Hi, On Sun, Nov 01, 2026 at 05:58:52PM +0100, László Böszörményi (GCS) wrote: > On Sun, Nov 1, 2026 at 5:23 PM Salvatore Bonaccorso <[email protected]> wrote: > > The following vulnerabilities were published for sqlite3. > > All should be fixed in the 3.54.0 upstream version, but please > > double-check! > I think it's version 3.45.1 which fixes these issues. At least its > changelog [1] states fix a possible heap buffer overflow at least. > But I'll try to find the correct fixed versions.
It is probably in any case best to go up to the 3.54.1 version then. At least the currently tracked CVEs are in at latest version-3.54.0 tagged verison from the (offcial) github mirror for sqlite3 main repository. Not yet sure how to classify those for trixie, but that is another story. Regards, Salvatore
