[ptxdist] [PATCH] sqlite: version bump 3.48.0 -> 3.49.1

[ptxdist] [PATCH] sqlite: version bump 3.48.0 -> 3.49.1

[Roman Schnider via ptxdist]

https://www.sqlite.org/releaselog/3_49_1.html

* Addresses CVE-2025-29088 and CVE-2025-3277
https://www.sqlite.org/cves.html

* Adjust build options, disabled JSON support

Signed-off-by: Roman Schnider <r.schnider@cab.de>
---
 rules/sqlite.make | 7 ++++---
 1 file changed, 4 insertions(+), 3 deletions(-)

diff --git a/rules/sqlite.make b/rules/sqlite.make
index f75edfbd5..d91298d86 100644
--- a/rules/sqlite.make
+++ b/rules/sqlite.make
@@ -29,8 +29,8 @@ endef
 #
 # Paths and names
 #
-SQLITE_VERSION	:= 3.48.0
-SQLITE_MD5	:= ab4e0652b6dedb075faf7a2781ba2c20
+SQLITE_VERSION	:= 3.49.1
+SQLITE_MD5	:= 8d77d0779bcd9993eaef33431e2e0c30
 SQLITE		:= sqlite-autoconf-$(call sqlite/file-version,$(SQLITE_VERSION))
 SQLITE_SUFFIX	:= tar.gz
 SQLITE_URL	:= https://www.sqlite.org/2025/$(SQLITE).$(SQLITE_SUFFIX)
@@ -67,8 +67,9 @@ SQLITE_CONF_OPT		:= \
 	--disable-editline \
 	--$(call ptx/endis,PTXCONF_SQLITE_READLINE)-readline \
 	--$(call ptx/endis,PTXCONF_SQLITE_THREADSAFE)-threadsafe \
-	--$(call ptx/endis,PTXCONF_SQLITE_LOAD_EXTENSION)-dynamic-extensions \
+	--$(call ptx/endis,PTXCONF_SQLITE_LOAD_EXTENSION)-load-extension \
 	--disable-math \
+	--disable-json \
 	--enable-fts4 \
 	--enable-fts3 \
 	--disable-fts5 \
-- 
2.43.0

Re: [ptxdist] [PATCH] sqlite: version bump 3.48.0 -> 3.49.1

[Michael Olbrich]

On Tue, May 06, 2025 at 01:53:59PM +0200, Roman Schnider via ptxdist wrote:
> https://www.sqlite.org/releaselog/3_49_1.html
> 
> * Addresses CVE-2025-29088 and CVE-2025-3277
> https://www.sqlite.org/cves.html
> 
> * Adjust build options, disabled JSON support

Hmm, I'm pretty sure the old version has JSON support as well and it was
enabled. I assume that the new version just added the option to disable it.

So I think json support should remain enabled. Unless I'm missing something
here?

Michael

> Signed-off-by: Roman Schnider <r.schnider@cab.de>
> ---
>  rules/sqlite.make | 7 ++++---
>  1 file changed, 4 insertions(+), 3 deletions(-)
> 
> diff --git a/rules/sqlite.make b/rules/sqlite.make
> index f75edfbd5..d91298d86 100644
> --- a/rules/sqlite.make
> +++ b/rules/sqlite.make
> @@ -29,8 +29,8 @@ endef
>  #
>  # Paths and names
>  #
> -SQLITE_VERSION	:= 3.48.0
> -SQLITE_MD5	:= ab4e0652b6dedb075faf7a2781ba2c20
> +SQLITE_VERSION	:= 3.49.1
> +SQLITE_MD5	:= 8d77d0779bcd9993eaef33431e2e0c30
>  SQLITE		:= sqlite-autoconf-$(call sqlite/file-version,$(SQLITE_VERSION))
>  SQLITE_SUFFIX	:= tar.gz
>  SQLITE_URL	:= https://www.sqlite.org/2025/$(SQLITE).$(SQLITE_SUFFIX)
> @@ -67,8 +67,9 @@ SQLITE_CONF_OPT		:= \
>  	--disable-editline \
>  	--$(call ptx/endis,PTXCONF_SQLITE_READLINE)-readline \
>  	--$(call ptx/endis,PTXCONF_SQLITE_THREADSAFE)-threadsafe \
> -	--$(call ptx/endis,PTXCONF_SQLITE_LOAD_EXTENSION)-dynamic-extensions \
> +	--$(call ptx/endis,PTXCONF_SQLITE_LOAD_EXTENSION)-load-extension \
>  	--disable-math \
> +	--disable-json \
>  	--enable-fts4 \
>  	--enable-fts3 \
>  	--disable-fts5 \
> -- 
> 2.43.0
> 
> 
> 

-- 
Pengutronix e.K.                           |                             |
Steuerwalder Str. 21                       | http://www.pengutronix.de/  |
31137 Hildesheim, Germany                  | Phone: +49-5121-206917-0    |
Amtsgericht Hildesheim, HRA 2686           | Fax:   +49-5121-206917-5555 |

Re: [ptxdist] [PATCH] sqlite: version bump 3.48.0 -> 3.49.1

[Roman Schnider via ptxdist]

> On Tue, May 06, 2025 at 01:53:59PM +0200, Roman Schnider via ptxdist wrote:
>> https://www.sqlite.org/releaselog/3_49_1.html
>> 
>> * Addresses CVE-2025-29088 and CVE-2025-3277
>> https://www.sqlite.org/cves.html
>> 
>> * Adjust build options, disabled JSON support
> 
> Hmm, I'm pretty sure the old version has JSON support as well and it was
> enabled. I assume that the new version just added the option to disable it.
> 
> So I think json support should remain enabled. Unless I'm missing something
> here?

Correct, the old version included JSON support by default. I'll re-add 
it to keep configuration compatibility.
I will submit it in the v3 patch when the so naming issue is clarified.

Roman.

> 
> Michael
> 
>> Signed-off-by: Roman Schnider <r.schnider@cab.de>
>> ---
>>  rules/sqlite.make | 7 ++++---
>>  1 file changed, 4 insertions(+), 3 deletions(-)
>> 
>> diff --git a/rules/sqlite.make b/rules/sqlite.make
>> index f75edfbd5..d91298d86 100644
>> --- a/rules/sqlite.make
>> +++ b/rules/sqlite.make
>> @@ -29,8 +29,8 @@ endef
>>  #
>>  # Paths and names
>>  #
>> -SQLITE_VERSION	:= 3.48.0
>> -SQLITE_MD5	:= ab4e0652b6dedb075faf7a2781ba2c20
>> +SQLITE_VERSION	:= 3.49.1
>> +SQLITE_MD5	:= 8d77d0779bcd9993eaef33431e2e0c30
>>  SQLITE		:= sqlite-autoconf-$(call sqlite/file-version,$(SQLITE_VERSION))
>>  SQLITE_SUFFIX	:= tar.gz
>>  SQLITE_URL	:= https://www.sqlite.org/2025/$(SQLITE).$(SQLITE_SUFFIX)
>> @@ -67,8 +67,9 @@ SQLITE_CONF_OPT		:= \
>>  	--disable-editline \
>>  	--$(call ptx/endis,PTXCONF_SQLITE_READLINE)-readline \
>>  	--$(call ptx/endis,PTXCONF_SQLITE_THREADSAFE)-threadsafe \
>> -	--$(call ptx/endis,PTXCONF_SQLITE_LOAD_EXTENSION)-dynamic-extensions \
>> +	--$(call ptx/endis,PTXCONF_SQLITE_LOAD_EXTENSION)-load-extension \
>>  	--disable-math \
>> +	--disable-json \
>>  	--enable-fts4 \
>>  	--enable-fts3 \
>>  	--disable-fts5 \
>> -- 
>> 2.43.0
>> 
>> 
>> 
> 
> -- 
> Pengutronix e.K.                           |                             |
> Steuerwalder Str. 21                       | http://www.pengutronix.de/  |
> 31137 Hildesheim, Germany                  | Phone: +49-5121-206917-0    |
> Amtsgericht Hildesheim, HRA 2686           | Fax:   +49-5121-206917-5555 |
> 
>