Alerts This Week
Warning Icon 1 485
Alerts This Week
Warning Icon 1 485

SUSE: 2025:20395-1 moderate: sqlite3 integer overflow threat

suse
Calendar Grey June 13, 2025
Dist Suse Esm H88
Implement SUSE's moderate security patch for sqlite3 to resolve integer overflow vulnerabilities identified in CVE-2025-29087 and CVE-2025-29088.
* bsc#1241020 * bsc#1241078 Cross-References: * CVE-2025-29087

Summary

## This update for sqlite3 fixes the following issues: * Update to release 3.49.1: * Improve portability of makefiles and configure scripts. * CVE-2025-29087: Fixed Integer Overflow in SQLite concat Function (bsc#1241020) * CVE-2025-29088: Fixed integer overflow through the SQLITE_DBCONFIG_LOOKASIDE component (bsc#1241078) * Update to release 3.49.0: * Enhancements to the query planner: * Improve the query-time index optimization so that it works on WITHOUT ROWID tables. * Better query plans for large star-query joins. This fixes three different performance regressions that were reported on the SQLite Forum. * When two or more queries have the same estimated cost, use the one with the fewer bytes per row. * Enhance the iif() SQL function so that it can accept any number of arguments greater than or equal to two.

References

* bsc#1241020

* bsc#1241078

Cross-

* CVE-2025-29087

* CVE-2025-29088

CVSS scores:

* CVE-2025-29087 ( SUSE ): 5.9

CVSS:4.0/AV:L/AC:L/AT:P/PR:N/UI:N/VC:N/VI:H/VA:L/SC:N/SI:N/SA:N

* CVE-2025-29087 ( SUSE ): 5.7 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:L

* CVE-2025-29087 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

* CVE-2025-29087 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

* CVE-2025-29087 ( NVD ): 3.2 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:C/C:N/I:N/A:L

* CVE-2025-29088 ( SUSE ): 6.8

CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N

* CVE-2025-29088 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

* CVE-2025-29088 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Announcement ID: SUSE-SU-2025:20395-1
Release Date: 2025-06-10T11:50:09Z
Rating: moderate

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Your message here