Advisories » MGASA-2016-0255

Updated sqlite3 packages fix security vulnerability

Publication date: 14 Jul 2016
Type: security
Affected Mageia releases : 5
CVE: CVE-2016-6153

Description

It was discovered that sqlite3 would reject a temporary directory (e.g.,
as specified by the TMPDIR environment variable) to which the executing
user did not have read permissions. This could result in information
leakage as less secure global temporary directories (e.g., /var/tmp or
/tmp) would be used instead (CVE-2016-6153).
                

References

• https://bugs.mageia.org/show_bug.cgi?id=18869
• http://lwn.net/Alerts/693549/
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-6153

SRPMS

5/core

• sqlite3-3.8.10.2-1.2.mga5