USN-8775-1: SQLite vulnerability

Publication date

16 September 2026

Overview

SQLite could be made to crash if it opened a specially crafted file.


Packages

  • sqlite3 - C library that implements an SQL database engine

Details

It was discovered that SQLite was vulnerable to a buffer overflow in
the sqlar extension. If a user were tricked into opening a specially
crafted SQLar archive, an attacker could cause a denial of service.

It was discovered that SQLite was vulnerable to a buffer overflow in
the sqlar extension. If a user were tricked into opening a specially
crafted SQLar archive, an attacker could cause a denial of service.

Update instructions

In general, a standard system update will make all the necessary changes.

Learn more about how to get the fixes.

The problem can be corrected by updating your system to the following package versions:

Ubuntu Release Package Version
26.04 LTS resolute libsqlite3-0 –  3.46.1-9ubuntu0.3
sqlite3 –  3.46.1-9ubuntu0.3
24.04 LTS noble libsqlite3-0 –  3.45.1-1ubuntu2.8
sqlite3 –  3.45.1-1ubuntu2.8
22.04 LTS jammy libsqlite3-0 –  3.37.2-2ubuntu0.8
sqlite3 –  3.37.2-2ubuntu0.8
20.04 LTS focal libsqlite3-0 –  3.31.1-4ubuntu0.7+esm2  
sqlite3 –  3.31.1-4ubuntu0.7+esm2  
18.04 LTS bionic libsqlite3-0 –  3.22.0-1ubuntu0.7+esm3  
sqlite3 –  3.22.0-1ubuntu0.7+esm3  

Reduce your security exposure

Ubuntu Pro provides ten-year security coverage to 25,000+ packages in Main and Universe repositories, and it is free for up to five machines.


Have additional questions?

Talk to a member of the team ›