Summary
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2025-6965: There exists a vulnerability in SQLite versions before 3.50.2 where the number of aggregate terms could exceed the number of columns available. This could lead to a memory corruption issue. We recommend upgrading to version 3.50.2 or above.
Fixed packages 2
| Release | Package | Fixed in |
|---|---|---|
| Amazon Linux · 2 | thunderbird | 0:128.11.1-1.amzn2.0.2 |
| Amazon Linux · 2 | thunderbird-debuginfo | 0:128.11.1-1.amzn2.0.2 |
Vulnerabilities 1
-
High 7.2
Integer Truncation on SQLite
There exists a vulnerability in SQLite versions before 3.50.2 where the number of aggregate terms could exceed the number of columns available. This could lead to a memory corruption issue. We recommend upgrading to version 3.50.2 or above.
References
-
web
https://alas.aws.amazon.com/cve/html/CVE-2025-6965.html