RHSA-2026:59020: Important: sqlite security update
Important: sqlite security update
Other sources
SQLite is a C library that implements an SQL database engine. A large subset of SQL92 is supported. A complete database is stored in a single disk file. The API is designed for convenience and ease of use. Applications that link against SQLite can enjoy the power and flexibility of an SQL database without the administrative hassles of supporting a separate database server.Security Fix(es): sqlite: SQLite: Arbitrary code execution via crafted FTS5 full-text search data (CVE-2026-11822) sqlite: SQLite: Arbitrary code execution and crash via heap-based buffer overflow in FTS5 (CVE-2026-11824) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
— Red Hat
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
sqlite/SQLiteto a version that resolves this vulnerability.Patch CVE-2026-11822 - Upgrade
Upgrade
sqlite/SQLiteto a version that resolves this vulnerability.Patch CVE-2026-11824
Event History
Frequently Asked Questions
Which Red Hat products are covered by this advisory?
The advisory applies to Red Hat Enterprise Linux for x86_64 Extended Life Cycle Long Life and Red Hat Enterprise Linux Server with AUS.
How should this update be prioritized?
It is rated high severity, with a listed risk score of 33, and addresses a SQL injection weakness.