sqlite-3.26.0-21.el8_10
エラータID: AXSA:2026-1658:02
リリース日:
2026/08/26 Wednesday - 16:10
題名:
sqlite-3.26.0-21.el8_10
影響のあるチャネル:
Asianux Server 8 for x86_64
Severity:
High
Description:
以下項目について対処しました。
[Security Fix]
- SQLite の FTS5 拡張機能には、メモリ領域の範囲外読み取りの問題
があるため、ローカルの攻撃者により、情報の漏洩、データ破壊、および
サービス拒否攻撃を可能とする脆弱性が存在します。(CVE-2026-11822)
- SQLite の FTS5 拡張機能には、整数アンダーフローの問題があるため、
ローカルの攻撃者により、情報の漏洩、データ破壊、およびサービス拒否
攻撃を可能とする脆弱性が存在します。(CVE-2026-11824)
解決策:
パッケージをアップデートしてください。
CVE:
CVE-2026-11822
SQLite before 3.53.2 contains memory corruption vulnerabilities in the FTS5 full-text search extension that allow attackers to cause process crashes, memory exhaustion, or arbitrary code execution by supplying a crafted database with malformed FTS5 page data. Attackers can trigger an out-of-bounds read in fts5LeafSeek() via an attacker-controlled loop bound and a heap buffer overflow write in fts5ChunkIterate() through a crafted continuation page causing an integer underflow, exploitable when an FTS5 MATCH query is executed against the malicious database.
SQLite before 3.53.2 contains memory corruption vulnerabilities in the FTS5 full-text search extension that allow attackers to cause process crashes, memory exhaustion, or arbitrary code execution by supplying a crafted database with malformed FTS5 page data. Attackers can trigger an out-of-bounds read in fts5LeafSeek() via an attacker-controlled loop bound and a heap buffer overflow write in fts5ChunkIterate() through a crafted continuation page causing an integer underflow, exploitable when an FTS5 MATCH query is executed against the malicious database.
CVE-2026-11824
SQLite before 3.53.2 contains a heap-based buffer overflow vulnerability in the FTS5 full-text search extension that allows attackers to cause a crash or execute arbitrary code by supplying a crafted database with malicious continuation page metadata specifying a szLeaf value smaller than 4. Attackers can trigger an integer underflow in fts5ChunkIterate() causing an inflated remaining byte count during FTS5 MATCH query processing, leading to a heap buffer overflow of attacker-controlled data in applications compiled with SQLITE_ENABLE_FTS5.
SQLite before 3.53.2 contains a heap-based buffer overflow vulnerability in the FTS5 full-text search extension that allows attackers to cause a crash or execute arbitrary code by supplying a crafted database with malicious continuation page metadata specifying a szLeaf value smaller than 4. Attackers can trigger an integer underflow in fts5ChunkIterate() causing an inflated remaining byte count during FTS5 MATCH query processing, leading to a heap buffer overflow of attacker-controlled data in applications compiled with SQLITE_ENABLE_FTS5.
追加情報:
N/A
ダウンロード:
SRPMS
- sqlite-3.26.0-21.el8_10.src.rpm
MD5: 2e4c38cc5cd25e308449cab6f4ee3420
SHA-256: 4abe219d7f92afd9130fc8412e5c37ff78f3b8eb999020b7eb5a16436c538b01
Size: 22.50 MB
Asianux Server 8 for x86_64
- lemon-3.26.0-21.el8_10.x86_64.rpm
MD5: 3aaff75fbb5a8300c08c60d1cb3ab666
SHA-256: 087997ed27114f7b5d236331cc5db8c71277c9d3e7c74cf2045d624e0d698fcb
Size: 76.53 kB - sqlite-3.26.0-21.el8_10.i686.rpm
MD5: 1da546ba5a9b4597e9eb878da8e13bb6
SHA-256: a6a76b8dba9bed3a92d482268f09c5346ce436e3242f73b6d9166347e256b71c
Size: 714.29 kB - sqlite-3.26.0-21.el8_10.x86_64.rpm
MD5: 282eec690d277c5d0a053b651b668cc4
SHA-256: 2cfe584e1feac98ce94c24d36dc45b508466763f9ae351e8fe9048066ae2e339
Size: 667.75 kB - sqlite-devel-3.26.0-21.el8_10.i686.rpm
MD5: 1b8ebd4f47cd951fbbdf68356149e49a
SHA-256: 186b56e6e452855eaf234160c99ed0708ed189f5a75d503ee3838e8c1fdd90f3
Size: 164.38 kB - sqlite-devel-3.26.0-21.el8_10.x86_64.rpm
MD5: 293ccd6796d26d1e3bd05b5344df1294
SHA-256: a2d080150c6afa5557841d9522a4e5e004b7ac04c440b69ae9f622c13e84ca72
Size: 164.36 kB - sqlite-doc-3.26.0-21.el8_10.noarch.rpm
MD5: ed514e6fb127b6bff8cae45af4f95ae4
SHA-256: d9155fa3d63eac2ede11708b72efe3a0e4c2169ab6a0480d5efabf3273976a78
Size: 6.76 MB - sqlite-libs-3.26.0-21.el8_10.i686.rpm
MD5: f2fa361590bf48e8e9fe7bcaf1c54ae2
SHA-256: 4c7726c884c5bebe9c29449ed400e9a7046d1f64f1cf3a0bf3ed0c8f4e317fe3
Size: 621.01 kB - sqlite-libs-3.26.0-21.el8_10.x86_64.rpm
MD5: e884841b8f23c6f710567e19dcaa639e
SHA-256: f7f39fe81fcf0b68eee7dedf38dc72cbf51464069cf01b099e590e5ee751e46c
Size: 580.29 kB
English