]> code.ossystems Code Review - openembedded-core.git/commit
sqlite3: upgrade to 3.2.0
authorWenzong Fan <wenzong.fan@windriver.com>
Wed, 16 Aug 2017 05:58:36 +0000 (22:58 -0700)
committerRichard Purdie <richard.purdie@linuxfoundation.org>
Fri, 18 Aug 2017 09:40:08 +0000 (10:40 +0100)
commit95b802bfe74ac6a3f6dc05edb52c87ef90600f40
tree27d5d08745a8925315f667403222537f337a6cfa
parenta4ad0703e1209fee6cd89bf74088931785c4d8c7
sqlite3: upgrade to 3.2.0

* Uprev from 3.19.3 to 3.2.0 for fixing CVE-2017-10989:

The getNodeSize function in ext/rtree/rtree.c in SQLite through 3.19.3,
as used in GDAL and other products, mishandles undersized RTree blobs
in a crafted database, leading to a heap-based buffer over-read or
possibly unspecified other impact.

https://nvd.nist.gov/vuln/detail/CVE-2017-10989

* LIC_FILES_CHKSUM updated for below changes:

  -** 2001 September 15
  +** 2001-09-15

Signed-off-by: Wenzong Fan <wenzong.fan@windriver.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
meta/recipes-support/sqlite/sqlite3_3.19.3.bb [deleted file]
meta/recipes-support/sqlite/sqlite3_3.20.0.bb [new file with mode: 0644]