Summary
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2025-52099: Integer Overflow vulnerability in SQLite SQLite3 v.3.50.0 allows a remote attacker to cause a denial of service via the setupLookaside function CVE-2025-29088: An issue in sqlite v.3.49.0 allows an attacker to cause a denial of service via the SQLITE_DBCONFIG_LOOKASIDE component
Fixed packages 10
| Release | Package | Fixed in |
|---|---|---|
| Amazon Linux · 2023 | nodejs22 | 1:22.14.0-1.amzn2023.0.2 |
| Amazon Linux · 2023 | nodejs22-debuginfo | 1:22.14.0-1.amzn2023.0.2 |
| Amazon Linux · 2023 | nodejs22-debugsource | 1:22.14.0-1.amzn2023.0.2 |
| Amazon Linux · 2023 | nodejs22-devel | 1:22.14.0-1.amzn2023.0.2 |
| Amazon Linux · 2023 | nodejs22-docs | 1:22.14.0-1.amzn2023.0.2 |
| Amazon Linux · 2023 | nodejs22-full-i18n | 1:22.14.0-1.amzn2023.0.2 |
| Amazon Linux · 2023 | nodejs22-libs | 1:22.14.0-1.amzn2023.0.2 |
| Amazon Linux · 2023 | nodejs22-libs-debuginfo | 1:22.14.0-1.amzn2023.0.2 |
| Amazon Linux · 2023 | nodejs22-npm | 1:10.9.2-1.22.14.0.1.amzn2023.0.2 |
| Amazon Linux · 2023 | v8-12.4-devel | 3:12.4.254.21-1.22.14.0.1.amzn2023.0.2 |
Vulnerabilities 2
-
Medium 5.6
In SQLite 3.49.0 before 3.49.1, certain argument values to sqlite3_db_config (in the C-language API) can cause a denial…
-
Unscored —
DO NOT USE THIS CVE RECORD. ConsultIDs: CVE-2025-29088. Reason: This record is a duplicate of CVE-2025-29088. Notes: Al…