rpms/sqlite
7
0
Fork 0
Code Issues Pull Requests Releases Activity
Library that implements an embeddable SQL database engine
307 Commits 9 Branches 43 Tags 615 KiB
Diff 100%
a6aa59f487
Go to file
RHEL Packaging Agent a6aa59f487 Fix CVE-2026-11824: fts5 buffer overwrite on corrupt records 
Backport upstream fix for CVE-2026-11824 to sqlite 3.46.1.
The fix corrects a bounds check in fts5LeafRead() (changing
pRet->nn<4 to pRet->szLeaf<4) to prevent a potential buffer
overwrite when processing corrupt fts5 records.

CVE: CVE-2026-11824
Upstream patches:
 - https://github.com/sqlite/sqlite/commit/79db323ce149.patch
Resolves: RHEL-218275

This commit was backported by Ymir, a Red Hat Enterprise Linux software maintenance AI agent.

Assisted-by: Ymir
2026-08-11 14:16:43 +02:00
.fmf Enable tmt CI tests, remove obsolete STI test 2022-03-21 17:34:26 +01:00
.gitignore Updated to version 3.12.2 2016-04-25 10:04:06 +02:00
ci.fmf CVE-2025-3277 Integer overflow 2025-04-15 15:59:15 +02:00
gating.yaml Fix CVE-2025-6965 2025-08-30 05:47:45 +02:00
plans.fmf Fix CVE-2025-6965 2025-08-30 05:47:45 +02:00
rpminspect.yaml CVE-2025-3277 Integer overflow 2025-04-15 15:59:15 +02:00
sources Update to 3.46.1 2024-08-20 15:40:48 +02:00
sqlite-3.6.23-lemon-system-template.patch rebase to upstream version 3.43.0 2023-08-31 10:31:06 +02:00
sqlite-cve-2025-3277.patch CVE-2025-3277 Integer overflow 2025-04-15 15:59:15 +02:00
sqlite-cve-2025-6965.patch Fix CVE-2025-6965 2025-08-30 05:47:45 +02:00
sqlite-cve-2026-11824.patch Fix CVE-2026-11824: fts5 buffer overwrite on corrupt records 2026-08-11 14:16:43 +02:00
sqlite.spec Fix CVE-2026-11824: fts5 buffer overwrite on corrupt records 2026-08-11 14:16:43 +02:00
STAGE2-sqlite Adding STAGE2 bootstrap recipe 2015-11-05 17:22:29 +01:00