Bug 28453 - sqlite3 new security issue CVE-2021-20227
Summary: sqlite3 new security issue CVE-2021-20227
Status: RESOLVED FIXED
Alias: None
Product: Mageia
Classification: Unclassified
Component: Security (show other bugs)
Version: 8
Hardware: All Linux
Priority: Normal major
Target Milestone: ---
Assignee: All Packagers
QA Contact: Sec team
URL:
Whiteboard:
Keywords:
Depends on:
Blocks:
 
Reported: 2021-02-26 19:07 CET by David Walser
Modified: 2021-02-28 22:06 CET (History)
1 user (show)

See Also:
Source RPM: sqlite3-3.34.0-1.mga8.src.rpm
CVE:
Status comment: Fixed upstream in 3.34.1

Attachments
Add an attachment (proposed patch, testcase, etc.)

Description David Walser 2021-02-26 19:07:42 CET 
Ubuntu has issued an advisory on February 11:
https://ubuntu.com/security/notices/USN-4732-1

The issue is fixed upstream in 3.34.1.

Mageia 8 is also affected.
David Walser 2021-02-26 19:07:55 CET

Status comment: (none) => Fixed upstream in 3.34.1
Whiteboard: (none) => MGA8TOO

Comment 1 Lewis Smith 2021-02-27 09:33:56 CET 
Sqlite3 has been updated by different people, so assigning this globally.

Assignee: bugsquad => pkg-bugs

Comment 2 Nicolas Lécureuil 2021-02-28 22:01:27 CET 
already fixed in cauldron

Version: Cauldron => 8
Whiteboard: MGA8TOO => (none)
CC: (none) => mageia

Comment 3 Nicolas Lécureuil 2021-02-28 22:06:25 CET 
closing as mageia 8 is already with 3.34.1

8/SRPMS/core/release/sqlite3-3.34.1-1.mga8.src.rpm

Resolution: (none) => FIXED
Status: NEW => RESOLVED
Note You need to log in before you can comment on or make changes to this bug.