Update to sqlite3 3.20.0.

Fixes CVE-2017-10989 ('The getNodeSize function in ext/rtree/rtree.c in
SQLite through 3.19.3, as used in GDAL and other products, mishandles
undersized RTree blobs in a crafted database, leading to a heap-based
buffer over-read or possibly unspecified other impact.')

The standalone fix itself is at
https://sqlite.org/src/vpatch?from=0db20efe201736b3&to=66de6f4a9504ec26

Pass -DSQLITE_ENABLE_FTS3 via CFLAGS, as it apparently fixes build
issues with mozilla (from FreeBSD r447626 via naddy@)
This commit is contained in:
landry 2017-08-10 16:00:23 +00:00
parent 7686fed6c8
commit c019efca07
2 changed files with 7 additions and 6 deletions

View File

@ -1,11 +1,11 @@
# $OpenBSD: Makefile,v 1.85 2017/06/18 19:02:59 landry Exp $
# $OpenBSD: Makefile,v 1.86 2017/08/10 16:00:23 landry Exp $
COMMENT= embedded SQL implementation
DISTNAME = sqlite-autoconf-3190300
PKGNAME= sqlite3-3.19.3
DISTNAME = sqlite-autoconf-3200000
PKGNAME= sqlite3-3.20.0
SHARED_LIBS += sqlite3 36.0 # 8.6
SHARED_LIBS += sqlite3 37.0 # 8.6
CATEGORIES= databases
@ -24,6 +24,7 @@ CONFIGURE_ARGS= --enable-editline \
# for mozilla
CFLAGS+= -DSQLITE_ENABLE_UNLOCK_NOTIFY \
-DSQLITE_ENABLE_FTS3 \
-DSQLITE_ENABLE_DBSTAT_VTAB
# update p5-DBD-SQLite's Makefile.PL if enabling -DSQLITE_ENABLE_COLUMN_METADATA

View File

@ -1,2 +1,2 @@
SHA256 (sqlite-autoconf-3190300.tar.gz) = BhKcA9ztn4dzOoy6QIhxvWBnO4+TuSC6jYFe+rCgYwE=
SIZE (sqlite-autoconf-3190300.tar.gz) = 2542682
SHA256 (sqlite-autoconf-3200000.tar.gz) = OBTG9in/k5aLKzenBJfP6Ys2a/WHoiYaVqX3UK9q5qA=
SIZE (sqlite-autoconf-3200000.tar.gz) = 2565548