Library that implements an embeddable SQL database engine (Linux CentOS 7.9.2009)
sqlite:sqlite from the portMultiple unspecified vulnerabilities in SQLite before 3.8.10.2, as used in Apple iOS before 9, have unknown impact and attack vectors.
In SQLite through 3.31.1, the ALTER TABLE implementation has a use-after-free, as demonstrated by an ORDER BY clause that belongs to a compound SELECT statement.
pragma.c in SQLite through 3.30.1 mishandles NOT NULL in an integrity_check PRAGMA command in certain cases of generated columns.
SQLite3 from 3.6.0 to and including 3.27.2 is vulnerable to heap out-of-bound read in the rtreenode() function when handling invalid rtree tables.
The getNodeSize function in ext/rtree/rtree.c in SQLite through 3.19.3, as used in GDAL and other products, mishandles undersized RTree blobs in a crafted database, leading to a heap-based buffer over-read or possibly unspecified other impact.
SQLite before 3.53.2 contains a heap-based buffer overflow vulnerability in the FTS5 full-text search extension that allows attackers to cause a crash or execute arbitrary code by supplying a crafted database with malicious continuation page metadata specifying a szLeaf value smaller than 4. Attackers can trigger an integer underflow in fts5ChunkIterate() c…
SQLite before 3.53.2 contains memory corruption vulnerabilities in the FTS5 full-text search extension that allow attackers to cause process crashes, memory exhaustion, or arbitrary code execution by supplying a crafted database with malformed FTS5 page data. Attackers can trigger an out-of-bounds read in fts5LeafSeek() via an attacker-controlled loop bound…
SQLite before 3.25.3, when the FTS3 extension is enabled, encounters an integer overflow (and resultant buffer overflow) for FTS3 queries in a "merge" operation that occurs after crafted changes to FTS3 shadow tables, allowing remote attackers to execute arbitrary code by leveraging the ability to run arbitrary SQL statements (such as in certain WebSQL use …
SQLite before 3.25.3, when the FTS3 extension is enabled, encounters an integer overflow (and resultant buffer overflow) for FTS3 queries that occur after crafted changes to FTS3 shadow tables, allowing remote attackers to execute arbitrary code by leveraging the ability to run arbitrary SQL statements (such as in certain WebSQL use cases), aka Magellan.
An information disclosure issue in the zipfileInflate function in the zipfile extension in SQLite v3.51.1 and earlier allows attackers to obtain heap memory via supplying a crafted ZIP file.
SQLite 1.0.12 through 3.39.x before 3.39.2 sometimes allows an array-bounds overflow if billions of bytes are used in a string argument to a C API.
SQLite through 3.31.1 allows attackers to cause a denial of service (segmentation fault) via a malformed window-function query because the AggInfo object's initialization is mishandled.
SQLite 3.25.2, when queries are run on a table with a malformed PRIMARY KEY, allows remote attackers to cause a denial of service (application crash) by leveraging the ability to run arbitrary SQL statements (such as in certain WebSQL use cases).
In SQLite through 3.22.0, databases whose schema is corrupted using a CREATE TABLE AS statement could cause a NULL pointer dereference, related to build.c and prepare.c.
Multiple buffer overflows in the printf functionality in SQLite, as used in Apple iOS before 8.4 and OS X before 10.10.4, allow remote attackers to execute arbitrary code or cause a denial of service (application crash) via unspecified vectors.
The sqlite3VXPrintf function in printf.c in SQLite before 3.8.9 does not properly handle precision and width values during floating-point conversions, which allows context-dependent attackers to cause a denial of service (integer overflow and stack-based buffer overflow) or possibly have unspecified other impact via large integers in a crafted printf functi…
The sqlite3VdbeExec function in vdbe.c in SQLite before 3.8.9 does not properly implement comparison operators, which allows context-dependent attackers to cause a denial of service (invalid free operation) or possibly have unspecified other impact via a crafted CHECK clause, as demonstrated by CHECK(0&O>O) in a CREATE TABLE statement.
SQLite before 3.8.9 does not properly implement the dequoting of collation-sequence names, which allows context-dependent attackers to cause a denial of service (uninitialized memory access and application crash) or possibly have unspecified other impact via a crafted COLLATE clause, as demonstrated by COLLATE"""""""" at the end of a SELECT statement.
ext/fts3/fts3.c in SQLite before 3.32.0 has a use-after-free in fts3EvalNextRow, related to the snippet feature.
SQLite before 3.8.9, as used in Android before 5.1.1 LMY48T, allows attackers to gain privileges via a crafted application, aka internal bug 20099586.
os_unix.c in SQLite before 3.13.0 improperly implements the temporary directory search algorithm, which might allow local users to obtain sensitive information, cause a denial of service (application crash), or have unspecified other impact by leveraging use of the current working directory for temporary files.
A vulnerability was found in SQLite SQLite3 up to 3.43.0 and classified as critical. This issue affects the function sessionReadRecord of the file ext/session/sqlite3session.c of the component make alltest Handler. The manipulation leads to heap-based buffer overflow. It is recommended to apply a patch to fix this issue. The associated identifier of this vu…
In SQLite before 3.32.3, select.c mishandles query-flattener optimization, leading to a multiSelectOrderBy heap overflow because of misuse of transitive properties for constant propagation.
ext/fts3/fts3_snippet.c in SQLite before 3.32.0 has a NULL pointer dereference via a crafted matchinfo() query.
SQLite before 3.32.0 allows a virtual table to be renamed to the name of one of its shadow tables, related to alter.c and build.c.
SQLite through 3.32.0 has an integer overflow in sqlite3_str_vappendf in printf.c.
SQLite through 3.32.0 has a segmentation fault in sqlite3ExprCodeTarget in expr.c.
alter.c in SQLite through 3.30.1 allows attackers to trigger infinite recursion via certain types of self-referential views in conjunction with ALTER TABLE statements.
There exists a vulnerability in SQLite versions before 3.50.2 where the number of aggregate terms could exceed the number of columns available. This could lead to a memory corruption issue. We recommend upgrading to version 3.50.2 or above.
Add missing WWW entries These ports reference the pkg-descr file of some other port and used to get the WWW entry from that other port's file. Reported by: dan@langille.org (Dan Langille)60764ff075
databases: remove 'Created by' lines A big Thank You to the original contributors of these ports: * "Choe, Cheng-Dae" whitekid * "Mahdi Mokhtari <mokhi64@gmail.com>" * "Meikel Brandmeyer" <ocaml-sqlite3-port@kotka.de> * <hvo.pm@xs4all.nl> * <jsmith@resonatingmedia.com> * <ports@c0decafe.net> * Aaron Dalton <aaron@FreeBSD.org> * Adam Weinberger <adamw@FreeBSD.org> * Ade Lovett <ade@FreeBSD.org> * Akinori MUSHA aka knu <knu@idaemons.org> * Alan Snelson <Alan@Wave2.org> * Aldis Berjoza <graudeejs@gmail.com> * Alessando Sagratini <ale_sagra@hotmail.com> * Alex Dupre <ale@FreeBSD.org> * Alex Samorukov <samm@freebsd.org> * Alexander Logvinov <ports@logvinov,com> * Alexander Logvinov <ports@logvinov.com> * Alexander Nedotsukov <bland@FreeBSD.org> * Alexander Novitsky * Alexander Zhuravlev <zaa@zaa.pp.ru> * Alexey Degtyarev <alexey@renatasystems.org> * Alexey Dokuchaev <danfe@FreeBSD.org> * Anders Nordby <anders@fix.no> * Andrei Antoukh <niwi@niwi.be> * Andrew McNaughton <andrew@scoop.co.nz> * Andrew Pantyukhin <infofarmer@FreeBSD.org> * Andrey Kostenko <andrey@kostenko.name> * Andrey Simonenko * Andrey Zakhvatov * Anes Mukhametov <anes@anes.su> * Anton Berezin <tobez@FreeBSD.org> * Anton Berezin <tobez@tobez.org> * Antonio Carlos Venancio Junior (<antonio@inf.ufsc.br>) * Antonio Carlos Venancio Junior (<antonio@php.net>) * Autrijus Tang <autrijus@autrijus.org> * Babak Farrokhi <farrokhi@FreeBSD.org> * Bartek Rutkowski <r@robakdesign.com> * Bernard Spil <brnrd@FreeBSD.org> * Brent J. Nordquist <bjn@visi.com> * Cezary Morga <cm@therek.net> * Cheng-Lung Sung <clsung@FreeBSD.org> * Choe, Cheng-Dae * Chris D. Faulhaber <jedgar@FreeBSD.org> * Chris Larsen <darth@vader.dk> * Damian Gerow <dgerow@afflictions.org> * Daniel O'Connor * Daniel Wijnands <daniel@itxl.nl> * Dave Green <dg@fastmail.co.uk> * David Thiel <lx@FreeBSD.org> * Davíð Steinn Geirsson <david@isnic.is> * Denis Generalov <gd.workbox@gmail.com> * Denis Generalov <gd@rambler-co.ru> * Denis Shaposhnikov <dsh@bamus.cz> * Dermot Tynan <dtynan@kalopa.com> * Dmitry Liakh <dliakh@ukr.net> * Dmitry Sivachenko <demon@FreeBSD.org> * Dmitry Sivachenko <dima@Chg.RU> * Dmitry Sivachenko <mitya@yandex-team.ru> * Domas Mituzas <midom@dammit.lt> * Dominic Mitchell * Don Owens <don@regexguy.com> * Dryice Dong Liu <dryice@dryice.name> * Edwin Groothuis (edwin@mavetju.org) * Eric Freeman <freebsdports@chillibear.com> * Espen Tagestad <espen@tagestad.no> * Espen Volden aka voldern <voldern@hoeggen.net> * Evan Sarmiento <bsdports@wayfair.com> * Fernan Aguero <fernan@iib.unsam.edu.ar> * Frank Wall <fw@moov.de> * Ganbold Tsagaankhuu <ganbold@FreeBSD.org> * Gary Palmer <gpalmer@FreeBSD.org> * Gea-Suan Lin <gslin@gslin.org> * Geraud CONTINSOUZAS <geraud@gcu.info> * Gerrit Beine <tux@pinguru.net> * Greg Larkin <glarkin@FreeBSD.org> * Grzegorz Blach <gblach@FreeBSD.org> * Hansjoerg Pehofer <hansjoerg.pehofer@uibk.ac.at> * Henk van Oers <hvo.pm@xs4all.nl> * Henrik Hodne <henrik@hodne.io> * Hiroyuki Hanai <hanai@FreeBSD.org> * Horia Racoviceanu <horia@racoviceanu.com> * Hye-Shik Chang * Hye-Shik Chang <perky@python.or.kr> * Ilia Chipitsine <ilia@jane.cgu.chel.su> * Ivan Voras <ivoras@FreeBSD.org> * J.F. Dockes * Jaap Boender <jaapb@kerguelen.org> * Jake Smith <jake@xz.cx> * James FitzGibbon <jfitz@FreeBSD.org> * Janos Mohacsi <janos.mohacsi@bsd.hu> * Janos.Mohacsi@bsd.hu * Jason Helfman <jgh@FreeBSD.org> * Jens Rehsack <rehsack@liwing.de> * Jeremy Chadwick <koitsu@FreeBSD.org> * Jev Björsell <ports@ecadlabs.com> * Jim Ohlstein <jim@ohlste.in> * Jin-Shan Tseng <tjs@cdpa.nsysu.edu.tw> * Joe Horn <joehorn@gmail.com> * Joe Marcus Clarke <marcus@FreeBSD.org> * Johannes Meixner <johannes@perceivon.net> * John Chen <johnpupu@gmail.com> * John Marino <marino@FreeBSD.org> * John Merryweather Cooper * John Merryweather Cooper et al * Jon Nistor <nistor@snickers.org> * Jonathan Weiss (<jw@innerewut.de>) * Jose Jachuf <jjachuf@gmail.com> * Joshua D. Abraham <jabra@ccs.neu.edu> * Jov <amutu@amutu.com> * Jov amutu@amutu.com * Jui-Nan Lin <jnlin@freebsd.cs.nctu.edu.tw> * Julien Laffaye <kimelto@gmail.com> * Jyun-Yan You <jyyou@cs.nctu.edu.tw> * Keith Gaughan <k@sterechro.me> * Kevin Bowling <kbowling@freebsd.org> * Kimo <kimor79@yahoo.com> * Kimura Fuyuki <fuyuki@nigredo.org> * Koop Mast <kwm@FreeBSD.org> * Lars Balker Rasmussen <lbr@FreeBSD.org * Lars Balker Rasmussen <lbr@FreeBSD.org> * Lars Eggert <larse@isi.edu> * Lars Thegler <lars@thegler.dk> * Lars Thegler <lth@FreeBSD.org> * Li-Wen Hsu <lwhsu@FreeBSD.org> * Loïc BARTOLETTI * Loïc BARTOLETTI <lbartoletti@FreeBSD.org> * Lubomir Marinov <lubomir_m@abv.bg> * Mahdi Mokhtari <mokhi64@gmail.com> * Mahlon E. Smith <mahlon@martini.nu> * Marc G. Fournier <scrappy@FreeBSD.org> * Mark Felder <feld@FreeBSD.org> * Markus Brueffer <markus@FreeBSD.org> * Martin Matuska <martin@matuska.org> * Martin Matuska <mm@FreeBSD.org> * Martin Wilke <miwi@FreeBSD.org> * Mathieu Arnold <m@absolight.net> * Matthew Seaman * Matthias Andree <mandree@FreeBSD.org> * Matthias Fechner <mfechner@FreeBSD.org> * Matthias Petermann <matthias@petermann-it.de> * Max Khon * Max Khon <fjoe@FreeBSD.org> * Michael Johnson <ahze@FreeBSD.org> * Michael Johnson <ahze@ahze.net> * Michael Winking <mwfp@foldl.net> * Mikael URANKAR and Loïc BARTOLETTI * Mike Carlson (carlson39@llnl.gov) * Mikhail T. <michael@fun-box.ru> * Mikhail Teterin * Mikhail Teterin <mi@aldan.algebra.com> * Mikolaj Golub <trociny@FreeBSD.org> * Mirko Zinn <mail@derzinn.de> * Mohammad S. Babaei <info@babaei.net> * Muhammad Moinur Rahman <bofh@FreeBSD.org> * Nick Hibma <n_hibma@freebsd.org> * Nick Hilliard <nick@foobar.org> * Nick Sayer <nsayer@FreeBSD.org> * Nicola Vitale <nivit@FreeBSD.org> * Nicolas Embriz <nbari@tequila.io> * Nicolas de Bari Embriz <nbari@dalmp.com> * Oleg Sharoiko <os@rsu.ru> * Olexander Melnyk <olexander.v.melnyk@gmail.com> * Oliver Eikemeier <eikemeier@fillmore-labs.com> * Olivier Duchateau <duchateau.olivier@gmail.com> * Palle Girgensohn <girgen@FreeBSD.org> * Palle Girgensohn <girgen@partitur.se> * Palle Girgensohn <girgen@pingpong.net> * Parv <parv@pair.org> * Pete Fritchman <petef@databits.net> * Peter Avalos <pavalos@theshell.com> * Philip M. Gollucci * Philip M. Gollucci <philip@p6m7g8.com> * Philip Stoev <philip.stoev@galeracluster.com> * Pierre-Emmanuel Andre <pea@raveland.org> * Pietro Cerutti <gahr@FreeBSD.org> * Piotr Kubaj <pkubaj@anongoth.pl> * Po-Chuan Hsieh <sunpoet@FreeBSD.org> * Qing Feng <qingfeng@douban.com> * Quinton Dolan <q@onthenet.com.au> * Radim Kolar * Rainer Hurling <rhurlin@gwdg.de> * Rick Miller * Robert Kruus <rob.kruus@gmail.com> * Rod Taylor <ports@rbt.ca> * Roland van Laar <roland@micite.net> * Rong-En Fan <rafan@FreeBSD.org> * Roy Boerner * Rozhuk Ivan <rozhuk.im@gmail.com> * Rusty Nejdl * Ryan Steinmetz <rpsfa@rit.edu> * Ryan Steinmetz <zi@FreeBSD.org> * Ryan T. Dean <rtdean@cytherianage.net> * Sam Lawrance <boris@brooknet.com.au> * Scott McWhirter <scott@surreytech.co.uk> * Seamus Venasse <svenasse@polaris.ca> * Sean Chittenden <seanc@FreeBSD.org> * Sergei Kolobov <sergei@kolobov.com> * Sergei Vyshenski <svysh.fbsd@gmail.com> * Sergey A. Osokin <osa@FreeBSD.org.ru> * Sergey A. Osokin <osa@FreeBSD.org> * Sergey Matveychuk <sem@FreeBSD.org> * Sergey Skvortsov <skv@FreeBSD.org> * Sergey Skvortsov <skv@protey.ru> * Sevan Janiyan <venture37@geeklan.co.uk> * Sheldon Hearn <sheldonh@FreeBSD.org> * Stanislav Svirid <count@211.ru> * Stefan Schmidt <stefan.schmidt@stadtbuch.de> * Steve Wills <swills@FreeBSD.org> * Steve Wills <swills@freebsd.org> * Steven Kreuzer <skreuzer@FreeBSD.org> * Sunpoet Po-Chuan Hsieh <sunpoet@FreeBSD.org> * Sunpoet Po-Chuan Hsieh <sunpoet@sunpoet.net> * T. William Wells <bill@twwells.com> * TAKATSU Tomonari <tota@FreeBSD.org> * Thierry Thomas (<thierry@pompo.net>) * Thomas Gellekum <tg@FreeBSD.org> * Timur I. Bakeyev <bat@cpan.org> * Tom Judge <tj@FreeBSD.org> * Torsten Zuehlsdorff <ports@toco-domains.de> * Torsten Zuhlsdorff <ports@toco-domains.de> * Toshiya Saitoh (<toshiya@saitoh.nu>) * Tsung-Han Yeh <snowfly@yuntech.edu.tw> * Vasil Dimov <vd@FreeBSD.org> * Veniamin Gvozdikov <vg@FreeBSD.org> * Vladimir Timofeev <vovkasm@gmail.com> * Wen Heping * Wen Heping <wen@FreeBSD.org> * Wen Heping <wenheping@gmail.com> * Wen heping <wenheping@gmail.com> * William Grzybowski <wg@FreeBSD.org> * Xin Li <delphij@FreeBSD.org> * Yarema <yds@CoolRat.org> * Yarema <yds@Necessitu.de> * Yen-Ming Lee <leeym@FreeBSD.org> * Ying-Chieh Liao <ijliao@FreeBSD.org> * Yoichi NAKAYAMA <yoichi@FreeBSD.org> * Yuri Victorovich <yuri@rawbw.com> * Zach Thompson <hideo@lastamericanempire.com> * Zach Thompson <lin-chi@lastamericanempire.com> * ache@FreeBSD.org * alfred * alp@sfedu.ru * andrew@scoop.co.nz * andrey@kostenko.name * chinsan * chinsan <chinsan.tw@gmail.com> * clive * clive@FreeBSD.org * clsung@dragon2.net * dcf@aracnet.com * elvstone@gmail.com * erikhb@bgnett.no * erwin@FreeBSD.org * gahr * ijliao * ijlioa * ivoras * johnpupu <johnpupu@gmail.com> * kirk@daycos.com * kuriyama * lbartoletti <lbartoletti@FreeBSD.org> * loïc bartoletti <lbartoletti@FreeBSD.org> * mharo@FreeBSD.org * michael johnson <ahze@ahze.net> * milki <milki@rescomp.berkeley.edy> * mm@FreeBSD.org * nbm * nectar@FreeBSD.org * nork@FreeBSD.org * nork@cityfujisawa.ne.jp * olevole@olevole.ru * proler@gmail.com * sergey@migsoft.com.ua * sobomax * spam@rm-rf.kiev.ua * stas * tobez * tremere@cainites.net * vanilla * vanilla@ * wen@FreeBSD.org * wenheping<wenheping@gmail.com> * wolman@cs.washington.edu * # Created by Kevin Bowling <kbowling@FreeBSD.org> * # Created by Matthias Fechner <mfechner@FreeBSD.org> With hat: portmgrd076ad94e2
*: Linux emulation: add support for aarch64 PR: 256008 Submitted by: Vincent Milum Jr (prior version) Approved by: emulation (maintainer timeout)c7dd5ca11a
*/*: Remove redundant '-[0-9]*' from CONFLICTS The conflict checks compare the patterns first against the package names without version (as reported by "pkg query "%n"), then - if there was no match - agsinst the full package names including the version (as reported by "pkg query "%n-%v"). Many CONFLICTS definitions used patterns like "bash-[0-9]*" to filter for the bash package in any version. But that pattern is functionally identical with just "bash". Approved by: portmgr (blanket)819f25b36d
databases/linux-c7-sqlite3: Add CPE information Approved by: portmgr (blanket)dd62f4d5eb
Remove # $FreeBSD$ from Makefiles.305f148f48
Update to 3.7.17-8.el7_7.1.e1ba64b042
Address some portlint warnings in the Linux infrastructure ports. Eliminate LINUXNAME from port Makefiles. This was just a helper variable without special meaning outside port Makefiles but several developers have copied it to new ports where it was then unused, apparently thinking that it did have some special meaning.bb5cf6c4f3
Eliminate RPMVERSION from Linux ports and set DISTVERSIONSUFFIX instead. This puts all version information together in the port Makefiles.5b721b6172
Add DOCS options to ports that should have one. Also various fixes related to said option. PR: 230864 Submitted by: mat exp-runs by: antoinee1bfdfbe56
Enable i386 support to Linux CentOS 7 ports. PR: 216646d0d15cc5cd
- Autodetect the installed linux_base port and use LINUX_DEFAULT only as a last resort. - Construct a list of DISTFILES for every architecture (amd64, i386). Select one list for regular make and all lists for make makesum so linux ports can have one combined distinfo file. - Set DIST_SUBDIR?=centos so there's only one copy of common distfiles. - Use MASTER_SITES and DISTFILES groups so make6140d3c6aa
Update Linux CentOS 7 ports to 7.3.1611. While 7.2 had semi-official i386 packages there are no such packages for 7.3 yet so i386 support has been marked IGNORE for now. Change DIST_SUBDIR to just "centos" so distfiles that remain the same between major versions don't have to be redownloaded. Remove fmake hacks from linux.mk. Submitted by: Piotr Kubaj <pkubaj@anongoth.pl>c2712d2471
Add Linux CentOS 7 infrastructure ports. Mk/Uses/linux.mk changes: - Add support for architecture neutral (noarch) distfiles. - Add support for 64-bit only ports: set IGNORE on i386 and don't install 32-bit compat libraries on amd64. Submitted by: Piotr Kubaj <pkubaj@anongoth.pl> Differential Revision: https://reviews.freebsd.org/D78861675ff649c