Red Hat Security Advisory

RHSA-2026:62236

sqlite security update

Released 2026-09-01 · Red Hat rating Important · View on Red Hat →

Fixed in

Red Hat Enterprise Linux AppStream E4S (v.9.4) sqlite-3.34.1-7.el9_4.2, sqlite-devel-3.34.1-7.el9_4.2
Red Hat Enterprise Linux BaseOS E4S (v.9.4) sqlite-3.34.1-7.el9_4.2, sqlite-libs-3.34.1-7.el9_4.2

Fixes 2 records

TI-2026-10207 CVE-2026-11824 · GHSA-8g48-4wfm-7247

SQLite before 3.53.2 Heap Buffer Overflow via FTS5 fts5ChunkIterate

LOW 38

SQLite before 3.53.2 contains a heap-based buffer overflow vulnerability in the FTS5 full-text search extension that allows attackers to cause a crash or execute arbitrary code by supplying a crafted database with malici…

CVSS 4.0HIGH 8.5 Local No auth User interaction EPSS 0.00182 Published 2026-06-09 Partial fix · 3.53.2 CWE-122

TI-2026-10205 CVE-2026-11822 · GHSA-6qj8-gw6p-hc5p

SQLite before 3.53.2 Out-of-Bounds Read in FTS5 fts5LeafSeek

LOW 31

SQLite before 3.53.2 contains an out-of-bounds read vulnerability in the FTS5 full-text search extension that allows attackers to crash the process by supplying a crafted database with a malformed FTS5 leaf page.

CVSS 4.0MEDIUM 6.8 Local No auth User interaction EPSS 0.00195 Published 2026-06-09 Partial fix · 3.53.2 CWE-125