Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.

SQLite Database May Allow Unauthorized Access

published 1 year ago

Summary

A security update is available for SQLite, a database software used by many systems. This update fixes a potential security issue where an attacker could access unauthorized data. Affected systems should be updated as soon as possible to prevent potential data breaches.

What to do

Update redhat lemon to version 0:3.26.0-20.el8_10.
Update redhat lemon-debuginfo to version 0:3.26.0-20.el8_10.
Update redhat sqlite to version 0:3.26.0-20.el8_10.
Update redhat sqlite-analyzer-debuginfo to version 0:3.26.0-20.el8_10.
Update redhat sqlite-debuginfo to version 0:3.26.0-20.el8_10.
Update redhat sqlite-debugsource to version 0:3.26.0-20.el8_10.
Update redhat sqlite-devel to version 0:3.26.0-20.el8_10.
Update redhat sqlite-doc to version 0:3.26.0-20.el8_10.
Update redhat sqlite-libs to version 0:3.26.0-20.el8_10.
Update redhat sqlite-libs-debuginfo to version 0:3.26.0-20.el8_10.
Update redhat sqlite-tcl-debuginfo to version 0:3.26.0-20.el8_10.

Affected software

Ecosystem	Vendor	Product	Affected versions
Red Hat:enterprise_linux:8::appstream	redhat	lemon	< 0:3.26.0-20.el8_10 Fix: upgrade to 0:3.26.0-20.el8_10
Red Hat:enterprise_linux:8::appstream	redhat	lemon-debuginfo	< 0:3.26.0-20.el8_10 Fix: upgrade to 0:3.26.0-20.el8_10
Red Hat:enterprise_linux:8::appstream	redhat	sqlite	< 0:3.26.0-20.el8_10 Fix: upgrade to 0:3.26.0-20.el8_10
Red Hat:enterprise_linux:8::appstream	redhat	sqlite-analyzer-debuginfo	< 0:3.26.0-20.el8_10 Fix: upgrade to 0:3.26.0-20.el8_10
Red Hat:enterprise_linux:8::appstream	redhat	sqlite-debuginfo	< 0:3.26.0-20.el8_10 Fix: upgrade to 0:3.26.0-20.el8_10
Red Hat:enterprise_linux:8::appstream	redhat	sqlite-debugsource	< 0:3.26.0-20.el8_10 Fix: upgrade to 0:3.26.0-20.el8_10
Red Hat:enterprise_linux:8::appstream	redhat	sqlite-devel	< 0:3.26.0-20.el8_10 Fix: upgrade to 0:3.26.0-20.el8_10
Red Hat:enterprise_linux:8::appstream	redhat	sqlite-doc	< 0:3.26.0-20.el8_10 Fix: upgrade to 0:3.26.0-20.el8_10
Red Hat:enterprise_linux:8::appstream	redhat	sqlite-libs	< 0:3.26.0-20.el8_10 Fix: upgrade to 0:3.26.0-20.el8_10
Red Hat:enterprise_linux:8::appstream	redhat	sqlite-libs-debuginfo	< 0:3.26.0-20.el8_10 Fix: upgrade to 0:3.26.0-20.el8_10
Red Hat:enterprise_linux:8::appstream	redhat	sqlite-tcl-debuginfo	< 0:3.26.0-20.el8_10 Fix: upgrade to 0:3.26.0-20.el8_10
Red Hat:enterprise_linux:8::baseos	redhat	lemon	< 0:3.26.0-20.el8_10 Fix: upgrade to 0:3.26.0-20.el8_10
Red Hat:enterprise_linux:8::baseos	redhat	lemon-debuginfo	< 0:3.26.0-20.el8_10 Fix: upgrade to 0:3.26.0-20.el8_10
Red Hat:enterprise_linux:8::baseos	redhat	sqlite	< 0:3.26.0-20.el8_10 Fix: upgrade to 0:3.26.0-20.el8_10
Red Hat:enterprise_linux:8::baseos	redhat	sqlite-analyzer-debuginfo	< 0:3.26.0-20.el8_10 Fix: upgrade to 0:3.26.0-20.el8_10
Red Hat:enterprise_linux:8::baseos	redhat	sqlite-debuginfo	< 0:3.26.0-20.el8_10 Fix: upgrade to 0:3.26.0-20.el8_10
Red Hat:enterprise_linux:8::baseos	redhat	sqlite-debugsource	< 0:3.26.0-20.el8_10 Fix: upgrade to 0:3.26.0-20.el8_10
Red Hat:enterprise_linux:8::baseos	redhat	sqlite-devel	< 0:3.26.0-20.el8_10 Fix: upgrade to 0:3.26.0-20.el8_10
Red Hat:enterprise_linux:8::baseos	redhat	sqlite-doc	< 0:3.26.0-20.el8_10 Fix: upgrade to 0:3.26.0-20.el8_10
Red Hat:enterprise_linux:8::baseos	redhat	sqlite-libs	< 0:3.26.0-20.el8_10 Fix: upgrade to 0:3.26.0-20.el8_10
Red Hat:enterprise_linux:8::baseos	redhat	sqlite-libs-debuginfo	< 0:3.26.0-20.el8_10 Fix: upgrade to 0:3.26.0-20.el8_10
Red Hat:enterprise_linux:8::baseos	redhat	sqlite-tcl-debuginfo	< 0:3.26.0-20.el8_10 Fix: upgrade to 0:3.26.0-20.el8_10

Original advisory text

Red Hat Security Advisory: sqlite security update

References

https://access.redhat.com/errata/RHSA-2025:12010 Vendor Advisory
https://access.redhat.com/security/updates/classification/#important Third Party Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=2380149 Third Party Advisory
https://security.access.redhat.com/data/csaf/v2/advisories/2025/rhsa-2025_12010.... Vendor Advisory
https://access.redhat.com/security/cve/CVE-2025-6965 Third Party Advisory
https://www.cve.org/CVERecord?id=CVE-2025-6965 Vendor Advisory
https://nvd.nist.gov/vuln/detail/CVE-2025-6965 Vendor Advisory
https://www.oracle.com/security-alerts/cpujan2026.html#AppendixMSQL Third Party Advisory
https://www.sqlite.org/src/info/5508b56fd24016c13981ec280ecdd833007c9d8dd595edb2... Third Party Advisory

Fix within

Internet-facing 60 days

Internal At next upgrade

Not known to be exploited
Needs hands-on effort to exploit (estimated)
Gives an attacker partial control (estimated)

Severity

7.7 High

Timeline

Published29 Jul 2025

Updated17 Apr 2026

First seen17 Apr 2026

Sources

RHSA-2025:12010 · OSV

Track software like this

Free during beta