Control: clone -1 -2 Control: retitle -1 sqlite3: CVE-2026-119371 CVE-2026-119372 CVE-2026-119373 CVE-2026-119374 CVE-2026-119375 CVE-2026-119376 CVE-2026-119377 CVE-2026-119378 CVE-2026-119379 CVE-2026-119591 Control: retitle -2 sqlite3: CVE-2026-119586
Hi László, On Sun, Nov 01, 2026 at 09:06:57PM +0100, Salvatore Bonaccorso wrote: > Hi, > > On Sun, Nov 01, 2026 at 05:58:52PM +0100, László Böszörményi (GCS) wrote: > > On Sun, Nov 1, 2026 at 5:23 PM Salvatore Bonaccorso <[email protected]> > > wrote: > > > The following vulnerabilities were published for sqlite3. > > > All should be fixed in the 3.54.0 upstream version, but please > > > double-check! > > I think it's version 3.45.1 which fixes these issues. At least its > > changelog [1] states fix a possible heap buffer overflow at least. > > But I'll try to find the correct fixed versions. > > It is probably in any case best to go up to the 3.54.1 version then. > At least the currently tracked CVEs are in at latest version-3.54.0 > tagged verison from the (offcial) github mirror for sqlite3 main > repository. > > Not yet sure how to classify those for trixie, but that is another > story. I was wrong though, there is one which is likely not fixed yet and we should split it ip from this bugreport, CVE-2026-119586 does not seem to be addressed yet in neither 3.54.1. Regards, Salvatore
