Salvatore Bonaccorso pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
8fb62584 by Salvatore Bonaccorso at 2026-09-15T07:36:07+02:00
Update status for CVE-2026-39113/sqlite3
Thanks: Sylvain Beucler for the triage
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -22109,9 +22109,7 @@ CVE-2026-41707 (Authentication Bypass by Capture-replay
vulnerability in Spring
CVE-2026-3002 (The Gutenverse \u2013 Ultimate WordPress FSE Blocks Addons &
Ecosystem ...)
NOT-FOR-US: WordPress plugin
CVE-2026-39113 (Buffer Overflow vulnerability in SQLite affected version
source snapsh ...)
- - sqlite3 3.53.2-1
- [trixie] - sqlite3 <no-dsa> (Minor issue)
- [bookworm] - sqlite3 <not-affected> (Vulnerable code introduced later)
+ - sqlite3 <not-affected> (Vulnerable code never present in a Debian
released version)
NOTE: https://github.com/20000419/CVE-2026-39113
NOTE: Introduced by:
https://github.com/sqlite/sqlite/commit/169f68ed88b34cb68f720191c64c058f2ccec508
(version-3.53.0)
NOTE: Fixed by:
https://github.com/sqlite/sqlite/commit/34e139d3a306fcc0eeaf29de69783a311d48356b
(version-3.53.0)
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/8fb6258489e659e8bceddc55946361d81ad7d153
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/8fb6258489e659e8bceddc55946361d81ad7d153
You're receiving this email because of your account on salsa.debian.org. Manage
all notifications: https://salsa.debian.org/-/profile/notifications | Help:
https://salsa.debian.org/help
_______________________________________________
debian-security-tracker-commits mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits