According to https://www.sqlite.org/versionnumbers.html major versions of sqlite remain ABI and file format backwards compatible. It means we could graft without trouble, 3.32.3 fixes all CVEs, however 3.32 introduces a test failure in Python 3.8.2 which is an errorneous test testing internal sqlite implementation detail (but grafting wont actually re-run this test suite). See: https://bugs.python.org/issue40784 Otherwise I am still trying to run GNU Guix's own test suite on this but it turns out unnecessarily complicated, see https://issues.guix.gnu.org/47230 for suggestions on improving that process. Attached WIP patch. Thank you! Léo