linux/poky.git/meta/recipes-support/sqlite, branch thud

sqlite3: Security fix for CVE-2019-8457

2019-10-10T15:52:30+00:00

(From OE-Core rev: c0c66d213b4b6deb0a5e9a688810d2e9674d3ecf) Signed-off-by: Shubham Agrawal [Cleaned up patch] Signed-off-by: Armin Kuster Signed-off-by: Richard Purdie

sqlite3: Security fixes for CVE-2018-20505 & 20506

2019-07-27T17:05:18+00:00

Source: sqlite.org MR: 97484, 97490 Type: Security Fix Disposition: Backport from sqilte.org ChangeID: c6105b5d3ce4fb2c0f38c3cab745b769d2df38f5 Description: Affects < 3.26.0 fixes: CVE-2018-20505 CVE-2018-20506 (From OE-Core rev: e2f9efdc93068bce00b07021aa447f0b8786f69d) Signed-off-by: Armin Kuster Signed-off-by: Armin Kuster Signed-off-by: Richard Purdie

sqlite3: Merge/simplify CFLAGS

2018-06-18T10:07:57+00:00

An earlier version of a change was merged from S. Lockwood-Childs which made the CFLAGS consistent across native, nativesdk and target cases. This syncs with a later verison of the patch to remove duplicate CFLAGS settings and simplify the recipe. (From OE-Core rev: 604777acfc54d285f315b622bd147ed02d55d6fd) Signed-off-by: Richard Purdie

sqlite3: consistent set of features for nativesdk

2018-06-15T16:56:24+00:00

Enable use of pread() and enable column metadata API for nativesdk builds. This brings nativesdk in line with target and native builds. (From OE-Core rev: 7c8b85e1c3d852975cd5961a297aa939bf4c7fe7) Signed-off-by: Richard Purdie

sqlite3: upgrade 3.23.0 -> 3.23.1

2018-05-22T12:13:32+00:00

(From OE-Core rev: 6a90852e7e8fd6d17308d78966e700f17f567898) Signed-off-by: Marko Peter Signed-off-by: Ross Burton Signed-off-by: Richard Purdie

sqlite3: upgrade to version 3.23.0

2018-05-04T12:28:03+00:00

3.22.0 -> 3.23.0 Includes optimizations and fixes for issues detected by OSSFuzz (From OE-Core rev: b478af4cd9c1cb0cab35b0160f7df3f31ca7358b) Signed-off-by: Maxin B. John Signed-off-by: Richard Purdie

sqlite3: upgrade to version 3.22.0

2018-01-26T13:09:10+00:00

Update SRC_URI for releases in 2018. (From OE-Core rev: fff2409587e8a253c1f79a3d3c78907440402188) Signed-off-by: Maxin B. John Signed-off-by: Ross Burton Signed-off-by: Richard Purdie

sqlite3: upgrade to 3.21.0

2017-11-21T13:06:11+00:00

Remove upstreamed patch: 1. sqlite3-fix-CVE-2017-13685.patch (From OE-Core rev: 483711e676cd063a873179bdb2daedf56de0aa75) Signed-off-by: Maxin B. John Signed-off-by: Ross Burton Signed-off-by: Richard Purdie

sqlite3: fix CVE-2017-13685

2017-10-16T22:52:44+00:00

The dump_callback function in SQLite 3.20.0 allows remote attackers to cause a denial of service (EXC_BAD_ACCESS and application crash) via a crafted file. Backport patch to fix the issue. Some references: https://sqlite.org/src/info/02f0f4c54f2819b3 http://www.mail-archive.com/sqlite-users%40mailinglists.sqlite.org/msg105314.html (From OE-Core rev: 9b9f566d2042f2b393de88506d2da964bc4d17b0) Signed-off-by: Wenzong Fan Signed-off-by: Ross Burton Signed-off-by: Richard Purdie

sqlite3: upgrade to 3.2.0

2017-08-18T09:40:27+00:00

* Uprev from 3.19.3 to 3.2.0 for fixing CVE-2017-10989: The getNodeSize function in ext/rtree/rtree.c in SQLite through 3.19.3, as used in GDAL and other products, mishandles undersized RTree blobs in a crafted database, leading to a heap-based buffer over-read or possibly unspecified other impact. https://nvd.nist.gov/vuln/detail/CVE-2017-10989 * LIC_FILES_CHKSUM updated for below changes: -** 2001 September 15 +** 2001-09-15 (From OE-Core rev: 95b802bfe74ac6a3f6dc05edb52c87ef90600f40) Signed-off-by: Wenzong Fan Signed-off-by: Richard Purdie