13:02 cy 

Update 3.31.1 --> 3.32.0

Address multiple security vulnerabilities.

PR:		247149
Reported by:	spam123@bitbert.com
Reminded by:	emaste
Approved by:    Approved by: portmgr (blanket: security bugfix)
MFH:		2020Q2
Security:	CVE-2020-11655, CVE-2020-13434, CVE-2020-13435,
		CVE-2020-13630, CVE-2020-13631, CVE-2020-13632

 

03:53 cy 

Fix PowerPC segfault.

The segfault fix was originally developed by our upstream, sqlite.org,
to address S/390 and Sparc segfaults, both of which are big endian.
Our PowerPC is also big endian, which this patch also fixes.

Inspired by:	src r360223
Approved by:	Approved by: portmgr (blanket: run-time bugfix)
Obtained from:	https://www.sqlite.org/src/vinfo/04885763c4cd00cb?diff=1
		https://sqlite.org/forum/forumpost/672291a5b2

 

08:52 yuri 

databases/sqlite3: Patch for CVE-2018-8740

Detect databases whose schema is corrupted using
a CREATE TABLE AS statement and issue an appropriate error message.

CVE-2018-8740 will be entered into VuXML when SQLite will make
a release, because CVE-2018-8740 says that versions up to and including
the current version 3.22.0 are vulnerable.

Submitted by:	Pavel Volkov <pavelivolkov@gmail.com> (maintainer)
Reported by:	tj <tj@mrsk.me>