Accepting request 593020 from home:AndreasStieger:branches:server:database

sqlite3 3.23.0
    + CVE-2018-8740: NULL pointer dereference on CREATE TABLE as
      (bsc#1085790)

OBS-URL: https://build.opensuse.org/request/show/593020
OBS-URL: https://build.opensuse.org/package/show/server:database/sqlite3?expand=0&rev=203

sqlite-autoconf-3220000.tar.gz

@@ -1,3 +0,0 @@
-version https://git-lfs.github.com/spec/v1
-oid sha256:2824ab1238b706bc66127320afbdffb096361130e23291f26928a027b885c612
-size 2644649

sqlite-autoconf-3230000.tar.gz

@@ -0,0 +1,3 @@
+version https://git-lfs.github.com/spec/v1
+oid sha256:b7711a1800a071674c2bf76898ae8584fc6c9643cfe933cfc1bc54361e3a6e49
+size 2674030

sqlite-doc-3220000.zip

@@ -1,3 +0,0 @@
-version https://git-lfs.github.com/spec/v1
-oid sha256:34763f0c90e94e5b5fd78d699209d28ef4b409279a9ce796c16b2b653a761343
-size 5856836

sqlite-doc-3230000.zip

@@ -0,0 +1,3 @@
+version https://git-lfs.github.com/spec/v1
+oid sha256:bbcd7e875350d68d0b60486ce7b91c51c66b17e7b850c71e1a4357a3baa9c2d5
+size 8832536

sqlite3.changes

@@ -1,3 +1,37 @@
+-------------------------------------------------------------------
+Mon Apr  2 18:33:42 UTC 2018 - astieger@suse.com
+
+- update to 3.23.0:
+  * Add the sqlite3_serialize() and sqlite3_deserialize()
+    interfaces when the SQLITE_ENABLE_DESERIALIZE compile-time
+    option is used.
+  * Recognize TRUE and FALSE as constants. (For compatibility, if
+    there exist columns named "true" or "false", then the
+    identifiers refer to the columns rather than Boolean constants.)
+  * Support operators IS TRUE, IS FALSE, IS NOT TRUE, and IS NOT FALSE.
+  * Added the SQLITE_DBSTATUS_CACHE_SPILL option to
+    sqlite3_db_status() for reporting the number of cache spills
+    that have occurred.
+  * The "alternate-form-2" flag ("!") on the built-in printf
+    implementation now causes string substitutions to measure the
+    width and precision in characters instead of bytes.
+  * If the xColumn method in a virtual table implementation returns
+    an error message using sqlite3_result_error() then give that
+    error message preference over internally-generated messages.
+  * Added the -A command-line option to the CLI to make it easier to
+    manage SQLite Archive files.
+  * Add support for INSERT OR REPLACE, INSERT OR IGNORE, and UPDATE
+    OR REPLACE in the Zipfile virtual table.
+  * Enhance the sqlite3changeset_apply() interface so that it is
+    hardened against attacks from deliberately corrupted changeset
+    objects.
+  * Added the sqlite3_normalize() extension function.
+  * Query optimizer enhancements
+  * Various bug fixes
+  * Fix various issues reported by fuzzers, including:
+    + CVE-2018-8740: NULL pointer dereference on CREATE TABLE as
+      (bsc#1085790)
+
 -------------------------------------------------------------------
 Thu Feb  1 20:49:08 UTC 2018 - astieger@suse.com
 

sqlite3.spec

@@ -17,9 +17,9 @@
 
 
 %define oname sqlite
-%define tarversion 3220000
+%define tarversion 3230000
 Name:           sqlite3
-Version:        3.22.0
+Version:        3.23.0
 Release:        0
 Summary:        Embeddable SQL Database Engine
 License:        SUSE-Public-Domain