From 6fdeb2df93a47944e68d940bc5c3e16b6689089a Mon Sep 17 00:00:00 2001 From: Sebastian Kemper Date: Tue, 18 Dec 2018 20:00:33 +0100 Subject: [PATCH 1/2] sqlite3: security bump A remote code execution vuln has been found in sqlite. Infos available here: https://blade.tencent.com/magellan/index_en.html sqlite 3.26.0 contains the fix. This commit also changes source URL to https. It also adds a depend on zlib, which is now required. Signed-off-by: Sebastian Kemper --- libs/sqlite3/Makefile | 10 +++++----- 1 file changed, 5 insertions(+), 5 deletions(-) diff --git a/libs/sqlite3/Makefile b/libs/sqlite3/Makefile index 5cdd1e5223..7c3a2aac0d 100644 --- a/libs/sqlite3/Makefile +++ b/libs/sqlite3/Makefile @@ -8,12 +8,12 @@ include $(TOPDIR)/rules.mk PKG_NAME:=sqlite -PKG_VERSION:=3190300 -PKG_RELEASE:=2 +PKG_VERSION:=3260000 +PKG_RELEASE:=1 PKG_SOURCE:=$(PKG_NAME)-autoconf-$(PKG_VERSION).tar.gz -PKG_HASH:=06129c03dced9f87733a8cba408871bd60673b8f93b920ba8d815efab0a06301 -PKG_SOURCE_URL:=http://www.sqlite.org/2017/ +PKG_HASH:=5daa6a3fb7d1e8c767cd59c4ded8da6e4b00c61d3b466d0685e35c4dd6d7bf5d +PKG_SOURCE_URL:=https://www.sqlite.org/2018/ PKG_LICENSE:=PUBLICDOMAIN PKG_LICENSE_FILES:= @@ -43,7 +43,7 @@ define Package/libsqlite3 $(call Package/sqlite3/Default) SECTION:=libs CATEGORY:=Libraries - DEPENDS:=+libpthread + DEPENDS:=+libpthread +zlib TITLE+= (library) endef From d309d0090c79ee31a7735056bc1681953a2c8675 Mon Sep 17 00:00:00 2001 From: Sebastian Kemper Date: Tue, 18 Dec 2018 20:07:34 +0100 Subject: [PATCH 2/2] sqlite3: use dynamic linking for sqlite cli tool Otherwise it'll carry a static copy of it's own lib. Signed-off-by: Sebastian Kemper --- libs/sqlite3/Makefile | 3 ++- 1 file changed, 2 insertions(+), 1 deletion(-) diff --git a/libs/sqlite3/Makefile b/libs/sqlite3/Makefile index 7c3a2aac0d..574bb0744a 100644 --- a/libs/sqlite3/Makefile +++ b/libs/sqlite3/Makefile @@ -79,7 +79,8 @@ TARGET_CFLAGS += $(FPIC) \ CONFIGURE_ARGS += \ --enable-shared \ --enable-static \ - --disable-editline + --disable-editline \ + --disable-static-shell CONFIGURE_VARS += \ config_BUILD_CC="$(HOSTCC)" \