Commit Graph

138 Commits

Author SHA1 Message Date
Alexander Kanavin
08471afec7 sqlite3: upgrade 3.43.0 -> 3.43.1
(From OE-Core rev: 4274ac35c178392837919f3b8b068e05fccd3a08)

Signed-off-by: Alexander Kanavin <alex@linutronix.de>
Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2023-09-26 10:35:27 +01:00
Changqing Li
03d23dca92 sqlite3: set CVE_STATUS for CVE-2023-36191
The error is a bug. It has been fixed upstream. But it is not a
vulnerability. You may safely ignore the CVE.

Refer:
[1] https://www.sqlite.org/forum/forumpost/19f55ef73b

(From OE-Core rev: 34874433c1e6c9e21d45d9ba686e4bb15479659d)

Signed-off-by: Changqing Li <changqing.li@windriver.com>
Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2023-09-04 20:14:14 +01:00
Wang Mingyu
84bd7580d4 sqlite3: upgrade 3.42.0 -> 3.43.0
Changelog:
==========
-Add support for Contentless-Delete FTS5 Indexes.
-Enhancements to the date and time functions:
-Added the octet_length(X) SQL function.
-Added the sqlite3_stmt_explain() API.

(From OE-Core rev: d398efb21ec8a67f6b52ba27fd5eb8e85e851b15)

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2023-09-02 18:23:06 +01:00
Andrej Valek
c15e506a46 cve_check: convert CVE_CHECK_IGNORE to CVE_STATUS
- Try to add convert and apply statuses for old CVEs
- Drop some obsolete ignores, while they are not relevant for current
  version

(From OE-Core rev: 1634ed4048cf56788cd5c2c1bdc979b70afcdcd7)

Signed-off-by: Andrej Valek <andrej.valek@siemens.com>
Reviewed-by: Peter Marko <peter.marko@siemens.com>
Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2023-07-21 11:52:26 +01:00
Anuj Mittal
9832a5b466 sqlite3: upgrade 3.41.2 -> 3.42.0
(From OE-Core rev: 6613920d4058afacfde7000cad9feba7ee5562b9)

Signed-off-by: Anuj Mittal <anuj.mittal@intel.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2023-07-10 11:36:34 +01:00
Richard Purdie
6c02a8628d Revert "sqlite3: Whitelist CVE-2022-21227"
This reverts commit cfc42fdabb3f12eb4ac5069a549ba5699385dfdc.

Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2023-05-30 13:25:47 +01:00
Sanjay Chitroda
4a4f2b6df0 sqlite3: Whitelist CVE-2022-21227
This CVE is applicable to "SQLite3 bindings for Node.js" only.

References:
https://nvd.nist.gov/vuln/detail/CVE-2022-21227

(From OE-Core rev: cfc42fdabb3f12eb4ac5069a549ba5699385dfdc)

Signed-off-by: Sanjay Chitroda <schitrod@cisco.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2023-05-29 13:42:00 +01:00
schitrod=cisco.com@lists.openembedded.org
934487d99a Revert "sqlite3: update CVE_PRODUCT"
This reverts commit 8800976e79d65956218ab462d9644d0661579301.

As per NVD database "ghost:sqlite3" product is specific to "node.js"
CVEs reported against above products are not applicable to us.

(From OE-Core rev: 7616b1d28cb119adb471b5268a77ec61d5dd555c)

Signed-off-by: Sanjay Chitroda <schitrod@cisco.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2023-05-29 13:42:00 +01:00
Chen Qi
4e8ce11d0d sqlite3: update CVE_PRODUCT
Both 'sqlite' and 'sqlite3' are used in NVD database.

(From OE-Core rev: 8800976e79d65956218ab462d9644d0661579301)

Signed-off-by: Chen Qi <Qi.Chen@windriver.com>
Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2023-05-10 17:18:57 +01:00
Wang Mingyu
3c499ac5a3 sqlite3: upgrade 3.41.0 -> 3.41.2
(From OE-Core rev: b6c475ea37660859b6ae91ac2e5fbf674f7ccfde)

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2023-04-13 11:56:07 +01:00
Alexander Kanavin
966e2e8ca1 sqlite3: update 3.40.1 -> 3.41.0
(From OE-Core rev: 789a5ab8243ab0283d3e268d4b93e02c7128effc)

Signed-off-by: Alexander Kanavin <alex@linutronix.de>
Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2023-03-11 00:08:40 +00:00
Changqing Li
e0f71ff8ab sqlite3: upgrade 3.40.0 -> 3.40.1
(From OE-Core rev: feeb34257bf955d4d9bf26e803a2ea30116ab1b0)

Signed-off-by: Changqing Li <changqing.li@windriver.com>
Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2023-01-06 12:03:47 +00:00
Wang Mingyu
ccba52147d sqlite3: upgrade 3.39.4 -> 3.40.0
(From OE-Core rev: 4739495b806ee2d82576619511cf72de7feecd67)

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2022-12-06 15:23:18 +00:00
wangmy
b4b317ae6b sqlite3: upgrade 3.39.3 -> 3.39.4
(From OE-Core rev: e47b0afdc9d043df510596b25470c77ce178f699)

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2022-10-26 12:28:38 +01:00
Richard Purdie
ab45e8d132 sqlite3: upgrade 3.39.2 -> 3.39.3
(From OE-Core rev: eaca419be8c5d206bd1ec4d24ae756c99e757c15)

Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2022-09-17 07:47:08 +01:00
Alexander Kanavin
335d6d3be0 sqlite3: upgrade 3.39.1 -> 3.39.2
(From OE-Core rev: dd758e67a95275ca5963318c17c0af1bba231f38)

Signed-off-by: Alexander Kanavin <alex@linutronix.de>
Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2022-08-10 08:25:28 +01:00
Alexander Kanavin
ac35dec165 sqlite3: upgrade 3.39.0 -> 3.39.1
(From OE-Core rev: dc9e72daa756eb39a34731967ee27c01a9386e09)

Signed-off-by: Alexander Kanavin <alex@linutronix.de>
Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2022-07-23 13:55:26 +01:00
wangmy
175d133ed3 sqlite3: upgrade 3.38.5 -> 3.39.0
(From OE-Core rev: 632bf7426a904322904af87c9083b22d6b3c1566)

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2022-07-01 11:31:42 +01:00
Alexander Kanavin
0f09c786b4 sqlite3: upgrade 3.38.3 -> 3.38.5
(From OE-Core rev: e1bd414792ae2576685b2a352a5cc93343f06985)

Signed-off-by: Alexander Kanavin <alex@linutronix.de>
Signed-off-by: Luca Ceresoli <luca.ceresoli@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2022-05-20 22:52:23 +01:00
Alexander Kanavin
7b92062c84 sqlite3: upgrade 3.38.2 -> 3.38.3
(From OE-Core rev: 1efd89a4572bb2f39728fd53a1d4db944b06ff38)

Signed-off-by: Alexander Kanavin <alex@linutronix.de>
Signed-off-by: Luca Ceresoli <luca.ceresoli@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2022-05-05 21:17:38 +01:00
wangmy
c84efb8750 sqlite3: upgrade 3.38.1 -> 3.38.2
(From OE-Core rev: a285f31f2ca2e8f71d5939862d09211b53adeefb)

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2022-03-29 15:59:29 +01:00
Alexander Kanavin
1f46d65c46 sqlite3: upgrade 3.38.0 -> 3.38.1
(From OE-Core rev: 84b70c7d2d76af72cb6df42e0ceda66dbea49d8a)

Signed-off-by: Alexander Kanavin <alex.kanavin@gmail.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2022-03-20 00:02:22 +00:00
wangmy
549c5046de sqlite3: upgrade 3.37.2 -> 3.38.0
Remove invalid PACKAGECONFIG : json1

(From OE-Core rev: 3f665656e3c0134994015235c24240086d5324fc)

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2022-03-02 18:43:24 +00:00
Richard Purdie
71ef319193 meta/scripts: Automated conversion of OE renamed variables
(From OE-Core rev: aa52af4518604b5bf13f3c5e885113bf868d6c81)

Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2022-02-21 23:37:27 +00:00
Alexander Kanavin
1039ad104e sqlite: update 3.37.1 -> 3.37.2
(From OE-Core rev: e77c5d7ca59545f99d3bbacd0bac13df061b9a40)

Signed-off-by: Alexander Kanavin <alex@linutronix.de>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2022-01-20 11:57:29 +00:00
Otavio Salvador
c3a5948e45 sqlite3: upgrade 3.37.0 -> 3.37.1
(From OE-Core rev: a4d1d878ddf57688535722ef330938b7e1c78066)

Signed-off-by: Otavio Salvador <otavio@ossystems.com.br>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2022-01-05 17:18:16 +00:00
wangmy
fb834580eb sqlite3: upgrade 3.36.0 -> 3.37.0
Changelog:
1.STRICT tables provide a prescriptive style of data type management, for
  developers who prefer that kind of thing.
2.When adding columns that contain a CHECK constraint or a generated column
  containing a NOT NULL constraint, the ALTER TABLE ADD COLUMN now checks new
  constraints against preexisting rows in the database and will only proceed if
  no constraints are violated.
3.Added the PRAGMA table_list statement.
4.CLI enhancements:
  a.Add the .connection command, allowing the CLI to keep multiple database
    connections open at the same time.
  b.Add the --safe command-line option that disables dot-commands and SQL
    statements that might cause side-effects that extend beyond the single
    database file named on the command-line.
  c.Performance improvements when reading SQL statements that span many lines.
5.Added the sqlite3_autovacuum_pages() interface.
6.The sqlite3_deserialize() does not and has never worked for the TEMP database.
  That limitation is now noted in the documentation.
7.The query planner now omits ORDER BY clauses on subqueries and views if
  removing those clauses does not change the semantics of the query.
8.The generate_series table-valued function extension is modified so that the
  first parameter ("START") is now required. This is done as a way to
  demonstrate how to write table-valued functions with required parameters.
  The legacy behavior is available using the -DZERO_ARGUMENT_GENERATE_SERIES
  compile-time option.
9.Added new sqlite3_changes64() and sqlite3_total_changes64() interfaces.
10.Added the SQLITE_OPEN_EXRESCODE flag option to sqlite3_open_v2().
11.Use less memory to hold the database schema.

(From OE-Core rev: b1c6e95d075531998de5b73e7ec7073647d5a2d2)

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2021-12-01 16:23:45 +00:00
Richard Purdie
e899b2e25b sqlite3: Exclude CVE-2021-36690 from cve checks
Issue is in an experimental extension we don't have/use. Could also
be windows only.

(From OE-Core rev: 6f5770b49f06168e3d6914bd92f0594bd05f1f8f)

Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2021-09-21 23:44:08 +01:00
Richard Purdie
bb6ddc3691 Convert to new override syntax
This is the result of automated script conversion:

scripts/contrib/convert-overrides.py <oe-core directory>

converting the metadata to use ":" as the override character instead of "_".

(From OE-Core rev: 42344347be29f0997cc2f7636d9603b1fe1875ae)

Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2021-08-02 15:44:10 +01:00
Alexander Kanavin
73546784a2 sqlite3: upgrade 3.35.5 -> 3.36.0
(From OE-Core rev: 118564912d65135e971778eac16667a40fd062b4)

(From OE-Core rev: 70da06a05972af2953ce57042aaa605281685030)

Signed-off-by: Alexander Kanavin <alex.kanavin@gmail.com>
Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2021-06-26 11:27:16 +01:00
Richard Purdie
16e8c05a63 sqlite3: upgrade 3.35.3 -> 3.35.5
(From OE-Core rev: a7480b206848df56fb64d9bfec9d4cdffa16efea)

Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2021-05-18 12:43:00 +01:00
Randy MacLeod
0b16b83dff sqlite3: upgrade 3.35.0 -> 3.35.3
(From OE-Core rev: 7d511f9b2b1f739e0c96a063d85428b3ab5767b3)

Signed-off-by: Randy MacLeod <Randy.MacLeod@windriver.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2021-04-18 11:37:24 +01:00
Richard Purdie
40cade73ad sqlite3: upgrade 3.34.1 -> 3.35.0
(From OE-Core rev: fd2263bb82fb8a3d0bf74d41777ff55ac14b9447)

Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2021-03-16 17:52:21 +00:00
Meh Mbeh Ida Delphine
c8075ed8f1 recipes-support: Add missing HOMEPAGE and DESCRIPTION for recipes
Fixes: [YOCTO #13471]

(From OE-Core rev: 6db24928d62aeb093a0e6da6619713eaca57a96f)

Signed-off-by: Ida Delphine <idadelm@gmail.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2021-03-02 20:39:36 +00:00
zhengruoqin
6131fb0e1b sqlite3: upgrade 3.34.0 -> 3.34.1
(From OE-Core rev: d26f5601d0cfe15cf9ef953e33e5e36e1b58e915)

Signed-off-by: Zheng Ruoqin <zhengrq.fnst@cn.fujitsu.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2021-02-08 14:47:16 +00:00
Alexander Kanavin
5949ae2dad sqlite3: upgrade 3.33.0 -> 3.34.0
(From OE-Core rev: 12c8b9c2700b5cc69be3e966ad0bd6d6859f82bc)

Signed-off-by: Alexander Kanavin <alex.kanavin@gmail.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2020-12-30 14:01:06 +00:00
Ross Burton
dab763c0a0 sqlite3: add CVE-2015-3717 to whitelist
As per https://groups.google.com/g/sqlite-dev/c/U7OjAbZO6LA this issue
is believed to be either iOS specific, or fixed in 3.8.9.

(From OE-Core rev: b781058267bd86bd979c50f4dfe8168c58dfa5a9)

Signed-off-by: Ross Burton <ross.burton@arm.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2020-11-24 10:27:45 +00:00
Anuj Mittal
073ef419d5 sqlite3: upgrade 3.32.3 -> 3.33.0
(From OE-Core rev: ef27d18d3b91d0545cb1e4ef3cb8bd002ea73b47)

Signed-off-by: Anuj Mittal <anuj.mittal@intel.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2020-08-19 10:57:44 +01:00
Andreas Müller
a0504d17b2 sqlite3: upgrade 3.32.2 -> 3.32.3
(From OE-Core rev: 0facc5fb49ab08c97fae3cb721c990de77d461c7)

Signed-off-by: Andreas Müller <schnitzeltony@gmail.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2020-06-24 18:06:43 +01:00
Andreas Müller
71b50a4310 sqlite3: upgrade 3.32.1 -> 3.32.2
(From OE-Core rev: 0f686fabd33d933330b9c6e9b14fff25ae8e7642)

Signed-off-by: Andreas Müller <schnitzeltony@gmail.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2020-06-09 13:13:59 +01:00
Wang Mingyu
c15d342e45 sqlite: upgrade 3.31.1 -> 3.32.1
CVE-2020-11655.patch
CVE-2020-11656.patch
CVE-2020-9327.patch
removed since they are included in 3.32.1

(From OE-Core rev: 7ee8501146ceccdbd07104903694a435b75c0606)

Signed-off-by: Wang Mingyu <wangmy@cn.fujitsu.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2020-06-04 13:27:32 +01:00
Sakib Sajal
b3f5f7f10a sqlite: backport CVE fixes
Fixes CVE-2020-11655 and CVE-2020-11656

(From OE-Core rev: 3b06a6c73f4e49c6d00f758423c2e8865ec2de00)

Signed-off-by: Sakib Sajal <sakib.sajal@windriver.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2020-05-03 15:41:40 +01:00
Anuj Mittal
0a9ce59fda sqlite3: fix CVE-2020-9327
(From OE-Core rev: 6acb9746744536019d5c04ce482a873916aac99f)

Signed-off-by: Anuj Mittal <anuj.mittal@intel.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2020-03-10 23:20:33 +00:00
Anuj Mittal
73333dd4b8 sqlite3: upgrade 3.30.1 -> 3.31.1
(From OE-Core rev: 621ea68239763ce8740731e745c5002c956d4c67)

Signed-off-by: Anuj Mittal <anuj.mittal@intel.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2020-02-05 12:00:34 +00:00
Ross Burton
8dd90ff82e sqlite: fix numerous CVEs
Fix the following CVEs:

- CVE-2019-19244
- CVE-2019-19880
- CVE-2019-19923
- CVE-2019-19924
- CVE-2019-19925
- CVE-2019-19926
- CVE-2019-19959
- CVE-2019-20218

(From OE-Core rev: f3ebf3f8dd0b4d144db451a8fcb352762f7fbd75)

Signed-off-by: Ross Burton <ross.burton@intel.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2020-01-16 22:33:09 +00:00
Anuj Mittal
70621ca8c9 sqlite3: upgrade 3.30.0 -> 3.30.1
(From OE-Core rev: 81c7ac8a206f50d045d4cbeeb50e9b4e14c47259)

Signed-off-by: Anuj Mittal <anuj.mittal@intel.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2019-11-21 23:08:20 +00:00
Richard Purdie
176b25bdc8 sqlite3: Drop pic as we no longer need the sqlite3 static lib
This was added in:
https://git.openembedded.org/openembedded-core/commit/?id=6a58e12d19c539deac9e90679a68438497a42fa4
but is no longer needed now pseudo doesn't use sqlite's static lib.

(From OE-Core rev: 5f614a24ed3b6e4da34beb9a3cede07004134503)

Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2019-11-14 13:20:59 +00:00
Zang Ruochen
bef9a115ca sqlite3:upgrade 3.29 -> 3.30
(From OE-Core rev: a1b798c5b1c62921eb3439e9fe859f90258cba3b)

Signed-off-by: Zang Ruochen <zangrc.fnst@cn.fujitsu.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2019-10-15 14:16:11 +01:00
Andre McCurdy
082e31ce2f sqlite3: explicitly set target endian-ness
Unless SQLITE_BYTEORDER is predefined, the code falls back to build
time huristics - which are not always correct (e.g. in sqlite 3.28.0
big-endian ARM is mis-detected).

(From OE-Core rev: c0fc43c228acd44499d9a1c257ec5e4cf42ed050)

Signed-off-by: Andre McCurdy <armccurdy@gmail.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2019-08-28 11:31:22 +01:00
Andre McCurdy
429f2e933e sqlite3: make CFLAGS consistent across native, nativesdk and target cases
The previous simplification:

  https://git.openembedded.org/openembedded-core/commit/?id=604777acfc54d285f315b622bd147ed02d55d6fd

looked OK but didn't actually work as expected. The native and
nativesdk classes re-set CFLAGS after the += has been applied and
so any modifications made via += are lost. Use _append instead.

(From OE-Core rev: b02d83f7ffc72b96799a7964a90709eef02aa29d)

Signed-off-by: Andre McCurdy <armccurdy@gmail.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2019-08-28 11:31:22 +01:00