Red Hat Security AdvisoryRHSA-2026:58939
sqlite security update
Released 2026-08-24 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux AppStream E4S (v.8.8) lemon-3.26.0-18.el8_8.3
- Red Hat Enterprise Linux AppStream TUS (v.8.8) lemon-3.26.0-18.el8_8.3
- Red Hat Enterprise Linux BaseOS E4S (v.8.8) sqlite-3.26.0-18.el8_8.3, sqlite-devel-3.26.0-18.el8_8.3, sqlite-doc-3.26.0-18.el8_8.3 +1
- Red Hat Enterprise Linux BaseOS TUS (v.8.8) sqlite-3.26.0-18.el8_8.3, sqlite-devel-3.26.0-18.el8_8.3, sqlite-doc-3.26.0-18.el8_8.3 +1
Fixes 2 records
Priority LOW 38
SQLite before 3.53.2 contains a heap-based buffer overflow vulnerability in the FTS5 full-text search extension that allows attackers to cause a crash or execute arbitrary code by supplying a crafted database with malici…
CVSS 4.0HIGH 8.5· Local · No auth · User interaction · EPSS 0.00182 · Published 2026-06-09 · Partial fix · 3.53.2 CWE-122
Priority LOW 31
SQLite before 3.53.2 contains an out-of-bounds read vulnerability in the FTS5 full-text search extension that allows attackers to crash the process by supplying a crafted database with a malformed FTS5 leaf page.
CVSS 4.0MEDIUM 6.8· Local · No auth · User interaction · EPSS 0.00195 · Published 2026-06-09 · Partial fix · 3.53.2 CWE-125
