priority MEDIUM 52
pragma.c in SQLite through 3.30.1 mishandles NOT NULL in an integrity_check PRAGMA command in certain cases of generated columns.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.07402 · Published 2019-12-09 · Fixed CWE-754
Priority MEDIUM 40
SQLite through 3.31.1 allows attackers to cause a denial of service (segmentation fault) via a malformed window-function query because the AggInfo object's initialization is mishandled.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.04304 · Published 2020-04-09 · Fixed CWE-665
Priority LOW 33
ext/fts3/fts3.c in SQLite before 3.32.0 has a use-after-free in fts3EvalNextRow, related to the snippet feature.
CVSS 3.1HIGH 7.0· Local · Low privileges · No interaction · EPSS 0.01021 · Published 2020-05-27 · Partial fix CWE-416
Priority LOW 27
SQLite through 3.32.0 has an integer overflow in sqlite3_str_vappendf in printf.c.
CVSS 3.1MEDIUM 5.5· Local · Low privileges · No interaction · EPSS 0.01004 · Published 2020-05-24 · Partial fix CWE-190
Priority LOW 26
ext/fts3/fts3_snippet.c in SQLite before 3.32.0 has a NULL pointer dereference via a crafted matchinfo() query.
CVSS 3.1MEDIUM 5.5· Local · Low privileges · No interaction · EPSS 0.00596 · Published 2020-05-27 · Partial fix CWE-476
Priority LOW 26
SQLite before 3.32.0 allows a virtual table to be renamed to the name of one of its shadow tables, related to alter.c and build.c.
CVSS 3.1MEDIUM 5.5· Local · Low privileges · No interaction · EPSS 0.00658 · Published 2020-05-27 · Partial fix
Priority LOW 26
SQLite through 3.32.0 has a segmentation fault in sqlite3ExprCodeTarget in expr.c.
CVSS 3.1MEDIUM 5.5· Local · Low privileges · No interaction · EPSS 0.0064 · Published 2020-05-24 · Partial fix CWE-476
Priority LOW 26
alter.c in SQLite through 3.30.1 allows attackers to trigger infinite recursion via certain types of self-referential views in conjunction with ALTER TABLE statements.
CVSS 3.1MEDIUM 5.5· Local · Low privileges · No interaction · EPSS 0.00566 · Published 2019-12-09 · Partial fix CWE-674
THREATIST.IORead the docs