Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

SQLite 3.26.0 security update #79

Closed
brodycj opened this issue Dec 16, 2018 · 3 comments
Closed

SQLite 3.26.0 security update #79

brodycj opened this issue Dec 16, 2018 · 3 comments

Comments

@brodycj
Copy link
Collaborator

brodycj commented Dec 16, 2018

SQLite 3.26.0 update is needed due to a known vulnerability, as discussed in:

It should be possible to apply this patch to SQLCipher as described in https://discuss.zetetic.net/t/sqlcipher-sqlite-update/2470.

I would like to do this before the SQLCipher 4 update, which has breaking changes.

@kohlia
Copy link

kohlia commented Dec 18, 2018

How will this affect the current usage, also when can we expect the changes

@brodycj
Copy link
Collaborator Author

brodycj commented Dec 18, 2018

How will this affect the current usage

Should be the same as upgrading from an older version of SQLite to SQLite 3.26.0. The window functions feature should be available but I am not sure when I will explicitly test it.

when can we expect the changes

Hopefully within the next 1-2 weeks, in parallel to some other commitments.

In case anyone would like to purchase priority update support please contact sales@litehelpers.net.

@brodycj
Copy link
Collaborator Author

brodycj commented Dec 20, 2018

I published version 0.1.12-rc3 which has FTS3 and FTS5 security updates from SQLite 3.26.0.

Full SQLite 3.26.0 security update will come with SQLCipher 4.0.1 update (#80).

@brodycj brodycj closed this as completed Dec 20, 2018
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
None yet
Development

No branches or pull requests

2 participants