Browse code
Upgrading sqlite with patch for CVE-2017-10989
Change-Id: Ic44976d97a504e5e30c14359552b8c5aca3a21e6
Reviewed-on: http://photon-jenkins.eng.vmware.com:8082/3250
Tested-by: gerrit-photon <photon-checkins@vmware.com>
Reviewed-by: Divya Thaluru <dthaluru@vmware.com>
DheerajSShetty authored on 2017/07/15 06:23:22Showing 2 changed files
| 1 | 1 |
new file mode 100644 |
| ... | ... |
@@ -0,0 +1,14 @@ |
| 0 |
+diff -dupr a/sqlite3.c b/sqlite3.c |
|
| 1 |
+--- a/sqlite3.c 2017-06-08 08:09:52.000000000 -0700 |
|
| 2 |
+@@ -167480,6 +167480,10 @@ static int getNodeSize( |
|
| 3 |
+ rc = getIntFromStmt(db, zSql, &pRtree->iNodeSize); |
|
| 4 |
+ if( rc!=SQLITE_OK ){
|
|
| 5 |
+ *pzErr = sqlite3_mprintf("%s", sqlite3_errmsg(db));
|
|
| 6 |
++ }else if( pRtree->iNodeSize<(512-64) ){
|
|
| 7 |
++ rc = SQLITE_CORRUPT; |
|
| 8 |
++ *pzErr = sqlite3_mprintf("undersize RTree blobs in \"%q_node\"",
|
|
| 9 |
++ pRtree->zName); |
|
| 10 |
+ } |
|
| 11 |
+ } |
|
| 12 |
+ |
| ... | ... |
@@ -1,15 +1,17 @@ |
| 1 |
-%define sourcever 3180000 |
|
| 1 |
+%define sourcever 3190300 |
|
| 2 | 2 |
Summary: A portable, high level programming interface to various calling conventions |
| 3 | 3 |
Name: sqlite |
| 4 |
-Version: 3.18.0 |
|
| 5 |
-Release: 2%{?dist}
|
|
| 4 |
+Version: 3.19.3 |
|
| 5 |
+Release: 1%{?dist}
|
|
| 6 | 6 |
License: Public Domain |
| 7 | 7 |
URL: http://www.sqlite.org |
| 8 | 8 |
Group: System Environment/GeneralLibraries |
| 9 | 9 |
Vendor: VMware, Inc. |
| 10 | 10 |
Distribution: Photon |
| 11 |
-Source0: http://sqlite.org/2016/%{name}-autoconf-3180000.tar.gz
|
|
| 12 |
-%define sha1 sqlite=74559194e1dd9b9d577cac001c0e9d370856671b |
|
| 11 |
+Source0: http://sqlite.org/2016/%{name}-autoconf-3190300.tar.gz
|
|
| 12 |
+%define sha1 sqlite=58f2cabffb3ff4761a3ac7f834d9db7b46307c1f |
|
| 13 |
+#https://sqlite.org/src/vpatch?from=0db20efe201736b3&to=66de6f4a9504ec26 |
|
| 14 |
+Patch0: CVE-2017-10989.patch |
|
| 13 | 15 |
Obsoletes: sqlite-autoconf |
| 14 | 16 |
Requires: sqlite-libs = %{version}-%{release}
|
| 15 | 17 |
Provides: sqlite3 |
| ... | ... |
@@ -37,6 +39,8 @@ The sqlite3 library. |
| 37 | 37 |
|
| 38 | 38 |
%prep |
| 39 | 39 |
%setup -q -n %{name}-autoconf-%{sourcever}
|
| 40 |
+%patch0 -p1 |
|
| 41 |
+ |
|
| 40 | 42 |
%build |
| 41 | 43 |
./configure \ |
| 42 | 44 |
CFLAGS="%{optflags}" \
|
| ... | ... |
@@ -86,6 +90,8 @@ rm -rf %{buildroot}/*
|
| 86 | 86 |
%{_libdir}/libsqlite3.so.0.8.6
|
| 87 | 87 |
|
| 88 | 88 |
%changelog |
| 89 |
+* Fri Jul 14 2017 Dheeraj Shetty <dheerajs@vmware.com> 3.19.3-1 |
|
| 90 |
+- Upgrading to version 3.19.0 and adding patch for CVE-2017-10989 |
|
| 89 | 91 |
* Thu Jun 29 2017 Divya Thaluru <dthaluru@vmware.com> 3.18.0-2 |
| 90 | 92 |
- Added obseletes for deprecated sqlite-autoconf package |
| 91 | 93 |
* Fri Apr 7 2017 Alexey Makhalov <amakhalov@vmware.com> 3.18.0-1 |