GNU bug report logs

#47231 sqlite package is vulnerable to CVE-2020-11655, CVE-2020-11656, CVE-2020-13434, CVE-2020-13435, CVE-2020-13630, CVE-2020-13631, CVE-2020-13632, CVE-2020-15358 and CVE-2020-9327

PackageSource(s)Maintainer(s)
guix PTS Buildd Popcon
Full log

Message #22 received at submit@debbugs.gnu.org (full text, mbox, reply):

Received: (at submit) by debbugs.gnu.org; 25 Mar 2021 15:56:11 +0000
From debbugs-submit-bounces@debbugs.gnu.org Thu Mar 25 11:56:10 2021
Received: from localhost ([127.0.0.1]:39326 helo=debbugs.gnu.org)
	by debbugs.gnu.org with esmtp (Exim 4.84_2)
	(envelope-from <debbugs-submit-bounces@debbugs.gnu.org>)
	id 1lPSLC-0003P5-Mm
	for submit@debbugs.gnu.org; Thu, 25 Mar 2021 11:56:10 -0400
Received: from lists.gnu.org ([209.51.188.17]:36026)
 by debbugs.gnu.org with esmtp (Exim 4.84_2)
 (envelope-from <me@tobias.gr>) id 1lPSLA-0003Ox-Tw
 for submit@debbugs.gnu.org; Thu, 25 Mar 2021 11:56:09 -0400
Received: from eggs.gnu.org ([2001:470:142:3::10]:48240)
 by lists.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256)
 (Exim 4.90_1) (envelope-from <me@tobias.gr>) id 1lPSL9-00041R-Fj
 for bug-guix@gnu.org; Thu, 25 Mar 2021 11:56:08 -0400
Received: from tobias.gr ([2a02:c205:2020:6054::1]:46430)
 by eggs.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256)
 (Exim 4.90_1) (envelope-from <me@tobias.gr>) id 1lPSL5-0000nH-OL
 for bug-guix@gnu.org; Thu, 25 Mar 2021 11:56:06 -0400
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=tobias.gr; s=2018;
 bh=D0wHEPs6lFd06Pd/6Y+oQ8TbB2YKJrFDno/gWFumKak=; h=date:in-reply-to:
 subject:cc:from:references; b=EokzjYxZW+F/aQ9Re321TystgfVY7z3PGx2zmz7x
 EwR+Lb6m+C6o86NHH16ZExmEN4q3UGwT6gN7wOwxoPaGJw2M4PQJaKMGKWPD3binJXc3TR
 0dQUmpJMZG6f66WA8iU4vOqjdLCw4diY7LRWLVN3z7q0lyGjrZz8yILUH8NPoBnkzLXt6M
 24MkHa9Rc0Zh7Wxcvs4/iQHd1SYRkU/kkLMCqZrXDHP/ttWk7tInC1GncKtvppwUopAtEk
 tujelqrYxFHUHDPhl/OCSmlCqLUDGH1tAnXXij0EIPtMvbUZ1LY/Jsl9kJokiIwwDz/6N5
 cHuOgTD5GNsD9qrOz5CgtA==
Received: by submission.tobias.gr (OpenSMTPD) with ESMTPSA id 9abd29b3
 (TLSv1.2:ECDHE-ECDSA-AES256-GCM-SHA384:256:NO); 
 Thu, 25 Mar 2021 15:57:06 +0000 (UTC)
References: <0381641839f5d0e71cbb496b95b9947a2a2c2799.camel@zaclys.net>
 <e38a431d1fe6bd5b2a79746b04497cc3fec49c59.camel@zaclys.net>
 <b8543b82478ccf61691186795f331f6ff9679862.camel@zaclys.net>
 <87y2ebh3rz.fsf@nckx>
From: Tobias Geerinckx-Rice <me@tobias.gr>
Subject: Re: bug#47231: sqlite package is vulnerable to CVE-2020-11655,
 CVE-2020-11656, CVE-2020-13434, CVE-2020-13435, CVE-2020-13630,
 CVE-2020-13631, CVE-2020-13632, CVE-2020-15358 and CVE-2020-9327
In-reply-to: <87y2ebh3rz.fsf@nckx>
BIMI-Selector: v=BIMI1; s=default;
Date: Thu, 25 Mar 2021 16:56:00 +0100
Message-ID: <87lfabgrcf.fsf@nckx>
MIME-Version: 1.0
Content-Type: text/plain; format=flowed
Received-SPF: pass client-ip=2a02:c205:2020:6054::1; envelope-from=me@tobias.gr;
 helo=tobias.gr
X-Spam_score_int: -10
X-Spam_score: -1.1
X-Spam_bar: -
X-Spam_report: (-1.1 / 5.0 requ) BAYES_00=-1.9, DKIM_SIGNED=0.1,
 DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, MISSING_HEADERS=1.021,
 SPF_HELO_PASS=-0.001, SPF_PASS=-0.001 autolearn=no autolearn_force=no
X-Spam_action: no action
X-Spam-Score: -0.2 (/)
X-Debbugs-Envelope-To: submit
Cc: 47231@debbugs.gnu.org, Léo Le Bouter <lle-bout@zaclys.net>,
 bug-guix@gnu.org
X-BeenThere: debbugs-submit@debbugs.gnu.org
X-Mailman-Version: 2.1.18
Precedence: list
List-Id: <debbugs-submit.debbugs.gnu.org>
List-Unsubscribe: <https://debbugs.gnu.org/cgi-bin/mailman/options/debbugs-submit>, 
 <mailto:debbugs-submit-request@debbugs.gnu.org?subject=unsubscribe>
List-Archive: <https://debbugs.gnu.org/cgi-bin/mailman/private/debbugs-submit/>
List-Post: <mailto:debbugs-submit@debbugs.gnu.org>
List-Help: <mailto:debbugs-submit-request@debbugs.gnu.org?subject=help>
List-Subscribe: <https://debbugs.gnu.org/cgi-bin/mailman/listinfo/debbugs-submit>, 
 <mailto:debbugs-submit-request@debbugs.gnu.org?subject=subscribe>
Errors-To: debbugs-submit-bounces@debbugs.gnu.org
Sender: "Debbugs-submit" <debbugs-submit-bounces@debbugs.gnu.org>
X-Spam-Score: -1.2 (-)
Tobias Geerinckx-Rice via Bug reports for GNU Guix writes:
> I'm currently rebuilding IceCat with this change as an extra
> precaution, but that shouldn't take long.  If that doesn't cause 
> problems this LGTM for master.

OK, it worked, old IceCat writes new SQlite files.

Kind regards,

T G-R




Send a report that this bug log contains spam.


debbugs.gnu.org maintainers <help-debbugs@gnu.org>. Last modified: Thu Jan 2 15:40:24 2025; Machine Name: wallace-server

GNU bug tracking system

Debbugs is free software and licensed under the terms of the GNU Public License version 2. The current version can be obtained from https://bugs.debian.org/debbugs-source/.

Copyright © 1999 Darren O. Benham, 1997,2003 nCipher Corporation Ltd, 1994-97 Ian Jackson, 2005-2017 Don Armstrong, and many other contributors.