CLSA-2026-1782142827

See a problem?
Import Source
https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/centos-stream8els/CLSA-2026-1782142827.json
JSON Data
https://api.osv.dev/v1/vulns/CLSA-2026-1782142827
Upstream
CVE (2)
Published
2026-06-22T15:40:43Z
Modified
2026-10-26T09:31:37Z
Summary
sqlite: Fix of 2 CVEs
Details
  • CVE-2026-11822: fix memory corruption in FTS5 fts5LeafRead() by rejecting leaf pages with szLeaf < 4, blocking the OOB read in fts5LeafSeek()
  • CVE-2026-11824: fix heap-based buffer overflow via integer underflow in fts5ChunkIterate() when szLeaf < 4 (same root cause; closed by the same fts5LeafRead validation tightening)
References

Affected packages

TuxCare:CentOS-Stream:8
lemon

Package

Name
lemon
Purl
pkg:rpm/tuxcare/lemon?distro=centos-stream-8

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
3.26.0-19.el8.tuxcare.els2

Database specific

source 
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/centos-stream8els/CLSA-2026-1782142827.json"
sqlite

Package

Name
sqlite
Purl
pkg:rpm/tuxcare/sqlite?distro=centos-stream-8

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
3.26.0-19.el8.tuxcare.els2

Database specific

source 
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/centos-stream8els/CLSA-2026-1782142827.json"
sqlite-analyzer

Package

Name
sqlite-analyzer
Purl
pkg:rpm/tuxcare/sqlite-analyzer?distro=centos-stream-8

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
3.26.0-19.el8.tuxcare.els2

Database specific

source 
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/centos-stream8els/CLSA-2026-1782142827.json"
sqlite-devel

Package

Name
sqlite-devel
Purl
pkg:rpm/tuxcare/sqlite-devel?distro=centos-stream-8

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
3.26.0-19.el8.tuxcare.els2

Database specific

source 
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/centos-stream8els/CLSA-2026-1782142827.json"
sqlite-doc

Package

Name
sqlite-doc
Purl
pkg:rpm/tuxcare/sqlite-doc?distro=centos-stream-8

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
3.26.0-19.el8.tuxcare.els2

Database specific

source 
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/centos-stream8els/CLSA-2026-1782142827.json"
sqlite-libs

Package

Name
sqlite-libs
Purl
pkg:rpm/tuxcare/sqlite-libs?distro=centos-stream-8

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
3.26.0-19.el8.tuxcare.els2

Database specific

source 
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/centos-stream8els/CLSA-2026-1782142827.json"
sqlite-tcl

Package

Name
sqlite-tcl
Purl
pkg:rpm/tuxcare/sqlite-tcl?distro=centos-stream-8

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
3.26.0-19.el8.tuxcare.els2

Database specific

source 
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/centos-stream8els/CLSA-2026-1782142827.json"