mbox series

[scarthgap,0/3] sqlite3: fix multiple High scored CVEs

Message ID 20261105141827.2142719-1-joaomarcos.costa@bootlin.com
Headers show
Series sqlite3: fix multiple High scored CVEs | expand

Message

João Marcos Costa (Schneider Electric) Nov. 5, 2026, 2:18 p.m. UTC 
Hello,

These backports focus on the actual fix, ported from the original file
(e.g. ext/session/sqlite3session.c) to sqlite3.c respecting the amalgamated SQLite layout,
and do not include the changes in files such as 'manifest' and 'manifest.uuid'.

Best regards,

João Marcos Costa (Schneider Electric) (3):
  sqlite3: fix CVE-2026-119373
  sqlite3: fix CVE-2026-119374
  sqlite3: fix CVE-2026-119379

 .../sqlite/sqlite3/CVE-2026-119373.patch      | 48 ++++++++++++
 .../sqlite/sqlite3/CVE-2026-119374-pre.patch  | 73 +++++++++++++++++++
 .../sqlite/sqlite3/CVE-2026-119374.patch      | 67 +++++++++++++++++
 .../sqlite/sqlite3/CVE-2026-119379.patch      | 70 ++++++++++++++++++
 meta/recipes-support/sqlite/sqlite3_3.45.3.bb |  6 +-
 5 files changed, 263 insertions(+), 1 deletion(-)
 create mode 100644 meta/recipes-support/sqlite/sqlite3/CVE-2026-119373.patch
 create mode 100644 meta/recipes-support/sqlite/sqlite3/CVE-2026-119374-pre.patch
 create mode 100644 meta/recipes-support/sqlite/sqlite3/CVE-2026-119374.patch
 create mode 100644 meta/recipes-support/sqlite/sqlite3/CVE-2026-119379.patch