sqlite version upgrade needed to fix BDBA high violation #2570
Conversation
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
amd-shiraz
requested review from
ScottTodd,
geomin12,
jayhawk-commits,
marbre and
stellaraccident
stellaraccident
approved these changes
Dec 16, 2025
geomin12
approved these changes
Dec 16, 2025
amd-shiraz
changed the title
marbre
approved these changes
Dec 16, 2025
benrichard-amd
pushed a commit
to benrichard-amd/TheRock
that referenced
this pull request
Jan 5, 2026
## Motivation Sqlite version 3.49 used by TheRock has a high severity BDBA violation http://protecode-sc.amd.com/#/vulnerabilities/BDSA-2025-11433 The fix for that violation is in sqlite version 3.50.4. This PR addresses the issue ## Technical Details update sqlite from https://www.sqlite.org/2025/sqlite-amalgamation-3500400.zip SHA256 verification steps: certutil -hashfile sqlite-amalgamation-3500400.zip SHA256 SHA256 hash of sqlite-amalgamation-3500400.zip: 1d3049dd0f830a025a53105fc79fd2ab9431aea99e137809d064d8ee8356b032 ## Test Plan CI tests runs for all arch types as part of PR checks ## Test Result CI tests passing for all arch types in PR ## Submission Checklist - [X ] Look over the contributing guidelines at https://github.com/ROCm/ROCm/blob/develop/CONTRIBUTING.md#pull-requests.
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
4 participants
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
Motivation
Sqlite version 3.49 used by TheRock has a high severity BDBA violation http://protecode-sc.amd.com/#/vulnerabilities/BDSA-2025-11433
The fix for that violation is in sqlite version 3.50.4.
This PR addresses the issue
Technical Details
update sqlite from https://www.sqlite.org/2025/sqlite-amalgamation-3500400.zip
SHA256 verification steps:
certutil -hashfile sqlite-amalgamation-3500400.zip SHA256
SHA256 hash of sqlite-amalgamation-3500400.zip:
1d3049dd0f830a025a53105fc79fd2ab9431aea99e137809d064d8ee8356b032
Test Plan
CI tests runs for all arch types as part of PR checks
Test Result
CI tests passing for all arch types in PR
Submission Checklist