<feed xmlns='http://www.w3.org/2005/Atom'>
<title>linux/poky.git/meta/recipes-support/sqlite/sqlite3, branch scarthgap</title>
<subtitle>Mirror of git.yoctoproject.org/poky</subtitle>
<id>https://git.enea.com/cgit/linux/poky.git/atom?h=scarthgap</id>
<link rel='self' href='https://git.enea.com/cgit/linux/poky.git/atom?h=scarthgap'/>
<link rel='alternate' type='text/html' href='https://git.enea.com/cgit/linux/poky.git/'/>
<updated>2026-05-04T12:57:31+00:00</updated>
<entry>
<title>sqlite3: Fix CVE-2025-70873</title>
<updated>2026-05-04T12:57:31+00:00</updated>
<author>
<name>Vijay Anusuri</name>
<email>vanusuri@mvista.com</email>
</author>
<published>2026-04-02T08:13:49+00:00</published>
<link rel='alternate' type='text/html' href='https://git.enea.com/cgit/linux/poky.git/commit/?id=6916cc525e43982b2569ff515efa9f23b35197e9'/>
<id>urn:sha1:6916cc525e43982b2569ff515efa9f23b35197e9</id>
<content type='text'>
Pick patch as per [1]

[1] https://sqlite.org/src/info/3d459f1fb1bd1b5e
[2] https://sqlite.org/forum/forumpost/761eac3c82
[3] https://gist.github.com/cnwangjihe/f496393f30f5ecec5b18c8f5ab072054

(From OE-Core rev: e948f33fa6bf69619b406ccd8dc4e5470e223335)

Signed-off-by: Vijay Anusuri &lt;vanusuri@mvista.com&gt;
Signed-off-by: Yoann Congal &lt;yoann.congal@smile.fr&gt;
Signed-off-by: Paul Barker &lt;paul@pbarker.dev&gt;
</content>
</entry>
<entry>
<title>sqlite3: patch CVE-2025-7709</title>
<updated>2025-11-26T15:50:35+00:00</updated>
<author>
<name>Hugo SIMELIERE</name>
<email>hsimeliere.opensource@witekio.com</email>
</author>
<published>2025-11-14T16:00:07+00:00</published>
<link rel='alternate' type='text/html' href='https://git.enea.com/cgit/linux/poky.git/commit/?id=49e4da8b0a6a84c5dc0a6837c55f7b5e1cd06c37'/>
<id>urn:sha1:49e4da8b0a6a84c5dc0a6837c55f7b5e1cd06c37</id>
<content type='text'>
Pick commit used in debian patch https://git.launchpad.net/ubuntu/+source/sqlite3/commit/?id=9a309a50fa99e3b69623894bfd7d1f84d9fab33c
Upstream-Status: Backport [https://github.com/sqlite/sqlite/commit/192d0ff8ccf0bf55776a5930cdc64e25f87299d6]

(From OE-Core rev: baaf28f6f2eac600f7caf53660a0b75f0329e86a)

Signed-off-by: Bruno VERNAY &lt;bruno.vernay@se.com&gt;
Signed-off-by: Hugo SIMELIERE &lt;hsimeliere.opensource@witekio.com&gt;
Signed-off-by: Steve Sakoman &lt;steve@sakoman.com&gt;
</content>
</entry>
<entry>
<title>sqlite3: fix CVE-2025-6965</title>
<updated>2025-07-29T14:59:52+00:00</updated>
<author>
<name>Roland Kovacs</name>
<email>roland.kovacs@est.tech</email>
</author>
<published>2025-07-24T12:40:14+00:00</published>
<link rel='alternate' type='text/html' href='https://git.enea.com/cgit/linux/poky.git/commit/?id=d5613f0d2efc51001a88b0b76a6d040c9f3f3583'/>
<id>urn:sha1:d5613f0d2efc51001a88b0b76a6d040c9f3f3583</id>
<content type='text'>
There exists a vulnerability in SQLite versions before 3.50.2 where the
number of aggregate terms could exceed the number of columns available.
This could lead to a memory corruption issue.

(From OE-Core rev: 52499a5ea3b4ba145914aca873844ab718953289)

Signed-off-by: Roland Kovacs &lt;roland.kovacs@est.tech&gt;
Signed-off-by: Steve Sakoman &lt;steve@sakoman.com&gt;
</content>
</entry>
<entry>
<title>sqlite3: mark CVE-2025-29087 as patched</title>
<updated>2025-05-08T20:37:29+00:00</updated>
<author>
<name>Peter Marko</name>
<email>peter.marko@siemens.com</email>
</author>
<published>2025-05-03T16:58:02+00:00</published>
<link rel='alternate' type='text/html' href='https://git.enea.com/cgit/linux/poky.git/commit/?id=5d362ec2d71e09323259195defe0ef2bb140794f'/>
<id>urn:sha1:5d362ec2d71e09323259195defe0ef2bb140794f</id>
<content type='text'>
Description of CVE-2025-29087 and CVE-2025-3277 are very similar.
There is no lonk from NVD, but [1] and [2] from Debian mark these two
CVEs as duplicates with the same link for patch.

[1] https://security-tracker.debian.org/tracker/CVE-2025-29087
[2] https://security-tracker.debian.org/tracker/CVE-2025-3277

(From OE-Core rev: 3f951941c758b6982a3cd30d085460756b7fefd9)

Signed-off-by: Peter Marko &lt;peter.marko@siemens.com&gt;
Signed-off-by: Steve Sakoman &lt;steve@sakoman.com&gt;
</content>
</entry>
<entry>
<title>sqlite3: patch CVE-2025-29088</title>
<updated>2025-04-28T15:18:53+00:00</updated>
<author>
<name>Peter Marko</name>
<email>peter.marko@siemens.com</email>
</author>
<published>2025-04-18T19:33:48+00:00</published>
<link rel='alternate' type='text/html' href='https://git.enea.com/cgit/linux/poky.git/commit/?id=f8ca40f3d1c504e065dc4e52bc059ef438d754eb'/>
<id>urn:sha1:f8ca40f3d1c504e065dc4e52bc059ef438d754eb</id>
<content type='text'>
Pick commit [1] mentioned in [2].

[1] https://github.com/sqlite/sqlite/commit/56d2fd008b108109f489339f5fd55212bb50afd4
[2] https://nvd.nist.gov/vuln/detail/CVE-2025-29088

(From OE-Core rev: 6a65833a53487571b1ed0831dcc0b1fb04946557)

Signed-off-by: Peter Marko &lt;peter.marko@siemens.com&gt;
Signed-off-by: Steve Sakoman &lt;steve@sakoman.com&gt;
</content>
</entry>
<entry>
<title>sqlite3: patch CVE-2025-3277</title>
<updated>2025-04-28T15:18:53+00:00</updated>
<author>
<name>Peter Marko</name>
<email>peter.marko@siemens.com</email>
</author>
<published>2025-04-18T18:35:01+00:00</published>
<link rel='alternate' type='text/html' href='https://git.enea.com/cgit/linux/poky.git/commit/?id=72bb9edc9a5a067d2384c20cc5e7d18659c14d0c'/>
<id>urn:sha1:72bb9edc9a5a067d2384c20cc5e7d18659c14d0c</id>
<content type='text'>
Pick commit [1] mentioned in [2].

[1] https://sqlite.org/src/info/498e3f1cf57f164f
[2] https://nvd.nist.gov/vuln/detail/CVE-2025-3277

(From OE-Core rev: 2f800295919ac337f038e1678f4c0abb2a6e7f95)

Signed-off-by: Peter Marko &lt;peter.marko@siemens.com&gt;
Signed-off-by: Steve Sakoman &lt;steve@sakoman.com&gt;
</content>
</entry>
<entry>
<title>sqlite3: upgrade 3.30.1 -&gt; 3.31.1</title>
<updated>2020-02-05T12:00:34+00:00</updated>
<author>
<name>Anuj Mittal</name>
<email>anuj.mittal@intel.com</email>
</author>
<published>2020-02-04T05:51:45+00:00</published>
<link rel='alternate' type='text/html' href='https://git.enea.com/cgit/linux/poky.git/commit/?id=73333dd4b8f80f9d6224b319f476a7bf0e27b83c'/>
<id>urn:sha1:73333dd4b8f80f9d6224b319f476a7bf0e27b83c</id>
<content type='text'>
(From OE-Core rev: 621ea68239763ce8740731e745c5002c956d4c67)

Signed-off-by: Anuj Mittal &lt;anuj.mittal@intel.com&gt;
Signed-off-by: Richard Purdie &lt;richard.purdie@linuxfoundation.org&gt;
</content>
</entry>
<entry>
<title>sqlite: fix numerous CVEs</title>
<updated>2020-01-16T22:33:09+00:00</updated>
<author>
<name>Ross Burton</name>
<email>ross.burton@intel.com</email>
</author>
<published>2020-01-14T16:05:52+00:00</published>
<link rel='alternate' type='text/html' href='https://git.enea.com/cgit/linux/poky.git/commit/?id=8dd90ff82e781821b6f4c2ce2c353936c8e042d2'/>
<id>urn:sha1:8dd90ff82e781821b6f4c2ce2c353936c8e042d2</id>
<content type='text'>
Fix the following CVEs:

- CVE-2019-19244
- CVE-2019-19880
- CVE-2019-19923
- CVE-2019-19924
- CVE-2019-19925
- CVE-2019-19926
- CVE-2019-19959
- CVE-2019-20218

(From OE-Core rev: f3ebf3f8dd0b4d144db451a8fcb352762f7fbd75)

Signed-off-by: Ross Burton &lt;ross.burton@intel.com&gt;
Signed-off-by: Richard Purdie &lt;richard.purdie@linuxfoundation.org&gt;
</content>
</entry>
<entry>
<title>sqlite3: update to 3.28.0</title>
<updated>2019-05-08T22:00:32+00:00</updated>
<author>
<name>Oleksandr Kravchuk</name>
<email>open.source@oleksandr-kravchuk.com</email>
</author>
<published>2019-05-07T16:11:09+00:00</published>
<link rel='alternate' type='text/html' href='https://git.enea.com/cgit/linux/poky.git/commit/?id=fe5b1ceb4137c6f5511b8d07be2a517818b2d15d'/>
<id>urn:sha1:fe5b1ceb4137c6f5511b8d07be2a517818b2d15d</id>
<content type='text'>
(From OE-Core rev: 9be07e8c8eea8565df73405775ec2ffb60659118)

Signed-off-by: Oleksandr Kravchuk &lt;open.source@oleksandr-kravchuk.com&gt;
Signed-off-by: Richard Purdie &lt;richard.purdie@linuxfoundation.org&gt;
</content>
</entry>
<entry>
<title>sqlite3: fix CVE-2019-9936 and CVE-2019-9937</title>
<updated>2019-04-01T13:48:44+00:00</updated>
<author>
<name>Ross Burton</name>
<email>ross.burton@intel.com</email>
</author>
<published>2019-03-28T23:30:04+00:00</published>
<link rel='alternate' type='text/html' href='https://git.enea.com/cgit/linux/poky.git/commit/?id=f7db0478d2387a4534a555b2cdb6429edf984adc'/>
<id>urn:sha1:f7db0478d2387a4534a555b2cdb6429edf984adc</id>
<content type='text'>
(From OE-Core rev: 4ec161ea684b305b303f32e96ce23f472c82e1a1)

Signed-off-by: Ross Burton &lt;ross.burton@intel.com&gt;
Signed-off-by: Richard Purdie &lt;richard.purdie@linuxfoundation.org&gt;
</content>
</entry>
</feed>
