Ubuntu alert USN-7751-1 (sqlite3)

From:
             
 
noreply+usn-bot@canonical.com
To:
             
 
ubuntu-security-announce@lists.ubuntu.com
Subject:
             
 
[USN-7751-1] SQLite vulnerability
Date:
             
 
Mon, 15 Sep 2025 18:59:57 +0000
Message-ID:
             
 
<E1uyEQf-0003Wu-5i@lists.ubuntu.com>
==========================================================================
Ubuntu Security Notice USN-7751-1
September 15, 2025

sqlite3 vulnerability
==========================================================================

A security issue affects these releases of Ubuntu and its derivatives:

- Ubuntu 25.04
- Ubuntu 24.04 LTS

Summary:

SQLite could be made to crash or run programs if it received specially
crafted input.

Software Description:
- sqlite3: C library that implements an SQL database engine

Details:

It was discovered that the FTS5 SQLite extension incorrectly calculated
certain array lengths. An attacker could use this issue to cause SQLite to
crash, resulting in a denial of service, or possibly execute arbitrary
code.

Update instructions:

The problem can be corrected by updating your system to the following
package versions:

Ubuntu 25.04
  libsqlite3-0                    3.46.1-3ubuntu0.3

Ubuntu 24.04 LTS
  libsqlite3-0                    3.45.1-1ubuntu2.5

In general, a standard system update will make all the necessary changes.

References:
  https://ubuntu.com/security/notices/USN-7751-1
  CVE-2025-7709

Package Information:
  https://launchpad.net/ubuntu/+source/sqlite3/3.46.1-3ubun...
  https://launchpad.net/ubuntu/+source/sqlite3/3.45.1-1ubun...


Attachment: signature.asc (type=application/pgp-signature)
-----BEGIN PGP SIGNATURE-----

iQIzBAABCgAdFiEE+8neBLO2Hp/ppPlOcpJm3tlzhgEFAmjIYhEACgkQcpJm3tlz
hgGoAxAAo807PfhSutFBEhsyptgGC3lPyJ4FikyPKvs88ozbPG2T8Vl27PVYnj8+
XHxE2phtSZkn3pgmfn+Cahf23lHk9IpmOy3hTBJ7pW7jfLd4T3D7FtxuMCrJsQ9k
Sd+1I+b44ZNFE9i0Yf1seoR2WxO9XFGKtPW6v1JULJTq6/3fSrQqKCsXw7eYM6Sx
ySBMJ+zWtGHjRUexC8V8z0cRV7FMM9vADxT31P36uA+AfrAzpeRNfPhnW8KbPyli
XWuYoIqtswYBXD57C46d83oHCQUIuvi3TvBgcA7mxS7NAYo6+uideqPC2p6qyrw0
HJCdBQF4FsVSdvx2cuZx2xDkBOQZUf4uc6ai1+ulfVTgOknUqjCWgvRlk5zHW9iV
cfI+/i3bSGxjdFvCe8+rmTAyoc+EGDqMl8u6gn7cV9flkuqFg0wrWhbH4OxvAL2p
1B0oL0OhUkuoeI2QiW62Av2RCgdH49yaUW24KMnUwPU6HMRCTXM0wSOal4Zfxm1+
D3IQHT/MLeIWaXdcmfZaxQ37iF2ltgr91Zt+dUEsKUG5vFs43S6+oLOsRQjklZrL
stuh7KluD8I8vJube4bumaEU0s/CeQmnMJ8Eqx7JncSYLOvwDnXXYPK/Bea6Ff+u
UWOix6rhq7Zj77/yCCHAhtyapxfJZDhZbGf5sszFEt6dxrqfa4o=
=DKIj
-----END PGP SIGNATURE-----