ELA-123-1 sqlite3 security update

heap out-of-bound vulnerability

2019-05-31
Packagesqlite3
Version3.7.13-1+deb7u6
Related CVEs CVE-2019-8457


SQLite3 was vulnerable to heap out-of-bound read in the rtreenode() function when handling invalid rtree tables.



For Debian 7 Wheezy, these problems have been fixed in version 3.7.13-1+deb7u6.

We recommend that you upgrade your sqlite3 packages.

Further information about Extended LTS security advisories can be found in the dedicated section of our website.