]> git.ipfire.org Git - thirdparty/openembedded/openembedded-core-contrib.git/commit
sqlite3: fix CVE-2025-6965
authorRoland Kovacs <roland.kovacs@est.tech>
Thu, 24 Jul 2025 12:40:14 +0000 (14:40 +0200)
committerSteve Sakoman <steve@sakoman.com>
Fri, 25 Jul 2025 13:13:34 +0000 (06:13 -0700)
commit52499a5ea3b4ba145914aca873844ab718953289
tree6078287e85b22a4bf1a21a20a0f6a66201fcd657
parent128e40c39d8eafdd32fea71b902b38801afec202
sqlite3: fix CVE-2025-6965

There exists a vulnerability in SQLite versions before 3.50.2 where the
number of aggregate terms could exceed the number of columns available.
This could lead to a memory corruption issue.

Signed-off-by: Roland Kovacs <roland.kovacs@est.tech>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
meta/recipes-support/sqlite/sqlite3/CVE-2025-6965.patch [new file with mode: 0644]
meta/recipes-support/sqlite/sqlite3_3.45.3.bb