Описание
Security update for sqlite3
This update for sqlite3 fixes the following issues:
Security issue fixed:
- CVE-2019-16168: Fixed improper validation of sqlite_stat1 field that could lead to denial of service (bsc#1150137).
This update was imported from the SUSE:SLE-15:Update update project.
Список пакетов
openSUSE Leap 15.1
libsqlite3-0-3.28.0-lp151.2.3.1
libsqlite3-0-32bit-3.28.0-lp151.2.3.1
sqlite3-3.28.0-lp151.2.3.1
sqlite3-devel-3.28.0-lp151.2.3.1
sqlite3-doc-3.28.0-lp151.2.3.1
Ссылки
- E-Mail link for openSUSE-SU-2019:2300-1
- SUSE Security Ratings
- SUSE Bug 1150137
- SUSE CVE CVE-2019-16168 page
Описание
In SQLite through 3.29.0, whereLoopAddBtreeIndex in sqlite3.c can crash a browser or other application because of missing validation of a sqlite_stat1 sz field, aka a "severe division by zero in the query planner."
Затронутые продукты
openSUSE Leap 15.1:libsqlite3-0-3.28.0-lp151.2.3.1
openSUSE Leap 15.1:libsqlite3-0-32bit-3.28.0-lp151.2.3.1
openSUSE Leap 15.1:sqlite3-3.28.0-lp151.2.3.1
openSUSE Leap 15.1:sqlite3-devel-3.28.0-lp151.2.3.1
Ссылки
- CVE-2019-16168
- SUSE Bug 1150137
- SUSE Bug 1160968