RHSA-2021:1968
Vulnerability from csaf_redhat
Published
2021-05-18 15:23
Modified
2024-11-15 08:43
Summary
Red Hat Security Advisory: mingw packages security and bug fix update
Notes
Topic
An update for mingw-binutils, mingw-bzip2, mingw-filesystem, and mingw-sqlite is now available for Red Hat Enterprise Linux 8.
Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.
Details
MinGW is a free and open source software development environment to create Microsoft Windows applications.
The following packages have been upgraded to a later upstream version: mingw-sqlite (3.26.0.0). (BZ#1845475)
Security Fix(es):
* sqlite: Division by zero in whereLoopAddBtreeIndex in sqlite3.c (CVE-2019-16168)
* sqlite: Integer overflow in sqlite3_str_vappendf function in printf.c (CVE-2020-13434)
* sqlite: Use-after-free in fts3EvalNextRow in ext/fts3/fts3.c (CVE-2020-13630)
* sqlite: Virtual table can be renamed into the name of one of its shadow tables (CVE-2020-13631)
* sqlite: NULL pointer dereference in ext/fts3/fts3_snippet.c via a crafted matchinfo() query (CVE-2020-13632)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Additional Changes:
For detailed information on changes in this release, see the Red Hat Enterprise Linux 8.4 Release Notes linked from the References section.
Terms of Use
This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
{ document: { aggregate_severity: { namespace: "https://access.redhat.com/security/updates/classification/", text: "Moderate", }, category: "csaf_security_advisory", csaf_version: "2.0", distribution: { text: "Copyright © Red Hat, Inc. All rights reserved.", tlp: { label: "WHITE", url: "https://www.first.org/tlp/", }, }, lang: "en", notes: [ { category: "summary", text: "An update for mingw-binutils, mingw-bzip2, mingw-filesystem, and mingw-sqlite is now available for Red Hat Enterprise Linux 8.\n\nRed Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.", title: "Topic", }, { category: "general", text: "MinGW is a free and open source software development environment to create Microsoft Windows applications.\n\nThe following packages have been upgraded to a later upstream version: mingw-sqlite (3.26.0.0). (BZ#1845475)\n\nSecurity Fix(es):\n\n* sqlite: Division by zero in whereLoopAddBtreeIndex in sqlite3.c (CVE-2019-16168)\n\n* sqlite: Integer overflow in sqlite3_str_vappendf function in printf.c (CVE-2020-13434)\n\n* sqlite: Use-after-free in fts3EvalNextRow in ext/fts3/fts3.c (CVE-2020-13630)\n\n* sqlite: Virtual table can be renamed into the name of one of its shadow tables (CVE-2020-13631)\n\n* sqlite: NULL pointer dereference in ext/fts3/fts3_snippet.c via a crafted matchinfo() query (CVE-2020-13632)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n\nAdditional Changes:\n\nFor detailed information on changes in this release, see the Red Hat Enterprise Linux 8.4 Release Notes linked from the References section.", title: "Details", }, { category: "legal_disclaimer", text: "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.", title: "Terms of Use", }, ], publisher: { category: "vendor", contact_details: "https://access.redhat.com/security/team/contact/", issuing_authority: "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.", name: "Red Hat Product Security", namespace: "https://www.redhat.com", }, references: [ { category: "self", summary: "https://access.redhat.com/errata/RHSA-2021:1968", url: "https://access.redhat.com/errata/RHSA-2021:1968", }, { category: "external", summary: "https://access.redhat.com/security/updates/classification/#moderate", url: "https://access.redhat.com/security/updates/classification/#moderate", }, { category: "external", summary: "https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/8/html/8.4_release_notes/", url: "https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/8/html/8.4_release_notes/", }, { category: "external", summary: "1768986", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1768986", }, { category: "external", summary: "1841223", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1841223", }, { category: "external", summary: "1841562", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1841562", }, { category: "external", summary: "1841568", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1841568", }, { category: "external", summary: "1841574", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1841574", }, { category: "external", summary: "1918306", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1918306", }, { category: "self", summary: "Canonical URL", url: "https://security.access.redhat.com/data/csaf/v2/advisories/2021/rhsa-2021_1968.json", }, ], title: "Red Hat Security Advisory: mingw packages security and bug fix update", tracking: { current_release_date: "2024-11-15T08:43:16+00:00", generator: { date: "2024-11-15T08:43:16+00:00", engine: { name: "Red Hat SDEngine", version: "4.2.1", }, }, id: "RHSA-2021:1968", initial_release_date: "2021-05-18T15:23:23+00:00", revision_history: [ { date: "2021-05-18T15:23:23+00:00", number: "1", summary: "Initial version", }, { date: "2021-05-18T15:23:23+00:00", number: "2", summary: "Last updated version", }, { date: "2024-11-15T08:43:16+00:00", number: "3", summary: "Last generated version", }, ], status: "final", version: "3", }, }, product_tree: { branches: [ { branches: [ { branches: [ { category: "product_name", name: "Red Hat CodeReady Linux Builder (v. 8)", product: { name: "Red Hat CodeReady Linux Builder (v. 8)", product_id: "CRB-8.4.0.GA", product_identification_helper: { cpe: "cpe:/a:redhat:enterprise_linux:8::crb", }, }, }, ], category: "product_family", name: "Red Hat Enterprise Linux", }, { branches: [ { category: "product_version", name: "mingw-binutils-0:2.30-3.el8.src", product: { name: "mingw-binutils-0:2.30-3.el8.src", product_id: "mingw-binutils-0:2.30-3.el8.src", product_identification_helper: { purl: "pkg:rpm/redhat/mingw-binutils@2.30-3.el8?arch=src", }, }, }, { category: "product_version", name: "mingw-sqlite-0:3.26.0.0-1.el8.src", product: { name: "mingw-sqlite-0:3.26.0.0-1.el8.src", product_id: "mingw-sqlite-0:3.26.0.0-1.el8.src", product_identification_helper: { purl: "pkg:rpm/redhat/mingw-sqlite@3.26.0.0-1.el8?arch=src", }, }, }, { category: "product_version", name: "mingw-bzip2-0:1.0.6-14.el8.src", product: { name: "mingw-bzip2-0:1.0.6-14.el8.src", product_id: "mingw-bzip2-0:1.0.6-14.el8.src", product_identification_helper: { purl: "pkg:rpm/redhat/mingw-bzip2@1.0.6-14.el8?arch=src", }, }, }, { category: "product_version", name: "mingw-filesystem-0:104-2.el8.src", product: { name: "mingw-filesystem-0:104-2.el8.src", product_id: "mingw-filesystem-0:104-2.el8.src", product_identification_helper: { purl: "pkg:rpm/redhat/mingw-filesystem@104-2.el8?arch=src", }, }, }, ], category: "architecture", name: "src", }, { branches: [ { category: "product_version", name: "mingw-binutils-generic-0:2.30-3.el8.aarch64", product: { name: "mingw-binutils-generic-0:2.30-3.el8.aarch64", product_id: "mingw-binutils-generic-0:2.30-3.el8.aarch64", product_identification_helper: { purl: "pkg:rpm/redhat/mingw-binutils-generic@2.30-3.el8?arch=aarch64", }, }, }, { category: "product_version", name: "mingw32-binutils-0:2.30-3.el8.aarch64", product: { name: "mingw32-binutils-0:2.30-3.el8.aarch64", product_id: "mingw32-binutils-0:2.30-3.el8.aarch64", product_identification_helper: { purl: "pkg:rpm/redhat/mingw32-binutils@2.30-3.el8?arch=aarch64", }, }, }, { category: "product_version", name: "mingw64-binutils-0:2.30-3.el8.aarch64", product: { name: "mingw64-binutils-0:2.30-3.el8.aarch64", product_id: "mingw64-binutils-0:2.30-3.el8.aarch64", product_identification_helper: { purl: "pkg:rpm/redhat/mingw64-binutils@2.30-3.el8?arch=aarch64", }, }, }, { category: "product_version", name: "mingw-binutils-debugsource-0:2.30-3.el8.aarch64", product: { name: "mingw-binutils-debugsource-0:2.30-3.el8.aarch64", product_id: "mingw-binutils-debugsource-0:2.30-3.el8.aarch64", product_identification_helper: { purl: "pkg:rpm/redhat/mingw-binutils-debugsource@2.30-3.el8?arch=aarch64", }, }, }, { category: "product_version", name: "mingw-binutils-debuginfo-0:2.30-3.el8.aarch64", product: { name: "mingw-binutils-debuginfo-0:2.30-3.el8.aarch64", product_id: "mingw-binutils-debuginfo-0:2.30-3.el8.aarch64", product_identification_helper: { purl: "pkg:rpm/redhat/mingw-binutils-debuginfo@2.30-3.el8?arch=aarch64", }, }, }, { category: "product_version", name: "mingw-binutils-generic-debuginfo-0:2.30-3.el8.aarch64", product: { name: "mingw-binutils-generic-debuginfo-0:2.30-3.el8.aarch64", product_id: "mingw-binutils-generic-debuginfo-0:2.30-3.el8.aarch64", product_identification_helper: { purl: "pkg:rpm/redhat/mingw-binutils-generic-debuginfo@2.30-3.el8?arch=aarch64", }, }, }, { category: "product_version", name: "mingw32-binutils-debuginfo-0:2.30-3.el8.aarch64", product: { name: "mingw32-binutils-debuginfo-0:2.30-3.el8.aarch64", product_id: "mingw32-binutils-debuginfo-0:2.30-3.el8.aarch64", product_identification_helper: { purl: "pkg:rpm/redhat/mingw32-binutils-debuginfo@2.30-3.el8?arch=aarch64", }, }, }, { category: "product_version", name: "mingw64-binutils-debuginfo-0:2.30-3.el8.aarch64", product: { name: "mingw64-binutils-debuginfo-0:2.30-3.el8.aarch64", product_id: "mingw64-binutils-debuginfo-0:2.30-3.el8.aarch64", product_identification_helper: { purl: "pkg:rpm/redhat/mingw64-binutils-debuginfo@2.30-3.el8?arch=aarch64", }, }, }, ], category: "architecture", name: "aarch64", }, { branches: [ { category: "product_version", name: "mingw-binutils-generic-0:2.30-3.el8.ppc64le", product: { name: "mingw-binutils-generic-0:2.30-3.el8.ppc64le", product_id: "mingw-binutils-generic-0:2.30-3.el8.ppc64le", product_identification_helper: { purl: "pkg:rpm/redhat/mingw-binutils-generic@2.30-3.el8?arch=ppc64le", }, }, }, { category: "product_version", name: "mingw32-binutils-0:2.30-3.el8.ppc64le", product: { name: "mingw32-binutils-0:2.30-3.el8.ppc64le", product_id: "mingw32-binutils-0:2.30-3.el8.ppc64le", product_identification_helper: { purl: "pkg:rpm/redhat/mingw32-binutils@2.30-3.el8?arch=ppc64le", }, }, }, { category: "product_version", name: "mingw64-binutils-0:2.30-3.el8.ppc64le", product: { name: "mingw64-binutils-0:2.30-3.el8.ppc64le", product_id: "mingw64-binutils-0:2.30-3.el8.ppc64le", product_identification_helper: { purl: "pkg:rpm/redhat/mingw64-binutils@2.30-3.el8?arch=ppc64le", }, }, }, { category: "product_version", name: "mingw-binutils-debugsource-0:2.30-3.el8.ppc64le", product: { name: "mingw-binutils-debugsource-0:2.30-3.el8.ppc64le", product_id: "mingw-binutils-debugsource-0:2.30-3.el8.ppc64le", product_identification_helper: { purl: "pkg:rpm/redhat/mingw-binutils-debugsource@2.30-3.el8?arch=ppc64le", }, }, }, { category: "product_version", name: "mingw-binutils-debuginfo-0:2.30-3.el8.ppc64le", product: { name: "mingw-binutils-debuginfo-0:2.30-3.el8.ppc64le", product_id: "mingw-binutils-debuginfo-0:2.30-3.el8.ppc64le", product_identification_helper: { purl: "pkg:rpm/redhat/mingw-binutils-debuginfo@2.30-3.el8?arch=ppc64le", }, }, }, { category: "product_version", name: "mingw-binutils-generic-debuginfo-0:2.30-3.el8.ppc64le", product: { name: "mingw-binutils-generic-debuginfo-0:2.30-3.el8.ppc64le", product_id: "mingw-binutils-generic-debuginfo-0:2.30-3.el8.ppc64le", product_identification_helper: { purl: "pkg:rpm/redhat/mingw-binutils-generic-debuginfo@2.30-3.el8?arch=ppc64le", }, }, }, { category: "product_version", name: "mingw32-binutils-debuginfo-0:2.30-3.el8.ppc64le", product: { name: "mingw32-binutils-debuginfo-0:2.30-3.el8.ppc64le", product_id: "mingw32-binutils-debuginfo-0:2.30-3.el8.ppc64le", product_identification_helper: { purl: "pkg:rpm/redhat/mingw32-binutils-debuginfo@2.30-3.el8?arch=ppc64le", }, }, }, { category: "product_version", name: "mingw64-binutils-debuginfo-0:2.30-3.el8.ppc64le", product: { name: "mingw64-binutils-debuginfo-0:2.30-3.el8.ppc64le", product_id: "mingw64-binutils-debuginfo-0:2.30-3.el8.ppc64le", product_identification_helper: { purl: "pkg:rpm/redhat/mingw64-binutils-debuginfo@2.30-3.el8?arch=ppc64le", }, }, }, ], category: "architecture", name: "ppc64le", }, { branches: [ { category: "product_version", name: "mingw-binutils-generic-0:2.30-3.el8.x86_64", product: { name: "mingw-binutils-generic-0:2.30-3.el8.x86_64", product_id: "mingw-binutils-generic-0:2.30-3.el8.x86_64", product_identification_helper: { purl: "pkg:rpm/redhat/mingw-binutils-generic@2.30-3.el8?arch=x86_64", }, }, }, { category: "product_version", name: "mingw32-binutils-0:2.30-3.el8.x86_64", product: { name: "mingw32-binutils-0:2.30-3.el8.x86_64", product_id: "mingw32-binutils-0:2.30-3.el8.x86_64", product_identification_helper: { purl: "pkg:rpm/redhat/mingw32-binutils@2.30-3.el8?arch=x86_64", }, }, }, { category: "product_version", name: "mingw64-binutils-0:2.30-3.el8.x86_64", product: { name: "mingw64-binutils-0:2.30-3.el8.x86_64", product_id: "mingw64-binutils-0:2.30-3.el8.x86_64", product_identification_helper: { purl: "pkg:rpm/redhat/mingw64-binutils@2.30-3.el8?arch=x86_64", }, }, }, { category: "product_version", name: "mingw-binutils-debugsource-0:2.30-3.el8.x86_64", product: { name: "mingw-binutils-debugsource-0:2.30-3.el8.x86_64", product_id: "mingw-binutils-debugsource-0:2.30-3.el8.x86_64", product_identification_helper: { purl: "pkg:rpm/redhat/mingw-binutils-debugsource@2.30-3.el8?arch=x86_64", }, }, }, { category: "product_version", name: "mingw-binutils-debuginfo-0:2.30-3.el8.x86_64", product: { name: "mingw-binutils-debuginfo-0:2.30-3.el8.x86_64", product_id: "mingw-binutils-debuginfo-0:2.30-3.el8.x86_64", product_identification_helper: { purl: "pkg:rpm/redhat/mingw-binutils-debuginfo@2.30-3.el8?arch=x86_64", }, }, }, { category: "product_version", name: "mingw-binutils-generic-debuginfo-0:2.30-3.el8.x86_64", product: { name: "mingw-binutils-generic-debuginfo-0:2.30-3.el8.x86_64", product_id: "mingw-binutils-generic-debuginfo-0:2.30-3.el8.x86_64", product_identification_helper: { purl: "pkg:rpm/redhat/mingw-binutils-generic-debuginfo@2.30-3.el8?arch=x86_64", }, }, }, { category: "product_version", name: "mingw32-binutils-debuginfo-0:2.30-3.el8.x86_64", product: { name: "mingw32-binutils-debuginfo-0:2.30-3.el8.x86_64", product_id: "mingw32-binutils-debuginfo-0:2.30-3.el8.x86_64", product_identification_helper: { purl: "pkg:rpm/redhat/mingw32-binutils-debuginfo@2.30-3.el8?arch=x86_64", }, }, }, { category: "product_version", name: "mingw64-binutils-debuginfo-0:2.30-3.el8.x86_64", product: { name: "mingw64-binutils-debuginfo-0:2.30-3.el8.x86_64", product_id: "mingw64-binutils-debuginfo-0:2.30-3.el8.x86_64", product_identification_helper: { purl: "pkg:rpm/redhat/mingw64-binutils-debuginfo@2.30-3.el8?arch=x86_64", }, }, }, ], category: "architecture", name: "x86_64", }, { branches: [ { category: "product_version", name: "mingw-binutils-generic-0:2.30-3.el8.s390x", product: { name: "mingw-binutils-generic-0:2.30-3.el8.s390x", product_id: "mingw-binutils-generic-0:2.30-3.el8.s390x", product_identification_helper: { purl: "pkg:rpm/redhat/mingw-binutils-generic@2.30-3.el8?arch=s390x", }, }, }, { category: "product_version", name: "mingw32-binutils-0:2.30-3.el8.s390x", product: { name: "mingw32-binutils-0:2.30-3.el8.s390x", product_id: "mingw32-binutils-0:2.30-3.el8.s390x", product_identification_helper: { purl: "pkg:rpm/redhat/mingw32-binutils@2.30-3.el8?arch=s390x", }, }, }, { category: "product_version", name: "mingw64-binutils-0:2.30-3.el8.s390x", product: { name: "mingw64-binutils-0:2.30-3.el8.s390x", product_id: "mingw64-binutils-0:2.30-3.el8.s390x", product_identification_helper: { purl: "pkg:rpm/redhat/mingw64-binutils@2.30-3.el8?arch=s390x", }, }, }, { category: "product_version", name: "mingw-binutils-debugsource-0:2.30-3.el8.s390x", product: { name: "mingw-binutils-debugsource-0:2.30-3.el8.s390x", product_id: "mingw-binutils-debugsource-0:2.30-3.el8.s390x", product_identification_helper: { purl: "pkg:rpm/redhat/mingw-binutils-debugsource@2.30-3.el8?arch=s390x", }, }, }, { category: "product_version", name: "mingw-binutils-debuginfo-0:2.30-3.el8.s390x", product: { name: "mingw-binutils-debuginfo-0:2.30-3.el8.s390x", product_id: "mingw-binutils-debuginfo-0:2.30-3.el8.s390x", product_identification_helper: { purl: "pkg:rpm/redhat/mingw-binutils-debuginfo@2.30-3.el8?arch=s390x", }, }, }, { category: "product_version", name: "mingw-binutils-generic-debuginfo-0:2.30-3.el8.s390x", product: { name: "mingw-binutils-generic-debuginfo-0:2.30-3.el8.s390x", product_id: "mingw-binutils-generic-debuginfo-0:2.30-3.el8.s390x", product_identification_helper: { purl: "pkg:rpm/redhat/mingw-binutils-generic-debuginfo@2.30-3.el8?arch=s390x", }, }, }, { category: "product_version", name: "mingw32-binutils-debuginfo-0:2.30-3.el8.s390x", product: { name: "mingw32-binutils-debuginfo-0:2.30-3.el8.s390x", product_id: "mingw32-binutils-debuginfo-0:2.30-3.el8.s390x", product_identification_helper: { purl: "pkg:rpm/redhat/mingw32-binutils-debuginfo@2.30-3.el8?arch=s390x", }, }, }, { category: "product_version", name: "mingw64-binutils-debuginfo-0:2.30-3.el8.s390x", product: { name: "mingw64-binutils-debuginfo-0:2.30-3.el8.s390x", product_id: "mingw64-binutils-debuginfo-0:2.30-3.el8.s390x", product_identification_helper: { purl: "pkg:rpm/redhat/mingw64-binutils-debuginfo@2.30-3.el8?arch=s390x", }, }, }, ], category: "architecture", name: "s390x", }, { branches: [ { category: "product_version", name: "mingw32-sqlite-0:3.26.0.0-1.el8.noarch", product: { name: "mingw32-sqlite-0:3.26.0.0-1.el8.noarch", product_id: "mingw32-sqlite-0:3.26.0.0-1.el8.noarch", product_identification_helper: { purl: "pkg:rpm/redhat/mingw32-sqlite@3.26.0.0-1.el8?arch=noarch", }, }, }, { category: "product_version", name: "mingw32-sqlite-static-0:3.26.0.0-1.el8.noarch", product: { name: "mingw32-sqlite-static-0:3.26.0.0-1.el8.noarch", product_id: "mingw32-sqlite-static-0:3.26.0.0-1.el8.noarch", product_identification_helper: { purl: "pkg:rpm/redhat/mingw32-sqlite-static@3.26.0.0-1.el8?arch=noarch", }, }, }, { category: "product_version", name: "mingw64-sqlite-0:3.26.0.0-1.el8.noarch", product: { name: "mingw64-sqlite-0:3.26.0.0-1.el8.noarch", product_id: "mingw64-sqlite-0:3.26.0.0-1.el8.noarch", product_identification_helper: { purl: "pkg:rpm/redhat/mingw64-sqlite@3.26.0.0-1.el8?arch=noarch", }, }, }, { category: "product_version", name: "mingw64-sqlite-static-0:3.26.0.0-1.el8.noarch", product: { name: "mingw64-sqlite-static-0:3.26.0.0-1.el8.noarch", product_id: "mingw64-sqlite-static-0:3.26.0.0-1.el8.noarch", product_identification_helper: { purl: "pkg:rpm/redhat/mingw64-sqlite-static@3.26.0.0-1.el8?arch=noarch", }, }, }, { category: "product_version", name: "mingw32-sqlite-debuginfo-0:3.26.0.0-1.el8.noarch", product: { name: "mingw32-sqlite-debuginfo-0:3.26.0.0-1.el8.noarch", product_id: "mingw32-sqlite-debuginfo-0:3.26.0.0-1.el8.noarch", product_identification_helper: { purl: "pkg:rpm/redhat/mingw32-sqlite-debuginfo@3.26.0.0-1.el8?arch=noarch", }, }, }, { category: "product_version", name: "mingw64-sqlite-debuginfo-0:3.26.0.0-1.el8.noarch", product: { name: "mingw64-sqlite-debuginfo-0:3.26.0.0-1.el8.noarch", product_id: "mingw64-sqlite-debuginfo-0:3.26.0.0-1.el8.noarch", product_identification_helper: { purl: "pkg:rpm/redhat/mingw64-sqlite-debuginfo@3.26.0.0-1.el8?arch=noarch", }, }, }, { category: "product_version", name: "mingw32-bzip2-0:1.0.6-14.el8.noarch", product: { name: "mingw32-bzip2-0:1.0.6-14.el8.noarch", product_id: "mingw32-bzip2-0:1.0.6-14.el8.noarch", product_identification_helper: { purl: "pkg:rpm/redhat/mingw32-bzip2@1.0.6-14.el8?arch=noarch", }, }, }, { category: "product_version", name: "mingw32-bzip2-static-0:1.0.6-14.el8.noarch", product: { name: "mingw32-bzip2-static-0:1.0.6-14.el8.noarch", product_id: "mingw32-bzip2-static-0:1.0.6-14.el8.noarch", product_identification_helper: { purl: "pkg:rpm/redhat/mingw32-bzip2-static@1.0.6-14.el8?arch=noarch", }, }, }, { category: "product_version", name: "mingw64-bzip2-0:1.0.6-14.el8.noarch", product: { name: "mingw64-bzip2-0:1.0.6-14.el8.noarch", product_id: "mingw64-bzip2-0:1.0.6-14.el8.noarch", product_identification_helper: { purl: "pkg:rpm/redhat/mingw64-bzip2@1.0.6-14.el8?arch=noarch", }, }, }, { category: "product_version", name: "mingw64-bzip2-static-0:1.0.6-14.el8.noarch", product: { name: "mingw64-bzip2-static-0:1.0.6-14.el8.noarch", product_id: "mingw64-bzip2-static-0:1.0.6-14.el8.noarch", product_identification_helper: { purl: "pkg:rpm/redhat/mingw64-bzip2-static@1.0.6-14.el8?arch=noarch", }, }, }, { category: "product_version", name: "mingw32-bzip2-debuginfo-0:1.0.6-14.el8.noarch", product: { name: "mingw32-bzip2-debuginfo-0:1.0.6-14.el8.noarch", product_id: "mingw32-bzip2-debuginfo-0:1.0.6-14.el8.noarch", product_identification_helper: { purl: "pkg:rpm/redhat/mingw32-bzip2-debuginfo@1.0.6-14.el8?arch=noarch", }, }, }, { category: "product_version", name: "mingw64-bzip2-debuginfo-0:1.0.6-14.el8.noarch", product: { name: "mingw64-bzip2-debuginfo-0:1.0.6-14.el8.noarch", product_id: "mingw64-bzip2-debuginfo-0:1.0.6-14.el8.noarch", product_identification_helper: { purl: "pkg:rpm/redhat/mingw64-bzip2-debuginfo@1.0.6-14.el8?arch=noarch", }, }, }, { category: "product_version", name: "mingw-filesystem-base-0:104-2.el8.noarch", product: { name: "mingw-filesystem-base-0:104-2.el8.noarch", product_id: "mingw-filesystem-base-0:104-2.el8.noarch", product_identification_helper: { purl: "pkg:rpm/redhat/mingw-filesystem-base@104-2.el8?arch=noarch", }, }, }, { category: "product_version", name: "mingw32-filesystem-0:104-2.el8.noarch", product: { name: "mingw32-filesystem-0:104-2.el8.noarch", product_id: "mingw32-filesystem-0:104-2.el8.noarch", product_identification_helper: { purl: "pkg:rpm/redhat/mingw32-filesystem@104-2.el8?arch=noarch", }, }, }, { category: "product_version", name: "mingw64-filesystem-0:104-2.el8.noarch", product: { name: "mingw64-filesystem-0:104-2.el8.noarch", product_id: "mingw64-filesystem-0:104-2.el8.noarch", product_identification_helper: { purl: "pkg:rpm/redhat/mingw64-filesystem@104-2.el8?arch=noarch", }, }, }, ], category: "architecture", name: "noarch", }, ], category: "vendor", name: "Red Hat", }, ], relationships: [ { category: "default_component_of", full_product_name: { name: "mingw-binutils-0:2.30-3.el8.src as a component of Red Hat CodeReady Linux Builder (v. 8)", product_id: "CRB-8.4.0.GA:mingw-binutils-0:2.30-3.el8.src", }, product_reference: "mingw-binutils-0:2.30-3.el8.src", relates_to_product_reference: "CRB-8.4.0.GA", }, { category: "default_component_of", full_product_name: { name: "mingw-binutils-debuginfo-0:2.30-3.el8.aarch64 as a component of Red Hat CodeReady Linux Builder (v. 8)", product_id: "CRB-8.4.0.GA:mingw-binutils-debuginfo-0:2.30-3.el8.aarch64", }, product_reference: "mingw-binutils-debuginfo-0:2.30-3.el8.aarch64", relates_to_product_reference: "CRB-8.4.0.GA", }, { category: "default_component_of", full_product_name: { name: "mingw-binutils-debuginfo-0:2.30-3.el8.ppc64le as a component of Red Hat CodeReady Linux Builder (v. 8)", product_id: "CRB-8.4.0.GA:mingw-binutils-debuginfo-0:2.30-3.el8.ppc64le", }, product_reference: "mingw-binutils-debuginfo-0:2.30-3.el8.ppc64le", relates_to_product_reference: "CRB-8.4.0.GA", }, { category: "default_component_of", full_product_name: { name: "mingw-binutils-debuginfo-0:2.30-3.el8.s390x as a component of Red Hat CodeReady Linux Builder (v. 8)", product_id: "CRB-8.4.0.GA:mingw-binutils-debuginfo-0:2.30-3.el8.s390x", }, product_reference: "mingw-binutils-debuginfo-0:2.30-3.el8.s390x", relates_to_product_reference: "CRB-8.4.0.GA", }, { category: "default_component_of", full_product_name: { name: "mingw-binutils-debuginfo-0:2.30-3.el8.x86_64 as a component of Red Hat CodeReady Linux Builder (v. 8)", product_id: "CRB-8.4.0.GA:mingw-binutils-debuginfo-0:2.30-3.el8.x86_64", }, product_reference: "mingw-binutils-debuginfo-0:2.30-3.el8.x86_64", relates_to_product_reference: "CRB-8.4.0.GA", }, { category: "default_component_of", full_product_name: { name: "mingw-binutils-debugsource-0:2.30-3.el8.aarch64 as a component of Red Hat CodeReady Linux Builder (v. 8)", product_id: "CRB-8.4.0.GA:mingw-binutils-debugsource-0:2.30-3.el8.aarch64", }, product_reference: "mingw-binutils-debugsource-0:2.30-3.el8.aarch64", relates_to_product_reference: "CRB-8.4.0.GA", }, { category: "default_component_of", full_product_name: { name: "mingw-binutils-debugsource-0:2.30-3.el8.ppc64le as a component of Red Hat CodeReady Linux Builder (v. 8)", product_id: "CRB-8.4.0.GA:mingw-binutils-debugsource-0:2.30-3.el8.ppc64le", }, product_reference: "mingw-binutils-debugsource-0:2.30-3.el8.ppc64le", relates_to_product_reference: "CRB-8.4.0.GA", }, { category: "default_component_of", full_product_name: { name: "mingw-binutils-debugsource-0:2.30-3.el8.s390x as a component of Red Hat CodeReady Linux Builder (v. 8)", product_id: "CRB-8.4.0.GA:mingw-binutils-debugsource-0:2.30-3.el8.s390x", }, product_reference: "mingw-binutils-debugsource-0:2.30-3.el8.s390x", relates_to_product_reference: "CRB-8.4.0.GA", }, { category: "default_component_of", full_product_name: { name: "mingw-binutils-debugsource-0:2.30-3.el8.x86_64 as a component of Red Hat CodeReady Linux Builder (v. 8)", product_id: "CRB-8.4.0.GA:mingw-binutils-debugsource-0:2.30-3.el8.x86_64", }, product_reference: "mingw-binutils-debugsource-0:2.30-3.el8.x86_64", relates_to_product_reference: "CRB-8.4.0.GA", }, { category: "default_component_of", full_product_name: { name: "mingw-binutils-generic-0:2.30-3.el8.aarch64 as a component of Red Hat CodeReady Linux Builder (v. 8)", product_id: "CRB-8.4.0.GA:mingw-binutils-generic-0:2.30-3.el8.aarch64", }, product_reference: "mingw-binutils-generic-0:2.30-3.el8.aarch64", relates_to_product_reference: "CRB-8.4.0.GA", }, { category: "default_component_of", full_product_name: { name: "mingw-binutils-generic-0:2.30-3.el8.ppc64le as a component of Red Hat CodeReady Linux Builder (v. 8)", product_id: "CRB-8.4.0.GA:mingw-binutils-generic-0:2.30-3.el8.ppc64le", }, product_reference: "mingw-binutils-generic-0:2.30-3.el8.ppc64le", relates_to_product_reference: "CRB-8.4.0.GA", }, { category: "default_component_of", full_product_name: { name: "mingw-binutils-generic-0:2.30-3.el8.s390x as a component of Red Hat CodeReady Linux Builder (v. 8)", product_id: "CRB-8.4.0.GA:mingw-binutils-generic-0:2.30-3.el8.s390x", }, product_reference: "mingw-binutils-generic-0:2.30-3.el8.s390x", relates_to_product_reference: "CRB-8.4.0.GA", }, { category: "default_component_of", full_product_name: { name: "mingw-binutils-generic-0:2.30-3.el8.x86_64 as a component of Red Hat CodeReady Linux Builder (v. 8)", product_id: "CRB-8.4.0.GA:mingw-binutils-generic-0:2.30-3.el8.x86_64", }, product_reference: "mingw-binutils-generic-0:2.30-3.el8.x86_64", relates_to_product_reference: "CRB-8.4.0.GA", }, { category: "default_component_of", full_product_name: { name: "mingw-binutils-generic-debuginfo-0:2.30-3.el8.aarch64 as a component of Red Hat CodeReady Linux Builder (v. 8)", product_id: "CRB-8.4.0.GA:mingw-binutils-generic-debuginfo-0:2.30-3.el8.aarch64", }, product_reference: "mingw-binutils-generic-debuginfo-0:2.30-3.el8.aarch64", relates_to_product_reference: "CRB-8.4.0.GA", }, { category: "default_component_of", full_product_name: { name: "mingw-binutils-generic-debuginfo-0:2.30-3.el8.ppc64le as a component of Red Hat CodeReady Linux Builder (v. 8)", product_id: "CRB-8.4.0.GA:mingw-binutils-generic-debuginfo-0:2.30-3.el8.ppc64le", }, product_reference: "mingw-binutils-generic-debuginfo-0:2.30-3.el8.ppc64le", relates_to_product_reference: "CRB-8.4.0.GA", }, { category: "default_component_of", full_product_name: { name: "mingw-binutils-generic-debuginfo-0:2.30-3.el8.s390x as a component of Red Hat CodeReady Linux Builder (v. 8)", product_id: "CRB-8.4.0.GA:mingw-binutils-generic-debuginfo-0:2.30-3.el8.s390x", }, product_reference: "mingw-binutils-generic-debuginfo-0:2.30-3.el8.s390x", relates_to_product_reference: "CRB-8.4.0.GA", }, { category: "default_component_of", full_product_name: { name: "mingw-binutils-generic-debuginfo-0:2.30-3.el8.x86_64 as a component of Red Hat CodeReady Linux Builder (v. 8)", product_id: "CRB-8.4.0.GA:mingw-binutils-generic-debuginfo-0:2.30-3.el8.x86_64", }, product_reference: "mingw-binutils-generic-debuginfo-0:2.30-3.el8.x86_64", relates_to_product_reference: "CRB-8.4.0.GA", }, { category: "default_component_of", full_product_name: { name: "mingw-bzip2-0:1.0.6-14.el8.src as a component of Red Hat CodeReady Linux Builder (v. 8)", product_id: "CRB-8.4.0.GA:mingw-bzip2-0:1.0.6-14.el8.src", }, product_reference: "mingw-bzip2-0:1.0.6-14.el8.src", relates_to_product_reference: "CRB-8.4.0.GA", }, { category: "default_component_of", full_product_name: { name: "mingw-filesystem-0:104-2.el8.src as a component of Red Hat CodeReady Linux Builder (v. 8)", product_id: "CRB-8.4.0.GA:mingw-filesystem-0:104-2.el8.src", }, product_reference: "mingw-filesystem-0:104-2.el8.src", relates_to_product_reference: "CRB-8.4.0.GA", }, { category: "default_component_of", full_product_name: { name: "mingw-filesystem-base-0:104-2.el8.noarch as a component of Red Hat CodeReady Linux Builder (v. 8)", product_id: "CRB-8.4.0.GA:mingw-filesystem-base-0:104-2.el8.noarch", }, product_reference: "mingw-filesystem-base-0:104-2.el8.noarch", relates_to_product_reference: "CRB-8.4.0.GA", }, { category: "default_component_of", full_product_name: { name: "mingw-sqlite-0:3.26.0.0-1.el8.src as a component of Red Hat CodeReady Linux Builder (v. 8)", product_id: "CRB-8.4.0.GA:mingw-sqlite-0:3.26.0.0-1.el8.src", }, product_reference: "mingw-sqlite-0:3.26.0.0-1.el8.src", relates_to_product_reference: "CRB-8.4.0.GA", }, { category: "default_component_of", full_product_name: { name: "mingw32-binutils-0:2.30-3.el8.aarch64 as a component of Red Hat CodeReady Linux Builder (v. 8)", product_id: "CRB-8.4.0.GA:mingw32-binutils-0:2.30-3.el8.aarch64", }, product_reference: "mingw32-binutils-0:2.30-3.el8.aarch64", relates_to_product_reference: "CRB-8.4.0.GA", }, { category: "default_component_of", full_product_name: { name: "mingw32-binutils-0:2.30-3.el8.ppc64le as a component of Red Hat CodeReady Linux Builder (v. 8)", product_id: "CRB-8.4.0.GA:mingw32-binutils-0:2.30-3.el8.ppc64le", }, product_reference: "mingw32-binutils-0:2.30-3.el8.ppc64le", relates_to_product_reference: "CRB-8.4.0.GA", }, { category: "default_component_of", full_product_name: { name: "mingw32-binutils-0:2.30-3.el8.s390x as a component of Red Hat CodeReady Linux Builder (v. 8)", product_id: "CRB-8.4.0.GA:mingw32-binutils-0:2.30-3.el8.s390x", }, product_reference: "mingw32-binutils-0:2.30-3.el8.s390x", relates_to_product_reference: "CRB-8.4.0.GA", }, { category: "default_component_of", full_product_name: { name: "mingw32-binutils-0:2.30-3.el8.x86_64 as a component of Red Hat CodeReady Linux Builder (v. 8)", product_id: "CRB-8.4.0.GA:mingw32-binutils-0:2.30-3.el8.x86_64", }, product_reference: "mingw32-binutils-0:2.30-3.el8.x86_64", relates_to_product_reference: "CRB-8.4.0.GA", }, { category: "default_component_of", full_product_name: { name: "mingw32-binutils-debuginfo-0:2.30-3.el8.aarch64 as a component of Red Hat CodeReady Linux Builder (v. 8)", product_id: "CRB-8.4.0.GA:mingw32-binutils-debuginfo-0:2.30-3.el8.aarch64", }, product_reference: "mingw32-binutils-debuginfo-0:2.30-3.el8.aarch64", relates_to_product_reference: "CRB-8.4.0.GA", }, { category: "default_component_of", full_product_name: { name: "mingw32-binutils-debuginfo-0:2.30-3.el8.ppc64le as a component of Red Hat CodeReady Linux Builder (v. 8)", product_id: "CRB-8.4.0.GA:mingw32-binutils-debuginfo-0:2.30-3.el8.ppc64le", }, product_reference: "mingw32-binutils-debuginfo-0:2.30-3.el8.ppc64le", relates_to_product_reference: "CRB-8.4.0.GA", }, { category: "default_component_of", full_product_name: { name: "mingw32-binutils-debuginfo-0:2.30-3.el8.s390x as a component of Red Hat CodeReady Linux Builder (v. 8)", product_id: "CRB-8.4.0.GA:mingw32-binutils-debuginfo-0:2.30-3.el8.s390x", }, product_reference: "mingw32-binutils-debuginfo-0:2.30-3.el8.s390x", relates_to_product_reference: "CRB-8.4.0.GA", }, { category: "default_component_of", full_product_name: { name: "mingw32-binutils-debuginfo-0:2.30-3.el8.x86_64 as a component of Red Hat CodeReady Linux Builder (v. 8)", product_id: "CRB-8.4.0.GA:mingw32-binutils-debuginfo-0:2.30-3.el8.x86_64", }, product_reference: "mingw32-binutils-debuginfo-0:2.30-3.el8.x86_64", relates_to_product_reference: "CRB-8.4.0.GA", }, { category: "default_component_of", full_product_name: { name: "mingw32-bzip2-0:1.0.6-14.el8.noarch as a component of Red Hat CodeReady Linux Builder (v. 8)", product_id: "CRB-8.4.0.GA:mingw32-bzip2-0:1.0.6-14.el8.noarch", }, product_reference: "mingw32-bzip2-0:1.0.6-14.el8.noarch", relates_to_product_reference: "CRB-8.4.0.GA", }, { category: "default_component_of", full_product_name: { name: "mingw32-bzip2-debuginfo-0:1.0.6-14.el8.noarch as a component of Red Hat CodeReady Linux Builder (v. 8)", product_id: "CRB-8.4.0.GA:mingw32-bzip2-debuginfo-0:1.0.6-14.el8.noarch", }, product_reference: "mingw32-bzip2-debuginfo-0:1.0.6-14.el8.noarch", relates_to_product_reference: "CRB-8.4.0.GA", }, { category: "default_component_of", full_product_name: { name: "mingw32-bzip2-static-0:1.0.6-14.el8.noarch as a component of Red Hat CodeReady Linux Builder (v. 8)", product_id: "CRB-8.4.0.GA:mingw32-bzip2-static-0:1.0.6-14.el8.noarch", }, product_reference: "mingw32-bzip2-static-0:1.0.6-14.el8.noarch", relates_to_product_reference: "CRB-8.4.0.GA", }, { category: "default_component_of", full_product_name: { name: "mingw32-filesystem-0:104-2.el8.noarch as a component of Red Hat CodeReady Linux Builder (v. 8)", product_id: "CRB-8.4.0.GA:mingw32-filesystem-0:104-2.el8.noarch", }, product_reference: "mingw32-filesystem-0:104-2.el8.noarch", relates_to_product_reference: "CRB-8.4.0.GA", }, { category: "default_component_of", full_product_name: { name: "mingw32-sqlite-0:3.26.0.0-1.el8.noarch as a component of Red Hat CodeReady Linux Builder (v. 8)", product_id: "CRB-8.4.0.GA:mingw32-sqlite-0:3.26.0.0-1.el8.noarch", }, product_reference: "mingw32-sqlite-0:3.26.0.0-1.el8.noarch", relates_to_product_reference: "CRB-8.4.0.GA", }, { category: "default_component_of", full_product_name: { name: "mingw32-sqlite-debuginfo-0:3.26.0.0-1.el8.noarch as a component of Red Hat CodeReady Linux Builder (v. 8)", product_id: "CRB-8.4.0.GA:mingw32-sqlite-debuginfo-0:3.26.0.0-1.el8.noarch", }, product_reference: "mingw32-sqlite-debuginfo-0:3.26.0.0-1.el8.noarch", relates_to_product_reference: "CRB-8.4.0.GA", }, { category: "default_component_of", full_product_name: { name: "mingw32-sqlite-static-0:3.26.0.0-1.el8.noarch as a component of Red Hat CodeReady Linux Builder (v. 8)", product_id: "CRB-8.4.0.GA:mingw32-sqlite-static-0:3.26.0.0-1.el8.noarch", }, product_reference: "mingw32-sqlite-static-0:3.26.0.0-1.el8.noarch", relates_to_product_reference: "CRB-8.4.0.GA", }, { category: "default_component_of", full_product_name: { name: "mingw64-binutils-0:2.30-3.el8.aarch64 as a component of Red Hat CodeReady Linux Builder (v. 8)", product_id: "CRB-8.4.0.GA:mingw64-binutils-0:2.30-3.el8.aarch64", }, product_reference: "mingw64-binutils-0:2.30-3.el8.aarch64", relates_to_product_reference: "CRB-8.4.0.GA", }, { category: "default_component_of", full_product_name: { name: "mingw64-binutils-0:2.30-3.el8.ppc64le as a component of Red Hat CodeReady Linux Builder (v. 8)", product_id: "CRB-8.4.0.GA:mingw64-binutils-0:2.30-3.el8.ppc64le", }, product_reference: "mingw64-binutils-0:2.30-3.el8.ppc64le", relates_to_product_reference: "CRB-8.4.0.GA", }, { category: "default_component_of", full_product_name: { name: "mingw64-binutils-0:2.30-3.el8.s390x as a component of Red Hat CodeReady Linux Builder (v. 8)", product_id: "CRB-8.4.0.GA:mingw64-binutils-0:2.30-3.el8.s390x", }, product_reference: "mingw64-binutils-0:2.30-3.el8.s390x", relates_to_product_reference: "CRB-8.4.0.GA", }, { category: "default_component_of", full_product_name: { name: "mingw64-binutils-0:2.30-3.el8.x86_64 as a component of Red Hat CodeReady Linux Builder (v. 8)", product_id: "CRB-8.4.0.GA:mingw64-binutils-0:2.30-3.el8.x86_64", }, product_reference: "mingw64-binutils-0:2.30-3.el8.x86_64", relates_to_product_reference: "CRB-8.4.0.GA", }, { category: "default_component_of", full_product_name: { name: "mingw64-binutils-debuginfo-0:2.30-3.el8.aarch64 as a component of Red Hat CodeReady Linux Builder (v. 8)", product_id: "CRB-8.4.0.GA:mingw64-binutils-debuginfo-0:2.30-3.el8.aarch64", }, product_reference: "mingw64-binutils-debuginfo-0:2.30-3.el8.aarch64", relates_to_product_reference: "CRB-8.4.0.GA", }, { category: "default_component_of", full_product_name: { name: "mingw64-binutils-debuginfo-0:2.30-3.el8.ppc64le as a component of Red Hat CodeReady Linux Builder (v. 8)", product_id: "CRB-8.4.0.GA:mingw64-binutils-debuginfo-0:2.30-3.el8.ppc64le", }, product_reference: "mingw64-binutils-debuginfo-0:2.30-3.el8.ppc64le", relates_to_product_reference: "CRB-8.4.0.GA", }, { category: "default_component_of", full_product_name: { name: "mingw64-binutils-debuginfo-0:2.30-3.el8.s390x as a component of Red Hat CodeReady Linux Builder (v. 8)", product_id: "CRB-8.4.0.GA:mingw64-binutils-debuginfo-0:2.30-3.el8.s390x", }, product_reference: "mingw64-binutils-debuginfo-0:2.30-3.el8.s390x", relates_to_product_reference: "CRB-8.4.0.GA", }, { category: "default_component_of", full_product_name: { name: "mingw64-binutils-debuginfo-0:2.30-3.el8.x86_64 as a component of Red Hat CodeReady Linux Builder (v. 8)", product_id: "CRB-8.4.0.GA:mingw64-binutils-debuginfo-0:2.30-3.el8.x86_64", }, product_reference: "mingw64-binutils-debuginfo-0:2.30-3.el8.x86_64", relates_to_product_reference: "CRB-8.4.0.GA", }, { category: "default_component_of", full_product_name: { name: "mingw64-bzip2-0:1.0.6-14.el8.noarch as a component of Red Hat CodeReady Linux Builder (v. 8)", product_id: "CRB-8.4.0.GA:mingw64-bzip2-0:1.0.6-14.el8.noarch", }, product_reference: "mingw64-bzip2-0:1.0.6-14.el8.noarch", relates_to_product_reference: "CRB-8.4.0.GA", }, { category: "default_component_of", full_product_name: { name: "mingw64-bzip2-debuginfo-0:1.0.6-14.el8.noarch as a component of Red Hat CodeReady Linux Builder (v. 8)", product_id: "CRB-8.4.0.GA:mingw64-bzip2-debuginfo-0:1.0.6-14.el8.noarch", }, product_reference: "mingw64-bzip2-debuginfo-0:1.0.6-14.el8.noarch", relates_to_product_reference: "CRB-8.4.0.GA", }, { category: "default_component_of", full_product_name: { name: "mingw64-bzip2-static-0:1.0.6-14.el8.noarch as a component of Red Hat CodeReady Linux Builder (v. 8)", product_id: "CRB-8.4.0.GA:mingw64-bzip2-static-0:1.0.6-14.el8.noarch", }, product_reference: "mingw64-bzip2-static-0:1.0.6-14.el8.noarch", relates_to_product_reference: "CRB-8.4.0.GA", }, { category: "default_component_of", full_product_name: { name: "mingw64-filesystem-0:104-2.el8.noarch as a component of Red Hat CodeReady Linux Builder (v. 8)", product_id: "CRB-8.4.0.GA:mingw64-filesystem-0:104-2.el8.noarch", }, product_reference: "mingw64-filesystem-0:104-2.el8.noarch", relates_to_product_reference: "CRB-8.4.0.GA", }, { category: "default_component_of", full_product_name: { name: "mingw64-sqlite-0:3.26.0.0-1.el8.noarch as a component of Red Hat CodeReady Linux Builder (v. 8)", product_id: "CRB-8.4.0.GA:mingw64-sqlite-0:3.26.0.0-1.el8.noarch", }, product_reference: "mingw64-sqlite-0:3.26.0.0-1.el8.noarch", relates_to_product_reference: "CRB-8.4.0.GA", }, { category: "default_component_of", full_product_name: { name: "mingw64-sqlite-debuginfo-0:3.26.0.0-1.el8.noarch as a component of Red Hat CodeReady Linux Builder (v. 8)", product_id: "CRB-8.4.0.GA:mingw64-sqlite-debuginfo-0:3.26.0.0-1.el8.noarch", }, product_reference: "mingw64-sqlite-debuginfo-0:3.26.0.0-1.el8.noarch", relates_to_product_reference: "CRB-8.4.0.GA", }, { category: "default_component_of", full_product_name: { name: "mingw64-sqlite-static-0:3.26.0.0-1.el8.noarch as a component of Red Hat CodeReady Linux Builder (v. 8)", product_id: "CRB-8.4.0.GA:mingw64-sqlite-static-0:3.26.0.0-1.el8.noarch", }, product_reference: "mingw64-sqlite-static-0:3.26.0.0-1.el8.noarch", relates_to_product_reference: "CRB-8.4.0.GA", }, ], }, vulnerabilities: [ { cve: "CVE-2019-16168", cwe: { id: "CWE-369", name: "Divide By Zero", }, discovery_date: "2019-11-05T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "1768986", }, ], notes: [ { category: "description", text: "In SQLite through 3.29.0, whereLoopAddBtreeIndex in sqlite3.c can crash a browser or other application because of missing validation of a sqlite_stat1 sz field, aka a \"severe division by zero in the query planner.\"", title: "Vulnerability description", }, { category: "summary", text: "sqlite: Division by zero in whereLoopAddBtreeIndex in sqlite3.c", title: "Vulnerability summary", }, { category: "other", text: "The SQLite package as shipped with Red Hat Enterprise Linux 7 and previous versions are not affected by this flaw. The bug was introduced on sqlite-3.8.5 while Red Hat Enterprise Linux 7 and previous releases ships sqlite <= 3.7.17.", title: "Statement", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "CRB-8.4.0.GA:mingw-binutils-0:2.30-3.el8.src", "CRB-8.4.0.GA:mingw-binutils-debuginfo-0:2.30-3.el8.aarch64", "CRB-8.4.0.GA:mingw-binutils-debuginfo-0:2.30-3.el8.ppc64le", "CRB-8.4.0.GA:mingw-binutils-debuginfo-0:2.30-3.el8.s390x", "CRB-8.4.0.GA:mingw-binutils-debuginfo-0:2.30-3.el8.x86_64", "CRB-8.4.0.GA:mingw-binutils-debugsource-0:2.30-3.el8.aarch64", "CRB-8.4.0.GA:mingw-binutils-debugsource-0:2.30-3.el8.ppc64le", "CRB-8.4.0.GA:mingw-binutils-debugsource-0:2.30-3.el8.s390x", "CRB-8.4.0.GA:mingw-binutils-debugsource-0:2.30-3.el8.x86_64", "CRB-8.4.0.GA:mingw-binutils-generic-0:2.30-3.el8.aarch64", "CRB-8.4.0.GA:mingw-binutils-generic-0:2.30-3.el8.ppc64le", "CRB-8.4.0.GA:mingw-binutils-generic-0:2.30-3.el8.s390x", "CRB-8.4.0.GA:mingw-binutils-generic-0:2.30-3.el8.x86_64", "CRB-8.4.0.GA:mingw-binutils-generic-debuginfo-0:2.30-3.el8.aarch64", "CRB-8.4.0.GA:mingw-binutils-generic-debuginfo-0:2.30-3.el8.ppc64le", "CRB-8.4.0.GA:mingw-binutils-generic-debuginfo-0:2.30-3.el8.s390x", "CRB-8.4.0.GA:mingw-binutils-generic-debuginfo-0:2.30-3.el8.x86_64", "CRB-8.4.0.GA:mingw-bzip2-0:1.0.6-14.el8.src", "CRB-8.4.0.GA:mingw-filesystem-0:104-2.el8.src", "CRB-8.4.0.GA:mingw-filesystem-base-0:104-2.el8.noarch", "CRB-8.4.0.GA:mingw-sqlite-0:3.26.0.0-1.el8.src", "CRB-8.4.0.GA:mingw32-binutils-0:2.30-3.el8.aarch64", "CRB-8.4.0.GA:mingw32-binutils-0:2.30-3.el8.ppc64le", "CRB-8.4.0.GA:mingw32-binutils-0:2.30-3.el8.s390x", "CRB-8.4.0.GA:mingw32-binutils-0:2.30-3.el8.x86_64", "CRB-8.4.0.GA:mingw32-binutils-debuginfo-0:2.30-3.el8.aarch64", "CRB-8.4.0.GA:mingw32-binutils-debuginfo-0:2.30-3.el8.ppc64le", "CRB-8.4.0.GA:mingw32-binutils-debuginfo-0:2.30-3.el8.s390x", "CRB-8.4.0.GA:mingw32-binutils-debuginfo-0:2.30-3.el8.x86_64", "CRB-8.4.0.GA:mingw32-bzip2-0:1.0.6-14.el8.noarch", "CRB-8.4.0.GA:mingw32-bzip2-debuginfo-0:1.0.6-14.el8.noarch", "CRB-8.4.0.GA:mingw32-bzip2-static-0:1.0.6-14.el8.noarch", "CRB-8.4.0.GA:mingw32-filesystem-0:104-2.el8.noarch", "CRB-8.4.0.GA:mingw32-sqlite-0:3.26.0.0-1.el8.noarch", "CRB-8.4.0.GA:mingw32-sqlite-debuginfo-0:3.26.0.0-1.el8.noarch", "CRB-8.4.0.GA:mingw32-sqlite-static-0:3.26.0.0-1.el8.noarch", "CRB-8.4.0.GA:mingw64-binutils-0:2.30-3.el8.aarch64", "CRB-8.4.0.GA:mingw64-binutils-0:2.30-3.el8.ppc64le", "CRB-8.4.0.GA:mingw64-binutils-0:2.30-3.el8.s390x", "CRB-8.4.0.GA:mingw64-binutils-0:2.30-3.el8.x86_64", "CRB-8.4.0.GA:mingw64-binutils-debuginfo-0:2.30-3.el8.aarch64", "CRB-8.4.0.GA:mingw64-binutils-debuginfo-0:2.30-3.el8.ppc64le", "CRB-8.4.0.GA:mingw64-binutils-debuginfo-0:2.30-3.el8.s390x", "CRB-8.4.0.GA:mingw64-binutils-debuginfo-0:2.30-3.el8.x86_64", "CRB-8.4.0.GA:mingw64-bzip2-0:1.0.6-14.el8.noarch", "CRB-8.4.0.GA:mingw64-bzip2-debuginfo-0:1.0.6-14.el8.noarch", "CRB-8.4.0.GA:mingw64-bzip2-static-0:1.0.6-14.el8.noarch", "CRB-8.4.0.GA:mingw64-filesystem-0:104-2.el8.noarch", "CRB-8.4.0.GA:mingw64-sqlite-0:3.26.0.0-1.el8.noarch", "CRB-8.4.0.GA:mingw64-sqlite-debuginfo-0:3.26.0.0-1.el8.noarch", "CRB-8.4.0.GA:mingw64-sqlite-static-0:3.26.0.0-1.el8.noarch", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2019-16168", }, { category: "external", summary: "RHBZ#1768986", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1768986", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2019-16168", url: "https://www.cve.org/CVERecord?id=CVE-2019-16168", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2019-16168", url: "https://nvd.nist.gov/vuln/detail/CVE-2019-16168", }, ], release_date: "2019-08-15T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2021-05-18T15:23:23+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258", product_ids: [ "CRB-8.4.0.GA:mingw-binutils-0:2.30-3.el8.src", "CRB-8.4.0.GA:mingw-binutils-debuginfo-0:2.30-3.el8.aarch64", "CRB-8.4.0.GA:mingw-binutils-debuginfo-0:2.30-3.el8.ppc64le", "CRB-8.4.0.GA:mingw-binutils-debuginfo-0:2.30-3.el8.s390x", "CRB-8.4.0.GA:mingw-binutils-debuginfo-0:2.30-3.el8.x86_64", "CRB-8.4.0.GA:mingw-binutils-debugsource-0:2.30-3.el8.aarch64", "CRB-8.4.0.GA:mingw-binutils-debugsource-0:2.30-3.el8.ppc64le", "CRB-8.4.0.GA:mingw-binutils-debugsource-0:2.30-3.el8.s390x", "CRB-8.4.0.GA:mingw-binutils-debugsource-0:2.30-3.el8.x86_64", "CRB-8.4.0.GA:mingw-binutils-generic-0:2.30-3.el8.aarch64", "CRB-8.4.0.GA:mingw-binutils-generic-0:2.30-3.el8.ppc64le", "CRB-8.4.0.GA:mingw-binutils-generic-0:2.30-3.el8.s390x", "CRB-8.4.0.GA:mingw-binutils-generic-0:2.30-3.el8.x86_64", "CRB-8.4.0.GA:mingw-binutils-generic-debuginfo-0:2.30-3.el8.aarch64", "CRB-8.4.0.GA:mingw-binutils-generic-debuginfo-0:2.30-3.el8.ppc64le", "CRB-8.4.0.GA:mingw-binutils-generic-debuginfo-0:2.30-3.el8.s390x", "CRB-8.4.0.GA:mingw-binutils-generic-debuginfo-0:2.30-3.el8.x86_64", "CRB-8.4.0.GA:mingw-bzip2-0:1.0.6-14.el8.src", "CRB-8.4.0.GA:mingw-filesystem-0:104-2.el8.src", "CRB-8.4.0.GA:mingw-filesystem-base-0:104-2.el8.noarch", "CRB-8.4.0.GA:mingw-sqlite-0:3.26.0.0-1.el8.src", "CRB-8.4.0.GA:mingw32-binutils-0:2.30-3.el8.aarch64", "CRB-8.4.0.GA:mingw32-binutils-0:2.30-3.el8.ppc64le", "CRB-8.4.0.GA:mingw32-binutils-0:2.30-3.el8.s390x", "CRB-8.4.0.GA:mingw32-binutils-0:2.30-3.el8.x86_64", "CRB-8.4.0.GA:mingw32-binutils-debuginfo-0:2.30-3.el8.aarch64", "CRB-8.4.0.GA:mingw32-binutils-debuginfo-0:2.30-3.el8.ppc64le", "CRB-8.4.0.GA:mingw32-binutils-debuginfo-0:2.30-3.el8.s390x", "CRB-8.4.0.GA:mingw32-binutils-debuginfo-0:2.30-3.el8.x86_64", "CRB-8.4.0.GA:mingw32-bzip2-0:1.0.6-14.el8.noarch", "CRB-8.4.0.GA:mingw32-bzip2-debuginfo-0:1.0.6-14.el8.noarch", "CRB-8.4.0.GA:mingw32-bzip2-static-0:1.0.6-14.el8.noarch", "CRB-8.4.0.GA:mingw32-filesystem-0:104-2.el8.noarch", "CRB-8.4.0.GA:mingw32-sqlite-0:3.26.0.0-1.el8.noarch", "CRB-8.4.0.GA:mingw32-sqlite-debuginfo-0:3.26.0.0-1.el8.noarch", "CRB-8.4.0.GA:mingw32-sqlite-static-0:3.26.0.0-1.el8.noarch", "CRB-8.4.0.GA:mingw64-binutils-0:2.30-3.el8.aarch64", "CRB-8.4.0.GA:mingw64-binutils-0:2.30-3.el8.ppc64le", "CRB-8.4.0.GA:mingw64-binutils-0:2.30-3.el8.s390x", "CRB-8.4.0.GA:mingw64-binutils-0:2.30-3.el8.x86_64", "CRB-8.4.0.GA:mingw64-binutils-debuginfo-0:2.30-3.el8.aarch64", "CRB-8.4.0.GA:mingw64-binutils-debuginfo-0:2.30-3.el8.ppc64le", "CRB-8.4.0.GA:mingw64-binutils-debuginfo-0:2.30-3.el8.s390x", "CRB-8.4.0.GA:mingw64-binutils-debuginfo-0:2.30-3.el8.x86_64", "CRB-8.4.0.GA:mingw64-bzip2-0:1.0.6-14.el8.noarch", "CRB-8.4.0.GA:mingw64-bzip2-debuginfo-0:1.0.6-14.el8.noarch", "CRB-8.4.0.GA:mingw64-bzip2-static-0:1.0.6-14.el8.noarch", "CRB-8.4.0.GA:mingw64-filesystem-0:104-2.el8.noarch", "CRB-8.4.0.GA:mingw64-sqlite-0:3.26.0.0-1.el8.noarch", "CRB-8.4.0.GA:mingw64-sqlite-debuginfo-0:3.26.0.0-1.el8.noarch", "CRB-8.4.0.GA:mingw64-sqlite-static-0:3.26.0.0-1.el8.noarch", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2021:1968", }, { category: "workaround", details: "An user can mitigate the risk of this vulnerability by:\n\n1) Avoid using ANALYZE command on queries;\n2) Disabling the PRAGMA optimize for affected SQLite instances;", product_ids: [ "CRB-8.4.0.GA:mingw-binutils-0:2.30-3.el8.src", "CRB-8.4.0.GA:mingw-binutils-debuginfo-0:2.30-3.el8.aarch64", "CRB-8.4.0.GA:mingw-binutils-debuginfo-0:2.30-3.el8.ppc64le", "CRB-8.4.0.GA:mingw-binutils-debuginfo-0:2.30-3.el8.s390x", "CRB-8.4.0.GA:mingw-binutils-debuginfo-0:2.30-3.el8.x86_64", "CRB-8.4.0.GA:mingw-binutils-debugsource-0:2.30-3.el8.aarch64", "CRB-8.4.0.GA:mingw-binutils-debugsource-0:2.30-3.el8.ppc64le", "CRB-8.4.0.GA:mingw-binutils-debugsource-0:2.30-3.el8.s390x", "CRB-8.4.0.GA:mingw-binutils-debugsource-0:2.30-3.el8.x86_64", "CRB-8.4.0.GA:mingw-binutils-generic-0:2.30-3.el8.aarch64", "CRB-8.4.0.GA:mingw-binutils-generic-0:2.30-3.el8.ppc64le", "CRB-8.4.0.GA:mingw-binutils-generic-0:2.30-3.el8.s390x", "CRB-8.4.0.GA:mingw-binutils-generic-0:2.30-3.el8.x86_64", "CRB-8.4.0.GA:mingw-binutils-generic-debuginfo-0:2.30-3.el8.aarch64", "CRB-8.4.0.GA:mingw-binutils-generic-debuginfo-0:2.30-3.el8.ppc64le", "CRB-8.4.0.GA:mingw-binutils-generic-debuginfo-0:2.30-3.el8.s390x", "CRB-8.4.0.GA:mingw-binutils-generic-debuginfo-0:2.30-3.el8.x86_64", "CRB-8.4.0.GA:mingw-bzip2-0:1.0.6-14.el8.src", "CRB-8.4.0.GA:mingw-filesystem-0:104-2.el8.src", "CRB-8.4.0.GA:mingw-filesystem-base-0:104-2.el8.noarch", "CRB-8.4.0.GA:mingw-sqlite-0:3.26.0.0-1.el8.src", "CRB-8.4.0.GA:mingw32-binutils-0:2.30-3.el8.aarch64", "CRB-8.4.0.GA:mingw32-binutils-0:2.30-3.el8.ppc64le", "CRB-8.4.0.GA:mingw32-binutils-0:2.30-3.el8.s390x", "CRB-8.4.0.GA:mingw32-binutils-0:2.30-3.el8.x86_64", "CRB-8.4.0.GA:mingw32-binutils-debuginfo-0:2.30-3.el8.aarch64", "CRB-8.4.0.GA:mingw32-binutils-debuginfo-0:2.30-3.el8.ppc64le", "CRB-8.4.0.GA:mingw32-binutils-debuginfo-0:2.30-3.el8.s390x", "CRB-8.4.0.GA:mingw32-binutils-debuginfo-0:2.30-3.el8.x86_64", "CRB-8.4.0.GA:mingw32-bzip2-0:1.0.6-14.el8.noarch", "CRB-8.4.0.GA:mingw32-bzip2-debuginfo-0:1.0.6-14.el8.noarch", "CRB-8.4.0.GA:mingw32-bzip2-static-0:1.0.6-14.el8.noarch", "CRB-8.4.0.GA:mingw32-filesystem-0:104-2.el8.noarch", "CRB-8.4.0.GA:mingw32-sqlite-0:3.26.0.0-1.el8.noarch", "CRB-8.4.0.GA:mingw32-sqlite-debuginfo-0:3.26.0.0-1.el8.noarch", "CRB-8.4.0.GA:mingw32-sqlite-static-0:3.26.0.0-1.el8.noarch", "CRB-8.4.0.GA:mingw64-binutils-0:2.30-3.el8.aarch64", "CRB-8.4.0.GA:mingw64-binutils-0:2.30-3.el8.ppc64le", "CRB-8.4.0.GA:mingw64-binutils-0:2.30-3.el8.s390x", "CRB-8.4.0.GA:mingw64-binutils-0:2.30-3.el8.x86_64", "CRB-8.4.0.GA:mingw64-binutils-debuginfo-0:2.30-3.el8.aarch64", "CRB-8.4.0.GA:mingw64-binutils-debuginfo-0:2.30-3.el8.ppc64le", "CRB-8.4.0.GA:mingw64-binutils-debuginfo-0:2.30-3.el8.s390x", "CRB-8.4.0.GA:mingw64-binutils-debuginfo-0:2.30-3.el8.x86_64", "CRB-8.4.0.GA:mingw64-bzip2-0:1.0.6-14.el8.noarch", "CRB-8.4.0.GA:mingw64-bzip2-debuginfo-0:1.0.6-14.el8.noarch", "CRB-8.4.0.GA:mingw64-bzip2-static-0:1.0.6-14.el8.noarch", "CRB-8.4.0.GA:mingw64-filesystem-0:104-2.el8.noarch", "CRB-8.4.0.GA:mingw64-sqlite-0:3.26.0.0-1.el8.noarch", "CRB-8.4.0.GA:mingw64-sqlite-debuginfo-0:3.26.0.0-1.el8.noarch", "CRB-8.4.0.GA:mingw64-sqlite-static-0:3.26.0.0-1.el8.noarch", ], }, ], scores: [ { cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 6.5, baseSeverity: "MEDIUM", confidentialityImpact: "NONE", integrityImpact: "NONE", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", version: "3.0", }, products: [ "CRB-8.4.0.GA:mingw-binutils-0:2.30-3.el8.src", "CRB-8.4.0.GA:mingw-binutils-debuginfo-0:2.30-3.el8.aarch64", "CRB-8.4.0.GA:mingw-binutils-debuginfo-0:2.30-3.el8.ppc64le", "CRB-8.4.0.GA:mingw-binutils-debuginfo-0:2.30-3.el8.s390x", "CRB-8.4.0.GA:mingw-binutils-debuginfo-0:2.30-3.el8.x86_64", "CRB-8.4.0.GA:mingw-binutils-debugsource-0:2.30-3.el8.aarch64", "CRB-8.4.0.GA:mingw-binutils-debugsource-0:2.30-3.el8.ppc64le", "CRB-8.4.0.GA:mingw-binutils-debugsource-0:2.30-3.el8.s390x", "CRB-8.4.0.GA:mingw-binutils-debugsource-0:2.30-3.el8.x86_64", "CRB-8.4.0.GA:mingw-binutils-generic-0:2.30-3.el8.aarch64", "CRB-8.4.0.GA:mingw-binutils-generic-0:2.30-3.el8.ppc64le", "CRB-8.4.0.GA:mingw-binutils-generic-0:2.30-3.el8.s390x", "CRB-8.4.0.GA:mingw-binutils-generic-0:2.30-3.el8.x86_64", "CRB-8.4.0.GA:mingw-binutils-generic-debuginfo-0:2.30-3.el8.aarch64", "CRB-8.4.0.GA:mingw-binutils-generic-debuginfo-0:2.30-3.el8.ppc64le", "CRB-8.4.0.GA:mingw-binutils-generic-debuginfo-0:2.30-3.el8.s390x", "CRB-8.4.0.GA:mingw-binutils-generic-debuginfo-0:2.30-3.el8.x86_64", "CRB-8.4.0.GA:mingw-bzip2-0:1.0.6-14.el8.src", "CRB-8.4.0.GA:mingw-filesystem-0:104-2.el8.src", "CRB-8.4.0.GA:mingw-filesystem-base-0:104-2.el8.noarch", "CRB-8.4.0.GA:mingw-sqlite-0:3.26.0.0-1.el8.src", "CRB-8.4.0.GA:mingw32-binutils-0:2.30-3.el8.aarch64", "CRB-8.4.0.GA:mingw32-binutils-0:2.30-3.el8.ppc64le", "CRB-8.4.0.GA:mingw32-binutils-0:2.30-3.el8.s390x", "CRB-8.4.0.GA:mingw32-binutils-0:2.30-3.el8.x86_64", "CRB-8.4.0.GA:mingw32-binutils-debuginfo-0:2.30-3.el8.aarch64", "CRB-8.4.0.GA:mingw32-binutils-debuginfo-0:2.30-3.el8.ppc64le", "CRB-8.4.0.GA:mingw32-binutils-debuginfo-0:2.30-3.el8.s390x", "CRB-8.4.0.GA:mingw32-binutils-debuginfo-0:2.30-3.el8.x86_64", "CRB-8.4.0.GA:mingw32-bzip2-0:1.0.6-14.el8.noarch", "CRB-8.4.0.GA:mingw32-bzip2-debuginfo-0:1.0.6-14.el8.noarch", "CRB-8.4.0.GA:mingw32-bzip2-static-0:1.0.6-14.el8.noarch", "CRB-8.4.0.GA:mingw32-filesystem-0:104-2.el8.noarch", "CRB-8.4.0.GA:mingw32-sqlite-0:3.26.0.0-1.el8.noarch", "CRB-8.4.0.GA:mingw32-sqlite-debuginfo-0:3.26.0.0-1.el8.noarch", "CRB-8.4.0.GA:mingw32-sqlite-static-0:3.26.0.0-1.el8.noarch", "CRB-8.4.0.GA:mingw64-binutils-0:2.30-3.el8.aarch64", "CRB-8.4.0.GA:mingw64-binutils-0:2.30-3.el8.ppc64le", "CRB-8.4.0.GA:mingw64-binutils-0:2.30-3.el8.s390x", "CRB-8.4.0.GA:mingw64-binutils-0:2.30-3.el8.x86_64", "CRB-8.4.0.GA:mingw64-binutils-debuginfo-0:2.30-3.el8.aarch64", "CRB-8.4.0.GA:mingw64-binutils-debuginfo-0:2.30-3.el8.ppc64le", "CRB-8.4.0.GA:mingw64-binutils-debuginfo-0:2.30-3.el8.s390x", "CRB-8.4.0.GA:mingw64-binutils-debuginfo-0:2.30-3.el8.x86_64", "CRB-8.4.0.GA:mingw64-bzip2-0:1.0.6-14.el8.noarch", "CRB-8.4.0.GA:mingw64-bzip2-debuginfo-0:1.0.6-14.el8.noarch", "CRB-8.4.0.GA:mingw64-bzip2-static-0:1.0.6-14.el8.noarch", "CRB-8.4.0.GA:mingw64-filesystem-0:104-2.el8.noarch", "CRB-8.4.0.GA:mingw64-sqlite-0:3.26.0.0-1.el8.noarch", "CRB-8.4.0.GA:mingw64-sqlite-debuginfo-0:3.26.0.0-1.el8.noarch", "CRB-8.4.0.GA:mingw64-sqlite-static-0:3.26.0.0-1.el8.noarch", ], }, ], threats: [ { category: "impact", details: "Moderate", }, ], title: "sqlite: Division by zero in whereLoopAddBtreeIndex in sqlite3.c", }, { cve: "CVE-2020-13434", cwe: { id: "CWE-121", name: "Stack-based Buffer Overflow", }, discovery_date: "2020-05-24T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "1841223", }, ], notes: [ { category: "description", text: "An integer overflow flaw was found in the SQLite implementation of the printf() function. This flaw allows an attacker who can control the precision of floating-point conversions, to crash the application, resulting in a denial of service.", title: "Vulnerability description", }, { category: "summary", text: "sqlite: integer overflow in sqlite3_str_vappendf function in printf.c", title: "Vulnerability summary", }, { category: "other", text: "This flaw did not affect the versions of SQLite as shipped with Red Hat Enterprise Linux 7 as they did not include support for the printf() function, which was introduced in a later version of the package.", title: "Statement", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "CRB-8.4.0.GA:mingw-binutils-0:2.30-3.el8.src", "CRB-8.4.0.GA:mingw-binutils-debuginfo-0:2.30-3.el8.aarch64", "CRB-8.4.0.GA:mingw-binutils-debuginfo-0:2.30-3.el8.ppc64le", "CRB-8.4.0.GA:mingw-binutils-debuginfo-0:2.30-3.el8.s390x", "CRB-8.4.0.GA:mingw-binutils-debuginfo-0:2.30-3.el8.x86_64", "CRB-8.4.0.GA:mingw-binutils-debugsource-0:2.30-3.el8.aarch64", "CRB-8.4.0.GA:mingw-binutils-debugsource-0:2.30-3.el8.ppc64le", "CRB-8.4.0.GA:mingw-binutils-debugsource-0:2.30-3.el8.s390x", "CRB-8.4.0.GA:mingw-binutils-debugsource-0:2.30-3.el8.x86_64", "CRB-8.4.0.GA:mingw-binutils-generic-0:2.30-3.el8.aarch64", "CRB-8.4.0.GA:mingw-binutils-generic-0:2.30-3.el8.ppc64le", "CRB-8.4.0.GA:mingw-binutils-generic-0:2.30-3.el8.s390x", "CRB-8.4.0.GA:mingw-binutils-generic-0:2.30-3.el8.x86_64", "CRB-8.4.0.GA:mingw-binutils-generic-debuginfo-0:2.30-3.el8.aarch64", "CRB-8.4.0.GA:mingw-binutils-generic-debuginfo-0:2.30-3.el8.ppc64le", "CRB-8.4.0.GA:mingw-binutils-generic-debuginfo-0:2.30-3.el8.s390x", "CRB-8.4.0.GA:mingw-binutils-generic-debuginfo-0:2.30-3.el8.x86_64", "CRB-8.4.0.GA:mingw-bzip2-0:1.0.6-14.el8.src", "CRB-8.4.0.GA:mingw-filesystem-0:104-2.el8.src", "CRB-8.4.0.GA:mingw-filesystem-base-0:104-2.el8.noarch", "CRB-8.4.0.GA:mingw-sqlite-0:3.26.0.0-1.el8.src", "CRB-8.4.0.GA:mingw32-binutils-0:2.30-3.el8.aarch64", "CRB-8.4.0.GA:mingw32-binutils-0:2.30-3.el8.ppc64le", "CRB-8.4.0.GA:mingw32-binutils-0:2.30-3.el8.s390x", "CRB-8.4.0.GA:mingw32-binutils-0:2.30-3.el8.x86_64", "CRB-8.4.0.GA:mingw32-binutils-debuginfo-0:2.30-3.el8.aarch64", "CRB-8.4.0.GA:mingw32-binutils-debuginfo-0:2.30-3.el8.ppc64le", "CRB-8.4.0.GA:mingw32-binutils-debuginfo-0:2.30-3.el8.s390x", "CRB-8.4.0.GA:mingw32-binutils-debuginfo-0:2.30-3.el8.x86_64", "CRB-8.4.0.GA:mingw32-bzip2-0:1.0.6-14.el8.noarch", "CRB-8.4.0.GA:mingw32-bzip2-debuginfo-0:1.0.6-14.el8.noarch", "CRB-8.4.0.GA:mingw32-bzip2-static-0:1.0.6-14.el8.noarch", "CRB-8.4.0.GA:mingw32-filesystem-0:104-2.el8.noarch", "CRB-8.4.0.GA:mingw32-sqlite-0:3.26.0.0-1.el8.noarch", "CRB-8.4.0.GA:mingw32-sqlite-debuginfo-0:3.26.0.0-1.el8.noarch", "CRB-8.4.0.GA:mingw32-sqlite-static-0:3.26.0.0-1.el8.noarch", "CRB-8.4.0.GA:mingw64-binutils-0:2.30-3.el8.aarch64", "CRB-8.4.0.GA:mingw64-binutils-0:2.30-3.el8.ppc64le", "CRB-8.4.0.GA:mingw64-binutils-0:2.30-3.el8.s390x", "CRB-8.4.0.GA:mingw64-binutils-0:2.30-3.el8.x86_64", "CRB-8.4.0.GA:mingw64-binutils-debuginfo-0:2.30-3.el8.aarch64", "CRB-8.4.0.GA:mingw64-binutils-debuginfo-0:2.30-3.el8.ppc64le", "CRB-8.4.0.GA:mingw64-binutils-debuginfo-0:2.30-3.el8.s390x", "CRB-8.4.0.GA:mingw64-binutils-debuginfo-0:2.30-3.el8.x86_64", "CRB-8.4.0.GA:mingw64-bzip2-0:1.0.6-14.el8.noarch", "CRB-8.4.0.GA:mingw64-bzip2-debuginfo-0:1.0.6-14.el8.noarch", "CRB-8.4.0.GA:mingw64-bzip2-static-0:1.0.6-14.el8.noarch", "CRB-8.4.0.GA:mingw64-filesystem-0:104-2.el8.noarch", "CRB-8.4.0.GA:mingw64-sqlite-0:3.26.0.0-1.el8.noarch", "CRB-8.4.0.GA:mingw64-sqlite-debuginfo-0:3.26.0.0-1.el8.noarch", "CRB-8.4.0.GA:mingw64-sqlite-static-0:3.26.0.0-1.el8.noarch", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2020-13434", }, { category: "external", summary: "RHBZ#1841223", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1841223", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2020-13434", url: "https://www.cve.org/CVERecord?id=CVE-2020-13434", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2020-13434", url: "https://nvd.nist.gov/vuln/detail/CVE-2020-13434", }, ], release_date: "2020-05-23T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2021-05-18T15:23:23+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258", product_ids: [ "CRB-8.4.0.GA:mingw-binutils-0:2.30-3.el8.src", "CRB-8.4.0.GA:mingw-binutils-debuginfo-0:2.30-3.el8.aarch64", "CRB-8.4.0.GA:mingw-binutils-debuginfo-0:2.30-3.el8.ppc64le", "CRB-8.4.0.GA:mingw-binutils-debuginfo-0:2.30-3.el8.s390x", "CRB-8.4.0.GA:mingw-binutils-debuginfo-0:2.30-3.el8.x86_64", "CRB-8.4.0.GA:mingw-binutils-debugsource-0:2.30-3.el8.aarch64", "CRB-8.4.0.GA:mingw-binutils-debugsource-0:2.30-3.el8.ppc64le", "CRB-8.4.0.GA:mingw-binutils-debugsource-0:2.30-3.el8.s390x", "CRB-8.4.0.GA:mingw-binutils-debugsource-0:2.30-3.el8.x86_64", "CRB-8.4.0.GA:mingw-binutils-generic-0:2.30-3.el8.aarch64", "CRB-8.4.0.GA:mingw-binutils-generic-0:2.30-3.el8.ppc64le", "CRB-8.4.0.GA:mingw-binutils-generic-0:2.30-3.el8.s390x", "CRB-8.4.0.GA:mingw-binutils-generic-0:2.30-3.el8.x86_64", "CRB-8.4.0.GA:mingw-binutils-generic-debuginfo-0:2.30-3.el8.aarch64", "CRB-8.4.0.GA:mingw-binutils-generic-debuginfo-0:2.30-3.el8.ppc64le", "CRB-8.4.0.GA:mingw-binutils-generic-debuginfo-0:2.30-3.el8.s390x", "CRB-8.4.0.GA:mingw-binutils-generic-debuginfo-0:2.30-3.el8.x86_64", "CRB-8.4.0.GA:mingw-bzip2-0:1.0.6-14.el8.src", "CRB-8.4.0.GA:mingw-filesystem-0:104-2.el8.src", "CRB-8.4.0.GA:mingw-filesystem-base-0:104-2.el8.noarch", "CRB-8.4.0.GA:mingw-sqlite-0:3.26.0.0-1.el8.src", "CRB-8.4.0.GA:mingw32-binutils-0:2.30-3.el8.aarch64", "CRB-8.4.0.GA:mingw32-binutils-0:2.30-3.el8.ppc64le", "CRB-8.4.0.GA:mingw32-binutils-0:2.30-3.el8.s390x", "CRB-8.4.0.GA:mingw32-binutils-0:2.30-3.el8.x86_64", "CRB-8.4.0.GA:mingw32-binutils-debuginfo-0:2.30-3.el8.aarch64", "CRB-8.4.0.GA:mingw32-binutils-debuginfo-0:2.30-3.el8.ppc64le", "CRB-8.4.0.GA:mingw32-binutils-debuginfo-0:2.30-3.el8.s390x", "CRB-8.4.0.GA:mingw32-binutils-debuginfo-0:2.30-3.el8.x86_64", "CRB-8.4.0.GA:mingw32-bzip2-0:1.0.6-14.el8.noarch", "CRB-8.4.0.GA:mingw32-bzip2-debuginfo-0:1.0.6-14.el8.noarch", "CRB-8.4.0.GA:mingw32-bzip2-static-0:1.0.6-14.el8.noarch", "CRB-8.4.0.GA:mingw32-filesystem-0:104-2.el8.noarch", "CRB-8.4.0.GA:mingw32-sqlite-0:3.26.0.0-1.el8.noarch", "CRB-8.4.0.GA:mingw32-sqlite-debuginfo-0:3.26.0.0-1.el8.noarch", "CRB-8.4.0.GA:mingw32-sqlite-static-0:3.26.0.0-1.el8.noarch", "CRB-8.4.0.GA:mingw64-binutils-0:2.30-3.el8.aarch64", "CRB-8.4.0.GA:mingw64-binutils-0:2.30-3.el8.ppc64le", "CRB-8.4.0.GA:mingw64-binutils-0:2.30-3.el8.s390x", "CRB-8.4.0.GA:mingw64-binutils-0:2.30-3.el8.x86_64", "CRB-8.4.0.GA:mingw64-binutils-debuginfo-0:2.30-3.el8.aarch64", "CRB-8.4.0.GA:mingw64-binutils-debuginfo-0:2.30-3.el8.ppc64le", "CRB-8.4.0.GA:mingw64-binutils-debuginfo-0:2.30-3.el8.s390x", "CRB-8.4.0.GA:mingw64-binutils-debuginfo-0:2.30-3.el8.x86_64", "CRB-8.4.0.GA:mingw64-bzip2-0:1.0.6-14.el8.noarch", "CRB-8.4.0.GA:mingw64-bzip2-debuginfo-0:1.0.6-14.el8.noarch", "CRB-8.4.0.GA:mingw64-bzip2-static-0:1.0.6-14.el8.noarch", "CRB-8.4.0.GA:mingw64-filesystem-0:104-2.el8.noarch", "CRB-8.4.0.GA:mingw64-sqlite-0:3.26.0.0-1.el8.noarch", "CRB-8.4.0.GA:mingw64-sqlite-debuginfo-0:3.26.0.0-1.el8.noarch", "CRB-8.4.0.GA:mingw64-sqlite-static-0:3.26.0.0-1.el8.noarch", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2021:1968", }, ], scores: [ { cvss_v3: { attackComplexity: "LOW", attackVector: "LOCAL", availabilityImpact: "HIGH", baseScore: 5.5, baseSeverity: "MEDIUM", confidentialityImpact: "NONE", integrityImpact: "NONE", privilegesRequired: "LOW", scope: "UNCHANGED", userInteraction: "NONE", vectorString: "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", version: "3.1", }, products: [ "CRB-8.4.0.GA:mingw-binutils-0:2.30-3.el8.src", "CRB-8.4.0.GA:mingw-binutils-debuginfo-0:2.30-3.el8.aarch64", "CRB-8.4.0.GA:mingw-binutils-debuginfo-0:2.30-3.el8.ppc64le", "CRB-8.4.0.GA:mingw-binutils-debuginfo-0:2.30-3.el8.s390x", "CRB-8.4.0.GA:mingw-binutils-debuginfo-0:2.30-3.el8.x86_64", "CRB-8.4.0.GA:mingw-binutils-debugsource-0:2.30-3.el8.aarch64", "CRB-8.4.0.GA:mingw-binutils-debugsource-0:2.30-3.el8.ppc64le", "CRB-8.4.0.GA:mingw-binutils-debugsource-0:2.30-3.el8.s390x", "CRB-8.4.0.GA:mingw-binutils-debugsource-0:2.30-3.el8.x86_64", "CRB-8.4.0.GA:mingw-binutils-generic-0:2.30-3.el8.aarch64", "CRB-8.4.0.GA:mingw-binutils-generic-0:2.30-3.el8.ppc64le", "CRB-8.4.0.GA:mingw-binutils-generic-0:2.30-3.el8.s390x", "CRB-8.4.0.GA:mingw-binutils-generic-0:2.30-3.el8.x86_64", "CRB-8.4.0.GA:mingw-binutils-generic-debuginfo-0:2.30-3.el8.aarch64", "CRB-8.4.0.GA:mingw-binutils-generic-debuginfo-0:2.30-3.el8.ppc64le", "CRB-8.4.0.GA:mingw-binutils-generic-debuginfo-0:2.30-3.el8.s390x", "CRB-8.4.0.GA:mingw-binutils-generic-debuginfo-0:2.30-3.el8.x86_64", "CRB-8.4.0.GA:mingw-bzip2-0:1.0.6-14.el8.src", "CRB-8.4.0.GA:mingw-filesystem-0:104-2.el8.src", "CRB-8.4.0.GA:mingw-filesystem-base-0:104-2.el8.noarch", "CRB-8.4.0.GA:mingw-sqlite-0:3.26.0.0-1.el8.src", "CRB-8.4.0.GA:mingw32-binutils-0:2.30-3.el8.aarch64", "CRB-8.4.0.GA:mingw32-binutils-0:2.30-3.el8.ppc64le", "CRB-8.4.0.GA:mingw32-binutils-0:2.30-3.el8.s390x", "CRB-8.4.0.GA:mingw32-binutils-0:2.30-3.el8.x86_64", "CRB-8.4.0.GA:mingw32-binutils-debuginfo-0:2.30-3.el8.aarch64", "CRB-8.4.0.GA:mingw32-binutils-debuginfo-0:2.30-3.el8.ppc64le", "CRB-8.4.0.GA:mingw32-binutils-debuginfo-0:2.30-3.el8.s390x", "CRB-8.4.0.GA:mingw32-binutils-debuginfo-0:2.30-3.el8.x86_64", "CRB-8.4.0.GA:mingw32-bzip2-0:1.0.6-14.el8.noarch", "CRB-8.4.0.GA:mingw32-bzip2-debuginfo-0:1.0.6-14.el8.noarch", "CRB-8.4.0.GA:mingw32-bzip2-static-0:1.0.6-14.el8.noarch", "CRB-8.4.0.GA:mingw32-filesystem-0:104-2.el8.noarch", "CRB-8.4.0.GA:mingw32-sqlite-0:3.26.0.0-1.el8.noarch", "CRB-8.4.0.GA:mingw32-sqlite-debuginfo-0:3.26.0.0-1.el8.noarch", "CRB-8.4.0.GA:mingw32-sqlite-static-0:3.26.0.0-1.el8.noarch", "CRB-8.4.0.GA:mingw64-binutils-0:2.30-3.el8.aarch64", "CRB-8.4.0.GA:mingw64-binutils-0:2.30-3.el8.ppc64le", "CRB-8.4.0.GA:mingw64-binutils-0:2.30-3.el8.s390x", "CRB-8.4.0.GA:mingw64-binutils-0:2.30-3.el8.x86_64", "CRB-8.4.0.GA:mingw64-binutils-debuginfo-0:2.30-3.el8.aarch64", "CRB-8.4.0.GA:mingw64-binutils-debuginfo-0:2.30-3.el8.ppc64le", "CRB-8.4.0.GA:mingw64-binutils-debuginfo-0:2.30-3.el8.s390x", "CRB-8.4.0.GA:mingw64-binutils-debuginfo-0:2.30-3.el8.x86_64", "CRB-8.4.0.GA:mingw64-bzip2-0:1.0.6-14.el8.noarch", "CRB-8.4.0.GA:mingw64-bzip2-debuginfo-0:1.0.6-14.el8.noarch", "CRB-8.4.0.GA:mingw64-bzip2-static-0:1.0.6-14.el8.noarch", "CRB-8.4.0.GA:mingw64-filesystem-0:104-2.el8.noarch", "CRB-8.4.0.GA:mingw64-sqlite-0:3.26.0.0-1.el8.noarch", "CRB-8.4.0.GA:mingw64-sqlite-debuginfo-0:3.26.0.0-1.el8.noarch", "CRB-8.4.0.GA:mingw64-sqlite-static-0:3.26.0.0-1.el8.noarch", ], }, ], threats: [ { category: "impact", details: "Moderate", }, ], title: "sqlite: integer overflow in sqlite3_str_vappendf function in printf.c", }, { cve: "CVE-2020-13630", cwe: { id: "CWE-416", name: "Use After Free", }, discovery_date: "2020-05-27T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "1841562", }, ], notes: [ { category: "description", text: "A use-after-free vulnerability was found in the SQLite FTS3 extension module in the way it implemented the snippet function. This flaw allows an attacker who can execute SQL statements to crash the application or potentially execute arbitrary code.", title: "Vulnerability description", }, { category: "summary", text: "sqlite: Use-after-free in fts3EvalNextRow in ext/fts3/fts3.c", title: "Vulnerability summary", }, { category: "other", text: "This flaw did not affect the versions of SQLite as shipped with Red Hat Enterprise Linux 7 as they did not include the vulnerable code, which was introduced in a later version of the package.", title: "Statement", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "CRB-8.4.0.GA:mingw-binutils-0:2.30-3.el8.src", "CRB-8.4.0.GA:mingw-binutils-debuginfo-0:2.30-3.el8.aarch64", "CRB-8.4.0.GA:mingw-binutils-debuginfo-0:2.30-3.el8.ppc64le", "CRB-8.4.0.GA:mingw-binutils-debuginfo-0:2.30-3.el8.s390x", "CRB-8.4.0.GA:mingw-binutils-debuginfo-0:2.30-3.el8.x86_64", "CRB-8.4.0.GA:mingw-binutils-debugsource-0:2.30-3.el8.aarch64", "CRB-8.4.0.GA:mingw-binutils-debugsource-0:2.30-3.el8.ppc64le", "CRB-8.4.0.GA:mingw-binutils-debugsource-0:2.30-3.el8.s390x", "CRB-8.4.0.GA:mingw-binutils-debugsource-0:2.30-3.el8.x86_64", "CRB-8.4.0.GA:mingw-binutils-generic-0:2.30-3.el8.aarch64", "CRB-8.4.0.GA:mingw-binutils-generic-0:2.30-3.el8.ppc64le", "CRB-8.4.0.GA:mingw-binutils-generic-0:2.30-3.el8.s390x", "CRB-8.4.0.GA:mingw-binutils-generic-0:2.30-3.el8.x86_64", "CRB-8.4.0.GA:mingw-binutils-generic-debuginfo-0:2.30-3.el8.aarch64", "CRB-8.4.0.GA:mingw-binutils-generic-debuginfo-0:2.30-3.el8.ppc64le", "CRB-8.4.0.GA:mingw-binutils-generic-debuginfo-0:2.30-3.el8.s390x", "CRB-8.4.0.GA:mingw-binutils-generic-debuginfo-0:2.30-3.el8.x86_64", "CRB-8.4.0.GA:mingw-bzip2-0:1.0.6-14.el8.src", "CRB-8.4.0.GA:mingw-filesystem-0:104-2.el8.src", "CRB-8.4.0.GA:mingw-filesystem-base-0:104-2.el8.noarch", "CRB-8.4.0.GA:mingw-sqlite-0:3.26.0.0-1.el8.src", "CRB-8.4.0.GA:mingw32-binutils-0:2.30-3.el8.aarch64", "CRB-8.4.0.GA:mingw32-binutils-0:2.30-3.el8.ppc64le", "CRB-8.4.0.GA:mingw32-binutils-0:2.30-3.el8.s390x", "CRB-8.4.0.GA:mingw32-binutils-0:2.30-3.el8.x86_64", "CRB-8.4.0.GA:mingw32-binutils-debuginfo-0:2.30-3.el8.aarch64", "CRB-8.4.0.GA:mingw32-binutils-debuginfo-0:2.30-3.el8.ppc64le", "CRB-8.4.0.GA:mingw32-binutils-debuginfo-0:2.30-3.el8.s390x", "CRB-8.4.0.GA:mingw32-binutils-debuginfo-0:2.30-3.el8.x86_64", "CRB-8.4.0.GA:mingw32-bzip2-0:1.0.6-14.el8.noarch", "CRB-8.4.0.GA:mingw32-bzip2-debuginfo-0:1.0.6-14.el8.noarch", "CRB-8.4.0.GA:mingw32-bzip2-static-0:1.0.6-14.el8.noarch", "CRB-8.4.0.GA:mingw32-filesystem-0:104-2.el8.noarch", "CRB-8.4.0.GA:mingw32-sqlite-0:3.26.0.0-1.el8.noarch", "CRB-8.4.0.GA:mingw32-sqlite-debuginfo-0:3.26.0.0-1.el8.noarch", "CRB-8.4.0.GA:mingw32-sqlite-static-0:3.26.0.0-1.el8.noarch", "CRB-8.4.0.GA:mingw64-binutils-0:2.30-3.el8.aarch64", "CRB-8.4.0.GA:mingw64-binutils-0:2.30-3.el8.ppc64le", "CRB-8.4.0.GA:mingw64-binutils-0:2.30-3.el8.s390x", "CRB-8.4.0.GA:mingw64-binutils-0:2.30-3.el8.x86_64", "CRB-8.4.0.GA:mingw64-binutils-debuginfo-0:2.30-3.el8.aarch64", "CRB-8.4.0.GA:mingw64-binutils-debuginfo-0:2.30-3.el8.ppc64le", "CRB-8.4.0.GA:mingw64-binutils-debuginfo-0:2.30-3.el8.s390x", "CRB-8.4.0.GA:mingw64-binutils-debuginfo-0:2.30-3.el8.x86_64", "CRB-8.4.0.GA:mingw64-bzip2-0:1.0.6-14.el8.noarch", "CRB-8.4.0.GA:mingw64-bzip2-debuginfo-0:1.0.6-14.el8.noarch", "CRB-8.4.0.GA:mingw64-bzip2-static-0:1.0.6-14.el8.noarch", "CRB-8.4.0.GA:mingw64-filesystem-0:104-2.el8.noarch", "CRB-8.4.0.GA:mingw64-sqlite-0:3.26.0.0-1.el8.noarch", "CRB-8.4.0.GA:mingw64-sqlite-debuginfo-0:3.26.0.0-1.el8.noarch", "CRB-8.4.0.GA:mingw64-sqlite-static-0:3.26.0.0-1.el8.noarch", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2020-13630", }, { category: "external", summary: "RHBZ#1841562", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1841562", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2020-13630", url: "https://www.cve.org/CVERecord?id=CVE-2020-13630", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2020-13630", url: "https://nvd.nist.gov/vuln/detail/CVE-2020-13630", }, ], release_date: "2020-05-16T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2021-05-18T15:23:23+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258", product_ids: [ "CRB-8.4.0.GA:mingw-binutils-0:2.30-3.el8.src", "CRB-8.4.0.GA:mingw-binutils-debuginfo-0:2.30-3.el8.aarch64", "CRB-8.4.0.GA:mingw-binutils-debuginfo-0:2.30-3.el8.ppc64le", "CRB-8.4.0.GA:mingw-binutils-debuginfo-0:2.30-3.el8.s390x", "CRB-8.4.0.GA:mingw-binutils-debuginfo-0:2.30-3.el8.x86_64", "CRB-8.4.0.GA:mingw-binutils-debugsource-0:2.30-3.el8.aarch64", "CRB-8.4.0.GA:mingw-binutils-debugsource-0:2.30-3.el8.ppc64le", "CRB-8.4.0.GA:mingw-binutils-debugsource-0:2.30-3.el8.s390x", "CRB-8.4.0.GA:mingw-binutils-debugsource-0:2.30-3.el8.x86_64", "CRB-8.4.0.GA:mingw-binutils-generic-0:2.30-3.el8.aarch64", "CRB-8.4.0.GA:mingw-binutils-generic-0:2.30-3.el8.ppc64le", "CRB-8.4.0.GA:mingw-binutils-generic-0:2.30-3.el8.s390x", "CRB-8.4.0.GA:mingw-binutils-generic-0:2.30-3.el8.x86_64", "CRB-8.4.0.GA:mingw-binutils-generic-debuginfo-0:2.30-3.el8.aarch64", "CRB-8.4.0.GA:mingw-binutils-generic-debuginfo-0:2.30-3.el8.ppc64le", "CRB-8.4.0.GA:mingw-binutils-generic-debuginfo-0:2.30-3.el8.s390x", "CRB-8.4.0.GA:mingw-binutils-generic-debuginfo-0:2.30-3.el8.x86_64", "CRB-8.4.0.GA:mingw-bzip2-0:1.0.6-14.el8.src", "CRB-8.4.0.GA:mingw-filesystem-0:104-2.el8.src", "CRB-8.4.0.GA:mingw-filesystem-base-0:104-2.el8.noarch", "CRB-8.4.0.GA:mingw-sqlite-0:3.26.0.0-1.el8.src", "CRB-8.4.0.GA:mingw32-binutils-0:2.30-3.el8.aarch64", "CRB-8.4.0.GA:mingw32-binutils-0:2.30-3.el8.ppc64le", "CRB-8.4.0.GA:mingw32-binutils-0:2.30-3.el8.s390x", "CRB-8.4.0.GA:mingw32-binutils-0:2.30-3.el8.x86_64", "CRB-8.4.0.GA:mingw32-binutils-debuginfo-0:2.30-3.el8.aarch64", "CRB-8.4.0.GA:mingw32-binutils-debuginfo-0:2.30-3.el8.ppc64le", "CRB-8.4.0.GA:mingw32-binutils-debuginfo-0:2.30-3.el8.s390x", "CRB-8.4.0.GA:mingw32-binutils-debuginfo-0:2.30-3.el8.x86_64", "CRB-8.4.0.GA:mingw32-bzip2-0:1.0.6-14.el8.noarch", "CRB-8.4.0.GA:mingw32-bzip2-debuginfo-0:1.0.6-14.el8.noarch", "CRB-8.4.0.GA:mingw32-bzip2-static-0:1.0.6-14.el8.noarch", "CRB-8.4.0.GA:mingw32-filesystem-0:104-2.el8.noarch", "CRB-8.4.0.GA:mingw32-sqlite-0:3.26.0.0-1.el8.noarch", "CRB-8.4.0.GA:mingw32-sqlite-debuginfo-0:3.26.0.0-1.el8.noarch", "CRB-8.4.0.GA:mingw32-sqlite-static-0:3.26.0.0-1.el8.noarch", "CRB-8.4.0.GA:mingw64-binutils-0:2.30-3.el8.aarch64", "CRB-8.4.0.GA:mingw64-binutils-0:2.30-3.el8.ppc64le", "CRB-8.4.0.GA:mingw64-binutils-0:2.30-3.el8.s390x", "CRB-8.4.0.GA:mingw64-binutils-0:2.30-3.el8.x86_64", "CRB-8.4.0.GA:mingw64-binutils-debuginfo-0:2.30-3.el8.aarch64", "CRB-8.4.0.GA:mingw64-binutils-debuginfo-0:2.30-3.el8.ppc64le", "CRB-8.4.0.GA:mingw64-binutils-debuginfo-0:2.30-3.el8.s390x", "CRB-8.4.0.GA:mingw64-binutils-debuginfo-0:2.30-3.el8.x86_64", "CRB-8.4.0.GA:mingw64-bzip2-0:1.0.6-14.el8.noarch", "CRB-8.4.0.GA:mingw64-bzip2-debuginfo-0:1.0.6-14.el8.noarch", "CRB-8.4.0.GA:mingw64-bzip2-static-0:1.0.6-14.el8.noarch", "CRB-8.4.0.GA:mingw64-filesystem-0:104-2.el8.noarch", "CRB-8.4.0.GA:mingw64-sqlite-0:3.26.0.0-1.el8.noarch", "CRB-8.4.0.GA:mingw64-sqlite-debuginfo-0:3.26.0.0-1.el8.noarch", "CRB-8.4.0.GA:mingw64-sqlite-static-0:3.26.0.0-1.el8.noarch", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2021:1968", }, ], scores: [ { cvss_v3: { attackComplexity: "HIGH", attackVector: "LOCAL", availabilityImpact: "HIGH", baseScore: 7, baseSeverity: "HIGH", confidentialityImpact: "HIGH", integrityImpact: "HIGH", privilegesRequired: "LOW", scope: "UNCHANGED", userInteraction: "NONE", vectorString: "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H", version: "3.1", }, products: [ "CRB-8.4.0.GA:mingw-binutils-0:2.30-3.el8.src", "CRB-8.4.0.GA:mingw-binutils-debuginfo-0:2.30-3.el8.aarch64", "CRB-8.4.0.GA:mingw-binutils-debuginfo-0:2.30-3.el8.ppc64le", "CRB-8.4.0.GA:mingw-binutils-debuginfo-0:2.30-3.el8.s390x", "CRB-8.4.0.GA:mingw-binutils-debuginfo-0:2.30-3.el8.x86_64", "CRB-8.4.0.GA:mingw-binutils-debugsource-0:2.30-3.el8.aarch64", "CRB-8.4.0.GA:mingw-binutils-debugsource-0:2.30-3.el8.ppc64le", "CRB-8.4.0.GA:mingw-binutils-debugsource-0:2.30-3.el8.s390x", "CRB-8.4.0.GA:mingw-binutils-debugsource-0:2.30-3.el8.x86_64", "CRB-8.4.0.GA:mingw-binutils-generic-0:2.30-3.el8.aarch64", "CRB-8.4.0.GA:mingw-binutils-generic-0:2.30-3.el8.ppc64le", "CRB-8.4.0.GA:mingw-binutils-generic-0:2.30-3.el8.s390x", "CRB-8.4.0.GA:mingw-binutils-generic-0:2.30-3.el8.x86_64", "CRB-8.4.0.GA:mingw-binutils-generic-debuginfo-0:2.30-3.el8.aarch64", "CRB-8.4.0.GA:mingw-binutils-generic-debuginfo-0:2.30-3.el8.ppc64le", "CRB-8.4.0.GA:mingw-binutils-generic-debuginfo-0:2.30-3.el8.s390x", "CRB-8.4.0.GA:mingw-binutils-generic-debuginfo-0:2.30-3.el8.x86_64", "CRB-8.4.0.GA:mingw-bzip2-0:1.0.6-14.el8.src", "CRB-8.4.0.GA:mingw-filesystem-0:104-2.el8.src", "CRB-8.4.0.GA:mingw-filesystem-base-0:104-2.el8.noarch", "CRB-8.4.0.GA:mingw-sqlite-0:3.26.0.0-1.el8.src", "CRB-8.4.0.GA:mingw32-binutils-0:2.30-3.el8.aarch64", "CRB-8.4.0.GA:mingw32-binutils-0:2.30-3.el8.ppc64le", "CRB-8.4.0.GA:mingw32-binutils-0:2.30-3.el8.s390x", "CRB-8.4.0.GA:mingw32-binutils-0:2.30-3.el8.x86_64", "CRB-8.4.0.GA:mingw32-binutils-debuginfo-0:2.30-3.el8.aarch64", "CRB-8.4.0.GA:mingw32-binutils-debuginfo-0:2.30-3.el8.ppc64le", "CRB-8.4.0.GA:mingw32-binutils-debuginfo-0:2.30-3.el8.s390x", "CRB-8.4.0.GA:mingw32-binutils-debuginfo-0:2.30-3.el8.x86_64", "CRB-8.4.0.GA:mingw32-bzip2-0:1.0.6-14.el8.noarch", "CRB-8.4.0.GA:mingw32-bzip2-debuginfo-0:1.0.6-14.el8.noarch", "CRB-8.4.0.GA:mingw32-bzip2-static-0:1.0.6-14.el8.noarch", "CRB-8.4.0.GA:mingw32-filesystem-0:104-2.el8.noarch", "CRB-8.4.0.GA:mingw32-sqlite-0:3.26.0.0-1.el8.noarch", "CRB-8.4.0.GA:mingw32-sqlite-debuginfo-0:3.26.0.0-1.el8.noarch", "CRB-8.4.0.GA:mingw32-sqlite-static-0:3.26.0.0-1.el8.noarch", "CRB-8.4.0.GA:mingw64-binutils-0:2.30-3.el8.aarch64", "CRB-8.4.0.GA:mingw64-binutils-0:2.30-3.el8.ppc64le", "CRB-8.4.0.GA:mingw64-binutils-0:2.30-3.el8.s390x", "CRB-8.4.0.GA:mingw64-binutils-0:2.30-3.el8.x86_64", "CRB-8.4.0.GA:mingw64-binutils-debuginfo-0:2.30-3.el8.aarch64", "CRB-8.4.0.GA:mingw64-binutils-debuginfo-0:2.30-3.el8.ppc64le", "CRB-8.4.0.GA:mingw64-binutils-debuginfo-0:2.30-3.el8.s390x", "CRB-8.4.0.GA:mingw64-binutils-debuginfo-0:2.30-3.el8.x86_64", "CRB-8.4.0.GA:mingw64-bzip2-0:1.0.6-14.el8.noarch", "CRB-8.4.0.GA:mingw64-bzip2-debuginfo-0:1.0.6-14.el8.noarch", "CRB-8.4.0.GA:mingw64-bzip2-static-0:1.0.6-14.el8.noarch", "CRB-8.4.0.GA:mingw64-filesystem-0:104-2.el8.noarch", "CRB-8.4.0.GA:mingw64-sqlite-0:3.26.0.0-1.el8.noarch", "CRB-8.4.0.GA:mingw64-sqlite-debuginfo-0:3.26.0.0-1.el8.noarch", "CRB-8.4.0.GA:mingw64-sqlite-static-0:3.26.0.0-1.el8.noarch", ], }, ], threats: [ { category: "impact", details: "Moderate", }, ], title: "sqlite: Use-after-free in fts3EvalNextRow in ext/fts3/fts3.c", }, { cve: "CVE-2020-13631", cwe: { id: "CWE-20", name: "Improper Input Validation", }, discovery_date: "2020-05-27T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "1841568", }, ], notes: [ { category: "description", text: "A flaw was found in the virtual table implementation of SQLite. This flaw allows an attacker who can execute SQL statements to rename a virtual table to the name of one of its shadow tables, leading to potential data corruption.", title: "Vulnerability description", }, { category: "summary", text: "sqlite: Virtual table can be renamed into the name of one of its shadow tables", title: "Vulnerability summary", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "CRB-8.4.0.GA:mingw-binutils-0:2.30-3.el8.src", "CRB-8.4.0.GA:mingw-binutils-debuginfo-0:2.30-3.el8.aarch64", "CRB-8.4.0.GA:mingw-binutils-debuginfo-0:2.30-3.el8.ppc64le", "CRB-8.4.0.GA:mingw-binutils-debuginfo-0:2.30-3.el8.s390x", "CRB-8.4.0.GA:mingw-binutils-debuginfo-0:2.30-3.el8.x86_64", "CRB-8.4.0.GA:mingw-binutils-debugsource-0:2.30-3.el8.aarch64", "CRB-8.4.0.GA:mingw-binutils-debugsource-0:2.30-3.el8.ppc64le", "CRB-8.4.0.GA:mingw-binutils-debugsource-0:2.30-3.el8.s390x", "CRB-8.4.0.GA:mingw-binutils-debugsource-0:2.30-3.el8.x86_64", "CRB-8.4.0.GA:mingw-binutils-generic-0:2.30-3.el8.aarch64", "CRB-8.4.0.GA:mingw-binutils-generic-0:2.30-3.el8.ppc64le", "CRB-8.4.0.GA:mingw-binutils-generic-0:2.30-3.el8.s390x", "CRB-8.4.0.GA:mingw-binutils-generic-0:2.30-3.el8.x86_64", "CRB-8.4.0.GA:mingw-binutils-generic-debuginfo-0:2.30-3.el8.aarch64", "CRB-8.4.0.GA:mingw-binutils-generic-debuginfo-0:2.30-3.el8.ppc64le", "CRB-8.4.0.GA:mingw-binutils-generic-debuginfo-0:2.30-3.el8.s390x", "CRB-8.4.0.GA:mingw-binutils-generic-debuginfo-0:2.30-3.el8.x86_64", "CRB-8.4.0.GA:mingw-bzip2-0:1.0.6-14.el8.src", "CRB-8.4.0.GA:mingw-filesystem-0:104-2.el8.src", "CRB-8.4.0.GA:mingw-filesystem-base-0:104-2.el8.noarch", "CRB-8.4.0.GA:mingw-sqlite-0:3.26.0.0-1.el8.src", "CRB-8.4.0.GA:mingw32-binutils-0:2.30-3.el8.aarch64", "CRB-8.4.0.GA:mingw32-binutils-0:2.30-3.el8.ppc64le", "CRB-8.4.0.GA:mingw32-binutils-0:2.30-3.el8.s390x", "CRB-8.4.0.GA:mingw32-binutils-0:2.30-3.el8.x86_64", "CRB-8.4.0.GA:mingw32-binutils-debuginfo-0:2.30-3.el8.aarch64", "CRB-8.4.0.GA:mingw32-binutils-debuginfo-0:2.30-3.el8.ppc64le", "CRB-8.4.0.GA:mingw32-binutils-debuginfo-0:2.30-3.el8.s390x", "CRB-8.4.0.GA:mingw32-binutils-debuginfo-0:2.30-3.el8.x86_64", "CRB-8.4.0.GA:mingw32-bzip2-0:1.0.6-14.el8.noarch", "CRB-8.4.0.GA:mingw32-bzip2-debuginfo-0:1.0.6-14.el8.noarch", "CRB-8.4.0.GA:mingw32-bzip2-static-0:1.0.6-14.el8.noarch", "CRB-8.4.0.GA:mingw32-filesystem-0:104-2.el8.noarch", "CRB-8.4.0.GA:mingw32-sqlite-0:3.26.0.0-1.el8.noarch", "CRB-8.4.0.GA:mingw32-sqlite-debuginfo-0:3.26.0.0-1.el8.noarch", "CRB-8.4.0.GA:mingw32-sqlite-static-0:3.26.0.0-1.el8.noarch", "CRB-8.4.0.GA:mingw64-binutils-0:2.30-3.el8.aarch64", "CRB-8.4.0.GA:mingw64-binutils-0:2.30-3.el8.ppc64le", "CRB-8.4.0.GA:mingw64-binutils-0:2.30-3.el8.s390x", "CRB-8.4.0.GA:mingw64-binutils-0:2.30-3.el8.x86_64", "CRB-8.4.0.GA:mingw64-binutils-debuginfo-0:2.30-3.el8.aarch64", "CRB-8.4.0.GA:mingw64-binutils-debuginfo-0:2.30-3.el8.ppc64le", "CRB-8.4.0.GA:mingw64-binutils-debuginfo-0:2.30-3.el8.s390x", "CRB-8.4.0.GA:mingw64-binutils-debuginfo-0:2.30-3.el8.x86_64", "CRB-8.4.0.GA:mingw64-bzip2-0:1.0.6-14.el8.noarch", "CRB-8.4.0.GA:mingw64-bzip2-debuginfo-0:1.0.6-14.el8.noarch", "CRB-8.4.0.GA:mingw64-bzip2-static-0:1.0.6-14.el8.noarch", "CRB-8.4.0.GA:mingw64-filesystem-0:104-2.el8.noarch", "CRB-8.4.0.GA:mingw64-sqlite-0:3.26.0.0-1.el8.noarch", "CRB-8.4.0.GA:mingw64-sqlite-debuginfo-0:3.26.0.0-1.el8.noarch", "CRB-8.4.0.GA:mingw64-sqlite-static-0:3.26.0.0-1.el8.noarch", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2020-13631", }, { category: "external", summary: "RHBZ#1841568", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1841568", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2020-13631", url: "https://www.cve.org/CVERecord?id=CVE-2020-13631", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2020-13631", url: "https://nvd.nist.gov/vuln/detail/CVE-2020-13631", }, ], release_date: "2020-05-14T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2021-05-18T15:23:23+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258", product_ids: [ "CRB-8.4.0.GA:mingw-binutils-0:2.30-3.el8.src", "CRB-8.4.0.GA:mingw-binutils-debuginfo-0:2.30-3.el8.aarch64", "CRB-8.4.0.GA:mingw-binutils-debuginfo-0:2.30-3.el8.ppc64le", "CRB-8.4.0.GA:mingw-binutils-debuginfo-0:2.30-3.el8.s390x", "CRB-8.4.0.GA:mingw-binutils-debuginfo-0:2.30-3.el8.x86_64", "CRB-8.4.0.GA:mingw-binutils-debugsource-0:2.30-3.el8.aarch64", "CRB-8.4.0.GA:mingw-binutils-debugsource-0:2.30-3.el8.ppc64le", "CRB-8.4.0.GA:mingw-binutils-debugsource-0:2.30-3.el8.s390x", "CRB-8.4.0.GA:mingw-binutils-debugsource-0:2.30-3.el8.x86_64", "CRB-8.4.0.GA:mingw-binutils-generic-0:2.30-3.el8.aarch64", "CRB-8.4.0.GA:mingw-binutils-generic-0:2.30-3.el8.ppc64le", "CRB-8.4.0.GA:mingw-binutils-generic-0:2.30-3.el8.s390x", "CRB-8.4.0.GA:mingw-binutils-generic-0:2.30-3.el8.x86_64", "CRB-8.4.0.GA:mingw-binutils-generic-debuginfo-0:2.30-3.el8.aarch64", "CRB-8.4.0.GA:mingw-binutils-generic-debuginfo-0:2.30-3.el8.ppc64le", "CRB-8.4.0.GA:mingw-binutils-generic-debuginfo-0:2.30-3.el8.s390x", "CRB-8.4.0.GA:mingw-binutils-generic-debuginfo-0:2.30-3.el8.x86_64", "CRB-8.4.0.GA:mingw-bzip2-0:1.0.6-14.el8.src", "CRB-8.4.0.GA:mingw-filesystem-0:104-2.el8.src", "CRB-8.4.0.GA:mingw-filesystem-base-0:104-2.el8.noarch", "CRB-8.4.0.GA:mingw-sqlite-0:3.26.0.0-1.el8.src", "CRB-8.4.0.GA:mingw32-binutils-0:2.30-3.el8.aarch64", "CRB-8.4.0.GA:mingw32-binutils-0:2.30-3.el8.ppc64le", "CRB-8.4.0.GA:mingw32-binutils-0:2.30-3.el8.s390x", "CRB-8.4.0.GA:mingw32-binutils-0:2.30-3.el8.x86_64", "CRB-8.4.0.GA:mingw32-binutils-debuginfo-0:2.30-3.el8.aarch64", "CRB-8.4.0.GA:mingw32-binutils-debuginfo-0:2.30-3.el8.ppc64le", "CRB-8.4.0.GA:mingw32-binutils-debuginfo-0:2.30-3.el8.s390x", "CRB-8.4.0.GA:mingw32-binutils-debuginfo-0:2.30-3.el8.x86_64", "CRB-8.4.0.GA:mingw32-bzip2-0:1.0.6-14.el8.noarch", "CRB-8.4.0.GA:mingw32-bzip2-debuginfo-0:1.0.6-14.el8.noarch", "CRB-8.4.0.GA:mingw32-bzip2-static-0:1.0.6-14.el8.noarch", "CRB-8.4.0.GA:mingw32-filesystem-0:104-2.el8.noarch", "CRB-8.4.0.GA:mingw32-sqlite-0:3.26.0.0-1.el8.noarch", "CRB-8.4.0.GA:mingw32-sqlite-debuginfo-0:3.26.0.0-1.el8.noarch", "CRB-8.4.0.GA:mingw32-sqlite-static-0:3.26.0.0-1.el8.noarch", "CRB-8.4.0.GA:mingw64-binutils-0:2.30-3.el8.aarch64", "CRB-8.4.0.GA:mingw64-binutils-0:2.30-3.el8.ppc64le", "CRB-8.4.0.GA:mingw64-binutils-0:2.30-3.el8.s390x", "CRB-8.4.0.GA:mingw64-binutils-0:2.30-3.el8.x86_64", "CRB-8.4.0.GA:mingw64-binutils-debuginfo-0:2.30-3.el8.aarch64", "CRB-8.4.0.GA:mingw64-binutils-debuginfo-0:2.30-3.el8.ppc64le", "CRB-8.4.0.GA:mingw64-binutils-debuginfo-0:2.30-3.el8.s390x", "CRB-8.4.0.GA:mingw64-binutils-debuginfo-0:2.30-3.el8.x86_64", "CRB-8.4.0.GA:mingw64-bzip2-0:1.0.6-14.el8.noarch", "CRB-8.4.0.GA:mingw64-bzip2-debuginfo-0:1.0.6-14.el8.noarch", "CRB-8.4.0.GA:mingw64-bzip2-static-0:1.0.6-14.el8.noarch", "CRB-8.4.0.GA:mingw64-filesystem-0:104-2.el8.noarch", "CRB-8.4.0.GA:mingw64-sqlite-0:3.26.0.0-1.el8.noarch", "CRB-8.4.0.GA:mingw64-sqlite-debuginfo-0:3.26.0.0-1.el8.noarch", "CRB-8.4.0.GA:mingw64-sqlite-static-0:3.26.0.0-1.el8.noarch", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2021:1968", }, ], scores: [ { cvss_v3: { attackComplexity: "LOW", attackVector: "LOCAL", availabilityImpact: "NONE", baseScore: 5.5, baseSeverity: "MEDIUM", confidentialityImpact: "NONE", integrityImpact: "HIGH", privilegesRequired: "LOW", scope: "UNCHANGED", userInteraction: "NONE", vectorString: "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N", version: "3.1", }, products: [ "CRB-8.4.0.GA:mingw-binutils-0:2.30-3.el8.src", "CRB-8.4.0.GA:mingw-binutils-debuginfo-0:2.30-3.el8.aarch64", "CRB-8.4.0.GA:mingw-binutils-debuginfo-0:2.30-3.el8.ppc64le", "CRB-8.4.0.GA:mingw-binutils-debuginfo-0:2.30-3.el8.s390x", "CRB-8.4.0.GA:mingw-binutils-debuginfo-0:2.30-3.el8.x86_64", "CRB-8.4.0.GA:mingw-binutils-debugsource-0:2.30-3.el8.aarch64", "CRB-8.4.0.GA:mingw-binutils-debugsource-0:2.30-3.el8.ppc64le", "CRB-8.4.0.GA:mingw-binutils-debugsource-0:2.30-3.el8.s390x", "CRB-8.4.0.GA:mingw-binutils-debugsource-0:2.30-3.el8.x86_64", "CRB-8.4.0.GA:mingw-binutils-generic-0:2.30-3.el8.aarch64", "CRB-8.4.0.GA:mingw-binutils-generic-0:2.30-3.el8.ppc64le", "CRB-8.4.0.GA:mingw-binutils-generic-0:2.30-3.el8.s390x", "CRB-8.4.0.GA:mingw-binutils-generic-0:2.30-3.el8.x86_64", "CRB-8.4.0.GA:mingw-binutils-generic-debuginfo-0:2.30-3.el8.aarch64", "CRB-8.4.0.GA:mingw-binutils-generic-debuginfo-0:2.30-3.el8.ppc64le", "CRB-8.4.0.GA:mingw-binutils-generic-debuginfo-0:2.30-3.el8.s390x", "CRB-8.4.0.GA:mingw-binutils-generic-debuginfo-0:2.30-3.el8.x86_64", "CRB-8.4.0.GA:mingw-bzip2-0:1.0.6-14.el8.src", "CRB-8.4.0.GA:mingw-filesystem-0:104-2.el8.src", "CRB-8.4.0.GA:mingw-filesystem-base-0:104-2.el8.noarch", "CRB-8.4.0.GA:mingw-sqlite-0:3.26.0.0-1.el8.src", "CRB-8.4.0.GA:mingw32-binutils-0:2.30-3.el8.aarch64", "CRB-8.4.0.GA:mingw32-binutils-0:2.30-3.el8.ppc64le", "CRB-8.4.0.GA:mingw32-binutils-0:2.30-3.el8.s390x", "CRB-8.4.0.GA:mingw32-binutils-0:2.30-3.el8.x86_64", "CRB-8.4.0.GA:mingw32-binutils-debuginfo-0:2.30-3.el8.aarch64", "CRB-8.4.0.GA:mingw32-binutils-debuginfo-0:2.30-3.el8.ppc64le", "CRB-8.4.0.GA:mingw32-binutils-debuginfo-0:2.30-3.el8.s390x", "CRB-8.4.0.GA:mingw32-binutils-debuginfo-0:2.30-3.el8.x86_64", "CRB-8.4.0.GA:mingw32-bzip2-0:1.0.6-14.el8.noarch", "CRB-8.4.0.GA:mingw32-bzip2-debuginfo-0:1.0.6-14.el8.noarch", "CRB-8.4.0.GA:mingw32-bzip2-static-0:1.0.6-14.el8.noarch", "CRB-8.4.0.GA:mingw32-filesystem-0:104-2.el8.noarch", "CRB-8.4.0.GA:mingw32-sqlite-0:3.26.0.0-1.el8.noarch", "CRB-8.4.0.GA:mingw32-sqlite-debuginfo-0:3.26.0.0-1.el8.noarch", "CRB-8.4.0.GA:mingw32-sqlite-static-0:3.26.0.0-1.el8.noarch", "CRB-8.4.0.GA:mingw64-binutils-0:2.30-3.el8.aarch64", "CRB-8.4.0.GA:mingw64-binutils-0:2.30-3.el8.ppc64le", "CRB-8.4.0.GA:mingw64-binutils-0:2.30-3.el8.s390x", "CRB-8.4.0.GA:mingw64-binutils-0:2.30-3.el8.x86_64", "CRB-8.4.0.GA:mingw64-binutils-debuginfo-0:2.30-3.el8.aarch64", "CRB-8.4.0.GA:mingw64-binutils-debuginfo-0:2.30-3.el8.ppc64le", "CRB-8.4.0.GA:mingw64-binutils-debuginfo-0:2.30-3.el8.s390x", "CRB-8.4.0.GA:mingw64-binutils-debuginfo-0:2.30-3.el8.x86_64", "CRB-8.4.0.GA:mingw64-bzip2-0:1.0.6-14.el8.noarch", "CRB-8.4.0.GA:mingw64-bzip2-debuginfo-0:1.0.6-14.el8.noarch", "CRB-8.4.0.GA:mingw64-bzip2-static-0:1.0.6-14.el8.noarch", "CRB-8.4.0.GA:mingw64-filesystem-0:104-2.el8.noarch", "CRB-8.4.0.GA:mingw64-sqlite-0:3.26.0.0-1.el8.noarch", "CRB-8.4.0.GA:mingw64-sqlite-debuginfo-0:3.26.0.0-1.el8.noarch", "CRB-8.4.0.GA:mingw64-sqlite-static-0:3.26.0.0-1.el8.noarch", ], }, ], threats: [ { category: "impact", details: "Moderate", }, ], title: "sqlite: Virtual table can be renamed into the name of one of its shadow tables", }, { cve: "CVE-2020-13632", cwe: { id: "CWE-476", name: "NULL Pointer Dereference", }, discovery_date: "2020-05-27T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "1841574", }, ], notes: [ { category: "description", text: "A NULL pointer dereference flaw was found in the matchinfo auxiliary function of the SQLite FTS3 extension module. This flaw allows an attacker who can execute SQL statements to crash the application, resulting in a denial of service.", title: "Vulnerability description", }, { category: "summary", text: "sqlite: NULL pointer dereference in ext/fts3/fts3_snippet.c via a crafted matchinfo() query", title: "Vulnerability summary", }, { category: "other", text: "This flaw did not affect the versions of SQLite as shipped with Red Hat Enterprise Linux 7 as they did not include the vulnerable code, which was introduced in a later version of the package.", title: "Statement", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "CRB-8.4.0.GA:mingw-binutils-0:2.30-3.el8.src", "CRB-8.4.0.GA:mingw-binutils-debuginfo-0:2.30-3.el8.aarch64", "CRB-8.4.0.GA:mingw-binutils-debuginfo-0:2.30-3.el8.ppc64le", "CRB-8.4.0.GA:mingw-binutils-debuginfo-0:2.30-3.el8.s390x", "CRB-8.4.0.GA:mingw-binutils-debuginfo-0:2.30-3.el8.x86_64", "CRB-8.4.0.GA:mingw-binutils-debugsource-0:2.30-3.el8.aarch64", "CRB-8.4.0.GA:mingw-binutils-debugsource-0:2.30-3.el8.ppc64le", "CRB-8.4.0.GA:mingw-binutils-debugsource-0:2.30-3.el8.s390x", "CRB-8.4.0.GA:mingw-binutils-debugsource-0:2.30-3.el8.x86_64", "CRB-8.4.0.GA:mingw-binutils-generic-0:2.30-3.el8.aarch64", "CRB-8.4.0.GA:mingw-binutils-generic-0:2.30-3.el8.ppc64le", "CRB-8.4.0.GA:mingw-binutils-generic-0:2.30-3.el8.s390x", "CRB-8.4.0.GA:mingw-binutils-generic-0:2.30-3.el8.x86_64", "CRB-8.4.0.GA:mingw-binutils-generic-debuginfo-0:2.30-3.el8.aarch64", "CRB-8.4.0.GA:mingw-binutils-generic-debuginfo-0:2.30-3.el8.ppc64le", "CRB-8.4.0.GA:mingw-binutils-generic-debuginfo-0:2.30-3.el8.s390x", "CRB-8.4.0.GA:mingw-binutils-generic-debuginfo-0:2.30-3.el8.x86_64", "CRB-8.4.0.GA:mingw-bzip2-0:1.0.6-14.el8.src", "CRB-8.4.0.GA:mingw-filesystem-0:104-2.el8.src", "CRB-8.4.0.GA:mingw-filesystem-base-0:104-2.el8.noarch", "CRB-8.4.0.GA:mingw-sqlite-0:3.26.0.0-1.el8.src", "CRB-8.4.0.GA:mingw32-binutils-0:2.30-3.el8.aarch64", "CRB-8.4.0.GA:mingw32-binutils-0:2.30-3.el8.ppc64le", "CRB-8.4.0.GA:mingw32-binutils-0:2.30-3.el8.s390x", "CRB-8.4.0.GA:mingw32-binutils-0:2.30-3.el8.x86_64", "CRB-8.4.0.GA:mingw32-binutils-debuginfo-0:2.30-3.el8.aarch64", "CRB-8.4.0.GA:mingw32-binutils-debuginfo-0:2.30-3.el8.ppc64le", "CRB-8.4.0.GA:mingw32-binutils-debuginfo-0:2.30-3.el8.s390x", "CRB-8.4.0.GA:mingw32-binutils-debuginfo-0:2.30-3.el8.x86_64", "CRB-8.4.0.GA:mingw32-bzip2-0:1.0.6-14.el8.noarch", "CRB-8.4.0.GA:mingw32-bzip2-debuginfo-0:1.0.6-14.el8.noarch", "CRB-8.4.0.GA:mingw32-bzip2-static-0:1.0.6-14.el8.noarch", "CRB-8.4.0.GA:mingw32-filesystem-0:104-2.el8.noarch", "CRB-8.4.0.GA:mingw32-sqlite-0:3.26.0.0-1.el8.noarch", "CRB-8.4.0.GA:mingw32-sqlite-debuginfo-0:3.26.0.0-1.el8.noarch", "CRB-8.4.0.GA:mingw32-sqlite-static-0:3.26.0.0-1.el8.noarch", "CRB-8.4.0.GA:mingw64-binutils-0:2.30-3.el8.aarch64", "CRB-8.4.0.GA:mingw64-binutils-0:2.30-3.el8.ppc64le", "CRB-8.4.0.GA:mingw64-binutils-0:2.30-3.el8.s390x", "CRB-8.4.0.GA:mingw64-binutils-0:2.30-3.el8.x86_64", "CRB-8.4.0.GA:mingw64-binutils-debuginfo-0:2.30-3.el8.aarch64", "CRB-8.4.0.GA:mingw64-binutils-debuginfo-0:2.30-3.el8.ppc64le", "CRB-8.4.0.GA:mingw64-binutils-debuginfo-0:2.30-3.el8.s390x", "CRB-8.4.0.GA:mingw64-binutils-debuginfo-0:2.30-3.el8.x86_64", "CRB-8.4.0.GA:mingw64-bzip2-0:1.0.6-14.el8.noarch", "CRB-8.4.0.GA:mingw64-bzip2-debuginfo-0:1.0.6-14.el8.noarch", "CRB-8.4.0.GA:mingw64-bzip2-static-0:1.0.6-14.el8.noarch", "CRB-8.4.0.GA:mingw64-filesystem-0:104-2.el8.noarch", "CRB-8.4.0.GA:mingw64-sqlite-0:3.26.0.0-1.el8.noarch", "CRB-8.4.0.GA:mingw64-sqlite-debuginfo-0:3.26.0.0-1.el8.noarch", "CRB-8.4.0.GA:mingw64-sqlite-static-0:3.26.0.0-1.el8.noarch", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2020-13632", }, { category: "external", summary: "RHBZ#1841574", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1841574", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2020-13632", url: "https://www.cve.org/CVERecord?id=CVE-2020-13632", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2020-13632", url: "https://nvd.nist.gov/vuln/detail/CVE-2020-13632", }, ], release_date: "2020-05-14T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2021-05-18T15:23:23+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258", product_ids: [ "CRB-8.4.0.GA:mingw-binutils-0:2.30-3.el8.src", "CRB-8.4.0.GA:mingw-binutils-debuginfo-0:2.30-3.el8.aarch64", "CRB-8.4.0.GA:mingw-binutils-debuginfo-0:2.30-3.el8.ppc64le", "CRB-8.4.0.GA:mingw-binutils-debuginfo-0:2.30-3.el8.s390x", "CRB-8.4.0.GA:mingw-binutils-debuginfo-0:2.30-3.el8.x86_64", "CRB-8.4.0.GA:mingw-binutils-debugsource-0:2.30-3.el8.aarch64", "CRB-8.4.0.GA:mingw-binutils-debugsource-0:2.30-3.el8.ppc64le", "CRB-8.4.0.GA:mingw-binutils-debugsource-0:2.30-3.el8.s390x", "CRB-8.4.0.GA:mingw-binutils-debugsource-0:2.30-3.el8.x86_64", "CRB-8.4.0.GA:mingw-binutils-generic-0:2.30-3.el8.aarch64", "CRB-8.4.0.GA:mingw-binutils-generic-0:2.30-3.el8.ppc64le", "CRB-8.4.0.GA:mingw-binutils-generic-0:2.30-3.el8.s390x", "CRB-8.4.0.GA:mingw-binutils-generic-0:2.30-3.el8.x86_64", "CRB-8.4.0.GA:mingw-binutils-generic-debuginfo-0:2.30-3.el8.aarch64", "CRB-8.4.0.GA:mingw-binutils-generic-debuginfo-0:2.30-3.el8.ppc64le", "CRB-8.4.0.GA:mingw-binutils-generic-debuginfo-0:2.30-3.el8.s390x", "CRB-8.4.0.GA:mingw-binutils-generic-debuginfo-0:2.30-3.el8.x86_64", "CRB-8.4.0.GA:mingw-bzip2-0:1.0.6-14.el8.src", "CRB-8.4.0.GA:mingw-filesystem-0:104-2.el8.src", "CRB-8.4.0.GA:mingw-filesystem-base-0:104-2.el8.noarch", "CRB-8.4.0.GA:mingw-sqlite-0:3.26.0.0-1.el8.src", "CRB-8.4.0.GA:mingw32-binutils-0:2.30-3.el8.aarch64", "CRB-8.4.0.GA:mingw32-binutils-0:2.30-3.el8.ppc64le", "CRB-8.4.0.GA:mingw32-binutils-0:2.30-3.el8.s390x", "CRB-8.4.0.GA:mingw32-binutils-0:2.30-3.el8.x86_64", "CRB-8.4.0.GA:mingw32-binutils-debuginfo-0:2.30-3.el8.aarch64", "CRB-8.4.0.GA:mingw32-binutils-debuginfo-0:2.30-3.el8.ppc64le", "CRB-8.4.0.GA:mingw32-binutils-debuginfo-0:2.30-3.el8.s390x", "CRB-8.4.0.GA:mingw32-binutils-debuginfo-0:2.30-3.el8.x86_64", "CRB-8.4.0.GA:mingw32-bzip2-0:1.0.6-14.el8.noarch", "CRB-8.4.0.GA:mingw32-bzip2-debuginfo-0:1.0.6-14.el8.noarch", "CRB-8.4.0.GA:mingw32-bzip2-static-0:1.0.6-14.el8.noarch", "CRB-8.4.0.GA:mingw32-filesystem-0:104-2.el8.noarch", "CRB-8.4.0.GA:mingw32-sqlite-0:3.26.0.0-1.el8.noarch", "CRB-8.4.0.GA:mingw32-sqlite-debuginfo-0:3.26.0.0-1.el8.noarch", "CRB-8.4.0.GA:mingw32-sqlite-static-0:3.26.0.0-1.el8.noarch", "CRB-8.4.0.GA:mingw64-binutils-0:2.30-3.el8.aarch64", "CRB-8.4.0.GA:mingw64-binutils-0:2.30-3.el8.ppc64le", "CRB-8.4.0.GA:mingw64-binutils-0:2.30-3.el8.s390x", "CRB-8.4.0.GA:mingw64-binutils-0:2.30-3.el8.x86_64", "CRB-8.4.0.GA:mingw64-binutils-debuginfo-0:2.30-3.el8.aarch64", "CRB-8.4.0.GA:mingw64-binutils-debuginfo-0:2.30-3.el8.ppc64le", "CRB-8.4.0.GA:mingw64-binutils-debuginfo-0:2.30-3.el8.s390x", "CRB-8.4.0.GA:mingw64-binutils-debuginfo-0:2.30-3.el8.x86_64", "CRB-8.4.0.GA:mingw64-bzip2-0:1.0.6-14.el8.noarch", "CRB-8.4.0.GA:mingw64-bzip2-debuginfo-0:1.0.6-14.el8.noarch", "CRB-8.4.0.GA:mingw64-bzip2-static-0:1.0.6-14.el8.noarch", "CRB-8.4.0.GA:mingw64-filesystem-0:104-2.el8.noarch", "CRB-8.4.0.GA:mingw64-sqlite-0:3.26.0.0-1.el8.noarch", "CRB-8.4.0.GA:mingw64-sqlite-debuginfo-0:3.26.0.0-1.el8.noarch", "CRB-8.4.0.GA:mingw64-sqlite-static-0:3.26.0.0-1.el8.noarch", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2021:1968", }, ], scores: [ { cvss_v3: { attackComplexity: "LOW", attackVector: "LOCAL", availabilityImpact: "HIGH", baseScore: 5.5, baseSeverity: "MEDIUM", confidentialityImpact: "NONE", integrityImpact: "NONE", privilegesRequired: "LOW", scope: "UNCHANGED", userInteraction: "NONE", vectorString: "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", version: "3.1", }, products: [ "CRB-8.4.0.GA:mingw-binutils-0:2.30-3.el8.src", "CRB-8.4.0.GA:mingw-binutils-debuginfo-0:2.30-3.el8.aarch64", "CRB-8.4.0.GA:mingw-binutils-debuginfo-0:2.30-3.el8.ppc64le", "CRB-8.4.0.GA:mingw-binutils-debuginfo-0:2.30-3.el8.s390x", "CRB-8.4.0.GA:mingw-binutils-debuginfo-0:2.30-3.el8.x86_64", "CRB-8.4.0.GA:mingw-binutils-debugsource-0:2.30-3.el8.aarch64", "CRB-8.4.0.GA:mingw-binutils-debugsource-0:2.30-3.el8.ppc64le", "CRB-8.4.0.GA:mingw-binutils-debugsource-0:2.30-3.el8.s390x", "CRB-8.4.0.GA:mingw-binutils-debugsource-0:2.30-3.el8.x86_64", "CRB-8.4.0.GA:mingw-binutils-generic-0:2.30-3.el8.aarch64", "CRB-8.4.0.GA:mingw-binutils-generic-0:2.30-3.el8.ppc64le", "CRB-8.4.0.GA:mingw-binutils-generic-0:2.30-3.el8.s390x", "CRB-8.4.0.GA:mingw-binutils-generic-0:2.30-3.el8.x86_64", "CRB-8.4.0.GA:mingw-binutils-generic-debuginfo-0:2.30-3.el8.aarch64", "CRB-8.4.0.GA:mingw-binutils-generic-debuginfo-0:2.30-3.el8.ppc64le", "CRB-8.4.0.GA:mingw-binutils-generic-debuginfo-0:2.30-3.el8.s390x", "CRB-8.4.0.GA:mingw-binutils-generic-debuginfo-0:2.30-3.el8.x86_64", "CRB-8.4.0.GA:mingw-bzip2-0:1.0.6-14.el8.src", "CRB-8.4.0.GA:mingw-filesystem-0:104-2.el8.src", "CRB-8.4.0.GA:mingw-filesystem-base-0:104-2.el8.noarch", "CRB-8.4.0.GA:mingw-sqlite-0:3.26.0.0-1.el8.src", "CRB-8.4.0.GA:mingw32-binutils-0:2.30-3.el8.aarch64", "CRB-8.4.0.GA:mingw32-binutils-0:2.30-3.el8.ppc64le", "CRB-8.4.0.GA:mingw32-binutils-0:2.30-3.el8.s390x", "CRB-8.4.0.GA:mingw32-binutils-0:2.30-3.el8.x86_64", "CRB-8.4.0.GA:mingw32-binutils-debuginfo-0:2.30-3.el8.aarch64", "CRB-8.4.0.GA:mingw32-binutils-debuginfo-0:2.30-3.el8.ppc64le", "CRB-8.4.0.GA:mingw32-binutils-debuginfo-0:2.30-3.el8.s390x", "CRB-8.4.0.GA:mingw32-binutils-debuginfo-0:2.30-3.el8.x86_64", "CRB-8.4.0.GA:mingw32-bzip2-0:1.0.6-14.el8.noarch", "CRB-8.4.0.GA:mingw32-bzip2-debuginfo-0:1.0.6-14.el8.noarch", "CRB-8.4.0.GA:mingw32-bzip2-static-0:1.0.6-14.el8.noarch", "CRB-8.4.0.GA:mingw32-filesystem-0:104-2.el8.noarch", "CRB-8.4.0.GA:mingw32-sqlite-0:3.26.0.0-1.el8.noarch", "CRB-8.4.0.GA:mingw32-sqlite-debuginfo-0:3.26.0.0-1.el8.noarch", "CRB-8.4.0.GA:mingw32-sqlite-static-0:3.26.0.0-1.el8.noarch", "CRB-8.4.0.GA:mingw64-binutils-0:2.30-3.el8.aarch64", "CRB-8.4.0.GA:mingw64-binutils-0:2.30-3.el8.ppc64le", "CRB-8.4.0.GA:mingw64-binutils-0:2.30-3.el8.s390x", "CRB-8.4.0.GA:mingw64-binutils-0:2.30-3.el8.x86_64", "CRB-8.4.0.GA:mingw64-binutils-debuginfo-0:2.30-3.el8.aarch64", "CRB-8.4.0.GA:mingw64-binutils-debuginfo-0:2.30-3.el8.ppc64le", "CRB-8.4.0.GA:mingw64-binutils-debuginfo-0:2.30-3.el8.s390x", "CRB-8.4.0.GA:mingw64-binutils-debuginfo-0:2.30-3.el8.x86_64", "CRB-8.4.0.GA:mingw64-bzip2-0:1.0.6-14.el8.noarch", "CRB-8.4.0.GA:mingw64-bzip2-debuginfo-0:1.0.6-14.el8.noarch", "CRB-8.4.0.GA:mingw64-bzip2-static-0:1.0.6-14.el8.noarch", "CRB-8.4.0.GA:mingw64-filesystem-0:104-2.el8.noarch", "CRB-8.4.0.GA:mingw64-sqlite-0:3.26.0.0-1.el8.noarch", "CRB-8.4.0.GA:mingw64-sqlite-debuginfo-0:3.26.0.0-1.el8.noarch", "CRB-8.4.0.GA:mingw64-sqlite-static-0:3.26.0.0-1.el8.noarch", ], }, ], threats: [ { category: "impact", details: "Moderate", }, ], title: "sqlite: NULL pointer dereference in ext/fts3/fts3_snippet.c via a crafted matchinfo() query", }, ], }
Loading…
Loading…
Sightings
| Author | Source | Type | Date |
|---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or seen somewhere by the user.
- Confirmed: The vulnerability is confirmed from an analyst perspective.
- Exploited: This vulnerability was exploited and seen by the user reporting the sighting.
- Patched: This vulnerability was successfully patched by the user reporting the sighting.
- Not exploited: This vulnerability was not exploited or seen by the user reporting the sighting.
- Not confirmed: The user expresses doubt about the veracity of the vulnerability.
- Not patched: This vulnerability was not successfully patched by the user reporting the sighting.