OESA-2023-1219

See a problem?
Please try reporting it to the source first.
Source
https://www.openeuler.org/en/security/security-bulletins/detail/?id=openEuler-SA-2023-1219
Import Source
https://repo.openeuler.org/security/data/osv/OESA-2023-1219.json
JSON Data
https://api.osv.dev/v1/vulns/OESA-2023-1219
Upstream
Published
2022-12-24T11:05:08Z
Modified
2025-09-03T06:18:37.570862Z
Summary
sqlite security update
Details

SQLite is a C-language library that implements a small, fast, self-contained, high-reliability, full-featured, SQL database engine. SQLite is the most used database engine in the world. SQLite is built into all mobile phones and most computers and comes bundled inside countless other applications that people use every day.It also include lemon and sqlite3_analyzer and tcl tools.

Security Fix(es):

SQLite through 3.40.0, when relying on --safe for execution of an untrusted CLI script, does not properly implement the azProhibitedFunctions protection mechanism, and instead allows UDF functions such as WRITEFILE.(CVE-2022-46908)

Database specific 
{
    "severity": "Critical"
}
References

Affected packages

openEuler:22.03-LTS-SP1 / sqlite

Package

Name
sqlite
Purl
pkg:rpm/openEuler/sqlite&distro=openEuler-22.03-LTS-SP1

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
3.37.2-5.oe2203sp1

Ecosystem specific 

{
    "noarch": [
        "sqlite-help-3.37.2-5.oe2203sp1.noarch.rpm"
    ],
    "x86_64": [
        "sqlite-debuginfo-3.37.2-5.oe2203sp1.x86_64.rpm",
        "sqlite-devel-3.37.2-5.oe2203sp1.x86_64.rpm",
        "sqlite-debugsource-3.37.2-5.oe2203sp1.x86_64.rpm",
        "sqlite-3.37.2-5.oe2203sp1.x86_64.rpm"
    ],
    "src": [
        "sqlite-3.37.2-5.oe2203sp1.src.rpm"
    ],
    "aarch64": [
        "sqlite-devel-3.37.2-5.oe2203sp1.aarch64.rpm",
        "sqlite-debuginfo-3.37.2-5.oe2203sp1.aarch64.rpm",
        "sqlite-debugsource-3.37.2-5.oe2203sp1.aarch64.rpm",
        "sqlite-3.37.2-5.oe2203sp1.aarch64.rpm"
    ]
}