[Git][security-tracker-team/security-tracker][master] Add CVE-2019-19317/sqlite3

Salvatore Bonaccorso carnil at debian.org
Thu Dec 5 20:24:32 GMT 2019



Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
4be7bb1d by Salvatore Bonaccorso at 2019-12-05T20:24:02Z
Add CVE-2019-19317/sqlite3

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -2257,7 +2257,9 @@ CVE-2019-19319 (In the Linux kernel 5.0.21, a setxattr operation, after a mount
 CVE-2019-19318 (In the Linux kernel 5.3.11, mounting a crafted btrfs image twice can c ...)
 	- linux <unfixed>
 CVE-2019-19317 (lookupName in resolve.c in SQLite 3.30.1 omits bits from the colUsed b ...)
-	TODO: check
+	- sqlite3 <unfixed>
+	NOTE: https://github.com/sqlite/sqlite/commit/522ebfa7cee96fb325a22ea3a2464a63485886a8
+	NOTE: https://github.com/sqlite/sqlite/commit/73bacb7f93eab9f4bd5a65cbc4ae242acf63c9e3
 CVE-2019-19316 (When using the Azure backend with a shared access signature (SAS), Ter ...)
 	NOT-FOR-US: Terraform
 CVE-2019-19315



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/commit/4be7bb1d3840012b544ea8e1a790058cd526d20e

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/commit/4be7bb1d3840012b544ea8e1a790058cd526d20e
You're receiving this email because of your account on salsa.debian.org.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20191205/5f20a467/attachment.html>


More information about the debian-security-tracker-commits mailing list