{"id":"CLSA-2026-1782142827","summary":"sqlite: Fix of 2 CVEs","details":"- CVE-2026-11822: fix memory corruption in FTS5 fts5LeafRead() by rejecting\n  leaf pages with szLeaf \u003c 4, blocking the OOB read in fts5LeafSeek()\n- CVE-2026-11824: fix heap-based buffer overflow via integer underflow in\n  fts5ChunkIterate() when szLeaf \u003c 4 (same root cause; closed by the same\n  fts5LeafRead validation tightening)","modified":"2026-10-26T09:31:37.494755620Z","published":"2026-06-22T15:40:43Z","upstream":["CVE-2026-11822","CVE-2026-11824"],"references":[{"type":"ADVISORY","url":"https://errata.tuxcare.com/els_os/centos-stream8els/CLSA-2026-1782142827.html"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-11822"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-11824"}],"affected":[{"package":{"name":"lemon","ecosystem":"TuxCare:CentOS-Stream:8","purl":"pkg:rpm/tuxcare/lemon?distro=centos-stream-8"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.26.0-19.el8.tuxcare.els2"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/centos-stream8els/CLSA-2026-1782142827.json"}},{"package":{"name":"sqlite","ecosystem":"TuxCare:CentOS-Stream:8","purl":"pkg:rpm/tuxcare/sqlite?distro=centos-stream-8"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.26.0-19.el8.tuxcare.els2"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/centos-stream8els/CLSA-2026-1782142827.json"}},{"package":{"name":"sqlite-analyzer","ecosystem":"TuxCare:CentOS-Stream:8","purl":"pkg:rpm/tuxcare/sqlite-analyzer?distro=centos-stream-8"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.26.0-19.el8.tuxcare.els2"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/centos-stream8els/CLSA-2026-1782142827.json"}},{"package":{"name":"sqlite-devel","ecosystem":"TuxCare:CentOS-Stream:8","purl":"pkg:rpm/tuxcare/sqlite-devel?distro=centos-stream-8"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.26.0-19.el8.tuxcare.els2"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/centos-stream8els/CLSA-2026-1782142827.json"}},{"package":{"name":"sqlite-doc","ecosystem":"TuxCare:CentOS-Stream:8","purl":"pkg:rpm/tuxcare/sqlite-doc?distro=centos-stream-8"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.26.0-19.el8.tuxcare.els2"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/centos-stream8els/CLSA-2026-1782142827.json"}},{"package":{"name":"sqlite-libs","ecosystem":"TuxCare:CentOS-Stream:8","purl":"pkg:rpm/tuxcare/sqlite-libs?distro=centos-stream-8"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.26.0-19.el8.tuxcare.els2"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/centos-stream8els/CLSA-2026-1782142827.json"}},{"package":{"name":"sqlite-tcl","ecosystem":"TuxCare:CentOS-Stream:8","purl":"pkg:rpm/tuxcare/sqlite-tcl?distro=centos-stream-8"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.26.0-19.el8.tuxcare.els2"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/centos-stream8els/CLSA-2026-1782142827.json"}}],"schema_version":"1.9.0"}