diff --git a/sqlite-CVE-2022-46908.patch b/sqlite-CVE-2022-46908.patch deleted file mode 100644 index 719fcb0..0000000 --- a/sqlite-CVE-2022-46908.patch +++ /dev/null @@ -1,56 +0,0 @@ -Index: src/shell.c.in -================================================================== ---- src/shell.c.in -+++ src/shell.c.in -@@ -1878,11 +1878,11 @@ - "readfile", - "writefile", - "zipfile", - "zipfile_cds", - }; -- UNUSED_PARAMETER(zA2); -+ UNUSED_PARAMETER(zA1); - UNUSED_PARAMETER(zA3); - UNUSED_PARAMETER(zA4); - switch( op ){ - case SQLITE_ATTACH: { - #ifndef SQLITE_SHELL_FIDDLE -@@ -1893,11 +1893,11 @@ - break; - } - case SQLITE_FUNCTION: { - int i; - for(i=0; i + +- Update to 3.40.1: + * Fix the --safe command-line option to the CLI such that it + correctly disallows the use of SQL functions like writefile() + that can cause harmful side-effects. + (previously patched, drop sqlite-CVE-2022-46908.patch) + * Fix a potential infinite loop in the memsys5 alternative memory + allocator. This bug was introduced by a performance + optimization in version 3.39.0. + * Various other obscure fixes. + ------------------------------------------------------------------- Tue Dec 13 16:10:49 UTC 2022 - Reinhard Max diff --git a/sqlite3.spec b/sqlite3.spec index 1cc82dc..fef1681 100644 --- a/sqlite3.spec +++ b/sqlite3.spec @@ -17,11 +17,11 @@ %define oname sqlite -%define tarversion 3400000 +%define tarversion 3400100 %bcond_with icu %bcond_without check Name: sqlite3 -Version: 3.40.0 +Version: 3.40.1 Release: 0 Summary: Embeddable SQL Database Engine License: SUSE-Public-Domain @@ -31,7 +31,6 @@ Source0: https://www.sqlite.org/2022/sqlite-src-%{tarversion}.zip Source1: baselibs.conf Source2: https://www.sqlite.org/2022/sqlite-doc-%{tarversion}.zip Patch0: sqlite-src-3390000-func7-pg-181.patch -Patch1: sqlite-CVE-2022-46908.patch BuildRequires: automake BuildRequires: libtool BuildRequires: pkgconfig @@ -130,7 +129,6 @@ other documentation found on sqlite.org. The files can be found in %prep %setup -q -n sqlite-src-%{tarversion} -a2 %patch0 -p1 -%patch1 rm -v sqlite-doc-%{tarversion}/releaselog/current.html ln -sv `echo %{version} | sed "s/\./_/g"`.html sqlite-doc-%{tarversion}/releaselog/current.html