Alexander Kanavin
08471afec7
sqlite3: upgrade 3.43.0 -> 3.43.1
...
(From OE-Core rev: 4274ac35c178392837919f3b8b068e05fccd3a08)
Signed-off-by: Alexander Kanavin <alex@linutronix.de >
Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com >
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org >
2023-09-26 10:35:27 +01:00
Changqing Li
03d23dca92
sqlite3: set CVE_STATUS for CVE-2023-36191
...
The error is a bug. It has been fixed upstream. But it is not a
vulnerability. You may safely ignore the CVE.
Refer:
[1] https://www.sqlite.org/forum/forumpost/19f55ef73b
(From OE-Core rev: 34874433c1e6c9e21d45d9ba686e4bb15479659d)
Signed-off-by: Changqing Li <changqing.li@windriver.com >
Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com >
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org >
2023-09-04 20:14:14 +01:00
Wang Mingyu
84bd7580d4
sqlite3: upgrade 3.42.0 -> 3.43.0
...
Changelog:
==========
-Add support for Contentless-Delete FTS5 Indexes.
-Enhancements to the date and time functions:
-Added the octet_length(X) SQL function.
-Added the sqlite3_stmt_explain() API.
(From OE-Core rev: d398efb21ec8a67f6b52ba27fd5eb8e85e851b15)
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com >
Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com >
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org >
2023-09-02 18:23:06 +01:00
Andrej Valek
c15e506a46
cve_check: convert CVE_CHECK_IGNORE to CVE_STATUS
...
- Try to add convert and apply statuses for old CVEs
- Drop some obsolete ignores, while they are not relevant for current
version
(From OE-Core rev: 1634ed4048cf56788cd5c2c1bdc979b70afcdcd7)
Signed-off-by: Andrej Valek <andrej.valek@siemens.com >
Reviewed-by: Peter Marko <peter.marko@siemens.com >
Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com >
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org >
2023-07-21 11:52:26 +01:00
Anuj Mittal
9832a5b466
sqlite3: upgrade 3.41.2 -> 3.42.0
...
(From OE-Core rev: 6613920d4058afacfde7000cad9feba7ee5562b9)
Signed-off-by: Anuj Mittal <anuj.mittal@intel.com >
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org >
2023-07-10 11:36:34 +01:00
Richard Purdie
6c02a8628d
Revert "sqlite3: Whitelist CVE-2022-21227"
...
This reverts commit cfc42fdabb3f12eb4ac5069a549ba5699385dfdc.
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org >
2023-05-30 13:25:47 +01:00
Sanjay Chitroda
4a4f2b6df0
sqlite3: Whitelist CVE-2022-21227
...
This CVE is applicable to "SQLite3 bindings for Node.js" only.
References:
https://nvd.nist.gov/vuln/detail/CVE-2022-21227
(From OE-Core rev: cfc42fdabb3f12eb4ac5069a549ba5699385dfdc)
Signed-off-by: Sanjay Chitroda <schitrod@cisco.com >
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org >
2023-05-29 13:42:00 +01:00
schitrod=cisco.com@lists.openembedded.org
934487d99a
Revert "sqlite3: update CVE_PRODUCT"
...
This reverts commit 8800976e79d65956218ab462d9644d0661579301.
As per NVD database "ghost:sqlite3" product is specific to "node.js"
CVEs reported against above products are not applicable to us.
(From OE-Core rev: 7616b1d28cb119adb471b5268a77ec61d5dd555c)
Signed-off-by: Sanjay Chitroda <schitrod@cisco.com >
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org >
2023-05-29 13:42:00 +01:00
Chen Qi
4e8ce11d0d
sqlite3: update CVE_PRODUCT
...
Both 'sqlite' and 'sqlite3' are used in NVD database.
(From OE-Core rev: 8800976e79d65956218ab462d9644d0661579301)
Signed-off-by: Chen Qi <Qi.Chen@windriver.com >
Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com >
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org >
2023-05-10 17:18:57 +01:00
Wang Mingyu
3c499ac5a3
sqlite3: upgrade 3.41.0 -> 3.41.2
...
(From OE-Core rev: b6c475ea37660859b6ae91ac2e5fbf674f7ccfde)
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com >
Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com >
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org >
2023-04-13 11:56:07 +01:00
Alexander Kanavin
966e2e8ca1
sqlite3: update 3.40.1 -> 3.41.0
...
(From OE-Core rev: 789a5ab8243ab0283d3e268d4b93e02c7128effc)
Signed-off-by: Alexander Kanavin <alex@linutronix.de >
Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com >
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org >
2023-03-11 00:08:40 +00:00
Changqing Li
e0f71ff8ab
sqlite3: upgrade 3.40.0 -> 3.40.1
...
(From OE-Core rev: feeb34257bf955d4d9bf26e803a2ea30116ab1b0)
Signed-off-by: Changqing Li <changqing.li@windriver.com >
Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com >
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org >
2023-01-06 12:03:47 +00:00
Wang Mingyu
ccba52147d
sqlite3: upgrade 3.39.4 -> 3.40.0
...
(From OE-Core rev: 4739495b806ee2d82576619511cf72de7feecd67)
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com >
Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com >
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org >
2022-12-06 15:23:18 +00:00
wangmy
b4b317ae6b
sqlite3: upgrade 3.39.3 -> 3.39.4
...
(From OE-Core rev: e47b0afdc9d043df510596b25470c77ce178f699)
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com >
Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com >
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org >
2022-10-26 12:28:38 +01:00
Richard Purdie
ab45e8d132
sqlite3: upgrade 3.39.2 -> 3.39.3
...
(From OE-Core rev: eaca419be8c5d206bd1ec4d24ae756c99e757c15)
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org >
2022-09-17 07:47:08 +01:00
Alexander Kanavin
335d6d3be0
sqlite3: upgrade 3.39.1 -> 3.39.2
...
(From OE-Core rev: dd758e67a95275ca5963318c17c0af1bba231f38)
Signed-off-by: Alexander Kanavin <alex@linutronix.de >
Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com >
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org >
2022-08-10 08:25:28 +01:00
Alexander Kanavin
ac35dec165
sqlite3: upgrade 3.39.0 -> 3.39.1
...
(From OE-Core rev: dc9e72daa756eb39a34731967ee27c01a9386e09)
Signed-off-by: Alexander Kanavin <alex@linutronix.de >
Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com >
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org >
2022-07-23 13:55:26 +01:00
wangmy
175d133ed3
sqlite3: upgrade 3.38.5 -> 3.39.0
...
(From OE-Core rev: 632bf7426a904322904af87c9083b22d6b3c1566)
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com >
Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com >
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org >
2022-07-01 11:31:42 +01:00
Alexander Kanavin
0f09c786b4
sqlite3: upgrade 3.38.3 -> 3.38.5
...
(From OE-Core rev: e1bd414792ae2576685b2a352a5cc93343f06985)
Signed-off-by: Alexander Kanavin <alex@linutronix.de >
Signed-off-by: Luca Ceresoli <luca.ceresoli@bootlin.com >
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org >
2022-05-20 22:52:23 +01:00
Alexander Kanavin
7b92062c84
sqlite3: upgrade 3.38.2 -> 3.38.3
...
(From OE-Core rev: 1efd89a4572bb2f39728fd53a1d4db944b06ff38)
Signed-off-by: Alexander Kanavin <alex@linutronix.de >
Signed-off-by: Luca Ceresoli <luca.ceresoli@bootlin.com >
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org >
2022-05-05 21:17:38 +01:00
wangmy
c84efb8750
sqlite3: upgrade 3.38.1 -> 3.38.2
...
(From OE-Core rev: a285f31f2ca2e8f71d5939862d09211b53adeefb)
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com >
Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com >
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org >
2022-03-29 15:59:29 +01:00
Alexander Kanavin
1f46d65c46
sqlite3: upgrade 3.38.0 -> 3.38.1
...
(From OE-Core rev: 84b70c7d2d76af72cb6df42e0ceda66dbea49d8a)
Signed-off-by: Alexander Kanavin <alex.kanavin@gmail.com >
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org >
2022-03-20 00:02:22 +00:00
wangmy
549c5046de
sqlite3: upgrade 3.37.2 -> 3.38.0
...
Remove invalid PACKAGECONFIG : json1
(From OE-Core rev: 3f665656e3c0134994015235c24240086d5324fc)
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com >
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org >
2022-03-02 18:43:24 +00:00
Richard Purdie
71ef319193
meta/scripts: Automated conversion of OE renamed variables
...
(From OE-Core rev: aa52af4518604b5bf13f3c5e885113bf868d6c81)
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org >
2022-02-21 23:37:27 +00:00
Alexander Kanavin
1039ad104e
sqlite: update 3.37.1 -> 3.37.2
...
(From OE-Core rev: e77c5d7ca59545f99d3bbacd0bac13df061b9a40)
Signed-off-by: Alexander Kanavin <alex@linutronix.de >
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org >
2022-01-20 11:57:29 +00:00
Otavio Salvador
c3a5948e45
sqlite3: upgrade 3.37.0 -> 3.37.1
...
(From OE-Core rev: a4d1d878ddf57688535722ef330938b7e1c78066)
Signed-off-by: Otavio Salvador <otavio@ossystems.com.br >
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org >
2022-01-05 17:18:16 +00:00
wangmy
fb834580eb
sqlite3: upgrade 3.36.0 -> 3.37.0
...
Changelog:
1.STRICT tables provide a prescriptive style of data type management, for
developers who prefer that kind of thing.
2.When adding columns that contain a CHECK constraint or a generated column
containing a NOT NULL constraint, the ALTER TABLE ADD COLUMN now checks new
constraints against preexisting rows in the database and will only proceed if
no constraints are violated.
3.Added the PRAGMA table_list statement.
4.CLI enhancements:
a.Add the .connection command, allowing the CLI to keep multiple database
connections open at the same time.
b.Add the --safe command-line option that disables dot-commands and SQL
statements that might cause side-effects that extend beyond the single
database file named on the command-line.
c.Performance improvements when reading SQL statements that span many lines.
5.Added the sqlite3_autovacuum_pages() interface.
6.The sqlite3_deserialize() does not and has never worked for the TEMP database.
That limitation is now noted in the documentation.
7.The query planner now omits ORDER BY clauses on subqueries and views if
removing those clauses does not change the semantics of the query.
8.The generate_series table-valued function extension is modified so that the
first parameter ("START") is now required. This is done as a way to
demonstrate how to write table-valued functions with required parameters.
The legacy behavior is available using the -DZERO_ARGUMENT_GENERATE_SERIES
compile-time option.
9.Added new sqlite3_changes64() and sqlite3_total_changes64() interfaces.
10.Added the SQLITE_OPEN_EXRESCODE flag option to sqlite3_open_v2().
11.Use less memory to hold the database schema.
(From OE-Core rev: b1c6e95d075531998de5b73e7ec7073647d5a2d2)
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com >
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org >
2021-12-01 16:23:45 +00:00
Richard Purdie
e899b2e25b
sqlite3: Exclude CVE-2021-36690 from cve checks
...
Issue is in an experimental extension we don't have/use. Could also
be windows only.
(From OE-Core rev: 6f5770b49f06168e3d6914bd92f0594bd05f1f8f)
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org >
2021-09-21 23:44:08 +01:00
Richard Purdie
bb6ddc3691
Convert to new override syntax
...
This is the result of automated script conversion:
scripts/contrib/convert-overrides.py <oe-core directory>
converting the metadata to use ":" as the override character instead of "_".
(From OE-Core rev: 42344347be29f0997cc2f7636d9603b1fe1875ae)
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org >
2021-08-02 15:44:10 +01:00
Alexander Kanavin
73546784a2
sqlite3: upgrade 3.35.5 -> 3.36.0
...
(From OE-Core rev: 118564912d65135e971778eac16667a40fd062b4)
(From OE-Core rev: 70da06a05972af2953ce57042aaa605281685030)
Signed-off-by: Alexander Kanavin <alex.kanavin@gmail.com >
Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com >
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org >
2021-06-26 11:27:16 +01:00
Richard Purdie
16e8c05a63
sqlite3: upgrade 3.35.3 -> 3.35.5
...
(From OE-Core rev: a7480b206848df56fb64d9bfec9d4cdffa16efea)
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org >
2021-05-18 12:43:00 +01:00
Randy MacLeod
0b16b83dff
sqlite3: upgrade 3.35.0 -> 3.35.3
...
(From OE-Core rev: 7d511f9b2b1f739e0c96a063d85428b3ab5767b3)
Signed-off-by: Randy MacLeod <Randy.MacLeod@windriver.com >
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org >
2021-04-18 11:37:24 +01:00
Richard Purdie
40cade73ad
sqlite3: upgrade 3.34.1 -> 3.35.0
...
(From OE-Core rev: fd2263bb82fb8a3d0bf74d41777ff55ac14b9447)
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org >
2021-03-16 17:52:21 +00:00
Meh Mbeh Ida Delphine
c8075ed8f1
recipes-support: Add missing HOMEPAGE and DESCRIPTION for recipes
...
Fixes: [YOCTO #13471 ]
(From OE-Core rev: 6db24928d62aeb093a0e6da6619713eaca57a96f)
Signed-off-by: Ida Delphine <idadelm@gmail.com >
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org >
2021-03-02 20:39:36 +00:00
zhengruoqin
6131fb0e1b
sqlite3: upgrade 3.34.0 -> 3.34.1
...
(From OE-Core rev: d26f5601d0cfe15cf9ef953e33e5e36e1b58e915)
Signed-off-by: Zheng Ruoqin <zhengrq.fnst@cn.fujitsu.com >
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org >
2021-02-08 14:47:16 +00:00
Alexander Kanavin
5949ae2dad
sqlite3: upgrade 3.33.0 -> 3.34.0
...
(From OE-Core rev: 12c8b9c2700b5cc69be3e966ad0bd6d6859f82bc)
Signed-off-by: Alexander Kanavin <alex.kanavin@gmail.com >
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org >
2020-12-30 14:01:06 +00:00
Ross Burton
dab763c0a0
sqlite3: add CVE-2015-3717 to whitelist
...
As per https://groups.google.com/g/sqlite-dev/c/U7OjAbZO6LA this issue
is believed to be either iOS specific, or fixed in 3.8.9.
(From OE-Core rev: b781058267bd86bd979c50f4dfe8168c58dfa5a9)
Signed-off-by: Ross Burton <ross.burton@arm.com >
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org >
2020-11-24 10:27:45 +00:00
Anuj Mittal
073ef419d5
sqlite3: upgrade 3.32.3 -> 3.33.0
...
(From OE-Core rev: ef27d18d3b91d0545cb1e4ef3cb8bd002ea73b47)
Signed-off-by: Anuj Mittal <anuj.mittal@intel.com >
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org >
2020-08-19 10:57:44 +01:00
Andreas Müller
a0504d17b2
sqlite3: upgrade 3.32.2 -> 3.32.3
...
(From OE-Core rev: 0facc5fb49ab08c97fae3cb721c990de77d461c7)
Signed-off-by: Andreas Müller <schnitzeltony@gmail.com >
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org >
2020-06-24 18:06:43 +01:00
Andreas Müller
71b50a4310
sqlite3: upgrade 3.32.1 -> 3.32.2
...
(From OE-Core rev: 0f686fabd33d933330b9c6e9b14fff25ae8e7642)
Signed-off-by: Andreas Müller <schnitzeltony@gmail.com >
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org >
2020-06-09 13:13:59 +01:00
Wang Mingyu
c15d342e45
sqlite: upgrade 3.31.1 -> 3.32.1
...
CVE-2020-11655.patch
CVE-2020-11656.patch
CVE-2020-9327.patch
removed since they are included in 3.32.1
(From OE-Core rev: 7ee8501146ceccdbd07104903694a435b75c0606)
Signed-off-by: Wang Mingyu <wangmy@cn.fujitsu.com >
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org >
2020-06-04 13:27:32 +01:00
Sakib Sajal
b3f5f7f10a
sqlite: backport CVE fixes
...
Fixes CVE-2020-11655 and CVE-2020-11656
(From OE-Core rev: 3b06a6c73f4e49c6d00f758423c2e8865ec2de00)
Signed-off-by: Sakib Sajal <sakib.sajal@windriver.com >
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org >
2020-05-03 15:41:40 +01:00
Anuj Mittal
0a9ce59fda
sqlite3: fix CVE-2020-9327
...
(From OE-Core rev: 6acb9746744536019d5c04ce482a873916aac99f)
Signed-off-by: Anuj Mittal <anuj.mittal@intel.com >
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org >
2020-03-10 23:20:33 +00:00
Anuj Mittal
73333dd4b8
sqlite3: upgrade 3.30.1 -> 3.31.1
...
(From OE-Core rev: 621ea68239763ce8740731e745c5002c956d4c67)
Signed-off-by: Anuj Mittal <anuj.mittal@intel.com >
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org >
2020-02-05 12:00:34 +00:00
Ross Burton
8dd90ff82e
sqlite: fix numerous CVEs
...
Fix the following CVEs:
- CVE-2019-19244
- CVE-2019-19880
- CVE-2019-19923
- CVE-2019-19924
- CVE-2019-19925
- CVE-2019-19926
- CVE-2019-19959
- CVE-2019-20218
(From OE-Core rev: f3ebf3f8dd0b4d144db451a8fcb352762f7fbd75)
Signed-off-by: Ross Burton <ross.burton@intel.com >
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org >
2020-01-16 22:33:09 +00:00
Anuj Mittal
70621ca8c9
sqlite3: upgrade 3.30.0 -> 3.30.1
...
(From OE-Core rev: 81c7ac8a206f50d045d4cbeeb50e9b4e14c47259)
Signed-off-by: Anuj Mittal <anuj.mittal@intel.com >
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org >
2019-11-21 23:08:20 +00:00
Richard Purdie
176b25bdc8
sqlite3: Drop pic as we no longer need the sqlite3 static lib
...
This was added in:
https://git.openembedded.org/openembedded-core/commit/?id=6a58e12d19c539deac9e90679a68438497a42fa4
but is no longer needed now pseudo doesn't use sqlite's static lib.
(From OE-Core rev: 5f614a24ed3b6e4da34beb9a3cede07004134503)
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org >
2019-11-14 13:20:59 +00:00
Zang Ruochen
bef9a115ca
sqlite3:upgrade 3.29 -> 3.30
...
(From OE-Core rev: a1b798c5b1c62921eb3439e9fe859f90258cba3b)
Signed-off-by: Zang Ruochen <zangrc.fnst@cn.fujitsu.com >
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org >
2019-10-15 14:16:11 +01:00
Andre McCurdy
082e31ce2f
sqlite3: explicitly set target endian-ness
...
Unless SQLITE_BYTEORDER is predefined, the code falls back to build
time huristics - which are not always correct (e.g. in sqlite 3.28.0
big-endian ARM is mis-detected).
(From OE-Core rev: c0fc43c228acd44499d9a1c257ec5e4cf42ed050)
Signed-off-by: Andre McCurdy <armccurdy@gmail.com >
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org >
2019-08-28 11:31:22 +01:00
Andre McCurdy
429f2e933e
sqlite3: make CFLAGS consistent across native, nativesdk and target cases
...
The previous simplification:
https://git.openembedded.org/openembedded-core/commit/?id=604777acfc54d285f315b622bd147ed02d55d6fd
looked OK but didn't actually work as expected. The native and
nativesdk classes re-set CFLAGS after the += has been applied and
so any modifications made via += are lost. Use _append instead.
(From OE-Core rev: b02d83f7ffc72b96799a7964a90709eef02aa29d)
Signed-off-by: Andre McCurdy <armccurdy@gmail.com >
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org >
2019-08-28 11:31:22 +01:00