Skip to content

Commit 8ab3ecc

Browse files
committed
version bump to 1.5.1
1 parent b026da1 commit 8ab3ecc

File tree

2 files changed

+17
-3
lines changed

2 files changed

+17
-3
lines changed

CHANGELOG.md

Lines changed: 15 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -1,11 +1,25 @@
11
# sqlite3-ruby Changelog
22

3-
## next / unreleased
3+
## 1.5.1 / 2022-09-29
44

55
### Dependencies
66

77
* Vendored sqlite is updated to [v3.39.4](https://sqlite.org/releaselog/3_39_4.html).
88

9+
### Security
10+
11+
The vendored version of sqlite, v3.39.4, should be considered to be a security release. From the release notes:
12+
13+
> Version 3.39.4 is a minimal patch against the prior release that addresses issues found since the
14+
> prior release. In particular, a potential vulnerability in the FTS3 extension has been fixed, so
15+
> this should be considered a security update.
16+
>
17+
> In order to exploit the vulnerability, an attacker must have full SQL access and must be able to
18+
> construct a corrupt database with over 2GB of FTS3 content. The problem arises from a 32-bit
19+
> signed integer overflow.
20+
21+
For more information please see [GHSA-mgvv-5mxp-xq67](https://github.com/sparklemotion/sqlite3-ruby/security/advisories/GHSA-mgvv-5mxp-xq67).
22+
923

1024
## 1.5.0 / 2022-09-08
1125

lib/sqlite3/version.rb

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -1,11 +1,11 @@
11
module SQLite3
22

3-
VERSION = "1.5.0"
3+
VERSION = "1.5.1"
44

55
module VersionProxy
66
MAJOR = 1
77
MINOR = 5
8-
TINY = 0
8+
TINY = 1
99
BUILD = nil
1010

1111
STRING = [ MAJOR, MINOR, TINY, BUILD ].compact.join( "." )

0 commit comments

Comments
 (0)