CVE and update status of the FreeBSD ports tree4,526 unaddressed CVEs in 616 portsAll times are CET

Port details

databases/sqlite33.53.4,1

SQL database engine in a C library (ICU flavor)

Maintainer
sunpoet@FreeBSD.org
Packages
sqlite-icu 3.53.4,1, sqlite-tcl 3.53.4,1, sqlite3 3.53.4,1
Upstream
Higher version available: 3.54.1
CPE
sqlite:sqlite from the port
WWW
https://sqlite.org/
Links
cgit · VuXML

Unaddressed (0) · The CVE record lists this version as affected, no VuXML entry names the CVE

None. There is no CVE without a VuXML entry for this version.

VuXML only (0) · listed, port not fixed yet

None. pkg audit reports nothing for this version.

Fixed (13)

Show 13 fixed
VuXML entries whose affected range this version has left.

Commits (255)

Neel Chauhan (nc) · 3.35.5,1
databases/sqlite3: Update to 3.35.5

Changes: https://www.sqlite.org/releaselog/3_35_5.html

PR:		255392
Submitted by:	Pavel Volkov <pavelivolkov AT gmail DOT com> (maintainer)
4e00066ccb
Jan Beich (jbeich) · 3.34.1_1,1
devel/icu: update to 69.1

Changes:	https://github.com/unicode-org/icu/releases/tag/release-69-1
Reported by:	GitHub (watch releases)
69d24a727d
Mathieu Arnold (mat) · 3.34.1,1
Remove # $FreeBSD$ from Makefiles.
305f148f48
Dmitry Marakasov (amdmi3) · 3.34.1,1
Add sqlite_analyzer support

- Switch to more complete distfile which allows to enable
  TCL extensions and sqlite_analyzer
- Switch to pkg-plist

PR:		221735
Reported by:	lapo@lapo.it
Approved by:	maintainer timeout (pavelivolkov@gmail.com, 3.5 years)
98731c8c61
Tobias Kortkamp (tobik) · 3.34.1,1
Remove redundant option descriptions that match the default ones

(ignoring case)

Reported by:	danfe (for net/mosquitto), portscan
f2499eec5a
Lewis Cook (lcook) · 3.34.1,1
databases/sqlite3: Update to 3.34.1

Changes:		https://www.sqlite.org/releaselog/3_34_1.html
PR:			252963
Submitted by: 		Pavel Volkov <pavelivolkov@gmail.com> (maintainer)
Approved by:		fernape (mentor)
Differential Revision:	https://reviews.freebsd.org/D28327
e3803923a4
Pietro Cerutti (gahr) · 3.34.0,1
databases/sqlite3: fix build w/o THREADS

PR:		244459
Reported by:	Brian Haug <haug.bsd6114@yahoo.com>
54bf58abce
Pietro Cerutti (gahr) · 3.34.0,1
databases/sqlite3: update to 3.34.0

Release notes: https://sqlite.org/releaselog/3_34_0.html

PR:		251632
Submitted by:	Pavel Volkov <pavelivolkov@gmail.com>
1dfc8b9ce8
Jan Beich (jbeich) · 3.33.0_1,1
devel/icu: update to 68.1

Changes:	http://site.icu-project.org/download/68
ABI:		https://abi-laboratory.pro/tracker/timeline/icu4c/
Reported by:	GitHub (watch releases)
6d5d6429d5
Piotr Kubaj (pkubaj) · 3.33.0,1
databases/sqlite3: fix build on powerpc64le

Specify that powerpc64le is little-endian, sqlite thinks all powerpc* are big-endian.
b8bede3836
Li-Wen Hsu (lwhsu) · 3.33.0,1
databases/sqlite3: Update to 3.33.0

PR:		248809
Submitted by:	Pavel Volkov <pavelivolkov@gmail.com> (maintainer)
2bdaaa340a
Jochen Neumeister (joneum) · 3.32.3_3,1
databases/sqlite3: Change candidates of OPTIONS_RADIO_RL

Removed unneeded LIBEDIT_DESC and "USES= ncurses".
In the target "post-install" added list for check used shared libraries.

PR:		248446
Submitted by:	maintainer
Sponsored by:	Netzkommune GmbH
013373cf3d
Koichiro Iwao (meta) · 3.32.3_2,1
databases/sqlite3: pet portlint

> WARN: Makefile: [137]: whitespace before end of line.
> FATAL: Makefile: [209]: use a tab (not space) after a variable name
6c9643bf91
Guido Falsi (madpilot) · 3.32.3_2,1
Bump PORTREVISION after the changes in r543921.

Requested by:	Yasuhiro KIMURA <yasu@utahime.org>
87ae0cfd28
Guido Falsi (madpilot) · 3.32.3_1,1
- Add back REALINEP and READLINES options and make them and LIBEDIT   option work after r542047 [1] - Also add back options descriptions [1] - While here make STAT3 and STAT4 options descriptions start with   uppercase letter [1] - Since in r542047 OPTIONS_GROUP_RL was changed to OPTIONS_RADIO_RL   also bug 239228 can be closed [2]

PR:		248323 [1], 239228 [2]
Submitted by:	myself [1], Dennis Clarke <dclarke@blastwave.org> [2]
Approved by:	maintainer [1]
c574b013b3
Bernard Spil (brnrd) · 3.32.3_1,1
databases/sqlite3: change options logic

PR:		222021
Submitted by:	Pavel Volkov <pavelivolkov gmail com>
Approved by:	maintainer (pavelivolkov gmail com)
837a0c9435
Li-Wen Hsu (lwhsu) · 3.32.3,1
Update to 3.32.3

PR:		247819
Submitted by:	Pavel Volkov <pavelivolkov@gmail.com> (maintainer)
28cee1d96d
Cy Schubert (cy) · 3.32.2,1
Update 3.32.0 --> 3.32.2

Fix two long-standing bugs that allow malicious SQL statements to crash
the process that is running SQLite. These bugs were announced by a
third-party approximately 24 hours after the 3.32.0 release but are not
specific to the 3.32.0 release.

Fix a long-standing bug in the byte-code engine that can cause a COMMIT
command report as success when in fact it failed to commit. Ticket
810dc8038872e212.

Approved by:	portmgr (blanket: run-time bugfix)
MFH:		2020Q2
a07022d213
Cy Schubert (cy) · 3.32.0,1
Update 3.31.1 --> 3.32.0

Address multiple security vulnerabilities.

PR:		247149
Reported by:	spam123@bitbert.com
Reminded by:	emaste
Approved by:    Approved by: portmgr (blanket: security bugfix)
MFH:		2020Q2
Security:	CVE-2020-11655, CVE-2020-13434, CVE-2020-13435,
		CVE-2020-13630, CVE-2020-13631, CVE-2020-13632
bc51631fc3
Cy Schubert (cy) · 3.31.1_1,1
Fix PowerPC segfault.

The segfault fix was originally developed by our upstream, sqlite.org,
to address S/390 and Sparc segfaults, both of which are big endian.
Our PowerPC is also big endian, which this patch also fixes.

Inspired by:	src r360223
Approved by:	Approved by: portmgr (blanket: run-time bugfix)
Obtained from:	https://www.sqlite.org/src/vinfo/04885763c4cd00cb?diff=1
		https://sqlite.org/forum/forumpost/672291a5b2
1ff56b9f93
Jan Beich (jbeich) · 3.31.1_1,1
devel/icu: update to 67.1

Changes:	http://site.icu-project.org/download/67
ABI:		https://abi-laboratory.pro/tracker/timeline/icu4c/
Reported by:	GitHub (watch releases)
ffb8eb82e5
Danilo G. Baio (dbaio) · 3.31.1,1
databases/sqlite3: Update to 3.31.1

Changelog:	https://www.sqlite.org/releaselog/3_31_1.html
ABI:		https://abi-laboratory.pro/tracker/timeline/sqlite/

PR:		243602
Submitted by:	Pavel Volkov <pavelivolkov@gmail.com> (maintainer)
2753f5cbed
Danilo G. Baio (dbaio) · 3.30.1_2,1
databases/sqlite3: Set JSON1 option as default

JSON1 is required for net-im/py-matrix-synapse.

PR:		244366
PR:		243602
Submitted by:	Sascha Biberhofer <ports@skyforge.at>
Approved by:	Pavel Volkov <pavelivolkov@gmail.com> (maintainer)
MFH:		2020Q2
8a8d8019e4
Jan Beich (jbeich) · 3.30.1_1,1
devel/icu: update to 66.1

Changes:	http://site.icu-project.org/download/66
ABI:		https://abi-laboratory.pro/tracker/timeline/icu4c/
f821cdc347
Tobias C. Berner (tcberner) · 3.30.1,1
databases/sqlite3: revert upgrade to 3.31.0

Firefox relied on internals. They changed, which leads to segfaults.

[1] https://bugzilla.mozilla.org/show_bug.cgi?id=1607902
[2] https://hg.mozilla.org/try/rev/8d7104bac33729b4da67954b07fb08371df39bd8

PR:		243602
Reported by:	Michael Butler <imb@protected-networks.net>, David Wolfskill <david@catwhisker.org>
6aa591c4f3
Tobias C. Berner (tcberner) · 3.31.0
databases/sqlite3: Update to 3.31.0

PR:		243602
Submitted by:	Pavel Volkov <pavelivolkov@gmail.com> (maintainer)
60b6d9b1ae
Raphael Kubo da Costa (rakuco) · 3.30.1
Update to 3.30.1.

PR:		241214
Submitted by:	Pavel Volkov <pavelivolkov@gmail.com> (maintainer)
5bfd6d8905
Jan Beich (jbeich) · 3.29.0_1
devel/icu: update to 65.1

Changes:	http://site.icu-project.org/download/65
ABI:		https://abi-laboratory.pro/tracker/timeline/icu4c/
4bbb4133b2
Mathieu Arnold (mat) · 3.29.0
Thinking about r508819 a bit more, make sure nothing depends on fetch directly in ports.
daa53ae5ae
Steve Wills (swills) · 3.29.0
databases/sqlite3: Update to 3.29.0

While here, add DQS option

PR:		239201
Submitted by:	Pavel Volkov <pavelivolkov@gmail.com> (maintainer)
b1916636e4
Jan Beich (jbeich) · 3.28.0
databases/sqlite3: update to 3.28.0

Changes:	https://sqlite.org/releaselog/3_28_0.html
ABI:		https://abi-laboratory.pro/tracker/timeline/sqlite/
PR:		237677
Approved by:	Pavel Volkov (maintainer)
MFH:		2019Q2
4619a145dd
Jan Beich (jbeich) · 3.27.2
databases/sqlite3: update to 3.27.2

Changes:	https://sqlite.org/releaselog/3_27_2.html
ABI:		https://abi-laboratory.pro/tracker/timeline/sqlite/
PR:		237373
Approved by:	Pavel Volkov (maintainer)
058e96a289
Sunpoet Po-Chuan Hsieh (sunpoet) · 3.27.1_2
Update devel/readline to 8.0

- Bump PORTREVISION of dependent ports for shlib change

Changes:	https://tiswww.case.edu/php/chet/readline/CHANGES
PR:		236156
Exp-run by:	antoine
40c9c7f7eb
Jan Beich (jbeich) · 3.27.1_1
devel/icu: update to 64.1

Changes:	http://site.icu-project.org/download/64
ABI:		https://abi-laboratory.pro/tracker/timeline/icu4c/
PR:		236325
Exp-run by:	antoine
Differential Revision:	https://reviews.freebsd.org/D19479
480c577baa
Kurt Jaeger (pi) · 3.27.1
databases/sqlite3: update 3.26.0 -> 3.27.1

PR:		235802
Reported by:	Charlie Li <ml+freebsd@vishwin.info>
Approved by:	Pavel Volkov <pavelivolkov@gmail.com> (maintainer)
Relnotes:	https://www.sqlite.org/changes.html
5d361fd694
Steve Wills (swills) · 3.26.0
databases/sqlite3: Update to 3.26.0

PR:		233712
Submitted by:	Pavel Volkov <pavelivolkov@gmail.com> (maintainer)
739f9d054a
Jan Beich (jbeich) · 3.25.1_1
devel/icu: update to 63.1

Changes:	http://site.icu-project.org/download/63
ABI:		https://abi-laboratory.pro/tracker/timeline/icu4c/
PR:		232300
Exp-run by:	antoine
91f9922c6f
Steve Wills (swills) · 3.25.1
databases/sqlite3: update to 3.25.1

While here, UPD_DEL_LIMIT option which didn't work.

PR:		231518
PR:		207383
Submitted by:	Pavel Volkov <pavelivolkov@gmail.com> (maintainer)
63f9e877bf
Sunpoet Po-Chuan Hsieh (sunpoet) · 3.25.0
Fix configure error when SESSION is enabled

In file included from <built-in>:318:
<command line>:39:28: warning: ISO C99 requires whitespace after the macro name [-Wc99-extensions]
#define SQLITE_ENABLE_RTREE-DSQLITE_ENABLE_SESSION 1
                           ^
sqlite3.c:308:5: error: token is not a valid binary operator in a preprocessor subexpression
#if SQLITE_ENABLE_RTREE
    ^~~~~~~~~~~~~~~~~~~
<command line>:39:52: note: expanded from here
#define SQLITE_ENABLE_RTREE-DSQLITE_ENABLE_SESSION 1
                           ~~~~~~~~~~~~~~~~~~~~~~~ ^
1 warning and 1 error generated.
*** Error code 1

Approved by:	portmgr (blanket)
c88d80655c
Steve Wills (swills) · 3.25.0
databases/sqlite3: Update to 3.25.0

PR:		231452
Submitted by:	Pavel Volkov <pavelivolkov@gmail.com> (maintainer)
729d59be8b
Jan Beich (jbeich) · 3.24.0_1
databases/sqlite3: document gecko@ also needs FTS3_TOKEN

https://searchfox.org/mozilla-central/rev/c45b9755593c/db/sqlite3/src/moz.build#61-63
https://searchfox.org/comm-central/rev/39cff66145fd/mailnews/extensions/fts3/src/nsFts3Tokenizer.cpp#40
bd72161054
Jan Beich (jbeich) · 3.24.0_1
devel/icu: update to 62.1

Changes:	http://site.icu-project.org/download/62
ABI:		https://abi-laboratory.pro/tracker/timeline/icu4c/
PR:		229359
Exp-run by:	antoine (only 10.4)
3beb732dad
Steve Wills (swills) · 3.24.0
databases/sqlite3: Update to 3.24.0

PR:		228885
Submitted by:	Pavel Volkov <pavelivolkov@gmail.com> (maintainer)
c392d46476
Jochen Neumeister (joneum) · 3.23.1
databases/sqlite3: Update to 3.23.1

Changelog: http://www.sqlite.org/releaselog/3_23_1.html

PR:		227889
Submitted by:	Pavel Volkov <pavelivolkov@gmail.com> (maintainer)
2bcc40ce27
Yuri Victorovich (yuri) · 3.23.0
databases/sqlite3: Update 3.22.0 -> 3.23.0

Changelog:
https://www.sqlite.org/releaselog/3_23_0.html

Port changes:
* Add SER1 option for the new optional sqlite3_serialize()/sqlite3_deserialize() functions
* Remove security patches that are now in the release

PR:		227365
Submitted by:	Pavel Volkov <pavelivolkov@gmail.com> (maintainer)
4240c54084
Jan Beich (jbeich) · 3.22.0_2
devel/icu: update to 61.1

Changes:	http://site.icu-project.org/download/61
ABI:		https://abi-laboratory.pro/tracker/timeline/icu4c/
PR:		227042
Exp-run by:	antoine
MFH:		2018Q2 (required by Firefox 61)
ae60358af5
Yuri Victorovich (yuri) · 3.22.0_1
databases/sqlite3: Patch for CVE-2018-8740

Detect databases whose schema is corrupted using
a CREATE TABLE AS statement and issue an appropriate error message.

CVE-2018-8740 will be entered into VuXML when SQLite will make
a release, because CVE-2018-8740 says that versions up to and including
the current version 3.22.0 are vulnerable.

Submitted by:	Pavel Volkov <pavelivolkov@gmail.com> (maintainer)
Reported by:	tj <tj@mrsk.me>
5bb45f7194
Yuri Victorovich (yuri) · 3.22.0
databases/sqlite: Update to 3.22.0

Changelog:
https://www.sqlite.org/releaselog/3_22_0.html

Port changes:
* Added the OFFSET option for the new sqlite_offset() function
* Added 'Optional extensions' and 'Optional functions' option
  groups for better options readability
* Deleted patches from files/ because they were disabling certain
  options in the command-line utility that the upstream keeps
  always enabled there
* Changed capitalization in some options according to
  common spelling rules

PR:		225627
Submitted by:	Charlie Li <ml+freebsd@vishwin.info> (original version)
Submitted by:	Pavel Volkov <pavelivolkov@gmail.com> (maintainer, later version)
Approved by:	Pavel Volkov <pavelivolkov@gmail.com> (maintainer)
Differential Revision:	https://reviews.freebsd.org/D14216
45382795c3
Jan Beich (jbeich) · 3.21.0_1
devel/icu: update to 60.1

Changes:	http://site.icu-project.org/download/60
ABI:		https://abi-laboratory.pro/tracker/timeline/icu4c/
PR:		223373
Exp-run by:	antoine
99b0558e42
Jan Beich (jbeich) · 3.21.0
databases/sqlite3: update to 3.21.0

Changes:	https://www.sqlite.org/releaselog/3_21_0.html
ABI:		https://abi-laboratory.pro/tracker/timeline/sqlite/
PR:		223363
Submitted by:	Pavel Volkov (maintainer)
49fccfbef7