Script 'mail_helper' called by obssrc Hello community, here is the log from the commit of package sqlite3 for openSUSE:Factory checked in at 2023-01-07 17:15:52 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Comparing /work/SRC/openSUSE:Factory/sqlite3 (Old) and /work/SRC/openSUSE:Factory/.sqlite3.new.1563 (New) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Package is "sqlite3" Sat Jan 7 17:15:52 2023 rev:141 rq:1056142 version:3.40.1 Changes: -------- --- /work/SRC/openSUSE:Factory/sqlite3/sqlite3.changes 2022-12-17 20:35:58.576417471 +0100 +++ /work/SRC/openSUSE:Factory/.sqlite3.new.1563/sqlite3.changes 2023-01-07 17:16:06.348864274 +0100 @@ -1,0 +2,13 @@ +Wed Dec 28 21:37:44 UTC 2022 - Andreas Stieger <andreas.stie...@gmx.de> + +- Update to 3.40.1: + * Fix the --safe command-line option to the CLI such that it + correctly disallows the use of SQL functions like writefile() + that can cause harmful side-effects. + (previously patched, drop sqlite-CVE-2022-46908.patch) + * Fix a potential infinite loop in the memsys5 alternative memory + allocator. This bug was introduced by a performance + optimization in version 3.39.0. + * Various other obscure fixes. + +------------------------------------------------------------------- Old: ---- sqlite-CVE-2022-46908.patch sqlite-doc-3400000.zip sqlite-src-3400000.zip New: ---- sqlite-doc-3400100.zip sqlite-src-3400100.zip ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ sqlite3.spec ++++++ --- /var/tmp/diff_new_pack.lBknGs/_old 2023-01-07 17:16:07.048868450 +0100 +++ /var/tmp/diff_new_pack.lBknGs/_new 2023-01-07 17:16:07.056868498 +0100 @@ -17,11 +17,11 @@ %define oname sqlite -%define tarversion 3400000 +%define tarversion 3400100 %bcond_with icu %bcond_without check Name: sqlite3 -Version: 3.40.0 +Version: 3.40.1 Release: 0 Summary: Embeddable SQL Database Engine License: SUSE-Public-Domain @@ -31,7 +31,6 @@ Source1: baselibs.conf Source2: https://www.sqlite.org/2022/sqlite-doc-%{tarversion}.zip Patch0: sqlite-src-3390000-func7-pg-181.patch -Patch1: sqlite-CVE-2022-46908.patch BuildRequires: automake BuildRequires: libtool BuildRequires: pkgconfig @@ -130,7 +129,6 @@ %prep %setup -q -n sqlite-src-%{tarversion} -a2 %patch0 -p1 -%patch1 rm -v sqlite-doc-%{tarversion}/releaselog/current.html ln -sv `echo %{version} | sed "s/\./_/g"`.html sqlite-doc-%{tarversion}/releaselog/current.html
