Summary
[3.7.17-8.0.1.1]
- Fix for CVE-2025-6965 [Orabug: 38260859]
Fixed packages 5
| Release | Package | Fixed in |
|---|---|---|
| Oracle Linux · 7 | lemon | 0:3.7.17-8.0.1.el7_9.1 |
| Oracle Linux · 7 | sqlite | 0:3.7.17-8.0.1.el7_9.1 |
| Oracle Linux · 7 | sqlite-devel | 0:3.7.17-8.0.1.el7_9.1 |
| Oracle Linux · 7 | sqlite-doc | 0:3.7.17-8.0.1.el7_9.1 |
| Oracle Linux · 7 | sqlite-tcl | 0:3.7.17-8.0.1.el7_9.1 |
Vulnerabilities 1
-
High 7.2
Integer Truncation on SQLite
There exists a vulnerability in SQLite versions before 3.50.2 where the number of aggregate terms could exceed the number of columns available. This could lead to a memory corruption issue. We recommend upgrading to version 3.50.2 or above.