ALAS2023-2025-1151


Amazon Linux 2023 Security Advisory: ALAS2023-2025-1151
Advisory Released Date: 2025-08-18
Advisory Updated Date: 2025-08-18
Severity: Medium

Issue Overview:

There exists a vulnerability in SQLite versions before 3.50.2 where the number of aggregate terms could exceed the number of columns available. This could lead to a memory corruption issue. We recommend upgrading to version 3.50.2 or above. (CVE-2025-6965)


Affected Packages:

sqlite


Issue Correction:
Run dnf update sqlite --releasever 2023.8.20250818 or dnf update --advisory ALAS2023-2025-1151 --releasever 2023.8.20250818 to update your system.
More information on how to update your system can be found on this page: Amazon Linux 2023 documentation

New Packages:
aarch64:
    sqlite-analyzer-3.40.0-1.amzn2023.0.6.aarch64
    sqlite-devel-3.40.0-1.amzn2023.0.6.aarch64
    sqlite-debugsource-3.40.0-1.amzn2023.0.6.aarch64
    sqlite-analyzer-debuginfo-3.40.0-1.amzn2023.0.6.aarch64
    sqlite-tools-3.40.0-1.amzn2023.0.6.aarch64
    sqlite-3.40.0-1.amzn2023.0.6.aarch64
    sqlite-debuginfo-3.40.0-1.amzn2023.0.6.aarch64
    sqlite-tcl-3.40.0-1.amzn2023.0.6.aarch64
    sqlite-tcl-debuginfo-3.40.0-1.amzn2023.0.6.aarch64
    sqlite-libs-debuginfo-3.40.0-1.amzn2023.0.6.aarch64
    lemon-3.40.0-1.amzn2023.0.6.aarch64
    lemon-debuginfo-3.40.0-1.amzn2023.0.6.aarch64
    sqlite-libs-3.40.0-1.amzn2023.0.6.aarch64
    sqlite-tools-debuginfo-3.40.0-1.amzn2023.0.6.aarch64

noarch:
    sqlite-doc-3.40.0-1.amzn2023.0.6.noarch

src:
    sqlite-3.40.0-1.amzn2023.0.6.src

x86_64:
    sqlite-libs-debuginfo-3.40.0-1.amzn2023.0.6.x86_64
    sqlite-devel-3.40.0-1.amzn2023.0.6.x86_64
    sqlite-debugsource-3.40.0-1.amzn2023.0.6.x86_64
    lemon-debuginfo-3.40.0-1.amzn2023.0.6.x86_64
    sqlite-tools-3.40.0-1.amzn2023.0.6.x86_64
    sqlite-tools-debuginfo-3.40.0-1.amzn2023.0.6.x86_64
    sqlite-debuginfo-3.40.0-1.amzn2023.0.6.x86_64
    sqlite-analyzer-debuginfo-3.40.0-1.amzn2023.0.6.x86_64
    sqlite-tcl-debuginfo-3.40.0-1.amzn2023.0.6.x86_64
    sqlite-libs-3.40.0-1.amzn2023.0.6.x86_64
    lemon-3.40.0-1.amzn2023.0.6.x86_64
    sqlite-3.40.0-1.amzn2023.0.6.x86_64
    sqlite-tcl-3.40.0-1.amzn2023.0.6.x86_64
    sqlite-analyzer-3.40.0-1.amzn2023.0.6.x86_64