{"id":"CLSA-2026-1782143653","summary":"sqlite: Fix of 2 CVEs","details":"- CVE-2026-11822: fix memory corruption in FTS5 fts5LeafRead() by rejecting\n  leaf pages with szLeaf \u003c 4, blocking the OOB read in fts5LeafSeek()\n- CVE-2026-11824: fix heap-based buffer overflow via integer underflow in\n  fts5ChunkIterate() when szLeaf \u003c 4 (same root cause; closed by the same\n  fts5LeafRead validation tightening)","modified":"2026-10-26T09:31:10.327356500Z","published":"2026-06-22T15:54:30Z","upstream":["CVE-2026-11822","CVE-2026-11824"],"references":[{"type":"ADVISORY","url":"https://errata.tuxcare.com/els_os/tuxcare9.6esu/CLSA-2026-1782143653.html"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-11822"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-11824"}],"affected":[{"package":{"name":"lemon","ecosystem":"TuxCare:AlmaLinux:9.6","purl":"pkg:rpm/tuxcare/lemon?distro=almalinux-9.6"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.34.1-8.el9_6.tuxcare.els1"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/almalinux9.6esu/CLSA-2026-1782143653.json"}},{"package":{"name":"sqlite","ecosystem":"TuxCare:AlmaLinux:9.6","purl":"pkg:rpm/tuxcare/sqlite?distro=almalinux-9.6"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.34.1-8.el9_6.tuxcare.els1"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/almalinux9.6esu/CLSA-2026-1782143653.json"}},{"package":{"name":"sqlite-analyzer","ecosystem":"TuxCare:AlmaLinux:9.6","purl":"pkg:rpm/tuxcare/sqlite-analyzer?distro=almalinux-9.6"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.34.1-8.el9_6.tuxcare.els1"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/almalinux9.6esu/CLSA-2026-1782143653.json"}},{"package":{"name":"sqlite-devel","ecosystem":"TuxCare:AlmaLinux:9.6","purl":"pkg:rpm/tuxcare/sqlite-devel?distro=almalinux-9.6"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.34.1-8.el9_6.tuxcare.els1"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/almalinux9.6esu/CLSA-2026-1782143653.json"}},{"package":{"name":"sqlite-doc","ecosystem":"TuxCare:AlmaLinux:9.6","purl":"pkg:rpm/tuxcare/sqlite-doc?distro=almalinux-9.6"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.34.1-8.el9_6.tuxcare.els1"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/almalinux9.6esu/CLSA-2026-1782143653.json"}},{"package":{"name":"sqlite-libs","ecosystem":"TuxCare:AlmaLinux:9.6","purl":"pkg:rpm/tuxcare/sqlite-libs?distro=almalinux-9.6"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.34.1-8.el9_6.tuxcare.els1"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/almalinux9.6esu/CLSA-2026-1782143653.json"}},{"package":{"name":"sqlite-tcl","ecosystem":"TuxCare:AlmaLinux:9.6","purl":"pkg:rpm/tuxcare/sqlite-tcl?distro=almalinux-9.6"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.34.1-8.el9_6.tuxcare.els1"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/almalinux9.6esu/CLSA-2026-1782143653.json"}},{"package":{"name":"sqlite-tools","ecosystem":"TuxCare:AlmaLinux:9.6","purl":"pkg:rpm/tuxcare/sqlite-tools?distro=almalinux-9.6"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.34.1-8.el9_6.tuxcare.els1"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/almalinux9.6esu/CLSA-2026-1782143653.json"}}],"schema_version":"1.9.0"}