UbuntuUpdates.org

Package "libsqlite3-0"

Name: libsqlite3-0

Description:

SQLite 3 shared library
Latest version: 3.37.2-2ubuntu0.7
Release: jammy (22.04)
Level: security
Repository: main
Head package: sqlite3
Homepage: https://www.sqlite.org/

Links

All versions of this package
Bug fixes

List of files in package
Repository home page

Download "libsqlite3-0"

32-bit deb package
64-bit deb package
APT INSTALL

Other versions of "libsqlite3-0" in Jammy

Repository Area Version
base main 3.37.2-2
updates main 3.37.2-2ubuntu0.7

Changelog

Version: 3.37.2-2ubuntu0.1 2022-11-07 18:06:33 UTC

  sqlite3 (3.37.2-2ubuntu0.1) jammy-security; urgency=medium

  * SECURITY UPDATE: array-bounds overflow via large string argument
    - debian/patches/CVE-2022-35737.patch: increase the size of loop
      variables in src/printf.c.
    - CVE-2022-35737

 -- Marc Deslauriers <email address hidden> Fri, 04 Nov 2022 09:09:13 -0400
CVE-2022-35737 SQLite 1.0.12 through 3.39.x before 3.39.2 sometimes allows an array-bounds overflow if billions of bytes are used in a string argument to a C API.


About   -   Send Feedback to @ubuntu_updates