Security update for sqlite3 SUSE Patch security@suse.de SUSE Security Team SUSE-SU-2019:0913-1 Final 1 1 2019-04-09T09:19:46Z current 2019-04-09T09:19:46Z 2019-04-09T09:19:46Z cve-database/bin/generate-cvrf.pl 2017-02-24T01:00:00Z Security update for sqlite3 This update for sqlite3 fixes the following issues: Security issues fixed: - CVE-2018-20346: Fixed a remote code execution vulnerability in FTS3 (Magellan) (bsc#1119687). - CVE-2018-20506: Fixed an integer overflow when FTS3 extension is enabled (bsc#1131576). The CVRF data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0). Image SLES12-SP4-Azure-BYOS-2019-913,Image SLES12-SP4-EC2-HVM-BYOS-2019-913,Image SLES12-SP4-GCE-BYOS-2019-913,Image SLES12-SP4-OCI-BYOS-2019-913,Image SLES12-SP4-SAP-Azure-2019-913,Image SLES12-SP4-SAP-Azure-BYOS-2019-913,Image SLES12-SP4-SAP-Azure-LI-BYOS-Production-2019-913,Image SLES12-SP4-SAP-Azure-VLI-BYOS-Production-2019-913,Image SLES12-SP4-SAP-EC2-HVM-2019-913,Image SLES12-SP4-SAP-EC2-HVM-BYOS-2019-913,Image SLES12-SP4-SAP-GCE-2019-913,Image SLES12-SP4-SAP-GCE-BYOS-2019-913,Image SLES12-SP4-SAP-OCI-BYOS-2019-913,Image SLES12-SP5-Azure-BYOS-2019-913,Image SLES12-SP5-Azure-Basic-On-Demand-2019-913,Image SLES12-SP5-Azure-HPC-BYOS-2019-913,Image SLES12-SP5-Azure-HPC-On-Demand-2019-913,Image SLES12-SP5-Azure-SAP-BYOS-2019-913,Image SLES12-SP5-Azure-SAP-On-Demand-2019-913,Image SLES12-SP5-Azure-Standard-On-Demand-2019-913,Image SLES12-SP5-EC2-BYOS-2019-913,Image SLES12-SP5-EC2-ECS-On-Demand-2019-913,Image SLES12-SP5-EC2-On-Demand-2019-913,Image SLES12-SP5-EC2-SAP-BYOS-2019-913,Image SLES12-SP5-EC2-SAP-On-Demand-2019-913,Image SLES12-SP5-GCE-BYOS-2019-913,Image SLES12-SP5-GCE-On-Demand-2019-913,Image SLES12-SP5-GCE-SAP-BYOS-2019-913,Image SLES12-SP5-GCE-SAP-On-Demand-2019-913,Image SLES12-SP5-OCI-BYOS-BYOS-2019-913,Image SLES12-SP5-OCI-BYOS-SAP-BYOS-2019-913,Image SLES12-SP5-SAP-Azure-LI-BYOS-Production-2019-913,Image SLES12-SP5-SAP-Azure-VLI-BYOS-Production-2019-913,SUSE-2019-913,SUSE-OpenStack-Cloud-7-2019-913,SUSE-OpenStack-Cloud-Magnum-Orchestration-7-2019-913,SUSE-SLE-DESKTOP-12-SP3-2019-913,SUSE-SLE-DESKTOP-12-SP4-2019-913,SUSE-SLE-SAP-12-SP1-2019-913,SUSE-SLE-SAP-12-SP2-2019-913,SUSE-SLE-SDK-12-SP3-2019-913,SUSE-SLE-SDK-12-SP4-2019-913,SUSE-SLE-SERVER-12-SP1-2019-913,SUSE-SLE-SERVER-12-SP2-2019-913,SUSE-SLE-SERVER-12-SP2-BCL-2019-913,SUSE-SLE-SERVER-12-SP3-2019-913,SUSE-SLE-SERVER-12-SP4-2019-913,SUSE-Storage-4-2019-913 Copyright SUSE LLC under the Creative Commons License 4.0 with Attribution (CC-BY-4.0) https://www.suse.com/support/update/announcement/2019/suse-su-20190913-1/ Link for SUSE-SU-2019:0913-1 https://lists.suse.com/pipermail/sle-security-updates/2019-April/005313.html E-Mail link for SUSE-SU-2019:0913-1 https://www.suse.com/support/security/rating/ SUSE Security Ratings https://bugzilla.suse.com/1119687 SUSE Bug 1119687 https://bugzilla.suse.com/1131576 SUSE Bug 1131576 https://www.suse.com/security/cve/CVE-2018-20346/ SUSE CVE CVE-2018-20346 page https://www.suse.com/security/cve/CVE-2018-20506/ SUSE CVE CVE-2018-20506 page Image SLES12-SP4-Azure-BYOS Image SLES12-SP4-EC2-HVM-BYOS Image SLES12-SP4-GCE-BYOS Image SLES12-SP4-OCI-BYOS Image SLES12-SP4-SAP-Azure Image SLES12-SP4-SAP-Azure-BYOS Image SLES12-SP4-SAP-Azure-LI-BYOS-Production Image SLES12-SP4-SAP-Azure-VLI-BYOS-Production Image SLES12-SP4-SAP-EC2-HVM Image SLES12-SP4-SAP-EC2-HVM-BYOS Image SLES12-SP4-SAP-GCE Image SLES12-SP4-SAP-GCE-BYOS Image SLES12-SP4-SAP-OCI-BYOS Image SLES12-SP5-Azure-BYOS Image SLES12-SP5-Azure-Basic-On-Demand Image SLES12-SP5-Azure-HPC-BYOS Image SLES12-SP5-Azure-HPC-On-Demand Image SLES12-SP5-Azure-SAP-BYOS Image SLES12-SP5-Azure-SAP-On-Demand Image SLES12-SP5-Azure-Standard-On-Demand Image SLES12-SP5-EC2-BYOS Image SLES12-SP5-EC2-ECS-On-Demand Image SLES12-SP5-EC2-On-Demand Image SLES12-SP5-EC2-SAP-BYOS Image SLES12-SP5-EC2-SAP-On-Demand Image SLES12-SP5-GCE-BYOS Image SLES12-SP5-GCE-On-Demand Image SLES12-SP5-GCE-SAP-BYOS Image SLES12-SP5-GCE-SAP-On-Demand Image SLES12-SP5-OCI-BYOS-BYOS Image SLES12-SP5-OCI-BYOS-SAP-BYOS Image SLES12-SP5-SAP-Azure-LI-BYOS-Production Image SLES12-SP5-SAP-Azure-VLI-BYOS-Production SUSE Enterprise Storage 4 SUSE Linux Enterprise Desktop 12 SP3 SUSE Linux Enterprise Desktop 12 SP4 SUSE Linux Enterprise Server 12 SP1-LTSS SUSE Linux Enterprise Server 12 SP2-BCL SUSE Linux Enterprise Server 12 SP2-LTSS SUSE Linux Enterprise Server 12 SP3 SUSE Linux Enterprise Server 12 SP4 SUSE Linux Enterprise Server for SAP Applications 12 SP1 SUSE Linux Enterprise Server for SAP Applications 12 SP2 SUSE Linux Enterprise Server for SAP Applications 12 SP3 SUSE Linux Enterprise Server for SAP Applications 12 SP4 SUSE Linux Enterprise Software Development Kit 12 SP3 SUSE Linux Enterprise Software Development Kit 12 SP4 SUSE OpenStack Cloud 7 libsqlite3-0-3.8.10.2-9.3.1 sqlite3-3.8.10.2-9.3.1 libsqlite3-0-32bit-3.8.10.2-9.3.1 libsqlite3-0-64bit-3.8.10.2-9.3.1 sqlite3-devel-3.8.10.2-9.3.1 sqlite3-doc-3.8.10.2-9.3.1 libsqlite3-0-3.8.10.2-9.3.1 as a component of Image SLES12-SP4-Azure-BYOS libsqlite3-0-3.8.10.2-9.3.1 as a component of Image SLES12-SP4-EC2-HVM-BYOS libsqlite3-0-3.8.10.2-9.3.1 as a component of Image SLES12-SP4-GCE-BYOS libsqlite3-0-3.8.10.2-9.3.1 as a component of Image SLES12-SP4-OCI-BYOS libsqlite3-0-3.8.10.2-9.3.1 as a component of Image SLES12-SP4-SAP-Azure sqlite3-3.8.10.2-9.3.1 as a component of Image SLES12-SP4-SAP-Azure libsqlite3-0-3.8.10.2-9.3.1 as a component of Image SLES12-SP4-SAP-Azure-BYOS sqlite3-3.8.10.2-9.3.1 as a component of Image SLES12-SP4-SAP-Azure-BYOS libsqlite3-0-3.8.10.2-9.3.1 as a component of Image SLES12-SP4-SAP-Azure-LI-BYOS-Production sqlite3-3.8.10.2-9.3.1 as a component of Image SLES12-SP4-SAP-Azure-LI-BYOS-Production libsqlite3-0-3.8.10.2-9.3.1 as a component of Image SLES12-SP4-SAP-Azure-VLI-BYOS-Production sqlite3-3.8.10.2-9.3.1 as a component of Image SLES12-SP4-SAP-Azure-VLI-BYOS-Production libsqlite3-0-3.8.10.2-9.3.1 as a component of Image SLES12-SP4-SAP-EC2-HVM sqlite3-3.8.10.2-9.3.1 as a component of Image SLES12-SP4-SAP-EC2-HVM libsqlite3-0-3.8.10.2-9.3.1 as a component of Image SLES12-SP4-SAP-EC2-HVM-BYOS sqlite3-3.8.10.2-9.3.1 as a component of Image SLES12-SP4-SAP-EC2-HVM-BYOS libsqlite3-0-3.8.10.2-9.3.1 as a component of Image SLES12-SP4-SAP-GCE sqlite3-3.8.10.2-9.3.1 as a component of Image SLES12-SP4-SAP-GCE libsqlite3-0-3.8.10.2-9.3.1 as a component of Image SLES12-SP4-SAP-GCE-BYOS sqlite3-3.8.10.2-9.3.1 as a component of Image SLES12-SP4-SAP-GCE-BYOS libsqlite3-0-3.8.10.2-9.3.1 as a component of Image SLES12-SP4-SAP-OCI-BYOS sqlite3-3.8.10.2-9.3.1 as a component of Image SLES12-SP4-SAP-OCI-BYOS libsqlite3-0-3.8.10.2-9.3.1 as a component of Image SLES12-SP5-Azure-BYOS libsqlite3-0-3.8.10.2-9.3.1 as a component of Image SLES12-SP5-Azure-Basic-On-Demand libsqlite3-0-3.8.10.2-9.3.1 as a component of Image SLES12-SP5-Azure-HPC-BYOS libsqlite3-0-3.8.10.2-9.3.1 as a component of Image SLES12-SP5-Azure-HPC-On-Demand libsqlite3-0-3.8.10.2-9.3.1 as a component of Image SLES12-SP5-Azure-SAP-BYOS sqlite3-3.8.10.2-9.3.1 as a component of Image SLES12-SP5-Azure-SAP-BYOS libsqlite3-0-3.8.10.2-9.3.1 as a component of Image SLES12-SP5-Azure-SAP-On-Demand sqlite3-3.8.10.2-9.3.1 as a component of Image SLES12-SP5-Azure-SAP-On-Demand libsqlite3-0-3.8.10.2-9.3.1 as a component of Image SLES12-SP5-Azure-Standard-On-Demand libsqlite3-0-3.8.10.2-9.3.1 as a component of Image SLES12-SP5-EC2-BYOS libsqlite3-0-3.8.10.2-9.3.1 as a component of Image SLES12-SP5-EC2-ECS-On-Demand libsqlite3-0-3.8.10.2-9.3.1 as a component of Image SLES12-SP5-EC2-On-Demand libsqlite3-0-3.8.10.2-9.3.1 as a component of Image SLES12-SP5-EC2-SAP-BYOS sqlite3-3.8.10.2-9.3.1 as a component of Image SLES12-SP5-EC2-SAP-BYOS libsqlite3-0-3.8.10.2-9.3.1 as a component of Image SLES12-SP5-EC2-SAP-On-Demand sqlite3-3.8.10.2-9.3.1 as a component of Image SLES12-SP5-EC2-SAP-On-Demand libsqlite3-0-3.8.10.2-9.3.1 as a component of Image SLES12-SP5-GCE-BYOS libsqlite3-0-3.8.10.2-9.3.1 as a component of Image SLES12-SP5-GCE-On-Demand libsqlite3-0-3.8.10.2-9.3.1 as a component of Image SLES12-SP5-GCE-SAP-BYOS sqlite3-3.8.10.2-9.3.1 as a component of Image SLES12-SP5-GCE-SAP-BYOS libsqlite3-0-3.8.10.2-9.3.1 as a component of Image SLES12-SP5-GCE-SAP-On-Demand sqlite3-3.8.10.2-9.3.1 as a component of Image SLES12-SP5-GCE-SAP-On-Demand libsqlite3-0-3.8.10.2-9.3.1 as a component of Image SLES12-SP5-OCI-BYOS-BYOS libsqlite3-0-3.8.10.2-9.3.1 as a component of Image SLES12-SP5-OCI-BYOS-SAP-BYOS sqlite3-3.8.10.2-9.3.1 as a component of Image SLES12-SP5-OCI-BYOS-SAP-BYOS libsqlite3-0-3.8.10.2-9.3.1 as a component of Image SLES12-SP5-SAP-Azure-LI-BYOS-Production sqlite3-3.8.10.2-9.3.1 as a component of Image SLES12-SP5-SAP-Azure-LI-BYOS-Production libsqlite3-0-3.8.10.2-9.3.1 as a component of Image SLES12-SP5-SAP-Azure-VLI-BYOS-Production sqlite3-3.8.10.2-9.3.1 as a component of Image SLES12-SP5-SAP-Azure-VLI-BYOS-Production libsqlite3-0-3.8.10.2-9.3.1 as a component of SUSE Enterprise Storage 4 libsqlite3-0-32bit-3.8.10.2-9.3.1 as a component of SUSE Enterprise Storage 4 sqlite3-3.8.10.2-9.3.1 as a component of SUSE Enterprise Storage 4 libsqlite3-0-3.8.10.2-9.3.1 as a component of SUSE Linux Enterprise Desktop 12 SP3 libsqlite3-0-32bit-3.8.10.2-9.3.1 as a component of SUSE Linux Enterprise Desktop 12 SP3 sqlite3-3.8.10.2-9.3.1 as a component of SUSE Linux Enterprise Desktop 12 SP3 libsqlite3-0-3.8.10.2-9.3.1 as a component of SUSE Linux Enterprise Desktop 12 SP4 libsqlite3-0-32bit-3.8.10.2-9.3.1 as a component of SUSE Linux Enterprise Desktop 12 SP4 sqlite3-3.8.10.2-9.3.1 as a component of SUSE Linux Enterprise Desktop 12 SP4 libsqlite3-0-3.8.10.2-9.3.1 as a component of SUSE Linux Enterprise Server 12 SP1-LTSS libsqlite3-0-32bit-3.8.10.2-9.3.1 as a component of SUSE Linux Enterprise Server 12 SP1-LTSS sqlite3-3.8.10.2-9.3.1 as a component of SUSE Linux Enterprise Server 12 SP1-LTSS libsqlite3-0-3.8.10.2-9.3.1 as a component of SUSE Linux Enterprise Server 12 SP2-BCL libsqlite3-0-32bit-3.8.10.2-9.3.1 as a component of SUSE Linux Enterprise Server 12 SP2-BCL sqlite3-3.8.10.2-9.3.1 as a component of SUSE Linux Enterprise Server 12 SP2-BCL libsqlite3-0-3.8.10.2-9.3.1 as a component of SUSE Linux Enterprise Server 12 SP2-LTSS libsqlite3-0-32bit-3.8.10.2-9.3.1 as a component of SUSE Linux Enterprise Server 12 SP2-LTSS sqlite3-3.8.10.2-9.3.1 as a component of SUSE Linux Enterprise Server 12 SP2-LTSS libsqlite3-0-3.8.10.2-9.3.1 as a component of SUSE Linux Enterprise Server 12 SP3 libsqlite3-0-32bit-3.8.10.2-9.3.1 as a component of SUSE Linux Enterprise Server 12 SP3 sqlite3-3.8.10.2-9.3.1 as a component of SUSE Linux Enterprise Server 12 SP3 libsqlite3-0-3.8.10.2-9.3.1 as a component of SUSE Linux Enterprise Server 12 SP4 libsqlite3-0-32bit-3.8.10.2-9.3.1 as a component of SUSE Linux Enterprise Server 12 SP4 sqlite3-3.8.10.2-9.3.1 as a component of SUSE Linux Enterprise Server 12 SP4 libsqlite3-0-3.8.10.2-9.3.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP1 libsqlite3-0-32bit-3.8.10.2-9.3.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP1 sqlite3-3.8.10.2-9.3.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP1 libsqlite3-0-3.8.10.2-9.3.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP2 libsqlite3-0-32bit-3.8.10.2-9.3.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP2 sqlite3-3.8.10.2-9.3.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP2 libsqlite3-0-3.8.10.2-9.3.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP3 libsqlite3-0-32bit-3.8.10.2-9.3.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP3 sqlite3-3.8.10.2-9.3.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP3 libsqlite3-0-3.8.10.2-9.3.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP4 libsqlite3-0-32bit-3.8.10.2-9.3.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP4 sqlite3-3.8.10.2-9.3.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP4 sqlite3-devel-3.8.10.2-9.3.1 as a component of SUSE Linux Enterprise Software Development Kit 12 SP3 sqlite3-devel-3.8.10.2-9.3.1 as a component of SUSE Linux Enterprise Software Development Kit 12 SP4 libsqlite3-0-3.8.10.2-9.3.1 as a component of SUSE OpenStack Cloud 7 libsqlite3-0-32bit-3.8.10.2-9.3.1 as a component of SUSE OpenStack Cloud 7 sqlite3-3.8.10.2-9.3.1 as a component of SUSE OpenStack Cloud 7 SQLite before 3.25.3, when the FTS3 extension is enabled, encounters an integer overflow (and resultant buffer overflow) for FTS3 queries that occur after crafted changes to FTS3 shadow tables, allowing remote attackers to execute arbitrary code by leveraging the ability to run arbitrary SQL statements (such as in certain WebSQL use cases), aka Magellan. CVE-2018-20346 Image SLES12-SP4-Azure-BYOS:libsqlite3-0-3.8.10.2-9.3.1 Image SLES12-SP4-EC2-HVM-BYOS:libsqlite3-0-3.8.10.2-9.3.1 Image SLES12-SP4-GCE-BYOS:libsqlite3-0-3.8.10.2-9.3.1 Image SLES12-SP4-OCI-BYOS:libsqlite3-0-3.8.10.2-9.3.1 Image SLES12-SP4-SAP-Azure-BYOS:libsqlite3-0-3.8.10.2-9.3.1 Image SLES12-SP4-SAP-Azure-BYOS:sqlite3-3.8.10.2-9.3.1 Image SLES12-SP4-SAP-Azure-LI-BYOS-Production:libsqlite3-0-3.8.10.2-9.3.1 Image SLES12-SP4-SAP-Azure-LI-BYOS-Production:sqlite3-3.8.10.2-9.3.1 Image SLES12-SP4-SAP-Azure-VLI-BYOS-Production:libsqlite3-0-3.8.10.2-9.3.1 Image SLES12-SP4-SAP-Azure-VLI-BYOS-Production:sqlite3-3.8.10.2-9.3.1 Image SLES12-SP4-SAP-Azure:libsqlite3-0-3.8.10.2-9.3.1 Image SLES12-SP4-SAP-Azure:sqlite3-3.8.10.2-9.3.1 Image SLES12-SP4-SAP-EC2-HVM-BYOS:libsqlite3-0-3.8.10.2-9.3.1 Image SLES12-SP4-SAP-EC2-HVM-BYOS:sqlite3-3.8.10.2-9.3.1 Image SLES12-SP4-SAP-EC2-HVM:libsqlite3-0-3.8.10.2-9.3.1 Image SLES12-SP4-SAP-EC2-HVM:sqlite3-3.8.10.2-9.3.1 Image SLES12-SP4-SAP-GCE-BYOS:libsqlite3-0-3.8.10.2-9.3.1 Image SLES12-SP4-SAP-GCE-BYOS:sqlite3-3.8.10.2-9.3.1 Image SLES12-SP4-SAP-GCE:libsqlite3-0-3.8.10.2-9.3.1 Image SLES12-SP4-SAP-GCE:sqlite3-3.8.10.2-9.3.1 Image SLES12-SP4-SAP-OCI-BYOS:libsqlite3-0-3.8.10.2-9.3.1 Image SLES12-SP4-SAP-OCI-BYOS:sqlite3-3.8.10.2-9.3.1 Image SLES12-SP5-Azure-BYOS:libsqlite3-0-3.8.10.2-9.3.1 Image SLES12-SP5-Azure-Basic-On-Demand:libsqlite3-0-3.8.10.2-9.3.1 Image SLES12-SP5-Azure-HPC-BYOS:libsqlite3-0-3.8.10.2-9.3.1 Image SLES12-SP5-Azure-HPC-On-Demand:libsqlite3-0-3.8.10.2-9.3.1 Image SLES12-SP5-Azure-SAP-BYOS:libsqlite3-0-3.8.10.2-9.3.1 Image SLES12-SP5-Azure-SAP-BYOS:sqlite3-3.8.10.2-9.3.1 Image SLES12-SP5-Azure-SAP-On-Demand:libsqlite3-0-3.8.10.2-9.3.1 Image SLES12-SP5-Azure-SAP-On-Demand:sqlite3-3.8.10.2-9.3.1 Image SLES12-SP5-Azure-Standard-On-Demand:libsqlite3-0-3.8.10.2-9.3.1 Image SLES12-SP5-EC2-BYOS:libsqlite3-0-3.8.10.2-9.3.1 Image SLES12-SP5-EC2-ECS-On-Demand:libsqlite3-0-3.8.10.2-9.3.1 Image SLES12-SP5-EC2-On-Demand:libsqlite3-0-3.8.10.2-9.3.1 Image SLES12-SP5-EC2-SAP-BYOS:libsqlite3-0-3.8.10.2-9.3.1 Image SLES12-SP5-EC2-SAP-BYOS:sqlite3-3.8.10.2-9.3.1 Image SLES12-SP5-EC2-SAP-On-Demand:libsqlite3-0-3.8.10.2-9.3.1 Image SLES12-SP5-EC2-SAP-On-Demand:sqlite3-3.8.10.2-9.3.1 Image SLES12-SP5-GCE-BYOS:libsqlite3-0-3.8.10.2-9.3.1 Image SLES12-SP5-GCE-On-Demand:libsqlite3-0-3.8.10.2-9.3.1 Image SLES12-SP5-GCE-SAP-BYOS:libsqlite3-0-3.8.10.2-9.3.1 Image SLES12-SP5-GCE-SAP-BYOS:sqlite3-3.8.10.2-9.3.1 Image SLES12-SP5-GCE-SAP-On-Demand:libsqlite3-0-3.8.10.2-9.3.1 Image SLES12-SP5-GCE-SAP-On-Demand:sqlite3-3.8.10.2-9.3.1 Image SLES12-SP5-OCI-BYOS-BYOS:libsqlite3-0-3.8.10.2-9.3.1 Image SLES12-SP5-OCI-BYOS-SAP-BYOS:libsqlite3-0-3.8.10.2-9.3.1 Image SLES12-SP5-OCI-BYOS-SAP-BYOS:sqlite3-3.8.10.2-9.3.1 Image SLES12-SP5-SAP-Azure-LI-BYOS-Production:libsqlite3-0-3.8.10.2-9.3.1 Image SLES12-SP5-SAP-Azure-LI-BYOS-Production:sqlite3-3.8.10.2-9.3.1 Image SLES12-SP5-SAP-Azure-VLI-BYOS-Production:libsqlite3-0-3.8.10.2-9.3.1 Image SLES12-SP5-SAP-Azure-VLI-BYOS-Production:sqlite3-3.8.10.2-9.3.1 SUSE Enterprise Storage 4:libsqlite3-0-3.8.10.2-9.3.1 SUSE Enterprise Storage 4:libsqlite3-0-32bit-3.8.10.2-9.3.1 SUSE Enterprise Storage 4:sqlite3-3.8.10.2-9.3.1 SUSE Linux Enterprise Desktop 12 SP3:libsqlite3-0-3.8.10.2-9.3.1 SUSE Linux Enterprise Desktop 12 SP3:libsqlite3-0-32bit-3.8.10.2-9.3.1 SUSE Linux Enterprise Desktop 12 SP3:sqlite3-3.8.10.2-9.3.1 SUSE Linux Enterprise Desktop 12 SP4:libsqlite3-0-3.8.10.2-9.3.1 SUSE Linux Enterprise Desktop 12 SP4:libsqlite3-0-32bit-3.8.10.2-9.3.1 SUSE Linux Enterprise Desktop 12 SP4:sqlite3-3.8.10.2-9.3.1 SUSE Linux Enterprise Server 12 SP1-LTSS:libsqlite3-0-3.8.10.2-9.3.1 SUSE Linux Enterprise Server 12 SP1-LTSS:libsqlite3-0-32bit-3.8.10.2-9.3.1 SUSE Linux Enterprise Server 12 SP1-LTSS:sqlite3-3.8.10.2-9.3.1 SUSE Linux Enterprise Server 12 SP2-BCL:libsqlite3-0-3.8.10.2-9.3.1 SUSE Linux Enterprise Server 12 SP2-BCL:libsqlite3-0-32bit-3.8.10.2-9.3.1 SUSE Linux Enterprise Server 12 SP2-BCL:sqlite3-3.8.10.2-9.3.1 SUSE Linux Enterprise Server 12 SP2-LTSS:libsqlite3-0-3.8.10.2-9.3.1 SUSE Linux Enterprise Server 12 SP2-LTSS:libsqlite3-0-32bit-3.8.10.2-9.3.1 SUSE Linux Enterprise Server 12 SP2-LTSS:sqlite3-3.8.10.2-9.3.1 SUSE Linux Enterprise Server 12 SP3:libsqlite3-0-3.8.10.2-9.3.1 SUSE Linux Enterprise Server 12 SP3:libsqlite3-0-32bit-3.8.10.2-9.3.1 SUSE Linux Enterprise Server 12 SP3:sqlite3-3.8.10.2-9.3.1 SUSE Linux Enterprise Server 12 SP4:libsqlite3-0-3.8.10.2-9.3.1 SUSE Linux Enterprise Server 12 SP4:libsqlite3-0-32bit-3.8.10.2-9.3.1 SUSE Linux Enterprise Server 12 SP4:sqlite3-3.8.10.2-9.3.1 SUSE Linux Enterprise Server for SAP Applications 12 SP1:libsqlite3-0-3.8.10.2-9.3.1 SUSE Linux Enterprise Server for SAP Applications 12 SP1:libsqlite3-0-32bit-3.8.10.2-9.3.1 SUSE Linux Enterprise Server for SAP Applications 12 SP1:sqlite3-3.8.10.2-9.3.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:libsqlite3-0-3.8.10.2-9.3.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:libsqlite3-0-32bit-3.8.10.2-9.3.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:sqlite3-3.8.10.2-9.3.1 SUSE Linux Enterprise Server for SAP Applications 12 SP3:libsqlite3-0-3.8.10.2-9.3.1 SUSE Linux Enterprise Server for SAP Applications 12 SP3:libsqlite3-0-32bit-3.8.10.2-9.3.1 SUSE Linux Enterprise Server for SAP Applications 12 SP3:sqlite3-3.8.10.2-9.3.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:libsqlite3-0-3.8.10.2-9.3.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:libsqlite3-0-32bit-3.8.10.2-9.3.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:sqlite3-3.8.10.2-9.3.1 SUSE Linux Enterprise Software Development Kit 12 SP3:sqlite3-devel-3.8.10.2-9.3.1 SUSE Linux Enterprise Software Development Kit 12 SP4:sqlite3-devel-3.8.10.2-9.3.1 SUSE OpenStack Cloud 7:libsqlite3-0-3.8.10.2-9.3.1 SUSE OpenStack Cloud 7:libsqlite3-0-32bit-3.8.10.2-9.3.1 SUSE OpenStack Cloud 7:sqlite3-3.8.10.2-9.3.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2019/suse-su-20190913-1/ https://www.suse.com/security/cve/CVE-2018-20346.html CVE-2018-20346 https://bugzilla.suse.com/1119687 SUSE Bug 1119687 https://bugzilla.suse.com/1120335 SUSE Bug 1120335 https://bugzilla.suse.com/1131576 SUSE Bug 1131576 https://bugzilla.suse.com/1131918 SUSE Bug 1131918 https://bugzilla.suse.com/1131919 SUSE Bug 1131919 https://bugzilla.suse.com/1148893 SUSE Bug 1148893 https://bugzilla.suse.com/1169664 SUSE Bug 1169664 SQLite before 3.25.3, when the FTS3 extension is enabled, encounters an integer overflow (and resultant buffer overflow) for FTS3 queries in a "merge" operation that occurs after crafted changes to FTS3 shadow tables, allowing remote attackers to execute arbitrary code by leveraging the ability to run arbitrary SQL statements (such as in certain WebSQL use cases). This is a different vulnerability than CVE-2018-20346. CVE-2018-20506 Image SLES12-SP4-Azure-BYOS:libsqlite3-0-3.8.10.2-9.3.1 Image SLES12-SP4-EC2-HVM-BYOS:libsqlite3-0-3.8.10.2-9.3.1 Image SLES12-SP4-GCE-BYOS:libsqlite3-0-3.8.10.2-9.3.1 Image SLES12-SP4-OCI-BYOS:libsqlite3-0-3.8.10.2-9.3.1 Image SLES12-SP4-SAP-Azure-BYOS:libsqlite3-0-3.8.10.2-9.3.1 Image SLES12-SP4-SAP-Azure-BYOS:sqlite3-3.8.10.2-9.3.1 Image SLES12-SP4-SAP-Azure-LI-BYOS-Production:libsqlite3-0-3.8.10.2-9.3.1 Image SLES12-SP4-SAP-Azure-LI-BYOS-Production:sqlite3-3.8.10.2-9.3.1 Image SLES12-SP4-SAP-Azure-VLI-BYOS-Production:libsqlite3-0-3.8.10.2-9.3.1 Image SLES12-SP4-SAP-Azure-VLI-BYOS-Production:sqlite3-3.8.10.2-9.3.1 Image SLES12-SP4-SAP-Azure:libsqlite3-0-3.8.10.2-9.3.1 Image SLES12-SP4-SAP-Azure:sqlite3-3.8.10.2-9.3.1 Image SLES12-SP4-SAP-EC2-HVM-BYOS:libsqlite3-0-3.8.10.2-9.3.1 Image SLES12-SP4-SAP-EC2-HVM-BYOS:sqlite3-3.8.10.2-9.3.1 Image SLES12-SP4-SAP-EC2-HVM:libsqlite3-0-3.8.10.2-9.3.1 Image SLES12-SP4-SAP-EC2-HVM:sqlite3-3.8.10.2-9.3.1 Image SLES12-SP4-SAP-GCE-BYOS:libsqlite3-0-3.8.10.2-9.3.1 Image SLES12-SP4-SAP-GCE-BYOS:sqlite3-3.8.10.2-9.3.1 Image SLES12-SP4-SAP-GCE:libsqlite3-0-3.8.10.2-9.3.1 Image SLES12-SP4-SAP-GCE:sqlite3-3.8.10.2-9.3.1 Image SLES12-SP4-SAP-OCI-BYOS:libsqlite3-0-3.8.10.2-9.3.1 Image SLES12-SP4-SAP-OCI-BYOS:sqlite3-3.8.10.2-9.3.1 Image SLES12-SP5-Azure-BYOS:libsqlite3-0-3.8.10.2-9.3.1 Image SLES12-SP5-Azure-Basic-On-Demand:libsqlite3-0-3.8.10.2-9.3.1 Image SLES12-SP5-Azure-HPC-BYOS:libsqlite3-0-3.8.10.2-9.3.1 Image SLES12-SP5-Azure-HPC-On-Demand:libsqlite3-0-3.8.10.2-9.3.1 Image SLES12-SP5-Azure-SAP-BYOS:libsqlite3-0-3.8.10.2-9.3.1 Image SLES12-SP5-Azure-SAP-BYOS:sqlite3-3.8.10.2-9.3.1 Image SLES12-SP5-Azure-SAP-On-Demand:libsqlite3-0-3.8.10.2-9.3.1 Image SLES12-SP5-Azure-SAP-On-Demand:sqlite3-3.8.10.2-9.3.1 Image SLES12-SP5-Azure-Standard-On-Demand:libsqlite3-0-3.8.10.2-9.3.1 Image SLES12-SP5-EC2-BYOS:libsqlite3-0-3.8.10.2-9.3.1 Image SLES12-SP5-EC2-ECS-On-Demand:libsqlite3-0-3.8.10.2-9.3.1 Image SLES12-SP5-EC2-On-Demand:libsqlite3-0-3.8.10.2-9.3.1 Image SLES12-SP5-EC2-SAP-BYOS:libsqlite3-0-3.8.10.2-9.3.1 Image SLES12-SP5-EC2-SAP-BYOS:sqlite3-3.8.10.2-9.3.1 Image SLES12-SP5-EC2-SAP-On-Demand:libsqlite3-0-3.8.10.2-9.3.1 Image SLES12-SP5-EC2-SAP-On-Demand:sqlite3-3.8.10.2-9.3.1 Image SLES12-SP5-GCE-BYOS:libsqlite3-0-3.8.10.2-9.3.1 Image SLES12-SP5-GCE-On-Demand:libsqlite3-0-3.8.10.2-9.3.1 Image SLES12-SP5-GCE-SAP-BYOS:libsqlite3-0-3.8.10.2-9.3.1 Image SLES12-SP5-GCE-SAP-BYOS:sqlite3-3.8.10.2-9.3.1 Image SLES12-SP5-GCE-SAP-On-Demand:libsqlite3-0-3.8.10.2-9.3.1 Image SLES12-SP5-GCE-SAP-On-Demand:sqlite3-3.8.10.2-9.3.1 Image SLES12-SP5-OCI-BYOS-BYOS:libsqlite3-0-3.8.10.2-9.3.1 Image SLES12-SP5-OCI-BYOS-SAP-BYOS:libsqlite3-0-3.8.10.2-9.3.1 Image SLES12-SP5-OCI-BYOS-SAP-BYOS:sqlite3-3.8.10.2-9.3.1 Image SLES12-SP5-SAP-Azure-LI-BYOS-Production:libsqlite3-0-3.8.10.2-9.3.1 Image SLES12-SP5-SAP-Azure-LI-BYOS-Production:sqlite3-3.8.10.2-9.3.1 Image SLES12-SP5-SAP-Azure-VLI-BYOS-Production:libsqlite3-0-3.8.10.2-9.3.1 Image SLES12-SP5-SAP-Azure-VLI-BYOS-Production:sqlite3-3.8.10.2-9.3.1 SUSE Enterprise Storage 4:libsqlite3-0-3.8.10.2-9.3.1 SUSE Enterprise Storage 4:libsqlite3-0-32bit-3.8.10.2-9.3.1 SUSE Enterprise Storage 4:sqlite3-3.8.10.2-9.3.1 SUSE Linux Enterprise Desktop 12 SP3:libsqlite3-0-3.8.10.2-9.3.1 SUSE Linux Enterprise Desktop 12 SP3:libsqlite3-0-32bit-3.8.10.2-9.3.1 SUSE Linux Enterprise Desktop 12 SP3:sqlite3-3.8.10.2-9.3.1 SUSE Linux Enterprise Desktop 12 SP4:libsqlite3-0-3.8.10.2-9.3.1 SUSE Linux Enterprise Desktop 12 SP4:libsqlite3-0-32bit-3.8.10.2-9.3.1 SUSE Linux Enterprise Desktop 12 SP4:sqlite3-3.8.10.2-9.3.1 SUSE Linux Enterprise Server 12 SP1-LTSS:libsqlite3-0-3.8.10.2-9.3.1 SUSE Linux Enterprise Server 12 SP1-LTSS:libsqlite3-0-32bit-3.8.10.2-9.3.1 SUSE Linux Enterprise Server 12 SP1-LTSS:sqlite3-3.8.10.2-9.3.1 SUSE Linux Enterprise Server 12 SP2-BCL:libsqlite3-0-3.8.10.2-9.3.1 SUSE Linux Enterprise Server 12 SP2-BCL:libsqlite3-0-32bit-3.8.10.2-9.3.1 SUSE Linux Enterprise Server 12 SP2-BCL:sqlite3-3.8.10.2-9.3.1 SUSE Linux Enterprise Server 12 SP2-LTSS:libsqlite3-0-3.8.10.2-9.3.1 SUSE Linux Enterprise Server 12 SP2-LTSS:libsqlite3-0-32bit-3.8.10.2-9.3.1 SUSE Linux Enterprise Server 12 SP2-LTSS:sqlite3-3.8.10.2-9.3.1 SUSE Linux Enterprise Server 12 SP3:libsqlite3-0-3.8.10.2-9.3.1 SUSE Linux Enterprise Server 12 SP3:libsqlite3-0-32bit-3.8.10.2-9.3.1 SUSE Linux Enterprise Server 12 SP3:sqlite3-3.8.10.2-9.3.1 SUSE Linux Enterprise Server 12 SP4:libsqlite3-0-3.8.10.2-9.3.1 SUSE Linux Enterprise Server 12 SP4:libsqlite3-0-32bit-3.8.10.2-9.3.1 SUSE Linux Enterprise Server 12 SP4:sqlite3-3.8.10.2-9.3.1 SUSE Linux Enterprise Server for SAP Applications 12 SP1:libsqlite3-0-3.8.10.2-9.3.1 SUSE Linux Enterprise Server for SAP Applications 12 SP1:libsqlite3-0-32bit-3.8.10.2-9.3.1 SUSE Linux Enterprise Server for SAP Applications 12 SP1:sqlite3-3.8.10.2-9.3.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:libsqlite3-0-3.8.10.2-9.3.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:libsqlite3-0-32bit-3.8.10.2-9.3.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:sqlite3-3.8.10.2-9.3.1 SUSE Linux Enterprise Server for SAP Applications 12 SP3:libsqlite3-0-3.8.10.2-9.3.1 SUSE Linux Enterprise Server for SAP Applications 12 SP3:libsqlite3-0-32bit-3.8.10.2-9.3.1 SUSE Linux Enterprise Server for SAP Applications 12 SP3:sqlite3-3.8.10.2-9.3.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:libsqlite3-0-3.8.10.2-9.3.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:libsqlite3-0-32bit-3.8.10.2-9.3.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:sqlite3-3.8.10.2-9.3.1 SUSE Linux Enterprise Software Development Kit 12 SP3:sqlite3-devel-3.8.10.2-9.3.1 SUSE Linux Enterprise Software Development Kit 12 SP4:sqlite3-devel-3.8.10.2-9.3.1 SUSE OpenStack Cloud 7:libsqlite3-0-3.8.10.2-9.3.1 SUSE OpenStack Cloud 7:libsqlite3-0-32bit-3.8.10.2-9.3.1 SUSE OpenStack Cloud 7:sqlite3-3.8.10.2-9.3.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2019/suse-su-20190913-1/ https://www.suse.com/security/cve/CVE-2018-20506.html CVE-2018-20506 https://bugzilla.suse.com/1131560 SUSE Bug 1131560 https://bugzilla.suse.com/1131576 SUSE Bug 1131576