Groups | Search | Server Info | Keyboard shortcuts | Login | Register [http] [https] [nntp] [nntps]

Groups > linux.debian.security > #5505

Re: "Magellan" bug in sqlite3

Show all headers | View raw

Hi,

On Thu, 20 Dec 2018 09:05:57 +0100
László Böszörményi (GCS) <gcs@debian.org> wrote:
>  It's turned out to be an FTS3/FTS4 extension issue (that is, you are
> safe if you don't use it). Upstream confirmed it[1] and fix is
> available[2]. First fixed version is 3.25.3 but due to other security
> related fixes like an OOM[3] you are better upgrade to the 3.26.0
> release.
> Only Chrome seems to be affected due to WebSQL usage.
> 
> Regards,
> Laszlo/GCS
> [1] https://www.mail-archive.com/sqlite-users@mailinglists.sqlite.org/msg113218.html
> [2] https://www.sqlite.org/src/info/940f2adc8541a838
> [3] https://www.sqlite.org/src/info/de0781485701c138

 Thanks for your work!
 "Only Chrome seems to be affected" but how about chromium?


-- 
Regards,

 Hideki Yamane     henrich @ debian.org/iijmio-mail.jp

Back to linux.debian.security | Previous | Next — Previous in thread | Find similar | Unroll thread

Thread

"Magellan" bug in sqlite3 Hideki Yamane <henrich@iijmio-mail.jp> - 2018-12-17 07:00 +0100
  Re: "Magellan" bug in sqlite3 qmi <lista@miklos.info> - 2018-12-18 23:40 +0100
    Re: "Magellan" bug in sqlite3 Hideki Yamane <henrich@iijmio-mail.jp> - 2018-12-19 08:50 +0100
      Re: "Magellan" bug in sqlite3 qmi <lista@miklos.info> - 2018-12-19 19:50 +0100
        Re: "Magellan" bug in sqlite3 Christoph Moench-Tegeder <cmt@burggraben.net> - 2018-12-20 00:40 +0100
          Re: "Magellan" bug in sqlite3 qmi <lista@miklos.info> - 2018-12-20 22:10 +0100
  Re: "Magellan" bug in sqlite3 László Böszörményi (GCS) <gcs@debian.org> - 2018-12-20 09:10 +0100
    Re: "Magellan" bug in sqlite3 Hideki Yamane <henrich@iijmio-mail.jp> - 2018-12-24 20:40 +0100

csiph-web