Rafael Meira accepted merge request !6: fix: update sqlite-libs to address CVE-2025-6965 at Multitech Open Source Projects / Dockerfiles / PHP / 8.3-frankenphp

Rafael Meira
2026-04-06T20:11:51Z

Summary

Add explicit sqlite-libs package to Dockerfile, Dockerfile.dev, and Dockerfile.helm to fix CVE-2025-6965 (critical)

CVE-2025-6965 is a SQLite vulnerability that allows memory corruption when aggregate terms exceed available columns

The fix ensures the patched version (>= 3.44.2-r2) is pulled during Docker build

Files changed

Dockerfile — added RUN apk add --no-cache sqlite-libs

Dockerfile.dev — same

Dockerfile.helm — same

No changes needed in Dockerfile.octane or Dockerfile.testing as they inherit from the fixed images.

Verification

After merge and CI build:

docker run --rm registry.gitlab.com/multitech-osp/dockerfiles/php/8.3-frankenphp apk info sqlite-libs

Confirm version >= 3.44.2-r2. Then rebuild multi-notify-api and re-run Trivy scan.

🤖 Generated with Claude Code