Read the docs
TI-2025-06334 Aliases CVE-2025-6965GHSA-2m69-gcr7-jv3q

Integer Truncation on SQLite

Priority HIGH 72CWE-197Published · Updated

Key facts

Attack vector
Network
Privileges required
Low
User interaction
None
Attack complexity
High
Attack requirements
Present
Impact type
—
Confidentiality · integrity · availability
Low · High · Low
Fix status
Partial Red Hat: 53 fixed, 2 without a fix

Attack profile from CVSS 4.0 · CNA. Fix status from CNA, GitHub and Red Hat.

Summary

There exists a vulnerability in SQLite versions before 3.50.2 where the number of aggregate terms could exceed the number of columns available. This could lead to a memory corruption issue. We recommend upgrading to version 3.50.2 or above.

Why it matters now

Exploitation Proof of concept CISA SSVC · not in CISA KEV
EPSS 0.73452 99th percentileScored 2026-11-07
Fix Partial SQLite (SQLite): 3.50.2Red Hat: 48 advisoriesRed Hat: 53 fixed, 2 without a fix

SSVC decision points

CISA ADP · SSVC 2.0.3

Exploitation
Poc
Automatable
No
Technical impact
Total

The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.

Affected products

VendorProductAffected versionsFixed inStatusSource
SQLiteSQLitebefore 3.50.23.50.2Patch availableCNA
—SQLitePCLRaw.lib.e_sqlite3 (NuGet)up to 2.1.11—No fix listedGHSA-2m69-gcr7-jv3q
—SQLitePCLRaw.lib.e_sqlite3.android (NuGet)up to 2.1.11—No fix listedGHSA-2m69-gcr7-jv3q
—SQLitePCLRaw.lib.e_sqlite3.ios (NuGet)up to 2.1.11—No fix listedGHSA-2m69-gcr7-jv3q
  • SQLite VendorSQLite Affected before 3.50.2 Fixed in 3.50.2 Patch available CNA
  • SQLitePCLRaw.lib.e_sqlite3 (NuGet) Vendor— Affected up to 2.1.11 Fixed in — No fix listed GHSA-2m69-gcr7-jv3q
  • SQLitePCLRaw.lib.e_sqlite3.android (NuGet) Vendor— Affected up to 2.1.11 Fixed in — No fix listed GHSA-2m69-gcr7-jv3q
  • SQLitePCLRaw.lib.e_sqlite3.ios (NuGet) Vendor— Affected up to 2.1.11 Fixed in — No fix listed GHSA-2m69-gcr7-jv3q

CPE configurations NVD · 9

CPEVersionsRoleVendor
cpe:2.3:a:sqlite:sqlite:*:*:*:*:*:*:*:*before 3.50.2VulnerableSQLite
cpe:2.3:o:apple:ipados:*:*:*:*:*:*:*:*before 26.0.0VulnerableApple
cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*before 26.0.0VulnerableApple
cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:*before 26.0.0VulnerableApple
cpe:2.3:o:apple:tvos:*:*:*:*:*:*:*:*before 26.0.0VulnerableApple
cpe:2.3:o:apple:visionos:*:*:*:*:*:*:*:*before 26.0.0VulnerableApple
cpe:2.3:o:apple:watchos:*:*:*:*:*:*:*:*before 26.0.0VulnerableApple
cpe:2.3:a:siemens:ruggedcom_crossbow:*:*:*:*:*:*:*:*before 5.8VulnerableSiemens
cpe:2.3:a:siemens:sidis_prime:*:*:*:*:*:*:*:*before 4.0.800VulnerableSiemens
  • cpe:2.3:a:sqlite:sqlite:*:*:*:*:*:*:*:* Versions before 3.50.2 Vulnerable ·SQLite
  • cpe:2.3:o:apple:ipados:*:*:*:*:*:*:*:* Versions before 26.0.0 Vulnerable ·Apple
  • cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:* Versions before 26.0.0 Vulnerable ·Apple
  • cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:* Versions before 26.0.0 Vulnerable ·Apple
  • cpe:2.3:o:apple:tvos:*:*:*:*:*:*:*:* Versions before 26.0.0 Vulnerable ·Apple
  • cpe:2.3:o:apple:visionos:*:*:*:*:*:*:*:* Versions before 26.0.0 Vulnerable ·Apple
  • cpe:2.3:o:apple:watchos:*:*:*:*:*:*:*:* Versions before 26.0.0 Vulnerable ·Apple
  • cpe:2.3:a:siemens:ruggedcom_crossbow:*:*:*:*:*:*:*:* Versions before 5.8 Vulnerable ·Siemens
  • cpe:2.3:a:siemens:sidis_prime:*:*:*:*:*:*:*:* Versions before 4.0.800 Vulnerable ·Siemens

Remediation

  • Fix · CNA SQLite (SQLite) Fixed in 3.50.2

Red Hat 48 advisories

  • RHSA-2026:67857 Released 2026-09-28 · Red Hat rating Important
    OpenShift Container Platform 4.15.69 bug fix and security update
    • Red Hat OpenShift Container Platform 4.15 rhcos-aarch64-415.92.202609140326-0, rhcos-ppc64le-415.92.202609140326-0, rhcos-s390x-415.92.202609140326-0 +1
  • RHSA-2026:62549 Released 2026-09-10 · Red Hat rating Important
    OpenShift Container Platform 4.16.70 bug fix and security update
    • Red Hat OpenShift Container Platform 4.16 rhcos-aarch64-416.94.202609011112-0, rhcos-ppc64le-416.94.202609011112-0, rhcos-s390x-416.94.202609011112-0 +1
  • RHSA-2026:6481 Released 2026-04-02 · Red Hat rating Important
    Updated service-interconnect rhel9 container images for 1.8
    • Red Hat Service Interconnect 1 service-interconnect/skupper-config-sync-rhel9, service-interconnect/skupper-controller-podman-container-rhel9, service-interconnect/skupper-controller-podman-rhel9 +5
Show 45 more Red Hat advisories
  • RHSA-2026:3462 Released 2026-02-27 · Red Hat rating Critical
    Red Hat AI Inference Server 3.2.2 (ROCm)
    • Red Hat AI Inference Server 3.2 registry.redhat.io/rhaiis/vllm-rocm-rhel9
  • RHSA-2026:3461 Released 2026-02-27 · Red Hat rating Critical
    Red Hat AI Inference Server 3.2.2 (CUDA)
    • Red Hat AI Inference Server 3.2 registry.redhat.io/rhaiis/vllm-cuda-rhel9
  • RHSA-2026:1652 Released 2026-02-02 · Red Hat rating Important
    Red Hat Ceph Storage
    • Red Hat Ceph Storage 8 registry.redhat.io/rhceph/rhceph-8-rhel9
  • RHSA-2026:0934 Released 2026-01-22 · Red Hat rating Important
    Release of OpenShift Serverless Logic 1.36.0 security update & enhancements
    • 8Base-Openshift-Serverless-1.36 openshift-serverless-1/logic-data-index-ephemeral-rhel8, openshift-serverless-1/logic-data-index-postgresql-rhel8, openshift-serverless-1/logic-db-migrator-tool-rhel8 +8
  • RHSA-2026:0077 Released 2026-01-05 · Red Hat rating Important
    spice-client-win security update
    • Red Hat Enterprise Linux AppStream AUS (v.8.4) spice-client-win-8.10-3.el8_4.1, spice-client-win-x64-8.10-3.el8_4.1, spice-client-win-x86-8.10-3.el8_4.1
    • Red Hat Enterprise Linux AppStream EUS EXTENSION (v.8.4) spice-client-win-8.10-3.el8_4.1, spice-client-win-x64-8.10-3.el8_4.1, spice-client-win-x86-8.10-3.el8_4.1
  • RHSA-2026:0076 Released 2026-01-05 · Red Hat rating Important
    spice-client-win security update
    • Red Hat Enterprise Linux AppStream AUS (v.8.6) spice-client-win-8.10-3.el8_6.1, spice-client-win-x64-8.10-3.el8_6.1, spice-client-win-x86-8.10-3.el8_6.1
    • Red Hat Enterprise Linux AppStream E4S (v.8.6) spice-client-win-8.10-3.el8_6.1, spice-client-win-x64-8.10-3.el8_6.1, spice-client-win-x86-8.10-3.el8_6.1
    • Red Hat Enterprise Linux AppStream TUS (v.8.6) spice-client-win-8.10-3.el8_6.1, spice-client-win-x64-8.10-3.el8_6.1, spice-client-win-x86-8.10-3.el8_6.1
  • RHSA-2026:0078 Released 2026-01-05 · Red Hat rating Important
    spice-client-win security update
    • Red Hat Enterprise Linux AppStream AUS (v. 8.2) spice-client-win-8.10-3.el8_2.1, spice-client-win-x64-8.10-3.el8_2.1, spice-client-win-x86-8.10-3.el8_2.1
  • RHSA-2026:0001 Released 2026-01-05 · Red Hat rating Important
    spice-client-win security update
    • Red Hat Enterprise Linux AppStream E4S (v.8.8) spice-client-win-8.10-3.el8_8.1, spice-client-win-x64-8.10-3.el8_8.1, spice-client-win-x86-8.10-3.el8_8.1
    • Red Hat Enterprise Linux AppStream TUS (v.8.8) spice-client-win-8.10-3.el8_8.1, spice-client-win-x64-8.10-3.el8_8.1, spice-client-win-x86-8.10-3.el8_8.1
  • RHSA-2025:23248 Released 2025-12-16 · Red Hat rating Important
    RHSA 4.7.9 security and bug fix update
    • Red Hat Advanced Cluster Security 4.7 registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8, registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8, registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8 +8
  • RHSA-2025:23080 Released 2025-12-10 · Red Hat rating Important
    Red Hat AI Inference Server Model Optimization Tools 3.2.2 (CUDA)
    • Red Hat AI Inference Server 3.2 registry.redhat.io/rhaiis/model-opt-cuda-rhel9
  • RHSA-2025:23079 Released 2025-12-10 · Red Hat rating Important
    Red Hat AI Inference Server 3.2.2 (ROCm)
    • Red Hat AI Inference Server 3.2 registry.redhat.io/rhaiis/vllm-rocm-rhel9
  • RHSA-2025:23078 Released 2025-12-10 · Red Hat rating Important
    Red Hat AI Inference Server 3.2.2 (CUDA)
    • Red Hat AI Inference Server 3.2 registry.redhat.io/rhaiis/vllm-cuda-rhel9
  • RHSA-2025:22868 Released 2025-12-08 · Red Hat rating Important
    Insights proxy Container Image
    • Red Hat Insights proxy 1.5 registry.redhat.io/insights-proxy/insights-proxy-container-rhel9
  • RHSA-2025:22548 Released 2025-12-02 · Red Hat rating Important
    Red Hat Ceph Storage
    • Red Hat Ceph Storage 8 registry.redhat.io/rhceph/rhceph-8-rhel9, registry.redhat.io/rhceph/rhceph-haproxy-rhel9
  • RHSA-2025:22529 Released 2025-12-01 · Red Hat rating Important
    Red Hat Ceph Storage
    • Red Hat Ceph Storage 7 registry.redhat.io/rhceph/rhceph-7-rhel9
  • RHSA-2025:21994 Released 2025-11-24 · Red Hat rating Important
    A Subscription Management tool for finding and reporting Red Hat product usage
    • Red Hat Discovery 2 registry.redhat.io/discovery/discovery-server-rhel9, registry.redhat.io/discovery/discovery-ui-rhel9
  • RHSA-2025:21913 Released 2025-11-21 · Red Hat rating Important
    OpenShift File Integrity Operator bug fix and enhancement update
    • OpenShift File Integrity Operator - FIO 1 registry.redhat.io/compliance/openshift-file-integrity-rhel8-operator
  • RHSA-2025:21885 Released 2025-11-20 · Red Hat rating Important
    OpenShift Compliance Operator bug fix and enhancement update
    • OpenShift Compliance Operator 1 registry.redhat.io/compliance/openshift-compliance-content-rhel8, registry.redhat.io/compliance/openshift-compliance-must-gather-rhel8, registry.redhat.io/compliance/openshift-compliance-openscap-rhel8 +1
  • RHSA-2025:19894 Released 2025-11-13 · Red Hat rating Important
    OpenShift Container Platform 4.12.82 bug fix and security update
    • Red Hat OpenShift Container Platform 4.12 rhcos-x86_64-412.86.202510291903-0
  • RHSA-2025:20936 Released 2025-11-11 · Red Hat rating Important
    sqlite security update
    • Red Hat Enterprise Linux AppStream (v. 9) sqlite-3.34.1-9.el9_7, sqlite-devel-3.34.1-9.el9_7
    • Red Hat Enterprise Linux BaseOS (v. 9) sqlite-3.34.1-9.el9_7, sqlite-libs-3.34.1-9.el9_7
  • RHSA-2025:19041 Released 2025-10-30 · Red Hat rating Important
    OpenShift Container Platform 4.14.58 bug fix and security update
    • Red Hat OpenShift Container Platform 4.14 rhcos-aarch64-414.92.202510211419-0, rhcos-ppc64le-414.92.202510211419-0, rhcos-s390x-414.92.202510211419-0 +1
  • RHSA-2025:19046 Released 2025-10-29 · Red Hat rating Important
    OpenShift Container Platform 4.18.27 bug fix and security update
    • Red Hat OpenShift Container Platform 4.18 rhcos-aarch64-418.94.202510230424-0, rhcos-ppc64le-418.94.202510230424-0, rhcos-s390x-418.94.202510230424-0 +1
  • RHSA-2025:18240 Released 2025-10-23 · Red Hat rating Important
    OpenShift Container Platform 4.13.61 bug fix and security update
    • Red Hat OpenShift Container Platform 4.13 rhcos-x86_64-413.92.202510150118-0
  • RHSA-2025:18217 Released 2025-10-22 · Red Hat rating Important
    OpenShift Container Platform 4.19.17 bug fix and security update
    • Red Hat OpenShift Container Platform 4.19 rhcos-aarch64-4.19.9.6.202510140714-0, rhcos-ppc64le-4.19.9.6.202510140714-0, rhcos-s390x-4.19.9.6.202510140714-0 +1
  • RHSA-2025:18218 Released 2025-10-22 · Red Hat rating Important
    OpenShift Container Platform 4.17.42 bug fix and security update
    • Red Hat OpenShift Container Platform 4.17 rhcos-aarch64-417.94.202510112152-0, rhcos-ppc64le-417.94.202510112152-0, rhcos-s390x-417.94.202510112152-0 +1
  • RHSA-2025:15397 Released 2025-10-21 · Red Hat rating Important
    OpenShift Container Platform 4.20.0 bug fix and security update
    • Red Hat OpenShift Container Platform 4.20 rhcos-aarch64-4.20.9.6.202509251656-0, rhcos-ppc64le-4.20.9.6.202509251656-0, rhcos-s390x-4.20.9.6.202509251656-0 +1
  • RHSA-2025:18219 Released 2025-10-16 · Red Hat rating Important
    cert-manager Operator for Red Hat OpenShift 1.16.0
    • cert-manager operator for Red Hat OpenShift 1.16 registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9
  • RHSA-2025:15828 Released 2025-09-15 · Red Hat rating Important
    updated web-terminal/tooling container image
    • Red Hat Web Terminal 1.11 on RHEL 9 web-terminal/web-terminal-rhel9-operator, web-terminal/web-terminal-tooling-rhel9
  • RHSA-2025:15827 Released 2025-09-15 · Red Hat rating Important
    updated web-terminal/tooling container image
    • Red Hat Web Terminal 1.12 on RHEL 9 web-terminal/web-terminal-tooling-rhel9
  • RHSA-2025:14101 Released 2025-08-19 · Red Hat rating Important
    mingw-sqlite security update
    • Red Hat Enterprise Linux CRB (v. 8) mingw-sqlite-3.26.0.0-2.el8_10, mingw32-sqlite-3.26.0.0-2.el8_10, mingw32-sqlite-static-3.26.0.0-2.el8_10 +2
  • RHSA-2025:13335 Released 2025-08-07 · Red Hat rating Important
    Insights proxy Container Image
    • Red Hat Insights proxy 1.5 registry.redhat.io/insights-proxy/insights-proxy-container-rhel9
  • RHSA-2025:13267 Released 2025-08-06 · Red Hat rating Important
    A Subscription Management tool for finding and reporting Red Hat product usage
    • Red Hat Discovery 2 registry.redhat.io/discovery/discovery-server-rhel9
  • RHSA-2025:12904 Released 2025-08-05 · Red Hat rating Important
    sqlite security update
    • Red Hat Enterprise Linux AppStream AUS (v.8.6) lemon-3.26.0-16.el8_6.3
    • Red Hat Enterprise Linux AppStream E4S (v.8.6) lemon-3.26.0-16.el8_6.3
    • Red Hat Enterprise Linux AppStream TUS (v.8.6) lemon-3.26.0-16.el8_6.3
    • Red Hat Enterprise Linux BaseOS AUS (v.8.6) sqlite-3.26.0-16.el8_6.3, sqlite-devel-3.26.0-16.el8_6.3, sqlite-doc-3.26.0-16.el8_6.3 +1
    • Red Hat Enterprise Linux BaseOS E4S (v.8.6) sqlite-3.26.0-16.el8_6.3, sqlite-devel-3.26.0-16.el8_6.3, sqlite-doc-3.26.0-16.el8_6.3 +1
    • Red Hat Enterprise Linux BaseOS TUS (v.8.6) sqlite-3.26.0-16.el8_6.3, sqlite-devel-3.26.0-16.el8_6.3, sqlite-doc-3.26.0-16.el8_6.3 +1
  • RHSA-2025:12905 Released 2025-08-05 · Red Hat rating Important
    sqlite security update
    • Red Hat Enterprise Linux AppStream AUS (v.8.4) lemon-3.26.0-13.el8_4.1
    • Red Hat Enterprise Linux AppStream EUS EXTENSION (v.8.4) lemon-3.26.0-13.el8_4.1
    • Red Hat Enterprise Linux BaseOS AUS (v.8.4) sqlite-3.26.0-13.el8_4.1, sqlite-devel-3.26.0-13.el8_4.1, sqlite-doc-3.26.0-13.el8_4.1 +1
    • Red Hat Enterprise Linux BaseOS EUS EXTENSION (v.8.4) sqlite-3.26.0-13.el8_4.1, sqlite-devel-3.26.0-13.el8_4.1, sqlite-doc-3.26.0-13.el8_4.1 +1
  • RHSA-2025:12901 Released 2025-08-05 · Red Hat rating Important
    sqlite security update
    • Red Hat Enterprise Linux AppStream AUS (v. 8.2) lemon-3.26.0-6.el8_2.1
    • Red Hat Enterprise Linux BaseOS AUS (v. 8.2) sqlite-3.26.0-6.el8_2.1, sqlite-devel-3.26.0-6.el8_2.1, sqlite-doc-3.26.0-6.el8_2.1 +1
  • RHSA-2025:12749 Released 2025-08-04 · Red Hat rating Important
    sqlite security update
    • Red Hat Enterprise Linux AppStream E4S (v.9.2) sqlite-3.34.1-6.el9_2.2, sqlite-devel-3.34.1-6.el9_2.2
    • Red Hat Enterprise Linux BaseOS E4S (v.9.2) sqlite-3.34.1-6.el9_2.2, sqlite-libs-3.34.1-6.el9_2.2
  • RHSA-2025:12521 Released 2025-08-04 · Red Hat rating Important
    sqlite security update
    • Red Hat Enterprise Linux AppStream E4S (v.8.8) lemon-3.26.0-18.el8_8.2
    • Red Hat Enterprise Linux AppStream TUS (v.8.8) lemon-3.26.0-18.el8_8.2
    • Red Hat Enterprise Linux BaseOS E4S (v.8.8) sqlite-3.26.0-18.el8_8.2, sqlite-devel-3.26.0-18.el8_8.2, sqlite-doc-3.26.0-18.el8_8.2 +1
    • Red Hat Enterprise Linux BaseOS TUS (v.8.8) sqlite-3.26.0-18.el8_8.2, sqlite-devel-3.26.0-18.el8_8.2, sqlite-doc-3.26.0-18.el8_8.2 +1
  • RHSA-2025:12522 Released 2025-08-04 · Red Hat rating Important
    sqlite security update
    • Red Hat Enterprise Linux AppStream E4S (v.9.0) sqlite-3.34.1-5.el9_0.1, sqlite-devel-3.34.1-5.el9_0.1
    • Red Hat Enterprise Linux BaseOS E4S (v.9.0) sqlite-3.34.1-5.el9_0.1, sqlite-libs-3.34.1-5.el9_0.1
  • RHSA-2025:12349 Released 2025-07-31 · Red Hat rating Important
    sqlite security update
    • Red Hat Enterprise Linux Server (v. 7 ELS) sqlite-3.7.17-9.el7_9.1, sqlite-3.7.17-9.el7_9.1.ppc, sqlite-devel-3.7.17-9.el7_9.1 +1
    • Red Hat Enterprise Linux Server Optional (v. 7 ELS) lemon-3.7.17-9.el7_9.1, sqlite-doc-3.7.17-9.el7_9.1, sqlite-tcl-3.7.17-9.el7_9.1
  • RHSA-2025:12036 Released 2025-07-29 · Red Hat rating Important
    sqlite security update
    • Red Hat Enterprise Linux AppStream EUS (v.9.4) sqlite-3.34.1-7.el9_4.1, sqlite-devel-3.34.1-7.el9_4.1
    • Red Hat Enterprise Linux BaseOS EUS (v.9.4) sqlite-3.34.1-7.el9_4.1, sqlite-libs-3.34.1-7.el9_4.1
  • RHSA-2025:12010 Released 2025-07-28 · Red Hat rating Important
    sqlite security update
    • Red Hat Enterprise Linux AppStream (v. 8) lemon-3.26.0-20.el8_10
    • Red Hat Enterprise Linux BaseOS (v. 8) sqlite-3.26.0-20.el8_10, sqlite-devel-3.26.0-20.el8_10, sqlite-doc-3.26.0-20.el8_10 +1
  • RHSA-2025:11992 Released 2025-07-28 · Red Hat rating Important
    sqlite security update
    • Red Hat Enterprise Linux AppStream (v. 9) sqlite-3.34.1-8.el9_6, sqlite-devel-3.34.1-8.el9_6
    • Red Hat Enterprise Linux BaseOS (v. 9) sqlite-3.34.1-8.el9_6, sqlite-libs-3.34.1-8.el9_6
  • RHSA-2025:11933 Released 2025-07-28 · Red Hat rating Important
    sqlite security update
    • Red Hat Enterprise Linux AppStream (v. 10) sqlite-3.46.1-5.el10_0, sqlite-devel-3.46.1-5.el10_0
    • Red Hat Enterprise Linux BaseOS (v. 10) sqlite-3.46.1-5.el10_0, sqlite-libs-3.46.1-5.el10_0
  • RHSA-2025:11802 Released 2025-07-28 · Red Hat rating Important
    nodejs:22 security update
    • Red Hat Enterprise Linux AppStream (v. 9) nodejs-1:22.16.0-2.module+el9.6.0+23339+d3c8acfa.aarch64::nodejs:22, nodejs-1:22.16.0-2.module+el9.6.0+23339+d3c8acfa.ppc64le::nodejs:22, nodejs-1:22.16.0-2.module+el9.6.0+23339+d3c8acfa.s390x::nodejs:22 +28
  • RHSA-2025:11803 Released 2025-07-28 · Red Hat rating Important
    nodejs:22 security update
    • Red Hat Enterprise Linux AppStream (v. 8) nodejs-1:22.16.0-2.module+el8.10.0+23338+c5a38893.aarch64::nodejs:22, nodejs-1:22.16.0-2.module+el8.10.0+23338+c5a38893.ppc64le::nodejs:22, nodejs-1:22.16.0-2.module+el8.10.0+23338+c5a38893.s390x::nodejs:22 +28

Vendor assessments

Red Hat

Red Hat rating: Important. Red Hat's page for this CVE →

ProductStatusPlan or fix
Red Hat Enterprise Linux 6AffectedNo fix planned: Out of support scope
Red Hat Enterprise Linux 7AffectedNo fix planned: Out of support scope
8Base-Openshift-Serverless-1.36Fixed RHSA-2026:0934
OpenShift Compliance Operator 1Fixed RHSA-2025:21885
OpenShift File Integrity Operator - FIO 1Fixed RHSA-2025:21913
Red Hat AI Inference Server 3.2Fixed RHSA-2025:23078, RHSA-2025:23079, RHSA-2025:23080, RHSA-2026:3461, RHSA-2026:3462
Red Hat Advanced Cluster Security 4.7Fixed RHSA-2025:23248
Red Hat Ceph Storage 7Fixed RHSA-2025:22529
Red Hat Ceph Storage 8Fixed RHSA-2025:22548, RHSA-2026:1652
Red Hat Discovery 2Fixed RHSA-2025:13267, RHSA-2025:21994
Red Hat Enterprise Linux AppStream (v. 10)Fixed RHSA-2025:11933
Red Hat Enterprise Linux AppStream (v. 8)Fixed RHSA-2025:11803, RHSA-2025:12010
Red Hat Enterprise Linux AppStream (v. 9)Fixed RHSA-2025:11802, RHSA-2025:11992, RHSA-2025:20936
Red Hat Enterprise Linux AppStream AUS (v. 8.2)Fixed RHSA-2025:12901, RHSA-2026:0078
Red Hat Enterprise Linux AppStream AUS (v.8.4)Fixed RHSA-2025:12905, RHSA-2026:0077
Red Hat Enterprise Linux AppStream AUS (v.8.6)Fixed RHSA-2025:12904, RHSA-2026:0076
Red Hat Enterprise Linux AppStream E4S (v.8.6)Fixed RHSA-2025:12904, RHSA-2026:0076
Red Hat Enterprise Linux AppStream E4S (v.8.8)Fixed RHSA-2025:12521, RHSA-2026:0001
Red Hat Enterprise Linux AppStream E4S (v.9.0)Fixed RHSA-2025:12522
Red Hat Enterprise Linux AppStream E4S (v.9.2)Fixed RHSA-2025:12749
Red Hat Enterprise Linux AppStream EUS (v.9.4)Fixed RHSA-2025:12036
Red Hat Enterprise Linux AppStream EUS EXTENSION (v.8.4)Fixed RHSA-2025:12905, RHSA-2026:0077
Red Hat Enterprise Linux AppStream TUS (v.8.6)Fixed RHSA-2025:12904, RHSA-2026:0076
Red Hat Enterprise Linux AppStream TUS (v.8.8)Fixed RHSA-2025:12521, RHSA-2026:0001
Red Hat Enterprise Linux BaseOS (v. 10)Fixed RHSA-2025:11933
Red Hat Enterprise Linux BaseOS (v. 8)Fixed RHSA-2025:12010
Red Hat Enterprise Linux BaseOS (v. 9)Fixed RHSA-2025:11992, RHSA-2025:20936
Red Hat Enterprise Linux BaseOS AUS (v. 8.2)Fixed RHSA-2025:12901
Red Hat Enterprise Linux BaseOS AUS (v.8.4)Fixed RHSA-2025:12905
Red Hat Enterprise Linux BaseOS AUS (v.8.6)Fixed RHSA-2025:12904
Red Hat Enterprise Linux BaseOS E4S (v.8.6)Fixed RHSA-2025:12904
Red Hat Enterprise Linux BaseOS E4S (v.8.8)Fixed RHSA-2025:12521
Red Hat Enterprise Linux BaseOS E4S (v.9.0)Fixed RHSA-2025:12522
Red Hat Enterprise Linux BaseOS E4S (v.9.2)Fixed RHSA-2025:12749
Red Hat Enterprise Linux BaseOS EUS (v.9.4)Fixed RHSA-2025:12036
Red Hat Enterprise Linux BaseOS EUS EXTENSION (v.8.4)Fixed RHSA-2025:12905
Red Hat Enterprise Linux BaseOS TUS (v.8.6)Fixed RHSA-2025:12904
Red Hat Enterprise Linux BaseOS TUS (v.8.8)Fixed RHSA-2025:12521
Red Hat Enterprise Linux CRB (v. 8)Fixed RHSA-2025:14101
Red Hat Enterprise Linux Server (v. 7 ELS)Fixed RHSA-2025:12349
Red Hat Enterprise Linux Server Optional (v. 7 ELS)Fixed RHSA-2025:12349
Red Hat Insights proxy 1.5Fixed RHSA-2025:13335, RHSA-2025:22868
Red Hat OpenShift Container Platform 4.12Fixed RHSA-2025:19894
Red Hat OpenShift Container Platform 4.13Fixed RHSA-2025:18240
Red Hat OpenShift Container Platform 4.14Fixed RHSA-2025:19041
Red Hat OpenShift Container Platform 4.15Fixed RHSA-2026:67857
Red Hat OpenShift Container Platform 4.16Fixed RHSA-2026:62549
Red Hat OpenShift Container Platform 4.17Fixed RHSA-2025:18218
Red Hat OpenShift Container Platform 4.18Fixed RHSA-2025:19046
Red Hat OpenShift Container Platform 4.19Fixed RHSA-2025:18217
Red Hat OpenShift Container Platform 4.20Fixed RHSA-2025:15397
Red Hat Service Interconnect 1Fixed RHSA-2026:6481
Red Hat Web Terminal 1.11 on RHEL 9Fixed RHSA-2025:15828
Red Hat Web Terminal 1.12 on RHEL 9Fixed RHSA-2025:15827
cert-manager operator for Red Hat OpenShift 1.16Fixed RHSA-2025:18219
Not affected: 10 products
  • OpenShift Compliance Operator 1
  • OpenShift File Integrity Operator - FIO 1
  • Red Hat Advanced Cluster Security 4.7
  • Red Hat Ceph Storage 7
  • Red Hat Ceph Storage 8
  • Red Hat Discovery 2
  • Red Hat Enterprise Linux 10
  • Red Hat Enterprise Linux 8
  • Red Hat Enterprise Linux 9
  • cert-manager operator for Red Hat OpenShift 1.16

Timeline

  1. 2026-10-02 Threatist record created from CVE-2025-6965
  2. 2026-10-03 Alias added: GHSA-2m69-gcr7-jv3q
  3. 2026-10-09 Affected versions changed · Red Hat
  4. 2026-10-10 Fix available: Compliance Operator 1 · Red Hat
  5. 2026-11-03 CISA SSVC decision points changed
  6. 2026-11-06 Fix available: OpenShift Compliance Operator 1 · Red Hat

References

Patch 1

Advisory 9

Other 3

  • TI-2026-82983 Heap buffer overflow in SQLite FTS5 rowid list merging CVSS 4.0HIGH 8.5
  • TI-2025-43154 An information disclosure issue in the zipfileInflate function in the zipfile extension… CVSS 3.1HIGH 7.5
  • TI-2022-16180 SQLite 1.0.12 through 3.39.x before 3.39.2 sometimes allows an array-bounds overflow if… CVSS 3.1HIGH 7.5
  • TI-2021-11445 An issue found in SQLite SQLite3 v.3.35.4 that allows a remote attacker to cause a denial… CVSS 3.1HIGH 7.5
  • TI-2019-06073 Out-of-bounds read in SQLite CVSS 3.1CRITICAL 9.8
  • TI-2022-23247 SQLite through 3.40.0, when relying on --safe for execution of an untrusted CLI script… CVSS 3.1HIGH 7.3
See all 75 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences