diff --git a/sqlite-cve-2026-11822.patch b/sqlite-cve-2026-11822.patch new file mode 100644 index 0000000..4512252 --- /dev/null +++ b/sqlite-cve-2026-11822.patch @@ -0,0 +1,25 @@ +From 11db730d5c75df27722064c7a62c46ab2b16501d Mon Sep 17 00:00:00 2001 +From: dan +Date: Mon, 11 May 2026 11:53:07 +0000 +Subject: [PATCH] Improve detection of corrupt database records in fts5. + +FossilOrigin-Name: 87b653731171a26396f9796b0a5c436593571d39e991d8d040ef4473cf459b67 +--- + ext/fts5/fts5_index.c | 4 ++++ + 1 file changed, 4 insertions(+) + +diff --git a/ext/fts5/fts5_index.c b/ext/fts5/fts5_index.c +index c6ca83afb..7d193d529 100644 +--- a/ext/fts5/fts5_index.c ++++ b/ext/fts5/fts5_index.c +@@ -2520,6 +2520,10 @@ static void fts5LeafSeek( + if( nKeepn ){ ++ p->rc = FTS5_CORRUPT; ++ return; ++ } + + assert( nKeep>=nMatch ); + if( nKeep==nMatch ){ diff --git a/sqlite.spec b/sqlite.spec index 96c9eb1..7d37ca6 100644 --- a/sqlite.spec +++ b/sqlite.spec @@ -12,7 +12,7 @@ Summary: Library that implements an embeddable SQL database engine Name: sqlite Version: %{rpmver} -Release: 5%{?dist}.1 +Release: 5%{?dist}.2 License: blessing URL: http://www.sqlite.org/ @@ -24,6 +24,7 @@ Patch1: sqlite-3.6.23-lemon-system-template.patch Patch2: sqlite-cve-2025-3277.patch Patch3: sqlite-cve-2025-6965.patch Patch4: sqlite-cve-2026-11824.patch +Patch5: sqlite-cve-2026-11822.patch BuildRequires: make BuildRequires: gcc @@ -130,6 +131,7 @@ This package contains the analysis program for %{name}. %patch -P 2 -p1 %patch -P 3 -p1 %patch -P 4 -p1 +%patch -P 5 -p1 # The atof test is failing on the i686 architecture, when binary configured with # --enable-rtree option. Failing part is text->real conversion and @@ -266,6 +268,10 @@ make test %endif %changelog +* Wed Jul 29 2026 RHEL Packaging Agent - 3.46.1-5.2 +- Fix CVE-2026-11822 +- Resolves: RHEL-218240 + * Wed Jul 29 2026 RHEL Packaging Agent - 3.46.1-5.1 - Fix CVE-2026-11824 - Resolves: RHEL-218275