An issue was found in fts5UnicodeTokenize() in ext/fts5/fts5_tokenize.c in Sqlite. A unicode61 tokenizer configured to treat unicode “control-characters” (class Cc), was treating embedded nul characters as tokens. The issue was fixed in sqlite-3.34.0 and later.
OS | Version | Architecture | Package | Version | Filename |
---|---|---|---|---|---|
Debian | 12 | all | sqlite3 | < 3.39.4-1 | sqlite3_3.39.4-1_all.deb |
Debian | 11 | all | sqlite3 | < 3.34.1-3 | sqlite3_3.34.1-3_all.deb |
Debian | 10 | all | sqlite3 | < 3.27.2-3+deb10u1 | sqlite3_3.27.2-3+deb10u1_all.deb |
Debian | 999 | all | sqlite3 | < 3.39.4-1 | sqlite3_3.39.4-1_all.deb |