🛡️ SUSE-SU-2025:20561-1 — sqlite3 (CVE-2025-6965)

Security update for sqlite3

This update for sqlite3 fixes the following issues:

• Update to 3.50.2:
• Fix the concat_ws() SQL function so that it includes empty

strings in the concatenation.

• Avoid writing frames with no checksums into the wal file if a

savepoint is rolled back after dirty pages have already been

spilled into the wal file.

• Fix the Bitvec object to avoid stack overflow when the

database is within 60 pages of its maximum size.

• Fix a problem with UPDATEs on fts5 tables that contain BLOB

values.

• Fix an issue with transitive IS constraints on a RIGHT JOIN.
• CVE-2025-6965: Fixed Integer Truncation in SQLite (bsc#1246597)
• Ensure that sqlite3_setlk_timeout() holds the database mutex.
• Update to 3.50 (3.50.1):
• Improved handling and robust output of control characters
• sqlite3_rsync no longer requires WAL mode and needs less

bandwidth

• Bug fixes and optimized JSON handling
• Performance optimizations and developer visible fixes
• Update to release 3.49.2:
• Fix a bug in the NOT NULL optimization of version 3.40.0 that

can lead to a memory error if abused.

• Fix the count-of-view optimization so that it does not give an

incorrect answer for a DISTINCT query.

• Fix a possible incorrect answer that can result if a UNIQUE

constraint of a table contains the PRIMARY KEY column and that

UNIQUE constraint is used by an IN operator.

• Fix obscure problems with the generate_series() extension

function.

• Incremental improvements to the configure/make.
• Add subpackage for the lemon parser generator.