SQLite before 3.53.2 contains memory corruption vulnerabilities in the FTS5 full-text search extension that allow attackers to cause process crashes, memory exhaustion, or arbitrary code execution by supplying a crafted database with malformed FTS5 page data. Attackers can trigger an out-of-bounds read in fts5LeafSeek() via an attacker-controlled loop bound…
SQLite before 3.53.2 contains a heap-based buffer overflow vulnerability in the FTS5 full-text search extension that allows attackers to cause a crash or execute arbitrary code by supplying a crafted database with malicious continuation page metadata specifying a szLeaf value smaller than 4. Attackers can trigger an integer underflow in fts5ChunkIterate() c…
An information disclosure issue in the zipfileInflate function in the zipfile extension in SQLite v3.51.1 and earlier allows attackers to obtain heap memory via supplying a crafted ZIP file.
VuXML only (0) · listed, port not fixed yet
None. pkg audit reports nothing for this version.
Fixed (0)
No VuXML entries for this package.
Commits (81)
Pietro Cerutti (gahr) · 3.50.4
databases/tcl-sqlite3: update to 3.50.4
PR: 285015
Approved by: maintainer (timeout)
Reported by: Joachim Moskalewski <tonne03@jmos.net>
Revert "databases/tcl-sqlite3: update to 3.50.3"
This reverts commit 351e3faff8cc2968ce8674bb8ee6108db3e66a35.
This was pushed by accident. For now it must stay in bug #285015.
Remove WWW entries moved into port Makefiles
Commit b7f05445c00f has added WWW entries to port Makefiles based on
WWW: lines in pkg-descr files.
This commit removes the WWW: lines of moved-over URLs from these
pkg-descr files.
Approved by: portmgr (tcberner)
Add WWW entries to port Makefiles
It has been common practice to have one or more URLs at the end of the
ports' pkg-descr files, one per line and prefixed with "WWW:". These
URLs should point at a project website or other relevant resources.
Access to these URLs required processing of the pkg-descr files, and
they have often become stale over time. If more than one such URL was
present in a pkg-descr file, only the first one was tarnsfered into
the port INDEX, but for many ports only the last line did contain the
port specific URL to further information.
There have been several proposals to make a project URL available as
a macro in the ports' Makefiles, over time.
This commit implements such a proposal and moves one of the WWW: entries
of each pkg-descr file into the respective port's Makefile. A heuristic
attempts to identify the most relevant URL in case there is more than
one WWW: entry in some pkg-descr file. URLs that are not moved into the
Makefile are prefixed with "See also:" instead of "WWW:" in the pkg-descr
files in order to preserve them.
There are 1256 ports that had no WWW: entries in pkg-descr files. These
ports will not be touched in this commit.
The portlint port has been adjusted to expect a WWW entry in each port
Makefile, and to flag any remaining "WWW:" lines in pkg-descr files as
deprecated.
Approved by: portmgr (tcberner)
* Updated to 3.19.3 - Fix a bug associated with auto_vacuum that can lead to database corruption
PR: 219903
Submitted by: pavelivolkov@gmail.com (maintainer)
Reviewed by: lifanov (mentor), matthew (mentor)
Approved by: pavelivolkov@gmail.com (maintainer), lifanov (mentor), matthew (mentor)
Differential Revision: https://reviews.freebsd.org/D11136
databases/tcl-sqlite3: 3.11.1 -> 3.12.1
- Tracking the main distribution file of databases/sqlite3
PR: 208675
Submitted by: Pavel Volkov <pavelivolkov@gmail.com> (maintainer)
Add Public Domain support to ports license framework. You can now use
LICENSE= PD
Note that although Public Domain is not technically a license, it's
handled in the same way as licenses here, which is a common practice
(Arch, Gentoo, Fedora, Debian, even FOSSology do the same).
Convert all ports which redefine Public Domain LICENSE to LICENSE=PD.
Approved by: portmgr (bapt)
Differential Revision: D4149
Backout r384095 for breaking databases/tcl-sqlite3
PACKAGE_VERSION is 3.8.9, not 3.8.9.0. tcl-sqlite3 uses it for
naming shared library. Also saved in pkg-config --modversion.
Bump PORTREVISION to make sure both ports are on the same PORTVERSION.
PR: 199312
PR: 199313
Reported by: pkg-fallout
Requested by: Pavel Volkov <pavelivolkov@gmail.com> (maintainer)
Pointy hat: jbeich