Cette page suit l'état du correctif pour Debian. La vulnérabilité elle-même est décrite sur la page CVE principale.
Voir CVE-2026-54619 →
DEBIAN-CVE-2026-54619
sqlite3 provides Ruby bindings for the SQLite3 embedded database. In version 2.9.4 and earlier, redefining a SQLite function with a different arity fr...
Description d'origine
La description telle que publiée par la source (souvent en anglais).
sqlite3 provides Ruby bindings for the SQLite3 embedded database. In version 2.9.4 and earlier, redefining a SQLite function with a different arity frees the previously registered function handler while SQLite may still reference it, resulting in a use-after-free. This issue is fixed in version 2.9.5.
Source: OSV.dev (Open Source Vulnerabilities) OSV
Paquets affectés
Debian:12
ruby-sqlite3
[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}]
Debian:13
ruby-sqlite3
[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}]
Debian:14
ruby-sqlite3
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9.5-1"}]}]
Références
- advisory security-tracker.debian.org