Debian Security Advisory
DLA-2340-2 sqlite3 -- LTS security update
- Date Reported:
- 10 Dec 2020
- Affected Packages:
- sqlite3
- Vulnerable:
- Yes
- Security database references:
- In Mitre's CVE dictionary: CVE-2019-20218.
- More information:
-
The update of sqlite3 released as DLA-2340-1 contained an incomplete fix for CVE-2019-20218. Updated sqlite3 packages are now available to correct this issue.
For Debian 9 stretch, this problem has been fixed in version 3.16.2-5+deb9u3.
We recommend that you upgrade your sqlite3 packages.
For the detailed security status of sqlite3 please refer to its security tracker page at: https://security-tracker.debian.org/tracker/sqlite3
Further information about Debian LTS security advisories, how to apply these updates to your system and frequently asked questions can be found at: https://wiki.debian.org/LTS