Source: sqlite3 Version: 3.46.1-2 Severity: important Tags: security upstream X-Debbugs-Cc: car...@debian.org, Debian Security Team <t...@security.debian.org>
Hi Laszlo The following vulnerability was published for sqlite3. CVE-2025-29087[0]: | Sqlite 3.49.0 is susceptible to integer overflow through the concat | function. Unfortunately the information available is quite scarce, can you reach out to upstream to see if we can have the issue pinpointed more precisely, having upstream references? If you fix the vulnerability please also make sure to include the CVE (Common Vulnerabilities & Exposures) id in your changelog entry. For further information see: [0] https://security-tracker.debian.org/tracker/CVE-2025-29087 https://www.cve.org/CVERecord?id=CVE-2025-29087 Please adjust the affected versions in the BTS as needed. Regards, Salvatore