CLSA-2026-1782142140

See a problem?
Import Source
https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/centos8.4els/CLSA-2026-1782142140.json
JSON Data
https://api.osv.dev/v1/vulns/CLSA-2026-1782142140
Upstream
CVE (2)
Published
2026-06-22T15:29:15Z
Modified
2026-10-26T09:31:49Z
Summary
sqlite: Fix of 2 CVEs
Details
  • CVE-2026-11822: fix memory corruption in FTS5 fts5LeafRead() by rejecting leaf pages with szLeaf < 4, blocking the OOB read in fts5LeafSeek()
  • CVE-2026-11824: fix heap-based buffer overflow via integer underflow in fts5ChunkIterate() when szLeaf < 4 (same root cause; closed by the same fts5LeafRead validation tightening)
References

Affected packages

TuxCare:CentOS:8.4
lemon

Package

Name
lemon
Purl
pkg:rpm/tuxcare/lemon?distro=centos-8.4

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
3.26.0-15.el8.tuxcare.els8

Database specific

source 
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/centos8.4els/CLSA-2026-1782142140.json"
sqlite

Package

Name
sqlite
Purl
pkg:rpm/tuxcare/sqlite?distro=centos-8.4

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
3.26.0-15.el8.tuxcare.els8

Database specific

source 
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/centos8.4els/CLSA-2026-1782142140.json"
sqlite-analyzer

Package

Name
sqlite-analyzer
Purl
pkg:rpm/tuxcare/sqlite-analyzer?distro=centos-8.4

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
3.26.0-15.el8.tuxcare.els8

Database specific

source 
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/centos8.4els/CLSA-2026-1782142140.json"
sqlite-devel

Package

Name
sqlite-devel
Purl
pkg:rpm/tuxcare/sqlite-devel?distro=centos-8.4

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
3.26.0-15.el8.tuxcare.els8

Database specific

source 
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/centos8.4els/CLSA-2026-1782142140.json"
sqlite-doc

Package

Name
sqlite-doc
Purl
pkg:rpm/tuxcare/sqlite-doc?distro=centos-8.4

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
3.26.0-15.el8.tuxcare.els8

Database specific

source 
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/centos8.4els/CLSA-2026-1782142140.json"
sqlite-libs

Package

Name
sqlite-libs
Purl
pkg:rpm/tuxcare/sqlite-libs?distro=centos-8.4

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
3.26.0-15.el8.tuxcare.els8

Database specific

source 
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/centos8.4els/CLSA-2026-1782142140.json"
sqlite-tcl

Package

Name
sqlite-tcl
Purl
pkg:rpm/tuxcare/sqlite-tcl?distro=centos-8.4

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
3.26.0-15.el8.tuxcare.els8

Database specific

source 
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/centos8.4els/CLSA-2026-1782142140.json"