High RHSA-2025:12349 1 CVE

Red Hat Security Advisory: sqlite security update

Published Jul 31, 2025 · Updated Oct 15, 2026

Ecosystem: Red Hat

Fixed packages 6

Release	Package	Fixed in
Red Hat · RHEL 7 ELS rhel_els:7	lemon	0:3.7.17-9.el7_9.1
Red Hat · RHEL 7 ELS rhel_els:7	sqlite	0:3.7.17-9.el7_9.1
Red Hat · RHEL 7 ELS rhel_els:7	sqlite-debuginfo	0:3.7.17-9.el7_9.1
Red Hat · RHEL 7 ELS rhel_els:7	sqlite-devel	0:3.7.17-9.el7_9.1
Red Hat · RHEL 7 ELS rhel_els:7	sqlite-doc	0:3.7.17-9.el7_9.1
Red Hat · RHEL 7 ELS rhel_els:7	sqlite-tcl	0:3.7.17-9.el7_9.1

Vulnerabilities 1

High 7.2

CVE-2025-6965 Public exploit EPSS 73%

Integer Truncation on SQLite

There exists a vulnerability in SQLite versions before 3.50.2 where the number of aggregate terms could exceed the number of columns available. This could lead to a memory corruption issue. We recommend upgrading to version 3.50.2 or above.

SQLite SQLite qt6-qtwebengine sqlite3 Debian Ubuntu Azure Linux Alpine Wolfi NuGet

Jul 15, 2025

References

article
https://access.redhat.com/security/updates/classification/#important
report
https://bugzilla.redhat.com/show_bug.cgi?id=2380149
advisory
https://security.access.redhat.com/data/csaf/v2/advisories/2025/rhsa-2025_12349.json
report
https://access.redhat.com/security/cve/CVE-2025-6965
advisory
https://www.cve.org/CVERecord?id=CVE-2025-6965
advisory
https://nvd.nist.gov/vuln/detail/CVE-2025-6965
article
https://www.oracle.com/security-alerts/cpujan2026.html#AppendixMSQL
article
https://www.sqlite.org/src/info/5508b56fd24016c13981ec280ecdd833007c9d8dd595edb295b984c2b487b5c8