Hide Forgot
An out of bounds write flaw was found in the SQLite component of the Chromium browser. Upstream bug(s): https://code.google.com/p/chromium/issues/detail?id=1025466 External References: https://chromereleases.googleblog.com/2019/12/stable-channel-update-for-desktop.html
Created chromium tracking bugs for this issue: Affects: epel-7 [bug 1782013] Affects: fedora-all [bug 1782012]
This issue has been addressed in the following products: Red Hat Enterprise Linux 6 Supplementary Via RHSA-2019:4238 https://access.redhat.com/errata/RHSA-2019:4238
This bug is now closed. Further updates for individual products will be reflected on the CVE page(s): https://access.redhat.com/security/cve/cve-2019-13734
While the chromium bug is not public yet, its id leads us to this: https://chromium.googlesource.com/chromium/src/third_party/sqlite/+/47bd97d715260127c995d92dde8dd8adb669b6b3 https://chromium.googlesource.com/chromium/src/third_party/sqlite/+/47bd97d715260127c995d92dde8dd8adb669b6b3/patches/0003-Shadow-Table-Corruption-Detection-improvements-in-ft.patch which further leads us to upstream commit: https://www.sqlite.org/src/info/51525f9c3235967b https://github.com/sqlite/sqlite/commit/c72f2fb7feff582444b8ffdc6c900c69847ce8a9 There is no released sqlite version with the fix yet.
Created mingw-sqlite tracking bugs for this issue: Affects: epel-all [bug 1786513] Affects: fedora-all [bug 1786512] Created sqlite tracking bugs for this issue: Affects: fedora-all [bug 1786511]
This issue has been addressed in the following products: Red Hat Enterprise Linux 8.0 Update Services for SAP Solutions Via RHSA-2020:0229 https://access.redhat.com/errata/RHSA-2020:0229
This issue has been addressed in the following products: Red Hat Enterprise Linux 7 Via RHSA-2020:0227 https://access.redhat.com/errata/RHSA-2020:0227
This issue has been addressed in the following products: Red Hat Enterprise Linux 8 Via RHSA-2020:0273 https://access.redhat.com/errata/RHSA-2020:0273
This issue has been addressed in the following products: Red Hat Enterprise Linux 7.6 Extended Update Support Via RHSA-2020:2014 https://access.redhat.com/errata/RHSA-2020:2014