Sync from SUSE:SLFO:Main sqlite3 revision 99d31279b6536a1ef10aafb5ca8d4927

sqlite-3.49.0-fix-lemon-missing-cflags.patch

@@ -0,0 +1,25 @@
+From 0d7a62843abaa422130c78f6f69b996ee71a3c10 Mon Sep 17 00:00:00 2001
+From: Ales Nezbeda <anezbeda@redhat.com>
+Date: Thu, 27 Feb 2025 14:04:22 +0100
+Subject: [PATCH] Fix lemon not using CFLAGS
+
+---
+ main.mk | 2 +-
+ 1 file changed, 1 insertion(+), 1 deletion(-)
+
+diff --git a/main.mk b/main.mk
+index 808f925..38749c8 100644
+--- a/main.mk
++++ b/main.mk
+@@ -1058,7 +1058,7 @@ libsqlite3.SO = libsqlite3$(T.dll)
+ # Rules to build the LEMON compiler generator
+ #
+ lemon$(B.exe): $(MAKE_SANITY_CHECK) $(TOP)/tool/lemon.c $(TOP)/tool/lempar.c
+-	$(B.cc) -o $@ $(TOP)/tool/lemon.c
++	$(T.cc) -o $@ $(TOP)/tool/lemon.c
+ 	cp $(TOP)/tool/lempar.c .
+ 
+ # Rules to build the program that generates the source-id
+-- 
+2.48.1
+

sqlite-3.6.23-lemon-system-template.patch

@@ -0,0 +1,11 @@
+--- a/tool/lemon.c
++++ b/tool/lemon.c
+@@ -3686,6 +3686,8 @@
+     tpltname = buf;
+   }else if( access(templatename,004)==0 ){
+     tpltname = templatename;
++  }else if( access("/usr/share/lemon/lempar.c", R_OK)==0){
++    tpltname = "/usr/share/lemon/lempar.c";
+   }else{
+     toFree = tpltname = pathsearch(lemp->argv[0],templatename,0);
+   }

sqlite3-rpmlintrc

@@ -0,0 +1,2 @@
+# Driver template for the LEMON parser generator
+addFilter("devel-file-in-non-devel-package /usr/share/lemon/lempar.c")

sqlite3.changes

@@ -1,13 +1,95 @@
+-------------------------------------------------------------------
+Mon Aug 11 16:04:48 UTC 2025 - Reinhard Max <max@suse.com>
+
+- Update to version 3.50.4:
+  * Fix two long-standings cases of the use of uninitialized
+    variables in obscure circumstances. 
+
+-------------------------------------------------------------------
+Thu Jul 17 16:17:25 UTC 2025 - Reinhard Max <max@suse.com>
+
+- Update to version 3.50.3:
+  * Fix a possible memory error that can occur if a query is made
+    against against FTS5 index that has been deliberately corrupted
+    in a very specific way.
+  * Fix the parser so that it ignored SQL comments in all places of
+    a CREATE TRIGGER statement. This resolves a problem that was
+    introduced by the introduction of the
+    SQLITE_DBCONFIG_ENABLE_COMMENTS feature in version 3.49.0.
+  * Fix an incorrect answer due to over-optimization of an AND
+    operator.
+
+-------------------------------------------------------------------
+Tue Jul  1 12:04:55 UTC 2025 - Reinhard Max <max@suse.com>
+
+- Update to 3.50.2:
+  * Fix the concat_ws() SQL function so that it includes empty
+    strings in the concatenation.
+  * Avoid writing frames with no checksums into the wal file if a
+    savepoint is rolled back after dirty pages have already been
+    spilled into the wal file.
+  * Fix the Bitvec object to avoid stack overflow when the
+    database is within 60 pages of its maximum size.
+  * Fix a problem with UPDATEs on fts5 tables that contain BLOB
+    values.
+  * Fix an issue with transitive IS constraints on a RIGHT JOIN.
+  * CVE-2025-6965, bsc#1246597:
+    Raise an error early if the number of aggregate terms in a
+    query exceeds the maximum number of columns, to avoid
+    downstream assertion faults.
+  * Ensure that sqlite3_setlk_timeout() holds the database mutex.
+
+-------------------------------------------------------------------
+Mon Jun  9 07:56:06 UTC 2025 - Andreas Stieger <andreas.stieger@gmx.de>
+
+- Update to 3.50 (3.50.1):
+  * Improved handling and robust output of control characters
+  * sqlite3_rsync no longer requires WAL mode and needs less
+    bandwidth
+  * Bug fixes and optimized JSON handling
+  * Performance optimizations and developer visible fixes
+
+-------------------------------------------------------------------
+Wed May  7 13:09:13 UTC 2025 - Reinhard Max <max@suse.com>
+
+- Update to release 3.49.2:
+  * Fix a bug in the NOT NULL optimization of version 3.40.0 that
+    can lead to a memory error if abused.
+  * Fix the count-of-view optimization so that it does not give an
+    incorrect answer for a DISTINCT query.
+  * Fix a possible incorrect answer that can result if a UNIQUE
+    constraint of a table contains the PRIMARY KEY column and that
+    UNIQUE constraint is used by an IN operator.
+  * Fix obscure problems with the generate_series() extension
+    function.
+  * Incremental improvements to the configure/make.
+
+-------------------------------------------------------------------
+Thu Apr 17 09:33:26 UTC 2025 - Martin Hauke <mardnh@gmx.de>
+
+- Add subpackage for the lemon parser generator.
+- Add patches:
+  * sqlite-3.49.0-fix-lemon-missing-cflags.patch
+  * sqlite-3.6.23-lemon-system-template.patch
+
+-------------------------------------------------------------------
+Tue Mar 11 21:34:05 UTC 2025 - Jan Engelhardt <jengelh@inai.de>
+
+- Mark build recipe as POSIX-sh-incompatible
+- Run mkdir/rm with verbose mode for the build log
+
 -------------------------------------------------------------------
 Tue Feb 18 16:21:23 UTC 2025 - Reinhard Max <max@suse.com>
 
-- Update to release 3.19.1:
+- Update to release 3.49.1:
   * Improve portability of makefiles and configure scripts.
-  * Fix a bug in the concat_ws() function, introduced in version
+  * CVE-2025-29087, CVE-2025-3277, bsc#1241020:
+    Fix a bug in the concat_ws() function, introduced in version
     3.44.0, that could lead to a memory error if the separator
     string is very large (hundreds of megabytes).
-  * Enhanced the SQLITE_DBCONFIG_LOOKASIDE interface to make it
-    more robust against misuse.
+  * CVE-2025-29088, bsc#1241078: Enhanced the
+    SQLITE_DBCONFIG_LOOKASIDE interface to make it  more robust
+    against misuse.
 
 -------------------------------------------------------------------
 Thu Feb  6 17:58:46 UTC 2025 - Reinhard Max <max@suse.com>

sqlite3.spec

@@ -2,6 +2,7 @@
 # spec file for package sqlite3
 #
 # Copyright (c) 2025 SUSE LLC
+# Copyright (c) 2025 Andreas Stieger <Andreas.Stieger@gmx.de>
 #
 # All modifications and additions to the file contributed by third parties
 # remain the property of their copyright owners, unless otherwise agreed
@@ -16,21 +17,25 @@
 #
 
 
+%define _buildshell /bin/bash
 %define oname sqlite
-%define tarversion 3490100
-%define docversion 3490100
+%define tarversion 3500400
+%define docversion 3500400
 %bcond_with icu
 %bcond_without check
 Name:           sqlite3
-Version:        3.49.1
+Version:        3.50.4
 Release:        0
 Summary:        Embeddable SQL Database Engine
 License:        SUSE-Public-Domain
 Group:          Productivity/Databases/Servers
 URL:            https://www.sqlite.org/
-Source0:        https://www.sqlite.org/2023/sqlite-src-%{tarversion}.zip
+Source0:        https://www.sqlite.org/2025/sqlite-src-%{tarversion}.zip
 Source1:        baselibs.conf
-Source2:        https://www.sqlite.org/2023/sqlite-doc-%{docversion}.zip
+Source2:        https://www.sqlite.org/2025/sqlite-doc-%{docversion}.zip
+Source99:       %{name}-rpmlintrc
+Patch0:         sqlite-3.6.23-lemon-system-template.patch
+Patch1:         sqlite-3.49.0-fix-lemon-missing-cflags.patch
 BuildRequires:  automake
 BuildRequires:  libtool
 BuildRequires:  pkgconfig
@@ -66,7 +71,7 @@ application that supports the Qt database plug-ins.
 
 %package -n libsqlite3-0
 Summary:        Shared libraries for the Embeddable SQL Database Engine
-Group:          Development/Libraries/C and C++
+Group:          System/Libraries
 
 %description -n libsqlite3-0
 This package contains the shared libraries for the Embeddable SQL
@@ -122,13 +127,26 @@ Group:          Documentation/Other
 BuildArch:      noarch
 
 %description doc
-
 Contains HTML documentation for SQLite: SQL Syntax, C/C++ API and
 other documentation found on sqlite.org. The files can be found in
 %{_docdir}/%{name}-doc.
 
+%package -n lemon
+Summary:        A parser generator
+
+%description -n lemon
+Lemon is an LALR(1) parser generator for C or C++. It does the same
+job as bison and yacc. But lemon is not another bison or yacc
+clone. It uses a different grammar syntax which is designed to reduce
+the number of coding errors. Lemon also uses a more sophisticated
+parsing engine that is faster than yacc and bison and which is both
+reentrant and thread-safe. Furthermore, Lemon implements features
+that can be used to eliminate resource leaks, making is suitable for
+use in long-running programs such as graphical user interfaces or
+embedded controllers.
+
 %prep
-# Version and %tarversion need to match, but %docversion might be different,
+# Version and %%tarversion need to match, but %%docversion might be different,
 IFS=. read a b c d <<< "%version"
 if [ "%tarversion" != $(printf "%1d%02d%02d%02d" $a $b $c $d) ]
 then
@@ -136,7 +154,7 @@ then
 	exit 1
 fi
 
-%autosetup -p0 -n sqlite-src-%{tarversion} -a2
+%autosetup -p1 -n sqlite-src-%{tarversion} -a2
 
 rm -v sqlite-doc-%{docversion}/releaselog/current.html
 ln -sv `echo %{docversion} | sed "s/\./_/g"`.html sqlite-doc-%{docversion}/releaselog/current.html
@@ -188,15 +206,15 @@ export CFLAGS="%{optflags} \
 
 %install
 %make_install
-#mkdir -p %{buildroot}/%{_mandir}/man{1,n}/
-install -Dp -m 0644 -t %{buildroot}/%{_mandir}/man1 sqlite3.1
-install -Dp -m 0644 -t %{buildroot}/%{_mandir}/mann autoconf/tea/doc/sqlite3.n
+install -Dpvm 0644 -t %{buildroot}/%{_mandir}/man1 sqlite3.1
+install -Dpvm 0644 -t %{buildroot}/%{_mandir}/mann autoconf/tea/doc/sqlite3.n
+install -Dpvm 0755 -t %{buildroot}%{_bindir} lemon
+install -Dpvm 0644 -t %{buildroot}%{_datadir}/lemon tool/lempar.c
 # tcl bindings are provided by tcl itself
-#rm -rf %{buildroot}%{_libdir}/tcl/tcl8.?/sqlite3*
+#rm -rf %%{buildroot}%%{_libdir}/tcl/tcl8.?/sqlite3*
 find %{buildroot} -type f -name "*.la" -delete -print
 
-%post -n libsqlite3-0 -p /sbin/ldconfig
-%postun -n libsqlite3-0 -p /sbin/ldconfig
+%ldconfig_scriptlets -n libsqlite3-0
 
 %files
 %{_bindir}/sqlite3
@@ -218,4 +236,8 @@ find %{buildroot} -type f -name "*.la" -delete -print
 %files doc
 %doc sqlite-doc-%{docversion}/*
 
+%files -n lemon
+%{_bindir}/lemon
+%{_datadir}/lemon
+
 %changelog