rpms/sqlite
7
0
Fork 0
Code Issues Pull Requests Releases Activity
Library that implements an embeddable SQL database engine
19 Commits 9 Branches 43 Tags 587 KiB
Diff 100%
043aac02a8
Go to file
RHEL Packaging Agent 043aac02a8 Fix CVE-2026-11824: buffer overwrite in fts5 corrupt records 
Backport upstream fix (commit 79db323ce14) for
CVE-2026-11824 to sqlite 3.34.1. The patch fixes a potential
buffer overwrite in fts5 when processing corrupt records by
changing the check in fts5LeafRead() from pRet->nn<4 to
pRet->szLeaf<4. The test file fts5corruptA.test is included
to verify the fix.

CVE: CVE-2026-11824
Upstream patches:
 - 79db323ce1.patch
Resolves: RHEL-218281

This commit was backported by Ymir, a Red Hat Enterprise Linux software maintenance AI agent.

Assisted-by: Ymir
2026-08-11 13:32:15 +02:00
.fmf Remove obsolete sti tests, use TMT tests from Fedora 2022-11-23 12:10:00 +01:00
.gitignore RHEL 9.0.0 Alpha bootstrap 2020-10-15 09:56:24 -07:00
ci.fmf Remove the unused tests pointing to a fedora URL, improve FUCS 2026-07-22 09:20:10 +02:00
gating.yaml Replace tcms-based gating tests with fmf plans 2026-03-19 10:14:28 +01:00
plans.fmf Replace tcms-based gating tests with fmf plans 2026-03-19 10:14:28 +01:00
sources Merged update from upstream sources 2021-01-25 10:37:49 +00:00
sqlite-3.6.23-lemon-system-template.patch Merged update from upstream sources 2020-12-02 09:26:41 +00:00
sqlite-3.8.0-percentile-test.patch RHEL 9.0.0 Alpha bootstrap 2020-10-15 09:56:24 -07:00
sqlite-3.12.2-no-malloc-usable-size.patch RHEL 9.0.0 Alpha bootstrap 2020-10-15 09:56:24 -07:00
sqlite-3.16-datetest-2.2c.patch RHEL 9.0.0 Alpha bootstrap 2020-10-15 09:56:24 -07:00
sqlite-3.18.0-sync2-dirsync.patch RHEL 9.0.0 Alpha bootstrap 2020-10-15 09:56:24 -07:00
sqlite-3.26.0-CVE-2022-35737.patch Fixes CVE-2022-35737 2022-11-18 12:32:57 +01:00
sqlite-3.34.1-covscan-rhel-9.patch Fixed issues found by covscan 2021-07-09 10:54:34 +00:00
sqlite-3.34.1-CVE-2023-7104.patch Fix CVE-2023-7104 2024-01-04 13:17:52 +01:00
sqlite-3.34.1-CVE-2025-6965.patch Fixes CVE-2025-6965 2025-08-28 11:14:17 +02:00
sqlite-3.34.1-CVE-2026-11824.patch Fix CVE-2026-11824: buffer overwrite in fts5 corrupt records 2026-08-11 13:32:15 +02:00
sqlite.spec Fix CVE-2026-11824: buffer overwrite in fts5 corrupt records 2026-08-11 13:32:15 +02:00
STAGE2-sqlite RHEL 9.0.0 Alpha bootstrap 2020-10-15 09:56:24 -07:00