SUSE-SU-2019:1601-1

HIGH8.1

Security update for sqlite3

Published Jun 21, 2019

Modified 6 years ago

Fix available

Details

Description of the patch:

This update for sqlite3 fixes the following issues:

Security issue fixed:

CVE-2019-8457: Fixed a Heap out-of-bound read in rtreenode() when handling invalid rtree tables (bsc#1136976).

Affected Packages

libsqlite3-0

SUSE Enterprise Storage 4SUSE Linux Enterprise Desktop 12 SP3SUSE Linux Enterprise Desktop 12 SP4SUSE Linux Enterprise Server 12 SP1-LTSSSUSE Linux Enterprise Server 12 SP2-BCL

Fixed in:

3.8.10.2-9.9.1

libsqlite3-0-32bit

SUSE Enterprise Storage 4SUSE Linux Enterprise Desktop 12 SP3SUSE Linux Enterprise Desktop 12 SP4SUSE Linux Enterprise Server 12 SP1-LTSSSUSE Linux Enterprise Server 12 SP2-BCL

Fixed in:

3.8.10.2-9.9.1

sqlite3

SUSE Enterprise Storage 4SUSE Linux Enterprise Desktop 12 SP3SUSE Linux Enterprise Desktop 12 SP4SUSE Linux Enterprise Server 12 SP1-LTSSSUSE Linux Enterprise Server 12 SP2-BCL

Fixed in:

3.8.10.2-9.9.1

sqlite3-devel

SUSE Linux Enterprise Software Development Kit 12 SP3SUSE Linux Enterprise Software Development Kit 12 SP4

Fixed in:

3.8.10.2-9.9.1

References

ADVISORY

https://bugzilla.suse.com/1136976

ADVISORY

https://lists.suse.com/pipermail/sle-security-updates/2019-June/005603.html

ADVISORY