Sqlite-net: Update SQLitePCLRaw.core to v1.1.14

Created on 6 Jun 2019  路  5Comments  路  Source: praeclarum/sqlite-net

May you bump raw to v1.1.14 for release v1.6?
In SQLite 3.28 there are several CVEs that got fixed. (CVE-2019-5018, CVE-2019-9936, CVE-2019-9937)

From the release notes:
1.1.14:

  • update e_sqlite3 builds to 3.28.0.
  • fix packaging issue with bundle_zetetic and UWP.

Most helpful comment

@JKennedy24 See #860

All 5 comments

Note that developers can easily update the SQLitePCLRaw nuget package to 1.1.14 independently. So if the security fixes are a concern, they are available before the sqlite-net nuget package updates the version number in its dependency.

@ericsink Thanks for the tip. That's good to know!

What about updating to V2.0.0 now?

https://github.com/ericsink/SQLitePCL.raw/blob/master/v2.md

It says:

sqlite-net is (probably) not yet compatible with v2

@JKennedy24 See #860

Thanks for the good work!
It's now v2.0.1 with the latest release and #860

Reference commit: 7d6359d1927fd283fcb42bffd818e6c5becc5144

Closing now...

Was this page helpful?
0 / 5 - 0 ratings

Related issues

santiagohdzb picture santiagohdzb  路  3Comments

ToddThomson picture ToddThomson  路  3Comments

shaman4k picture shaman4k  路  5Comments

gtino picture gtino  路  7Comments

Freddixx picture Freddixx  路  4Comments