File tree Expand file tree Collapse file tree 2 files changed +17
-3
lines changed Expand file tree Collapse file tree 2 files changed +17
-3
lines changed Original file line number Diff line number Diff line change 11# sqlite3-ruby Changelog
22
3- ## next / unreleased
3+ ## 1.5.1 / 2022-09-29
44
55### Dependencies
66
77* Vendored sqlite is updated to [ v3.39.4] ( https://sqlite.org/releaselog/3_39_4.html ) .
88
9+ ### Security
10+
11+ The vendored version of sqlite, v3.39.4, should be considered to be a security release. From the release notes:
12+
13+ > Version 3.39.4 is a minimal patch against the prior release that addresses issues found since the
14+ > prior release. In particular, a potential vulnerability in the FTS3 extension has been fixed, so
15+ > this should be considered a security update.
16+ >
17+ > In order to exploit the vulnerability, an attacker must have full SQL access and must be able to
18+ > construct a corrupt database with over 2GB of FTS3 content. The problem arises from a 32-bit
19+ > signed integer overflow.
20+
21+ For more information please see [ GHSA-mgvv -5mxp-xq67] ( https://github.com/sparklemotion/sqlite3-ruby/security/advisories/GHSA-mgvv-5mxp-xq67 ) .
22+
923
1024## 1.5.0 / 2022-09-08
1125
Original file line number Diff line number Diff line change 11module SQLite3
22
3- VERSION = "1.5.0 "
3+ VERSION = "1.5.1 "
44
55 module VersionProxy
66 MAJOR = 1
77 MINOR = 5
8- TINY = 0
8+ TINY = 1
99 BUILD = nil
1010
1111 STRING = [ MAJOR , MINOR , TINY , BUILD ] . compact . join ( "." )
You can’t perform that action at this time.
0 commit comments