[Git][security-tracker-team/security-tracker][master] Track fixed version for sqlite3 issues
Salvatore Bonaccorso (@carnil)
carnil at debian.org
Tue Nov 3 07:18:48 GMT 2026
Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker
Commits:
71a169fd by Salvatore Bonaccorso at 2026-11-03T08:17:43+01:00
Track fixed version for sqlite3 issues
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -2303,7 +2303,7 @@ CVE-2026-119597 (OpenDeepWiki through 2.0.6 contains a hard-coded JWT signing ke
CVE-2026-119596 (UNIT3D through 9.2.0 contains a missing authorization vulnerability in ...)
NOT-FOR-US: UNIT3D
CVE-2026-119591 (SQLite before 3.54.0 contains a stack exhaustion vulnerability in coun ...)
- - sqlite3 <unfixed> (bug #1152790)
+ - sqlite3 3.54.1-1 (bug #1152790)
[trixie] - sqlite3 <no-dsa> (Minor issue)
NOTE: https://sqlite.org/bugs/info/2026-10-04T05:34:47Z
NOTE: https://sqlite.org/src/info/ab621a3e11ee4acc
@@ -2434,18 +2434,18 @@ CVE-2026-119408 (n8n before 2.42.6, 2.43.x before 2.43.3, and 3.x before 3.0.1 c
CVE-2026-119407 (Element Web and Element Desktop before 1.12.32 accept guest credential ...)
NOT-FOR-US: Element
CVE-2026-119379 (SQLite before 3.54.0 built with the session extension contains a heap ...)
- - sqlite3 <unfixed> (bug #1152790)
+ - sqlite3 3.54.1-1 (bug #1152790)
[trixie] - sqlite3 <no-dsa> (Minor issue)
NOTE: https://sqlite.org/bugs/info/2026-08-16T10:15:25Z
NOTE: https://sqlite.org/src/info/3f57024aecea0f3b
NOTE: Fixed by: https://github.com/sqlite/sqlite/commit/64459c87cc702d600704fb77ee40ca1782398a52 (version-3.54.0)
CVE-2026-119378 (SQLite before 3.54.0 contains a use-after-free vulnerability in the R- ...)
- - sqlite3 <unfixed> (bug #1152790)
+ - sqlite3 3.54.1-1 (bug #1152790)
[trixie] - sqlite3 <no-dsa> (Minor issue)
NOTE: https://sqlite.org/src/info/6a9e1415659f9e75
NOTE: Fixed by: https://github.com/sqlite/sqlite/commit/d21bd37c7cfc1b85b17a6703555f0926b6236e04 (version-3.54.0)
CVE-2026-119377 (SQLite before 3.54.0 contains an authorization bypass vulnerability in ...)
- - sqlite3 <unfixed> (bug #1152790)
+ - sqlite3 3.54.1-1 (bug #1152790)
[trixie] - sqlite3 <no-dsa> (Minor issue)
NOTE: https://sqlite.org/bugs/info/2026-07-05T08:15:45Z
NOTE: https://sqlite.org/src/info/bbd69ce274620008
@@ -2453,36 +2453,36 @@ CVE-2026-119377 (SQLite before 3.54.0 contains an authorization bypass vulnerabi
NOTE: https://sqlite.org/src/info/2cb22877683680c1
NOTE: Fixed by: https://github.com/sqlite/sqlite/commit/5694c3bb2a6a40770ecd2f65910eea756734dfd8 (version-3.54.0)
CVE-2026-119376 (SQLite before 3.54.0 contains a stack exhaustion vulnerability that al ...)
- - sqlite3 <unfixed> (bug #1152790)
+ - sqlite3 3.54.1-1 (bug #1152790)
[trixie] - sqlite3 <no-dsa> (Minor issue)
NOTE: https://sqlite.org/bugs/info/2026-10-04T04:50:56Z
NOTE: https://sqlite.org/src/info/252c0b7bf5a727d2
NOTE: Fixed by: https://github.com/sqlite/sqlite/commit/d54522a5b832422ab893a1e9fa7a99ab314ea4e2 (version-3.54.0)
CVE-2026-119375 (SQLite before 3.54.0 contains an information disclosure vulnerability ...)
- - sqlite3 <unfixed> (bug #1152790)
+ - sqlite3 3.54.1-1 (bug #1152790)
[trixie] - sqlite3 <no-dsa> (Minor issue)
NOTE: https://sqlite.org/bugs/info/2026-08-17T15:54:41Z
NOTE: https://sqlite.org/src/info/f9b4ee369557c36c
NOTE: Fixed by: https://github.com/sqlite/sqlite/commit/e5bf119821f25be1d7f10ef0a2edbe175289166e (version-3.54.0)
CVE-2026-119374 (SQLite before 3.54.0 built with FTS5 contains a heap buffer overflow i ...)
- - sqlite3 <unfixed> (bug #1152790)
+ - sqlite3 3.54.1-1 (bug #1152790)
[trixie] - sqlite3 <no-dsa> (Minor issue)
NOTE: https://sqlite.org/src/info/9cd4f9e920
NOTE: Fixed by: https://github.com/sqlite/sqlite/commit/d9de6eedbe918c074c7556400fa21df5960704d9 (version-3.54.0)
CVE-2026-119373 (SQLite before 3.54.0 built with FTS5 contains a heap buffer overflow i ...)
- - sqlite3 <unfixed> (bug #1152790)
+ - sqlite3 3.54.1-1 (bug #1152790)
[trixie] - sqlite3 <no-dsa> (Minor issue)
NOTE: https://sqlite.org/bugs/info/2026-08-04T08:49:27Z
NOTE: https://sqlite.org/src/info/a7f8c92f62
NOTE: Fixed by: https://github.com/sqlite/sqlite/commit/e1c9934f9f11a499029abb020ea715a08970da80 (version-3.54.0)
CVE-2026-119372 (SQLite before 3.54.0 built with FTS3/FTS4 and SQLITE_ENABLE_FTS3_PAREN ...)
- - sqlite3 <unfixed> (bug #1152790)
+ - sqlite3 3.54.1-1 (bug #1152790)
[trixie] - sqlite3 <no-dsa> (Minor issue)
NOTE: https://sqlite.org/bugs/info/2026-08-17T09:18:24Z
NOTE: https://sqlite.org/src/info/e4635c4153
NOTE: Fixed by: https://github.com/sqlite/sqlite/commit/a87bd2471a9c0606e78d3c3678bcd9cecaa0e731 (version-3.54.0)
CVE-2026-119371 (SQLite before 3.54.0 contains a stack exhaustion vulnerability that al ...)
- - sqlite3 <unfixed> (bug #1152790)
+ - sqlite3 3.54.1-1 (bug #1152790)
[trixie] - sqlite3 <no-dsa> (Minor issue)
NOTE: https://sqlite.org/bugs/info/2026-10-04T04:58:58Z
NOTE: https://sqlite.org/src/info/f54730871303e655
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/71a169fd1237468a5ef4fca70c356c7344b603b6
--
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/71a169fd1237468a5ef4fca70c356c7344b603b6
You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20261103/4d25270d/attachment.htm>
More information about the debian-security-tracker-commits
mailing list