linux/poky.git/meta/recipes-support/sqlite, branch zeus-next

sqlite: backport CVE fix

2020-08-04T22:17:38+00:00

Fixes CVE-2020-11655 (From OE-Core rev: 3b06a6c73f4e49c6d00f758423c2e8865ec2de00) (From OE-Core rev: 36edee3e489e7bd94d6fa555f87d94c5ec0f3ad8) Signed-off-by: Sakib Sajal Signed-off-by: Richard Purdie [ without the CVE-2020-11656 fix that did not apply cleanly ] Signed-off-by: Adrian Bunk Signed-off-by: Anuj Mittal Signed-off-by: Richard Purdie

sqlite: fix numerous CVEs

2020-03-19T09:57:50+00:00

Fix the following CVEs: - CVE-2019-19244 - CVE-2019-19923 - CVE-2019-19924 - CVE-2019-19925 - CVE-2019-19926 - CVE-2019-19959 - CVE-2019-20218 (From OE-Core rev: feb8982ac6670af3bcb1243b51054bba9b027c83) Signed-off-by: Ross Burton Signed-off-by: Richard Purdie [ removed the CVE-2019-19880 fix that did not apply cleanly ] Signed-off-by: Adrian Bunk Signed-off-by: Anuj Mittal Signed-off-by: Richard Purdie

sqlite3: fix CVE-2019-16168

2019-10-29T09:08:17+00:00

(From OE-Core rev: 948b0dd6d91eeed529c6983141ab80327fa4ae9c) Signed-off-by: Chen Qi Signed-off-by: Armin Kuster Signed-off-by: Richard Purdie

sqlite3: explicitly set target endian-ness

2019-08-28T10:31:22+00:00

Unless SQLITE_BYTEORDER is predefined, the code falls back to build time huristics - which are not always correct (e.g. in sqlite 3.28.0 big-endian ARM is mis-detected). (From OE-Core rev: c0fc43c228acd44499d9a1c257ec5e4cf42ed050) Signed-off-by: Andre McCurdy Signed-off-by: Richard Purdie

sqlite3: make CFLAGS consistent across native, nativesdk and target cases

2019-08-28T10:31:22+00:00

The previous simplification: https://git.openembedded.org/openembedded-core/commit/?id=604777acfc54d285f315b622bd147ed02d55d6fd looked OK but didn't actually work as expected. The native and nativesdk classes re-set CFLAGS after the += has been applied and so any modifications made via += are lost. Use _append instead. (From OE-Core rev: b02d83f7ffc72b96799a7964a90709eef02aa29d) Signed-off-by: Andre McCurdy Signed-off-by: Richard Purdie

sqlite3: Fix zlib determinism problem

2019-08-07T15:08:15+00:00

sqlite3-native in particular was finding zlib from the host if zlib-devel was installed. This could lead to races where pseudo-native may or may not fail to build. We don't need/use compressed page support with sqlite so disable the dependency (it doesn't have a configure option so use a autoconf cache variable). The target binaries were not previously building with zlib, so we will leave the default being zlib turned off, while the host binaries were building with it "occasionally", but not for anything at runtime. (From OE-Core rev: 0af2c6af0d5c060666f7ee6f2ef428c1a414cb86) Signed-off-by: Jason Wessel Signed-off-by: Richard Purdie

sqlite3: Upgrade 3.28.0 -> 3.29.0

2019-07-15T08:29:59+00:00

Upgrade from sqlite3_3.28.0.bb to sqlite3_3.29.0.bb. (From OE-Core rev: 184d574b35be9229c50331ad48c38cd444f53a60) Signed-off-by: Zang Ruochen Signed-off-by: Richard Purdie

sqlite3: update to 3.28.0

2019-05-08T22:00:32+00:00

(From OE-Core rev: 9be07e8c8eea8565df73405775ec2ffb60659118) Signed-off-by: Oleksandr Kravchuk Signed-off-by: Richard Purdie

sqlite3: fix CVE-2019-9936 and CVE-2019-9937

2019-04-01T13:48:44+00:00

(From OE-Core rev: 4ec161ea684b305b303f32e96ce23f472c82e1a1) Signed-off-by: Ross Burton Signed-off-by: Richard Purdie

sqlite3: Upgrade 3.26.0 -> 3.27.2

2019-03-07T21:55:29+00:00

(From OE-Core rev: eb12c672c8f9a0d85a38e84cf0f6aa000bb1cf9f) Signed-off-by: Adrian Bunk Signed-off-by: Richard Purdie