[CLSA-2026:1790924522] Fix CVE(s): CVE-2025-6965, CVE-2026-11822, CVE-2026-11824
Type:
security
Severity:
Important
Release date:
2026-10-02 07:02:14 UTC
Description:
* SECURITY UPDATE: memory corruption when the number of aggregate terms in a query exceeds the maximum number of columns - debian/patches/CVE-2025-6965.patch: raise an error as soon as the SQLITE_LIMIT_COLUMN limit is exceeded, so the i16 Expr.iAgg index cannot be truncated and indexed out of bounds - CVE-2025-6965 * SECURITY UPDATE: memory corruption in the FTS5 extension when an FTS5 MATCH query is run against a crafted database - debian/patches/CVE-2026-11822_CVE-2026-11824.patch: validate szLeaf in fts5LeafRead() so the chunk-length integer underflow in fts5ChunkIterate() cannot occur; one upstream change covers both CVEs - CVE-2026-11822 - CVE-2026-11824
CVEs fixed:
Updated packages:
  • lemon_3.34.1-3+deb11u1+tuxcare.els2_amd64.deb
    sha:6135d42076ef3a2b1d02d5f37ee71c14449294af
  • libsqlite3-0_3.34.1-3+deb11u1+tuxcare.els2_amd64.deb
    sha:f7632900a8bbde8c58e2a4905d0104f581dd6ced
  • libsqlite3-dev_3.34.1-3+deb11u1+tuxcare.els2_amd64.deb
    sha:e6b51cb08d313deff53daed46f0c227805b3e220
  • libsqlite3-tcl_3.34.1-3+deb11u1+tuxcare.els2_amd64.deb
    sha:c3de5825682f962c6fb18dd90268ad9e52e914f8
  • sqlite3_3.34.1-3+deb11u1+tuxcare.els2_amd64.deb
    sha:19d3de5a4916e9b662b98722bcd198e24310fc8d
  • sqlite3-doc_3.34.1-3+deb11u1+tuxcare.els2_all.deb
    sha:c9aab22007a4fe006d3e96dcfa1f4fce4aa593ac
  • lemon_3.34.1-3+deb11u1+tuxcare.els2_arm64.deb
    sha:2c18448185af58c736f5915c4fbf1c7752701776
  • libsqlite3-0_3.34.1-3+deb11u1+tuxcare.els2_arm64.deb
    sha:400c1b6b7bf98706ab89b4fa4cc654dfa904bb2e
  • libsqlite3-dev_3.34.1-3+deb11u1+tuxcare.els2_arm64.deb
    sha:44682a1a0c22933a163cb65c9d10fe199dbe1594
  • libsqlite3-tcl_3.34.1-3+deb11u1+tuxcare.els2_arm64.deb
    sha:f9500eae3fd383b260e928bb9e5655dd26f5e092
  • sqlite3_3.34.1-3+deb11u1+tuxcare.els2_arm64.deb
    sha:febae0282af060155045dd852d424dd0ce91867a
  • lemon_3.34.1-3+deb11u1+tuxcare.els2_armel.deb
    sha:e5d38bae06467ab3a7c822294537a3a2469bbc0e
  • libsqlite3-0_3.34.1-3+deb11u1+tuxcare.els2_armel.deb
    sha:99c68eb47019257449c02e6f1afc10a76a214fb1
  • libsqlite3-dev_3.34.1-3+deb11u1+tuxcare.els2_armel.deb
    sha:887dfd761cd0e4dae78a2ea947d5684b0a6d1073
  • libsqlite3-tcl_3.34.1-3+deb11u1+tuxcare.els2_armel.deb
    sha:8c71afe272aaadab2111a00c3a0a4f704401be29
  • sqlite3_3.34.1-3+deb11u1+tuxcare.els2_armel.deb
    sha:8e4a9f1142795282fb26db041004283c0c1164f1
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.