c4475c0a57
Fixes CVE-2018-20346: SQLite before 3.25.3, when the FTS3 extension is enabled, encounters an integer overflow (and resultant buffer overflow) for FTS3 queries that occur after crafted changes to FTS3 shadow tables, allowing remote attackers to execute arbitrary code by leveraging the ability to run arbitrary SQL statements (such as in certain WebSQL use cases), aka Magellan. For more details, see: https://blade.tencent.com/magellan/index_en.html https://www.sqlite.org/releaselog/3_25_3.html https://www.mail-archive.com/sqlite-users@mailinglists.sqlite.org/msg113218.html Signed-off-by: Peter Korsgaard <peter@korsgaard.com> Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
7 lines
375 B
Plaintext
7 lines
375 B
Plaintext
# From https://www.sqlite.org/download.html
|
|
sha1 5d6dc7634ec59e7a6fffa8758c1e184b2522c2e5 sqlite-autoconf-3250300.tar.gz
|
|
# Calculated based on the hash above
|
|
sha256 00ebf97be13928941940cc71de3d67e9f852698233cd98ce2d178fd08092f3dd sqlite-autoconf-3250300.tar.gz
|
|
# Locally calculated
|
|
sha256 66e056b6e8687f32af30d5187611b98b12a8f46f07aaf62f43585f276e8f0ac9 tea/license.terms
|