OESA-2021-1252

Source
https://www.openeuler.org/en/security/security-bulletins/detail/?id=openEuler-SA-2021-1252
Import Source
https://repo.openeuler.org/security/data/osv/OESA-2021-1252.json
JSON Data
https://api.osv.dev/v1/vulns/OESA-2021-1252
Upstream
Published
2021-07-03T11:03:01Z
Modified
2025-09-03T06:17:13.918099Z
Summary
sqlite security update
Details

SQLite is a C-language library that implements a small, fast, self-contained, high-reliability, full-featured, SQL database engine. SQLite is the most used database engine in the world. SQLite is built into all mobile phones and most computers and comes bundled inside countless other applications that people use every day. It also include lemon and sqlite3_analyzer and tcl tools.

Security Fix(es):

A flaw was found in SQLite s SELECT query functionality (src/select.c). This flaw allows an attacker who is capable of running SQL queries locally on the SQLite database to cause a denial of service or possible code execution by triggering a use-after-free. The highest threat from this vulnerability is to system availability.(CVE-2021-20227)

Database specific
{
    "severity": "Medium"
}
References

Affected packages

openEuler:20.03-LTS-SP1 / sqlite

Package

Name
sqlite
Purl
pkg:rpm/openEuler/sqlite&distro=openEuler-20.03-LTS-SP1

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
3.32.3-3.oe1

Ecosystem specific

{
    "aarch64": [
        "sqlite-3.32.3-3.oe1.aarch64.rpm",
        "sqlite-debuginfo-3.32.3-3.oe1.aarch64.rpm",
        "sqlite-debugsource-3.32.3-3.oe1.aarch64.rpm",
        "sqlite-devel-3.32.3-3.oe1.aarch64.rpm"
    ],
    "noarch": [
        "sqlite-help-3.32.3-3.oe1.noarch.rpm"
    ],
    "x86_64": [
        "sqlite-debuginfo-3.32.3-3.oe1.x86_64.rpm",
        "sqlite-devel-3.32.3-3.oe1.x86_64.rpm",
        "sqlite-3.32.3-3.oe1.x86_64.rpm",
        "sqlite-debugsource-3.32.3-3.oe1.x86_64.rpm"
    ],
    "src": [
        "sqlite-3.32.3-3.oe1.src.rpm"
    ]
}