SUSE-SU-2026:2528-1

Опубликовано: 23 июн. 2026

Источник: suse-cvrf

Описание

Security update for sqlite3

This update for sqlite3 fixes the following issues

Update to 3.53.2:

CVE-2026-11822: memory corruption vulnerabilities in the FTS5 full-text search extension that allow attackers to cause process crashes, memory exhaustion, or arbitrary code execution (bsc#1268012).
CVE-2026-11824: heap-based buffer overflow vulnerability in the FTS5 full-text search extension that allows attackers to cause a crash or execute arbitrary code (bsc#1268013).

Список пакетов

Container suse/manager/4.3/proxy-httpd:latest

libsqlite3-0-3.53.2-150000.3.42.1

Container suse/manager/4.3/proxy-salt-broker:latest

libsqlite3-0-3.53.2-150000.3.42.1

Container suse/manager/4.3/proxy-squid:latest

libsqlite3-0-3.53.2-150000.3.42.1

Container suse/manager/4.3/proxy-ssh:latest

libsqlite3-0-3.53.2-150000.3.42.1

Container suse/manager/4.3/proxy-tftpd:latest

libsqlite3-0-3.53.2-150000.3.42.1

Container suse/sle-micro-rancher/5.3:latest

libsqlite3-0-3.53.2-150000.3.42.1

Container suse/sle-micro-rancher/5.4:latest

libsqlite3-0-3.53.2-150000.3.42.1

Container suse/sle-micro/5.3/toolbox:latest

libsqlite3-0-3.53.2-150000.3.42.1

Container suse/sle-micro/5.4/toolbox:latest

libsqlite3-0-3.53.2-150000.3.42.1

Container suse/sle-micro/5.5/toolbox:latest

libsqlite3-0-3.53.2-150000.3.42.1

Container suse/sle-micro/5.5:latest

libsqlite3-0-3.53.2-150000.3.42.1

Container suse/sle-micro/base-5.5:latest

libsqlite3-0-3.53.2-150000.3.42.1

Container suse/sle-micro/kvm-5.5:latest

libsqlite3-0-3.53.2-150000.3.42.1

Container suse/sle-micro/rt-5.5:latest

libsqlite3-0-3.53.2-150000.3.42.1

Image SLES15-SP5-Micro-5-5

libsqlite3-0-3.53.2-150000.3.42.1

Image SLES15-SP5-Micro-5-5-Azure

libsqlite3-0-3.53.2-150000.3.42.1

Image SLES15-SP5-Micro-5-5-BYOS

libsqlite3-0-3.53.2-150000.3.42.1

Image SLES15-SP5-Micro-5-5-BYOS-Azure

libsqlite3-0-3.53.2-150000.3.42.1

Image SLES15-SP5-Micro-5-5-BYOS-EC2

libsqlite3-0-3.53.2-150000.3.42.1

Image SLES15-SP5-Micro-5-5-BYOS-GCE

libsqlite3-0-3.53.2-150000.3.42.1

Image SLES15-SP5-Micro-5-5-EC2

libsqlite3-0-3.53.2-150000.3.42.1

Image SLES15-SP5-Micro-5-5-GCE

libsqlite3-0-3.53.2-150000.3.42.1

SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS

libsqlite3-0-3.53.2-150000.3.42.1

libsqlite3-0-32bit-3.53.2-150000.3.42.1

sqlite3-3.53.2-150000.3.42.1

sqlite3-devel-3.53.2-150000.3.42.1

sqlite3-tcl-3.53.2-150000.3.42.1

SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS

libsqlite3-0-3.53.2-150000.3.42.1

libsqlite3-0-32bit-3.53.2-150000.3.42.1

sqlite3-3.53.2-150000.3.42.1

sqlite3-devel-3.53.2-150000.3.42.1

sqlite3-tcl-3.53.2-150000.3.42.1

SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS

libsqlite3-0-3.53.2-150000.3.42.1

libsqlite3-0-32bit-3.53.2-150000.3.42.1

sqlite3-3.53.2-150000.3.42.1

sqlite3-devel-3.53.2-150000.3.42.1

sqlite3-tcl-3.53.2-150000.3.42.1

SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS

libsqlite3-0-3.53.2-150000.3.42.1

libsqlite3-0-32bit-3.53.2-150000.3.42.1

sqlite3-3.53.2-150000.3.42.1

sqlite3-devel-3.53.2-150000.3.42.1

sqlite3-tcl-3.53.2-150000.3.42.1

SUSE Linux Enterprise Micro 5.3

libsqlite3-0-3.53.2-150000.3.42.1

sqlite3-tcl-3.53.2-150000.3.42.1

SUSE Linux Enterprise Micro 5.4

libsqlite3-0-3.53.2-150000.3.42.1

sqlite3-tcl-3.53.2-150000.3.42.1

SUSE Linux Enterprise Micro 5.5

libsqlite3-0-3.53.2-150000.3.42.1

sqlite3-tcl-3.53.2-150000.3.42.1

SUSE Linux Enterprise Module for Basesystem 15 SP7

libsqlite3-0-3.53.2-150000.3.42.1

libsqlite3-0-32bit-3.53.2-150000.3.42.1

sqlite3-3.53.2-150000.3.42.1

sqlite3-devel-3.53.2-150000.3.42.1

sqlite3-tcl-3.53.2-150000.3.42.1

SUSE Linux Enterprise Server 15 SP4-LTSS

libsqlite3-0-3.53.2-150000.3.42.1

libsqlite3-0-32bit-3.53.2-150000.3.42.1

sqlite3-3.53.2-150000.3.42.1

sqlite3-devel-3.53.2-150000.3.42.1

sqlite3-tcl-3.53.2-150000.3.42.1

SUSE Linux Enterprise Server 15 SP5-LTSS

libsqlite3-0-3.53.2-150000.3.42.1

libsqlite3-0-32bit-3.53.2-150000.3.42.1

sqlite3-3.53.2-150000.3.42.1

sqlite3-devel-3.53.2-150000.3.42.1

sqlite3-tcl-3.53.2-150000.3.42.1

SUSE Linux Enterprise Server 15 SP6-LTSS

libsqlite3-0-3.53.2-150000.3.42.1

libsqlite3-0-32bit-3.53.2-150000.3.42.1

sqlite3-3.53.2-150000.3.42.1

sqlite3-devel-3.53.2-150000.3.42.1

sqlite3-tcl-3.53.2-150000.3.42.1

SUSE Linux Enterprise Server for SAP Applications 15 SP4

libsqlite3-0-3.53.2-150000.3.42.1

libsqlite3-0-32bit-3.53.2-150000.3.42.1

sqlite3-3.53.2-150000.3.42.1

sqlite3-devel-3.53.2-150000.3.42.1

sqlite3-tcl-3.53.2-150000.3.42.1

SUSE Linux Enterprise Server for SAP Applications 15 SP5

libsqlite3-0-3.53.2-150000.3.42.1

libsqlite3-0-32bit-3.53.2-150000.3.42.1

sqlite3-3.53.2-150000.3.42.1

sqlite3-devel-3.53.2-150000.3.42.1

sqlite3-tcl-3.53.2-150000.3.42.1

SUSE Linux Enterprise Server for SAP Applications 15 SP6

libsqlite3-0-3.53.2-150000.3.42.1

libsqlite3-0-32bit-3.53.2-150000.3.42.1

sqlite3-3.53.2-150000.3.42.1

sqlite3-devel-3.53.2-150000.3.42.1

sqlite3-tcl-3.53.2-150000.3.42.1

Ссылки

https://www.suse.com/support/update/announcement/2026/suse-su-20262528-1/
Link for SUSE-SU-2026:2528-1
https://lists.suse.com/pipermail/sle-security-updates/2026-June/026946.html
E-Mail link for SUSE-SU-2026:2528-1
https://www.suse.com/support/security/rating/
SUSE Security Ratings
https://bugzilla.suse.com/1268012
SUSE Bug 1268012
https://bugzilla.suse.com/1268013
SUSE Bug 1268013
https://www.suse.com/security/cve/CVE-2026-11822/
SUSE CVE CVE-2026-11822 page
https://www.suse.com/security/cve/CVE-2026-11824/
SUSE CVE CVE-2026-11824 page

Описание

SQLite before 3.53.2 contains memory corruption vulnerabilities in the FTS5 full-text search extension that allow attackers to cause process crashes, memory exhaustion, or arbitrary code execution by supplying a crafted database with malformed FTS5 page data. Attackers can trigger an out-of-bounds read in fts5LeafSeek() via an attacker-controlled loop bound and a heap buffer overflow write in fts5ChunkIterate() through a crafted continuation page causing an integer underflow, exploitable when an FTS5 MATCH query is executed against the malicious database.

Затронутые продукты

Container suse/manager/4.3/proxy-httpd:latest:libsqlite3-0-3.53.2-150000.3.42.1

Container suse/manager/4.3/proxy-salt-broker:latest:libsqlite3-0-3.53.2-150000.3.42.1

Container suse/manager/4.3/proxy-squid:latest:libsqlite3-0-3.53.2-150000.3.42.1

Container suse/manager/4.3/proxy-ssh:latest:libsqlite3-0-3.53.2-150000.3.42.1

Ссылки

https://www.suse.com/security/cve/CVE-2026-11822.html
CVE-2026-11822
https://bugzilla.suse.com/1268012
SUSE Bug 1268012

Описание

SQLite before 3.53.2 contains a heap-based buffer overflow vulnerability in the FTS5 full-text search extension that allows attackers to cause a crash or execute arbitrary code by supplying a crafted database with malicious continuation page metadata specifying a szLeaf value smaller than 4. Attackers can trigger an integer underflow in fts5ChunkIterate() causing an inflated remaining byte count during FTS5 MATCH query processing, leading to a heap buffer overflow of attacker-controlled data in applications compiled with SQLITE_ENABLE_FTS5.

Затронутые продукты

Container suse/manager/4.3/proxy-httpd:latest:libsqlite3-0-3.53.2-150000.3.42.1

Container suse/manager/4.3/proxy-salt-broker:latest:libsqlite3-0-3.53.2-150000.3.42.1

Container suse/manager/4.3/proxy-squid:latest:libsqlite3-0-3.53.2-150000.3.42.1

Container suse/manager/4.3/proxy-ssh:latest:libsqlite3-0-3.53.2-150000.3.42.1

Ссылки

https://www.suse.com/security/cve/CVE-2026-11824.html
CVE-2026-11824
https://bugzilla.suse.com/1268013
SUSE Bug 1268013

SUSE-SU-2026:2528-1

Описание

Список пакетов

Container suse/manager/4.3/proxy-httpd:latest

Container suse/manager/4.3/proxy-salt-broker:latest

Container suse/manager/4.3/proxy-squid:latest

Container suse/manager/4.3/proxy-ssh:latest

Container suse/manager/4.3/proxy-tftpd:latest

Container suse/sle-micro-rancher/5.3:latest

Container suse/sle-micro-rancher/5.4:latest

Container suse/sle-micro/5.3/toolbox:latest

Container suse/sle-micro/5.4/toolbox:latest

Container suse/sle-micro/5.5/toolbox:latest

Container suse/sle-micro/5.5:latest

Container suse/sle-micro/base-5.5:latest

Container suse/sle-micro/kvm-5.5:latest

Container suse/sle-micro/rt-5.5:latest

Image SLES15-SP5-Micro-5-5

Image SLES15-SP5-Micro-5-5-Azure

Image SLES15-SP5-Micro-5-5-BYOS

Image SLES15-SP5-Micro-5-5-BYOS-Azure

Image SLES15-SP5-Micro-5-5-BYOS-EC2

Image SLES15-SP5-Micro-5-5-BYOS-GCE

Image SLES15-SP5-Micro-5-5-EC2

Image SLES15-SP5-Micro-5-5-GCE

SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS

SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS

SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS

SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS

SUSE Linux Enterprise Micro 5.3

SUSE Linux Enterprise Micro 5.4

SUSE Linux Enterprise Micro 5.5

SUSE Linux Enterprise Module for Basesystem 15 SP7

SUSE Linux Enterprise Server 15 SP4-LTSS

SUSE Linux Enterprise Server 15 SP5-LTSS

SUSE Linux Enterprise Server 15 SP6-LTSS

SUSE Linux Enterprise Server for SAP Applications 15 SP4

SUSE Linux Enterprise Server for SAP Applications 15 SP5

SUSE Linux Enterprise Server for SAP Applications 15 SP6

Ссылки

Уязвимость: CVE-2026-11822

Описание

Затронутые продукты

Ссылки

Уязвимость: CVE-2026-11824

Описание

Затронутые продукты

Ссылки