Re: Incomplete fix for CVE-2019-20218/sqlite3

2020-12-10 Thread Roberto C . Sánchez
On Tue, Dec 08, 2020 at 10:04:13AM -0500, Roberto C. Sánchez wrote: > Hi Moritz & Chris, > > On Tue, Dec 08, 2020 at 02:37:14PM +, Chris Lamb wrote: > > Hi Moritz, > > > > > CVE-2019-20218 isn't fixed in Stretch/LTS. Running the reproducer: > > > > Thanks for reporting this. It seems I ove

Re: Incomplete fix for CVE-2019-20218/sqlite3

2020-12-10 Thread Roberto C . Sánchez
On Thu, Dec 10, 2020 at 08:53:58AM -0500, Roberto C. Sánchez wrote: > On Tue, Dec 08, 2020 at 10:04:13AM -0500, Roberto C. Sánchez wrote: > > Hi Moritz & Chris, > > > > On Tue, Dec 08, 2020 at 02:37:14PM +, Chris Lamb wrote: > > > Hi Moritz, > > > > > > > CVE-2019-20218 isn't fixed in Stretch