SUSE-SU-2019:1127-1 Security update for sqlite3

This update for sqlite3 to version 3.28.0 fixes the following issues: Security issues fixed: - CVE-2019-9936: Fixed a heap-based buffer over-read, when running fts5 prefix queries inside transaction bsc1130326. - CVE-2019-9937: Fixed a denial of service related to interleaving reads and writes in...

Fedora 30 : php (2019-1d78e14cfd)

PHP version 7.3.4 04 April 2019 Core: - Fixed bug php77738 Nullptr deref in zendcompileexpr. Laruence - Fixed bug php77660 Segmentation fault on break 2147483648. Laruence - Fixed bug php77652 Anonymous classes can lose their interface information. Nikita - Fixed bug php77345 Stack Overflow cause...

openSUSE: Security Advisory for sqlite3 (openSUSE-SU-2019:1222-1)

The remote host is missing an update for the Copyright C 2019 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

SUSE SLES12 Security Update : sqlite3 (SUSE-SU-2019:0973-1)

This update for sqlite3 fixes the following issues : Security issues fixed : CVE-2018-20506: Fixed an integer overflow when FTS3 extension is enabled bsc1131576. CVE-2018-20346: Fixed a remote code execution vulnerability in FTS3 Magellan bsc1119687. CVE-2016-6153: Fixed incorrect permissions whe...

openSUSE Security Update : sqlite3 (openSUSE-2019-1222)

This update for sqlite3 fixes the following issues : Security issues fixed : - CVE-2018-20346: Fixed a remote code execution vulnerability in FTS3 Magellan bsc1119687. - CVE-2018-20506: Fixed an integer overflow when FTS3 extension is enabled bsc1131576. This update was imported from the...

SUSE-SU-2019:0973-1 Security update for sqlite3

This update for sqlite3 fixes the following issues: Security issues fixed: - CVE-2018-20506: Fixed an integer overflow when FTS3 extension is enabled bsc1131576. - CVE-2018-20346: Fixed a remote code execution vulnerability in FTS3 Magellan bsc1119687. - CVE-2016-6153: Fixed incorrect permissions...

Security update for sqlite3 (moderate)

openSUSE Security Update: Security update for sqlite3 Announcement ID: openSUSE-SU-2019:1222-1 Rating: moderate References: 1119687 1131576 Cross-References: CVE-2018-20346 CVE-2018-20506 Affected Products: openSUSE Leap 42.3 An update that fixes two vulnerabilities is now available. Description:...

Fedora 29 : php (2019-da36d5d484)

PHP version 7.2.17 04 Apr 2019 Core: - Fixed bug php77738 Nullptr deref in zendcompileexpr. Laruence - Fixed bug php77660 Segmentation fault on break 2147483648. Laruence - Fixed bug php77652 Anonymous classes can lose their interface information. Nikita - Fixed bug php77676 Unable to run tests...

SUSE SLED12 / SLES12 Security Update : sqlite3 (SUSE-SU-2019:0913-1)

This update for sqlite3 fixes the following issues : Security issues fixed : CVE-2018-20346: Fixed a remote code execution vulnerability in FTS3 Magellan bsc1119687. CVE-2018-20506: Fixed an integer overflow when FTS3 extension is enabled bsc1131576. Note that Tenable Network Security has extract...

sqlite3/ossfuzz: Use-of-uninitialized-value in accessPayload

Detailed report: https://oss-fuzz.com/testcase?key=5707266847670272 Project: sqlite3 Fuzzer: libFuzzersqlite3ossfuzz Fuzz target binary: ossfuzz Job Type: libfuzzermsansqlite3 Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: accessPayload vdbeMemFromBtreeResiz...

SUSE-SU-2019:0913-1 Security update for sqlite3

This update for sqlite3 fixes the following issues: Security issues fixed: - CVE-2018-20346: Fixed a remote code execution vulnerability in FTS3 Magellan bsc1119687. - CVE-2018-20506: Fixed an integer overflow when FTS3 extension is enabled bsc1131576...

openSUSE Security Update : sqlite3 (openSUSE-2019-1159)

This update for sqlite3 to version 3.27.2 fixes the following issue : Security issue fixed : - CVE-2018-20346: Fixed a remote code execution vulnerability in FTS3 Magellan bsc1119687. Release notes: https://www.sqlite.org/releaselog/3272.html This update was imported from the SUSE:SLE-15:Update...

openSUSE: Security Advisory for sqlite3 (openSUSE-SU-2019:1159-1)

The remote host is missing an update for the Copyright C 2019 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

OPENSUSE-SU-2019:1159-1 Security update for sqlite3

This update for sqlite3 to version 3.27.2 fixes the following issue: Security issue fixed: - CVE-2018-20346: Fixed a remote code execution vulnerability in FTS3 Magellan bsc1119687. Release notes: https://www.sqlite.org/releaselog/3272.html This update was imported from the SUSE:SLE-15:Update...

Security update for sqlite3 (moderate)

openSUSE Security Update: Security update for sqlite3 Announcement ID: openSUSE-SU-2019:1159-1 Rating: moderate References: 1119687 Cross-References: CVE-2018-20346 Affected Products: openSUSE Leap 15.0 An update that fixes one vulnerability is now available. Description: This update for sqlite3 ...

SUSE SLES11 Security Update : sqlite3 (SUSE-SU-2019:14003-1)

This update for sqlite3 fixes the following issue : Security issue fixed : CVE-2018-20346: Fixed a remote code execution vulnerability in FTS3 Magellan bsc1119687. Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable ha...

SUSE-SU-2019:14003-1 Security update for sqlite3

This update for sqlite3 fixes the following issue: Security issue fixed: - CVE-2018-20346: Fixed a remote code execution vulnerability in FTS3 Magellan bsc1119687...

SUSE SLED15 / SLES15 Security Update : sqlite3 (SUSE-SU-2019:0788-1)

This update for sqlite3 to version 3.27.2 fixes the following issue : Security issue fixed : CVE-2018-20346: Fixed a remote code execution vulnerability in FTS3 Magellan bsc1119687. Release notes: https://www.sqlite.org/releaselog/3272.html Note that Tenable Network Security has extracted the...

SUSE-SU-2019:0788-1 Security update for sqlite3

This update for sqlite3 to version 3.27.2 fixes the following issue: Security issue fixed: - CVE-2018-20346: Fixed a remote code execution vulnerability in FTS3 Magellan bsc1119687. Release notes: https://www.sqlite.org/releaselog/3272.html...

CVE-2019-9936

In SQLite 3.27.2, running fts5 prefix queries inside a transaction could trigger a heap-based buffer over-read in fts5HashEntrySort in sqlite3.c, which may lead to an information leak. This is related to ext/fts5/fts5hash.c...