[Git][security-tracker-team/security-tracker][master] Add new sqlite3 issues

[Salvatore Bonaccorso (@carnil)]

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
f6af6d26 by Salvatore Bonaccorso at 2026-11-01T07:34:09+01:00
Add new sqlite3 issues

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -904,9 +904,13 @@ CVE-2026-119597 (OpenDeepWiki through 2.0.6 contains a hard-coded JWT signing ke
 CVE-2026-119596 (UNIT3D through 9.2.0 contains a missing authorization vulnerability in ...)
 	NOT-FOR-US: UNIT3D
 CVE-2026-119591 (SQLite before 3.54.0 contains a stack exhaustion vulnerability in coun ...)
-	TODO: check
+	- sqlite3 <unfixed>
+	NOTE: https://sqlite.org/bugs/info/2026-10-04T05:34:47Z
+	NOTE: https://sqlite.org/src/info/ab621a3e11ee4acc
+	NOTE: https://github.com/sqlite/sqlite/commit/eff50a067c55f972909e7780e506e91382d08de2 (version-3.54.0)
 CVE-2026-119586 (SQLite command-line shell through 3.54.1 contains a command injection  ...)
-	TODO: check
+	- sqlite3 <unfixed>
+	TODO: check upstream details
 CVE-2026-119578 (MONAI from 1.6.0 before 1.6.1 contains a remote code execution vulnera ...)
 	NOT-FOR-US: MONAI
 CVE-2026-119577 (ArcadeDB before 26.10.2 contains an improper authorization vulnerabili ...)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/f6af6d26b58c1e229e5c9dc7bcd6cff24cb7a966

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/f6af6d26b58c1e229e5c9dc7bcd6cff24cb7a966
You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20261101/3caa0767/attachment.htm>