Early Access — Mondoo Vulnerability Intelligence is currently in preview.

SUSE-SU-2023:2668-1 | Mondoo Vulnerability Intelligence

SUSE-SU-2023:2668-1

UNKNOWN

Security update for sqlite3

Published Jun 28, 2023

Modified 2 years ago

Fix available

Details

This update for sqlite3 fixes the following issues:

CVE-2022-46908: Properly implement the azProhibitedFunctions protection mechanism, when relying on --safe for execution of an untrusted CLI script (bsc#1206337).

Affected Packages

SUSE:Linux Enterprise Server 12 SP2-BCLlibsqlite3-0

Fixed in:

3.39.3-9.26.1

SUSE:Linux Enterprise Server 12 SP2-BCLlibsqlite3-0-32bit

Fixed in:

3.39.3-9.26.1

SUSE:Linux Enterprise Server 12 SP2-BCLsqlite3

Fixed in:

3.39.3-9.26.1

SUSE:Linux Enterprise Server 12 SP2-BCLsqlite3-devel

Fixed in:

3.39.3-9.26.1

SUSE:Linux Enterprise Server 12 SP2-BCLsqlite3-tcl

Fixed in:

3.39.3-9.26.1

SUSE:Linux Enterprise Server 12 SP4-ESPOSlibsqlite3-0

Fixed in:

3.39.3-9.26.1

SUSE:Linux Enterprise Server 12 SP4-ESPOSlibsqlite3-0-32bit

Fixed in:

3.39.3-9.26.1

SUSE:Linux Enterprise Server 12 SP4-ESPOSsqlite3

Fixed in:

3.39.3-9.26.1

SUSE:Linux Enterprise Server 12 SP4-ESPOSsqlite3-devel

Fixed in:

3.39.3-9.26.1

SUSE:Linux Enterprise Server 12 SP4-ESPOSsqlite3-tcl

Fixed in:

3.39.3-9.26.1

SUSE:Linux Enterprise Server 12 SP4-LTSSlibsqlite3-0

Fixed in:

3.39.3-9.26.1

SUSE:Linux Enterprise Server 12 SP4-LTSSlibsqlite3-0-32bit

Fixed in:

3.39.3-9.26.1

SUSE:Linux Enterprise Server 12 SP4-LTSSsqlite3

Fixed in:

3.39.3-9.26.1

SUSE:Linux Enterprise Server 12 SP4-LTSSsqlite3-devel

Fixed in:

3.39.3-9.26.1

SUSE:Linux Enterprise Server 12 SP4-LTSSsqlite3-tcl

Fixed in:

3.39.3-9.26.1

SUSE:Linux Enterprise Server for SAP Applications 12 SP4libsqlite3-0

Fixed in:

3.39.3-9.26.1

SUSE:Linux Enterprise Server for SAP Applications 12 SP4libsqlite3-0-32bit

Fixed in:

3.39.3-9.26.1

SUSE:Linux Enterprise Server for SAP Applications 12 SP4sqlite3

Fixed in:

3.39.3-9.26.1

SUSE:Linux Enterprise Server for SAP Applications 12 SP4sqlite3-devel

Fixed in:

3.39.3-9.26.1

SUSE:Linux Enterprise Server for SAP Applications 12 SP4sqlite3-tcl

Fixed in:

3.39.3-9.26.1

SUSE:OpenStack Cloud 9libsqlite3-0

Fixed in:

3.39.3-9.26.1

SUSE:OpenStack Cloud 9libsqlite3-0-32bit

Fixed in:

3.39.3-9.26.1

SUSE:OpenStack Cloud 9sqlite3

Fixed in:

3.39.3-9.26.1

SUSE:OpenStack Cloud 9sqlite3-devel

Fixed in:

3.39.3-9.26.1

SUSE:OpenStack Cloud 9sqlite3-tcl

Fixed in:

3.39.3-9.26.1

SUSE:OpenStack Cloud Crowbar 9libsqlite3-0

Fixed in:

3.39.3-9.26.1

SUSE:OpenStack Cloud Crowbar 9libsqlite3-0-32bit

Fixed in:

3.39.3-9.26.1

SUSE:OpenStack Cloud Crowbar 9sqlite3

Fixed in:

3.39.3-9.26.1

SUSE:OpenStack Cloud Crowbar 9sqlite3-devel

Fixed in:

3.39.3-9.26.1

SUSE:OpenStack Cloud Crowbar 9sqlite3-tcl

Fixed in:

3.39.3-9.26.1

References

REPORThttps://bugzilla.suse.com/1206337 WEBhttps://www.suse.com/security/cve/CVE-2022-46908 ADVISORYhttps://www.suse.com/support/update/announcement/2023/suse-su-20232668-1/

Upstream

Related

Ecosystems

SUSE Linux Enterprise Server 12 SP2-BCL SUSE Linux Enterprise Server 12 SP4-ESPOS SUSE Linux Enterprise Server 12 SP4-LTSS SUSE Linux Enterprise Server for SAP Applications 12 SP4 SUSE OpenStack Cloud 9 SUSE OpenStack Cloud Crowbar 9

Timeline

PublishedJun 28, 2023

ModifiedJun 28, 2023