diff options
| author | taca <taca@pkgsrc.org> | 2022-10-06 14:19:01 +0000 |
|---|---|---|
| committer | taca <taca@pkgsrc.org> | 2022-10-06 14:19:01 +0000 |
| commit | 572552f1d0eabd417a661c54d2d648ee434b8eb8 (patch) | |
| tree | b8752861041539f04081491ad562a55af2026206 /databases/ruby-sqlite3/distinfo | |
| parent | bd5f0703b2b96b1d769b997230a0362971c5bdd1 (diff) | |
| download | pkgsrc-572552f1d0eabd417a661c54d2d648ee434b8eb8.tar.gz | |
databases/ruby-sqlite3: update to 1.5.2
1.5.2 (2022-10-01)
Packaging
This version correctly vendors the tarball for sqlite v3.39.4 in the vanilla
"ruby" platform gem package, so that users will not require network access
at installation.
v1.5.0 and v1.5.1 mistakenly packaged the tarball for sqlite v3.38.5 in the
vanilla "ruby" platform gem, resulting in downloading the intended tarball
over the network at installation time (or, if the network was not available,
failure to install). Note that the precompiled native gems were not
affected by this issue. [#352]
1.5.1 (2022-09-29)
Dependencies
* Vendored sqlite is updated to v3.39.4.
Security
The vendored version of sqlite, v3.39.4, should be considered to be a
security release. From the release notes:
Version 3.39.4 is a minimal patch against the prior release that
addresses issues found since the prior release. In particular, a
potential vulnerability in the FTS3 extension has been fixed, so
this should be considered a security update.
In order to exploit the vulnerability, an attacker must have full
SQL access and must be able to construct a corrupt database with
over 2GB of FTS3 content. The problem arises from a 32-bit signed
integer overflow.
For more information please see GHSA-mgvv-5mxp-xq67.
Diffstat (limited to 'databases/ruby-sqlite3/distinfo')
| -rw-r--r-- | databases/ruby-sqlite3/distinfo | 8 |
1 files changed, 4 insertions, 4 deletions
diff --git a/databases/ruby-sqlite3/distinfo b/databases/ruby-sqlite3/distinfo index e5229386f3b..5d58515ee7b 100644 --- a/databases/ruby-sqlite3/distinfo +++ b/databases/ruby-sqlite3/distinfo @@ -1,5 +1,5 @@ -$NetBSD: distinfo,v 1.26 2022/09/09 13:17:47 taca Exp $ +$NetBSD: distinfo,v 1.27 2022/10/06 14:19:01 taca Exp $ -BLAKE2s (sqlite3-1.5.0.gem) = bc9dcb58e741a9471ded882ffde9fa20da40ce004415f5fae37edb0025dfc373 -SHA512 (sqlite3-1.5.0.gem) = 52303d3994e25bc994f86fac03b40b3bdb7eb688ae386ca583bacab74b68dd493c470f854884036d350b23ba366448605314bf080343a5684f9c999d73c1ab38 -Size (sqlite3-1.5.0.gem) = 3102720 bytes +BLAKE2s (sqlite3-1.5.2.gem) = 3ada0749d73f5e24dc1162b58028a092e5ce42c4e4d53b92e04da629cff90378 +SHA512 (sqlite3-1.5.2.gem) = 2fed4140beee19c2fa695e219de2dfb107e112b80ae9b0524961e3de0f92482cd0510e39cc5f04287ed275fc135eaf449bd90dd224961b7c4968e2c8e639a30b +Size (sqlite3-1.5.2.gem) = 3134976 bytes |