RHSA-2021:1968MediumCVSS 7.0

Red Hat Security Advisory: mingw packages security and bug fix update

Published
May 18, 2021
Last Modified
October 13, 2026

🔗 CVE IDs covered (5)

CVE-2019-16168 →CVE-2020-13434 →CVE-2020-13630 →CVE-2020-13631 →CVE-2020-13632 →

📋 Description

CVE-2019-16168 — sqlite: Division by zero in whereLoopAddBtreeIndex in sqlite3.c CVE-2020-13434 — sqlite: integer overflow in sqlite3_str_vappendf function in printf.c CVE-2020-13630 — sqlite: Use-after-free in fts3EvalNextRow in ext/fts3/fts3.c CVE-2020-13631 — sqlite: Virtual table can be renamed into the name of one of its shadow tables CVE-2020-13632 — sqlite: NULL pointer dereference in ext/fts3/fts3_snippet.c via a crafted matchinfo() query

🎯 Affected products52

  • Red Hat CodeReady Linux Builder (v. 8)
  • mingw-binutils-0:2.30-3.el8.src as a component of Red Hat CodeReady Linux Builder (v. 8)
  • mingw-binutils-debuginfo-0:2.30-3.el8.aarch64 as a component of Red Hat CodeReady Linux Builder (v. 8)
  • mingw-binutils-debuginfo-0:2.30-3.el8.ppc64le as a component of Red Hat CodeReady Linux Builder (v. 8)
  • mingw-binutils-debuginfo-0:2.30-3.el8.s390x as a component of Red Hat CodeReady Linux Builder (v. 8)
  • mingw-binutils-debuginfo-0:2.30-3.el8.x86_64 as a component of Red Hat CodeReady Linux Builder (v. 8)
  • mingw-binutils-debugsource-0:2.30-3.el8.aarch64 as a component of Red Hat CodeReady Linux Builder (v. 8)
  • mingw-binutils-debugsource-0:2.30-3.el8.ppc64le as a component of Red Hat CodeReady Linux Builder (v. 8)
  • mingw-binutils-debugsource-0:2.30-3.el8.s390x as a component of Red Hat CodeReady Linux Builder (v. 8)
  • mingw-binutils-debugsource-0:2.30-3.el8.x86_64 as a component of Red Hat CodeReady Linux Builder (v. 8)
  • mingw-binutils-generic-0:2.30-3.el8.aarch64 as a component of Red Hat CodeReady Linux Builder (v. 8)
  • mingw-binutils-generic-0:2.30-3.el8.ppc64le as a component of Red Hat CodeReady Linux Builder (v. 8)
  • mingw-binutils-generic-0:2.30-3.el8.s390x as a component of Red Hat CodeReady Linux Builder (v. 8)
  • mingw-binutils-generic-0:2.30-3.el8.x86_64 as a component of Red Hat CodeReady Linux Builder (v. 8)
  • mingw-binutils-generic-debuginfo-0:2.30-3.el8.aarch64 as a component of Red Hat CodeReady Linux Builder (v. 8)
  • mingw-binutils-generic-debuginfo-0:2.30-3.el8.ppc64le as a component of Red Hat CodeReady Linux Builder (v. 8)
  • mingw-binutils-generic-debuginfo-0:2.30-3.el8.s390x as a component of Red Hat CodeReady Linux Builder (v. 8)
  • mingw-binutils-generic-debuginfo-0:2.30-3.el8.x86_64 as a component of Red Hat CodeReady Linux Builder (v. 8)
  • mingw-bzip2-0:1.0.6-14.el8.src as a component of Red Hat CodeReady Linux Builder (v. 8)
  • mingw-filesystem-0:104-2.el8.src as a component of Red Hat CodeReady Linux Builder (v. 8)
  • mingw-filesystem-base-0:104-2.el8.noarch as a component of Red Hat CodeReady Linux Builder (v. 8)
  • mingw-sqlite-0:3.26.0.0-1.el8.src as a component of Red Hat CodeReady Linux Builder (v. 8)
  • mingw32-binutils-0:2.30-3.el8.aarch64 as a component of Red Hat CodeReady Linux Builder (v. 8)
  • mingw32-binutils-0:2.30-3.el8.ppc64le as a component of Red Hat CodeReady Linux Builder (v. 8)
  • mingw32-binutils-0:2.30-3.el8.s390x as a component of Red Hat CodeReady Linux Builder (v. 8)
  • mingw32-binutils-0:2.30-3.el8.x86_64 as a component of Red Hat CodeReady Linux Builder (v. 8)
  • mingw32-binutils-debuginfo-0:2.30-3.el8.aarch64 as a component of Red Hat CodeReady Linux Builder (v. 8)
  • mingw32-binutils-debuginfo-0:2.30-3.el8.ppc64le as a component of Red Hat CodeReady Linux Builder (v. 8)
  • mingw32-binutils-debuginfo-0:2.30-3.el8.s390x as a component of Red Hat CodeReady Linux Builder (v. 8)
  • mingw32-binutils-debuginfo-0:2.30-3.el8.x86_64 as a component of Red Hat CodeReady Linux Builder (v. 8)
  • +22 more not shown

✅ Remediation

For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 Workaround: An user can mitigate the risk of this vulnerability by: 1) Avoid using ANALYZE command on queries; 2) Disabling the PRAGMA optimize for affected SQLite instances;

🔗 References (10)