[QTBUG-81020] Patch SQLite to cover the CVEs reported - Qt Bug Tracker

XML

Word

Printable

Details

Type: Task
Status: Closed
Priority: P1: Critical
Resolution: Done
Affects Version/s: 5.14.0
Fix Version/s: 5.14.1
Component/s: SQL Support
Labels:
- Reported_by_support_standard

Platform/s:

All
Technical Risk:
Normal

Description

The following CVE’s were submitted on SQLite.
https://nvd.nist.gov/vuln/detail/CVE-2019-19244
https://nvd.nist.gov/vuln/detail/CVE-2019-19603
https://nvd.nist.gov/vuln/detail/CVE-2019-19242
https://nvd.nist.gov/vuln/detail/CVE-2019-19646
https://nvd.nist.gov/vuln/detail/CVE-2019-19645

Next SQLite release is planned to 2019-12-31 (https://sqlite.org/draft/releaselog/3_31_0.html).

Would be nice if next releases of Qt would contain it.

Attachments

Options
- Issue Only
- Show All Reviews
- Show Open Reviews
- Show All Issues
- Show Open Issues

Gerrit Reviews

No reviews matched the request. Check your Options in the drop-down menu of this sections header.

Activity

People

Assignee:: Andy Shaw

Reporter:: Karim Pinter

Votes:: 0 Vote for this issue

Watchers:: 2 Start watching this issue

Dates

Created:: 30 Dec '19 13:17

Updated:: 02 Aug '20 10:37

Resolved:: 02 Aug '20 10:37

Gerrit Reviews

There are no open Gerrit changes

Show There are 4 closed Gerrit changes

Hide There are 4 closed Gerrit changes

Fix CVE-2019-19645 in SQLite: Gerrit Review:

Fix CVE-2019-19646 in SQLite: Gerrit Review:

Fix CVE-2019-19646 in SQLite: Gerrit Review:

Fix CVE-2019-19645 in SQLite: Gerrit Review: