Repository navigation
Update macOS and Windows installers to SQLite 3.53.1 #149029
Description
Activity
This also should address CVE-2025-70873.
An information disclosure issue in the zipfileInflate function in the zipfile extension in SQLite v3.51.1 and earlier allows attackers to obtain heap memory via supplying a crafted ZIP file.
Yup. SQLite 3.53.1 is out now, I'll update the issue title and PR to reflect the new version!
- changed the title
[-]Update macOS and Windows installers to SQLite 3.53.0[/-][+]Update macOS and Windows installers to SQLite 3.53.1[/+]on May 13, 2026
Feature or enhancement
Proposal:
SQLite 3.53.0 has a number of performance enhancements and a fix for "the WAL-reset bug": https://www.sqlite.org/changes.html . Additionally, SQLite 3.53.1 addresses CVE-2025-70873.
It would be neat to update it so Python users can take advantage of these improvements. Notably, I made a Django ticket for one of the
ALTER TABLEenhancements, but that won't be useful until Python ships the new SQLite.Has this already been discussed elsewhere?
No response given
Links to previous discussion of this feature:
I found the last update was done in #137134 to pull in some security fixes.
Linked PRs