Library that implements an embeddable SQL database engine
606ce330da
Backport two upstream commits (79db323ce149, eb83e32cef6a) fixing CVE-2026-11822 in the fts5 full-text search extension. The first fix corrects a buffer overwrite in fts5LeafRead by checking pRet->szLeaf instead of pRet->nn in the corruption guard. The second fix adds a bounds check in fts5LeafSeek to prevent out-of-bounds access when processing corrupt term data. Both patches were adapted for sqlite 3.46.1 by replacing newer upstream macros with the equivalent error-handling pattern used in this version. CVE: CVE-2026-11822 Upstream patches: - https://github.com/sqlite/sqlite/commit/79db323ce149.patch - https://github.com/sqlite/sqlite/commit/eb83e32cef6a.patch Resolves: RHEL-218240 This commit was backported by Ymir, a Red Hat Enterprise Linux software maintenance AI agent. Assisted-by: Ymir |
||
|---|---|---|
| .fmf | ||
| .gitignore | ||
| ci.fmf | ||
| gating.yaml | ||
| plans.fmf | ||
| rpminspect.yaml | ||
| sources | ||
| sqlite-3.6.23-lemon-system-template.patch | ||
| sqlite-cve-2025-3277.patch | ||
| sqlite-cve-2025-6965.patch | ||
| sqlite-cve-2026-11822.patch | ||
| sqlite-cve-2026-11824.patch | ||
| sqlite.spec | ||
| STAGE2-sqlite | ||