{"id":"CLSA-2026-1785562610","summary":"sqlite: Fix of 3 CVEs","details":"- CVE-2019-9937: fix fts5 index corruption when reads and writes are\n  interleaved within a single transaction\n- CVE-2019-9936: fix heap-based buffer over-read in fts5HashEntrySort()\n  when running fts5 prefix queries inside a transaction\n- CVE-2019-19244: fix invalid Mem object when a sub-select uses both\n  DISTINCT and window functions with an ORDER BY matching its select list","modified":"2026-10-26T09:43:48.953876945Z","published":"2026-08-01T05:37:07Z","upstream":["CVE-2019-19244","CVE-2019-9936","CVE-2019-9937"],"references":[{"type":"ADVISORY","url":"https://errata.tuxcare.com/els_os/centos8.4els/CLSA-2026-1785562610.html"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2019-19244"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2019-9936"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2019-9937"}],"affected":[{"package":{"name":"lemon","ecosystem":"TuxCare:CentOS:8.4","purl":"pkg:rpm/tuxcare/lemon?distro=centos-8.4"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.26.0-15.el8.tuxcare.els9"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/centos8.4els/CLSA-2026-1785562610.json"}},{"package":{"name":"sqlite","ecosystem":"TuxCare:CentOS:8.4","purl":"pkg:rpm/tuxcare/sqlite?distro=centos-8.4"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.26.0-15.el8.tuxcare.els9"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/centos8.4els/CLSA-2026-1785562610.json"}},{"package":{"name":"sqlite-analyzer","ecosystem":"TuxCare:CentOS:8.4","purl":"pkg:rpm/tuxcare/sqlite-analyzer?distro=centos-8.4"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.26.0-15.el8.tuxcare.els9"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/centos8.4els/CLSA-2026-1785562610.json"}},{"package":{"name":"sqlite-devel","ecosystem":"TuxCare:CentOS:8.4","purl":"pkg:rpm/tuxcare/sqlite-devel?distro=centos-8.4"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.26.0-15.el8.tuxcare.els9"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/centos8.4els/CLSA-2026-1785562610.json"}},{"package":{"name":"sqlite-doc","ecosystem":"TuxCare:CentOS:8.4","purl":"pkg:rpm/tuxcare/sqlite-doc?distro=centos-8.4"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.26.0-15.el8.tuxcare.els9"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/centos8.4els/CLSA-2026-1785562610.json"}},{"package":{"name":"sqlite-libs","ecosystem":"TuxCare:CentOS:8.4","purl":"pkg:rpm/tuxcare/sqlite-libs?distro=centos-8.4"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.26.0-15.el8.tuxcare.els9"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/centos8.4els/CLSA-2026-1785562610.json"}},{"package":{"name":"sqlite-tcl","ecosystem":"TuxCare:CentOS:8.4","purl":"pkg:rpm/tuxcare/sqlite-tcl?distro=centos-8.4"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.26.0-15.el8.tuxcare.els9"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/centos8.4els/CLSA-2026-1785562610.json"}}],"schema_version":"1.9.0"}