ALSA-2023:3840

Source
https://errata.almalinux.org/8/ALSA-2023-3840.html
Import Source
https://github.com/AlmaLinux/osv-database/blob/master/advisories/almalinux8/ALSA-2023:3840.json
JSON Data
https://api.osv.dev/v1/vulns/ALSA-2023:3840
Related
Published
2023-06-27T00:00:00Z
Modified
2023-06-29T13:07:07Z
Summary
Moderate: sqlite security update
Details

SQLite is a C library that implements an SQL database engine. A large subset of SQL92 is supported. A complete database is stored in a single disk file. The API is designed for convenience and ease of use. Applications that link against SQLite can enjoy the power and flexibility of an SQL database without the administrative hassles of supporting a separate database server.

Security Fix(es):

  • sqlite: Crash due to misuse of window functions. (CVE-2020-24736)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

References

Affected packages

AlmaLinux:8 / lemon

Package

Name
lemon

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
3.26.0-18.el8_8

AlmaLinux:8 / sqlite

Package

Name
sqlite

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
3.26.0-18.el8_8

AlmaLinux:8 / sqlite-devel

Package

Name
sqlite-devel

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
3.26.0-18.el8_8

AlmaLinux:8 / sqlite-doc

Package

Name
sqlite-doc

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
3.26.0-18.el8_8

AlmaLinux:8 / sqlite-libs

Package

Name
sqlite-libs

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
3.26.0-18.el8_8