File tree Expand file tree Collapse file tree 2 files changed +17
-3
lines changed Expand file tree Collapse file tree 2 files changed +17
-3
lines changed Original file line number Diff line number Diff line change 1
1
# sqlite3-ruby Changelog
2
2
3
- ## next / unreleased
3
+ ## 1.5.1 / 2022-09-29
4
4
5
5
### Dependencies
6
6
7
7
* Vendored sqlite is updated to [ v3.39.4] ( https://sqlite.org/releaselog/3_39_4.html ) .
8
8
9
+ ### Security
10
+
11
+ The vendored version of sqlite, v3.39.4, should be considered to be a security release. From the release notes:
12
+
13
+ > Version 3.39.4 is a minimal patch against the prior release that addresses issues found since the
14
+ > prior release. In particular, a potential vulnerability in the FTS3 extension has been fixed, so
15
+ > this should be considered a security update.
16
+ >
17
+ > In order to exploit the vulnerability, an attacker must have full SQL access and must be able to
18
+ > construct a corrupt database with over 2GB of FTS3 content. The problem arises from a 32-bit
19
+ > signed integer overflow.
20
+
21
+ For more information please see [ GHSA-mgvv -5mxp-xq67] ( https://github.com/sparklemotion/sqlite3-ruby/security/advisories/GHSA-mgvv-5mxp-xq67 ) .
22
+
9
23
10
24
## 1.5.0 / 2022-09-08
11
25
Original file line number Diff line number Diff line change 1
1
module SQLite3
2
2
3
- VERSION = "1.5.0 "
3
+ VERSION = "1.5.1 "
4
4
5
5
module VersionProxy
6
6
MAJOR = 1
7
7
MINOR = 5
8
- TINY = 0
8
+ TINY = 1
9
9
BUILD = nil
10
10
11
11
STRING = [ MAJOR , MINOR , TINY , BUILD ] . compact . join ( "." )
You can’t perform that action at this time.
0 commit comments