[CLSA-2026:1793792937] Fix CVE(s): CVE-2026-119371, CVE-2026-119379
Type:
security
Severity:
Important
Release date:
2026-11-12 10:44:47 UTC
Description:
* SECURITY UPDATE: stack exhaustion via deeply nested CTEs - debian/patches/CVE-2026-119371.patch: count CTE expansions in withExpand() and subquery/VIEW result sets in sqlite3ResultSetOfSelect() against SQLITE_LIMIT_EXPR_DEPTH in src/select.c, so an over-deep chain fails with "VIEWs and/or subqueries nested too deep" instead of recursing without bound - CVE-2026-119371
CVEs fixed:
Updated packages:
  • lemon_3.31.1-4ubuntu0.7+tuxcare.els4_amd64.deb
    sha:3303d6ce3bcfd720c5152d8498c4933f730ef7ec
  • libsqlite3-0_3.31.1-4ubuntu0.7+tuxcare.els4_amd64.deb
    sha:c746b6eec79055a6ff5e290e8e4e3ea67b129193
  • libsqlite3-dev_3.31.1-4ubuntu0.7+tuxcare.els4_amd64.deb
    sha:fbdbe89db197e301b1a65bf1e0102d0df58db17e
  • libsqlite3-tcl_3.31.1-4ubuntu0.7+tuxcare.els4_amd64.deb
    sha:06df55d26c6592f097b04f50c9f416a4ef1758c5
  • sqlite3_3.31.1-4ubuntu0.7+tuxcare.els4_amd64.deb
    sha:54fc78464b4f21cee90a4b9444b23ac62bfc25cd
  • sqlite3-doc_3.31.1-4ubuntu0.7+tuxcare.els4_all.deb
    sha:09e55e3380b070ee9cc57bc996b3b9340a5a0828
  • lemon_3.31.1-4ubuntu0.7+tuxcare.els4_arm64.deb
    sha:97144ad2b0743c192b6bef87fbed5a9133e9fa7e
  • libsqlite3-0_3.31.1-4ubuntu0.7+tuxcare.els4_arm64.deb
    sha:455c3a68e01675e399f7fd71100a6570501d99f0
  • libsqlite3-dev_3.31.1-4ubuntu0.7+tuxcare.els4_arm64.deb
    sha:a650ecec21b43aadc7fef6f00ba3811df52ac87f
  • libsqlite3-tcl_3.31.1-4ubuntu0.7+tuxcare.els4_arm64.deb
    sha:80444a5a37d744af0f1de21c0f9d821f4b36a3a6
  • sqlite3_3.31.1-4ubuntu0.7+tuxcare.els4_arm64.deb
    sha:b2f31bbb99c2d82a75aa64c85d6ad20f61497547
  • lemon_3.31.1-4ubuntu0.7+tuxcare.els4_armel.deb
    sha:6d0c0145b73891c41e0e2d95296c7f6e08c881ee
  • libsqlite3-0_3.31.1-4ubuntu0.7+tuxcare.els4_armel.deb
    sha:d4b2ca46a8c7b8ac8b1e68a5902041bbd24bc9bf
  • libsqlite3-dev_3.31.1-4ubuntu0.7+tuxcare.els4_armel.deb
    sha:c673c5e0f414085436984afb32e7aedb37f90527
  • libsqlite3-tcl_3.31.1-4ubuntu0.7+tuxcare.els4_armel.deb
    sha:90c95d3e0d4c8b29ee78f42ef054ab7dd5579714
  • sqlite3_3.31.1-4ubuntu0.7+tuxcare.els4_armel.deb
    sha:fbff8c67787b84a1b7bd4fc5e525a843df585375
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.