OESA-2025-2256

See a problem?
Please try reporting it to the source first.
Source
https://www.openeuler.org/en/security/security-bulletins/detail/?id=openEuler-SA-2025-2256
Import Source
https://repo.openeuler.org/security/data/osv/OESA-2025-2256.json
JSON Data
https://api.osv.dev/v1/vulns/OESA-2025-2256
Upstream
Published
2025-09-12T14:24:58Z
Modified
2025-09-12T19:01:05.969047Z
Summary
sqlite security update
Details

SQLite is a C-language library that implements a small, fast, self-contained, high-reliability, full-featured, SQL database engine. SQLite is the most used database engine in the world. SQLite is built into all mobile phones and most computers and comes bundled inside countless other applications that people use every day.It also include lemon and sqlite3_analyzer and tcl tools.

Security Fix(es):

There exists a vulnerability in SQLite versions before 3.50.2 where the number of aggregate terms could exceed the number of columns available, leading to a memory corruption issue.(CVE-2025-6965)

Database specific 
{
    "severity": "Critical"
}
References

Affected packages

openEuler:24.03-LTS / sqlite

Package

Name
sqlite
Purl
pkg:rpm/openEuler/sqlite&distro=openEuler-24.03-LTS

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
3.42.0-4.oe2403

Ecosystem specific 

{
    "aarch64": [
        "sqlite-3.42.0-4.oe2403.aarch64.rpm",
        "sqlite-debuginfo-3.42.0-4.oe2403.aarch64.rpm",
        "sqlite-debugsource-3.42.0-4.oe2403.aarch64.rpm",
        "sqlite-devel-3.42.0-4.oe2403.aarch64.rpm"
    ],
    "x86_64": [
        "sqlite-3.42.0-4.oe2403.x86_64.rpm",
        "sqlite-debuginfo-3.42.0-4.oe2403.x86_64.rpm",
        "sqlite-debugsource-3.42.0-4.oe2403.x86_64.rpm",
        "sqlite-devel-3.42.0-4.oe2403.x86_64.rpm"
    ],
    "src": [
        "sqlite-3.42.0-4.oe2403.src.rpm"
    ],
    "noarch": [
        "sqlite-help-3.42.0-4.oe2403.noarch.rpm"
    ]
}