[OE-core] [kirkstone] [PATCH 2/2] sqlite3: Rename patch for CVE-2022-35737

2024-09-03 Thread Vrushti Dabhi via lists.openembedded.org
The patch "0001-sqlite-Increased-the-size-of-loop-variables-in-the-printf-implementation.patch" fixes CVE-2022-35737. Signed-off-by: Vrushti Dabhi --- ...-in-the-printf-implementation.patch => CVE-2022-35737.patch} | 0 meta/recipes-support/sqlite/sqlite3_3.38.5.bb | 2 +- 2 f

[OE-core] [kirkstone] [PATCH 1/2] sqlite3: CVE-ID correction for CVE-2023-7104

2024-09-03 Thread Vrushti Dabhi via lists.openembedded.org
- The commit [https://sqlite.org/src/info/0e4e7a05c4204b47] ("Fix a buffer overread in the sessions extension that could occur when processing a corrupt changeset.") fixes CVE-2023-7104 instead of CVE-2022-46908. - Hence, corrected the CVE-ID in CVE-2023-7104.patch. - Reference: https://nvd.ni