portage-ng / portage / dev-db / sqlite / 9999
portage-ng glsa
9 advisories reference dev-db/sqlite · none place version 9999 in a vulnerable range
▸ GLSA 202311-03 SQLite: Multiple Vulnerabilities this version unaffected high local and remote 2023-11-24

Multiple vulnerabilities have been discovered in SQLite, the worst of which may lead to code execution.

Announced
2023-11-24
Revised
2023-11-24
Access
local and remote
Bugs
#886029 #906114
Advisory
https://security.gentoo.org/glsa/202311-03

Affected packages

PackageArchVulnerableUnaffected
dev-db/sqlite*< 3.42.0>= 3.42.0

Background

SQLite is a C library that implements an SQL database engine.

Description

Multiple vulnerabilities have been discovered in SQLite. Please review the CVE identifiers referenced below for details.

Impact

Please review the referenced CVE identifiers for details.

Workaround

There is no known workaround at this time.

Resolution

All SQLite users should upgrade to the latest version:

# emerge --sync
# emerge --ask --oneshot --verbose ">=dev-db/sqlite-3.42.0"

References

▸ GLSA 202210-40 SQLite: Multiple Vulnerabilities this version unaffected high remote 2022-10-31

Multiple vulnerabilities have been found in SQLite, the worst of which could result in arbitrary code execution.

Announced
2022-10-31
Revised
2022-10-31
Access
remote
Bugs
#777990 #863431
Advisory
https://security.gentoo.org/glsa/202210-40

Affected packages

PackageArchVulnerableUnaffected
dev-db/sqlite*< 3.39.2>= 3.39.2

Background

SQLite is a C library that implements an SQL database engine.

Description

Multiple vulnerabilities have been discovered in SQLite. Please review the CVE identifiers referenced below for details.

Impact

Please review the referenced CVE identifiers for details.

Workaround

There is no known workaround at this time.

Resolution

All SQLite users should upgrade to the latest version:

# emerge --sync
# emerge --ask --oneshot --verbose ">=dev-db/sqlite-3.39.2"

References

▸ GLSA 202103-04 SQLite: Remote code execution this version unaffected high local, remote 2021-03-31

A vulnerability in SQLite could lead to remote code execution.

Announced
2021-03-31
Revised
2021-03-31
Access
local, remote
Bugs
#777990
Advisory
https://security.gentoo.org/glsa/202103-04

Affected packages

PackageArchVulnerableUnaffected
dev-db/sqlite*< 3.34.1>= 3.34.1

Background

SQLite is a C library that implements an SQL database engine.

Description

It was discovered that SQLite incorrectly handled certain sub-queries.

Impact

A remote attacker could possibly execute arbitrary code with the privileges of the process, or cause a Denial of Service condition.

Workaround

There is no known workaround at this time.

Resolution

All SQLite users should upgrade to the latest version:

# emerge --sync
# emerge --ask --oneshot --verbose ">=dev-db/sqlite-3.34.1"

References

▸ GLSA 202007-26 SQLite: Multiple vulnerabilities this version unaffected normal remote 2020-07-27

Multiple vulnerabilities have been found in SQLite, the worst of which could result in the arbitrary execution of code.

Announced
2020-07-27
Revised
2020-07-27
Access
remote
Bugs
#716748
Advisory
https://security.gentoo.org/glsa/202007-26

Affected packages

PackageArchVulnerableUnaffected
dev-db/sqlite*< 3.32.3>= 3.32.3

Background

SQLite is a C library that implements an SQL database engine.

Description

Multiple vulnerabilities have been discovered in SQLite. Please review the CVE identifiers referenced below for details.

Impact

Please review the referenced CVE identifiers for details.

Workaround

There is no known workaround at this time.

Resolution

All SQLite users should upgrade to the latest version:

# emerge --sync
# emerge --ask --oneshot --verbose ">=dev-db/sqlite-3.32.3"

References

▸ GLSA 202003-16 SQLite: Multiple vulnerabilities this version unaffected normal local, remote 2020-03-15

Multiple vulnerabilities have been found in SQLite, the worst of which could result in the arbitrary execution of code.

Announced
2020-03-15
Revised
2020-03-15
Access
local, remote
Bugs
#697678 #711526
Advisory
https://security.gentoo.org/glsa/202003-16

Affected packages

PackageArchVulnerableUnaffected
dev-db/sqlite*< 3.31.1>= 3.31.1

Background

SQLite is a C library that implements an SQL database engine.

Description

Multiple vulnerabilities have been discovered in SQLite. Please review the CVE identifiers referenced below for details.

Impact

A remote attacker could possibly execute arbitrary code with the privileges of the process, or cause a Denial of Service condition.

Workaround

There is no known workaround at this time.

Resolution

All SQLite users should upgrade to the latest version:

# emerge --sync
# emerge --ask --oneshot --verbose ">=dev-db/sqlite-3.31.1"

References

▸ GLSA 201908-09 SQLite: Multiple vulnerabilities this version unaffected high remote 2019-08-15

Multiple vulnerabilities have been found in SQLite, the worst of which could result in the arbitrary execution of code.

Announced
2019-08-15
Revised
2019-08-15
Access
remote
Bugs
#684840 #685838
Advisory
https://security.gentoo.org/glsa/201908-09

Affected packages

PackageArchVulnerableUnaffected
dev-db/sqlite*< 3.28.0>= 3.28.0

Background

SQLite is a C library that implements an SQL database engine.

Description

Multiple vulnerabilities have been discovered in SQLite. Please review the CVE identifiers referenced below for details.

Impact

A remote attacker could, by executing arbitrary SQL statements against a vulnerable host, execute arbitrary code.

Workaround

There is no known workaround at this time.

Resolution

All SQLite users should upgrade to the latest version:

# emerge --sync
# emerge --ask --oneshot --verbose ">=dev-db/sqlite-3.28.0"

References

▸ GLSA 201904-21 SQLite: Remote code execution this version unaffected normal remote 2019-04-22

A vulnerability in SQLite may allow for the remote execution of code.

Announced
2019-04-22
Revised
2019-04-22
Access
remote
Bugs
#672942
Advisory
https://security.gentoo.org/glsa/201904-21

Affected packages

PackageArchVulnerableUnaffected
dev-db/sqlite*< 3.25.3>= 3.25.3

Background

SQLite is a C library that implements an SQL database engine.

Description

An integer overflow was discovered in SQLite’s FTS3 extension.

Impact

A remote attacker could, by executing arbitrary SQL statements against a vulnerable host, execute arbitrary code.

Workaround

There is no known workaround at this time.

Resolution

All SQLite users should upgrade to the latest version:

# emerge --sync
# emerge --ask --oneshot --verbose ">=dev-db/sqlite-3.25.3"

References

▸ GLSA 201612-21 SQLite: Multiple vulnerabilities this version unaffected normal remote 2016-12-08

Multiple vulnerabilities were found in SQLite, the worst of which may allow execution of arbitrary code.

Announced
2016-12-08
Revised
2016-12-08
Access
remote
Bugs
#549258 #574420
Advisory
https://security.gentoo.org/glsa/201612-21

Affected packages

PackageArchVulnerableUnaffected
dev-db/sqlite*< 3.11.1>= 3.11.1

Background

SQLite is a C library that implements an SQL database engine.

Description

Multiple vulnerabilities have been discovered in SQLite. Please review the CVE identifiers referenced below for details.

Impact

A remote attacker could possibly execute arbitrary code with the privileges of the process, or cause a Denial of Service condition.

Workaround

There is no known workaround at this time.

Resolution

All sqlite users should upgrade to the latest version:

# emerge --sync
# emerge --ask --oneshot --verbose ">=dev-db/sqlite-3.11.1"

References

▸ GLSA 201507-05 SQLite: Multiple vulnerabilities this version unaffected normal local, remote 2015-07-07

Multiple vulnerabilities have been found in SQLite, allowing context-dependent attackers to cause a Denial of Service condition.

Announced
2015-07-07
Revised
2015-07-07
Access
local, remote
Bugs
#546626
Advisory
https://security.gentoo.org/glsa/201507-05

Affected packages

PackageArchVulnerableUnaffected
dev-db/sqlite*< 3.8.9>= 3.8.9

Background

SQLite is a C library that implements an SQL database engine.

Description

Multiple vulnerabilities have been discovered in SQLite. Please review the CVE identifiers referenced below for details.

Impact

A context-dependent attacker could possibly cause a Denial of Service condition.

Workaround

There is no known workaround at this time.

Resolution

All SQLite users should upgrade to the latest version:

# emerge --sync
# emerge --ask --oneshot --verbose ">=dev-db/sqlite-3.8.9"

References