RLSA-2025:14101

Source
https://errata.rockylinux.org/RLSA-2025:14101
Import Source
https://storage.googleapis.com/resf-osv-data/RLSA-2025:14101.json
JSON Data
https://api.test.osv.dev/v1/vulns/RLSA-2025:14101
Upstream
Published
2025-09-08T14:19:39.025418Z
Modified
2025-09-08T14:49:15.183875Z
Severity
  • 7.7 (High) CVSS_V3 - CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:L/I:H/A:L CVSS Calculator
Summary
Important: mingw-sqlite security update
Details

SQLite is a C library that implements an SQL database engine. A large subset of SQL92 is supported. A complete database is stored in a single disk file. The API is designed for convenience and ease of use. Applications that link against SQLite can enjoy the power and flexibility of an SQL database without the administrative hassles of supporting a separate database server. Version 2 and version 3 binaries are named to permit each to be installed on a single host This package contains cross-compiled libraries and development tools for Windows.

Security Fix(es):

  • sqlite: Integer Truncation in SQLite (CVE-2025-6965)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

References
Credits
    • Rocky Enterprise Software Foundation
    • Red Hat

Affected packages

Rocky Linux:8 / mingw-sqlite

Package

Name
mingw-sqlite
Purl
pkg:rpm/rocky-linux/mingw-sqlite?distro=rocky-linux-8-x86-64&epoch=0

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
0:3.26.0.0-2.el8_10