[CLSA-2026:1794236105] Fix CVE(s): CVE-2026-119371, CVE-2026-119373, CVE-2026-119375
Type:
security
Severity:
Important
Release date:
2026-11-09 14:55:17 UTC
Description:
* Non-maintainer upload by the TuxCare ELS team. * CVE-2026-119371: limit the nesting depth of common table expressions with SQLITE_LIMIT_EXPR_DEPTH to prevent a stack overflow on deeply chained CTEs. - debian/patches/CVE-2026-119371.patch * CVE-2026-119373: fix a heap buffer overflow in fts5MergeRowidLists() when merging detail=none prefix doclists that contain negative rowids. - debian/patches/CVE-2026-119373.patch * CVE-2026-119375: fully initialize the page buffer when a WAL frame is smaller than the database page, so stale page-cache memory is not disclosed. - debian/patches/CVE-2026-119375.patch
CVEs fixed:
Updated packages:
  • lemon_3.34.1-3+deb11u1+tuxcare.els3_amd64.deb
    sha:b7e13697cac87ce051fee6fdb0c74b8c898dee01
  • libsqlite3-0_3.34.1-3+deb11u1+tuxcare.els3_amd64.deb
    sha:368318e02d77da1155089d558c18be31f75965c3
  • libsqlite3-dev_3.34.1-3+deb11u1+tuxcare.els3_amd64.deb
    sha:388e854563524f4ca8f5fb7b16d2e9e138f50e68
  • libsqlite3-tcl_3.34.1-3+deb11u1+tuxcare.els3_amd64.deb
    sha:360bc2292a0ab64d37a09e3c7ec5e6f720297bb4
  • sqlite3_3.34.1-3+deb11u1+tuxcare.els3_amd64.deb
    sha:5705585605a064d45c74b6e6dc59be9cf3d06a37
  • sqlite3-doc_3.34.1-3+deb11u1+tuxcare.els3_all.deb
    sha:02680eb8a6c98ca5ae13af3c643eedfc8e4977cc
  • lemon_3.34.1-3+deb11u1+tuxcare.els3_arm64.deb
    sha:842f2da538935cc458b8d2f415010ca5e30df5f4
  • libsqlite3-0_3.34.1-3+deb11u1+tuxcare.els3_arm64.deb
    sha:9d52091645018375829decb7b2d4883ad7d1ec26
  • libsqlite3-dev_3.34.1-3+deb11u1+tuxcare.els3_arm64.deb
    sha:121bdb81f1fdbefa6d4da2dc7791a33c560887a3
  • libsqlite3-tcl_3.34.1-3+deb11u1+tuxcare.els3_arm64.deb
    sha:42a19e7d34196ac1efa947c2ef97f89b442aac6b
  • sqlite3_3.34.1-3+deb11u1+tuxcare.els3_arm64.deb
    sha:d43890ba5bfa668bbe3ed867dfe9348db1fb8256
  • lemon_3.34.1-3+deb11u1+tuxcare.els3_armel.deb
    sha:25653c939fccd3e2fcbce1a0f08937cd6eb1da67
  • libsqlite3-0_3.34.1-3+deb11u1+tuxcare.els3_armel.deb
    sha:756539a52d10280e7ae84e5e91b9d1e434e57f92
  • libsqlite3-dev_3.34.1-3+deb11u1+tuxcare.els3_armel.deb
    sha:14f4e877eeef8a480c6052d83192336ff7b4a143
  • libsqlite3-tcl_3.34.1-3+deb11u1+tuxcare.els3_armel.deb
    sha:7a617dd5124aa2b70dcea96266be17514ffb6c9e
  • sqlite3_3.34.1-3+deb11u1+tuxcare.els3_armel.deb
    sha:b3f1c5a7b2b7b26637fa1dc737700d2069221a90
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.