CVE-2025-6965

Publication date 15 July 2025

Last updated 28 July 2025

Ubuntu priority

There exists a vulnerability in SQLite versions before 3.50.2 where the number of aggregate terms could exceed the number of columns available. This could lead to a memory corruption issue. We recommend upgrading to version 3.50.2 or above.

Status

Show unmaintained releases

Package	Ubuntu Release	Status
sqlite3	25.04 plucky	Fixed 3.46.1-3ubuntu0.2
	24.04 LTS noble	Fixed 3.45.1-1ubuntu2.4
	22.04 LTS jammy	Fixed 3.37.2-2ubuntu0.5
	20.04 LTS focal	Needs evaluation
	18.04 LTS bionic	Needs evaluation
	16.04 LTS xenial	Needs evaluation
	14.04 LTS trusty	Needs evaluation
sqlite	25.04 plucky	Not in release
	24.04 LTS noble	Not in release
	22.04 LTS jammy	Needs evaluation
	20.04 LTS focal	Needs evaluation
	18.04 LTS bionic	Needs evaluation
	16.04 LTS xenial	Needs evaluation
	14.04 LTS trusty	Needs evaluation

Patch details

For informational purposes only. We recommend not to cherry-pick updates. How can I get the fixes?

Package	Patch details
sqlite3	Upstream: https://www.sqlite.org/src/info/5508b56fd24016c13981ec280ecdd833007c9d8dd595edb295b984c2b487b5c8

CVE-2025-6965

Status

Patch details

References

Related Ubuntu Security Notices (USN)

Other references