rpms/sqlite
7
0
Fork 0
Code Issues Pull Requests Releases Activity
Library that implements an embeddable SQL database engine
20 Commits 9 Branches 43 Tags 587 KiB
Diff 100%
7af9be8d68
Go to file
RHEL Packaging Agent 7af9be8d68 Fix CVE-2026-11822: buffer overwrite in fts5 
Backport upstream commit 767efcbabd to fix CVE-2026-11822,
a potential buffer overwrite in fts5 when processing corrupt
records. The fix changes the bounds check in fts5LeafRead()
from pRet->nn<4 to pRet->szLeaf<4. The conflict with
upstream's newer error handling macro was resolved by
preserving the RHEL-side p->rc = FTS5_CORRUPT pattern.

CVE: CVE-2026-11822
Upstream patches:
 - 767efcbabd
Resolves: RHEL-218273

This commit was backported by Ymir, a Red Hat Enterprise Linux software maintenance AI agent.

Assisted-by: Ymir
2026-08-11 13:32:49 +02:00
.fmf Remove obsolete sti tests, use TMT tests from Fedora 2022-11-23 12:10:00 +01:00
.gitignore RHEL 9.0.0 Alpha bootstrap 2020-10-15 09:56:24 -07:00
ci.fmf Remove the unused tests pointing to a fedora URL, improve FUCS 2026-07-22 09:20:10 +02:00
gating.yaml Replace tcms-based gating tests with fmf plans 2026-03-19 10:14:28 +01:00
plans.fmf Replace tcms-based gating tests with fmf plans 2026-03-19 10:14:28 +01:00
sources Merged update from upstream sources 2021-01-25 10:37:49 +00:00
sqlite-3.6.23-lemon-system-template.patch Merged update from upstream sources 2020-12-02 09:26:41 +00:00
sqlite-3.8.0-percentile-test.patch RHEL 9.0.0 Alpha bootstrap 2020-10-15 09:56:24 -07:00
sqlite-3.12.2-no-malloc-usable-size.patch RHEL 9.0.0 Alpha bootstrap 2020-10-15 09:56:24 -07:00
sqlite-3.16-datetest-2.2c.patch RHEL 9.0.0 Alpha bootstrap 2020-10-15 09:56:24 -07:00
sqlite-3.18.0-sync2-dirsync.patch RHEL 9.0.0 Alpha bootstrap 2020-10-15 09:56:24 -07:00
sqlite-3.26.0-CVE-2022-35737.patch Fixes CVE-2022-35737 2022-11-18 12:32:57 +01:00
sqlite-3.34.1-covscan-rhel-9.patch Fixed issues found by covscan 2021-07-09 10:54:34 +00:00
sqlite-3.34.1-CVE-2023-7104.patch Fix CVE-2023-7104 2024-01-04 13:17:52 +01:00
sqlite-3.34.1-CVE-2025-6965.patch Fixes CVE-2025-6965 2025-08-28 11:14:17 +02:00
sqlite-3.34.1-CVE-2026-11822.patch Fix CVE-2026-11822: buffer overwrite in fts5 2026-08-11 13:32:49 +02:00
sqlite-3.34.1-CVE-2026-11824.patch Fix CVE-2026-11824: buffer overwrite in fts5 corrupt records 2026-08-11 13:32:15 +02:00
sqlite.spec Fix CVE-2026-11822: buffer overwrite in fts5 2026-08-11 13:32:49 +02:00
STAGE2-sqlite RHEL 9.0.0 Alpha bootstrap 2020-10-15 09:56:24 -07:00