From 44858d9784799f0a00b6d0384143e191d3c53744 Mon Sep 17 00:00:00 2001
From: Max Rees <maxcrees@me.com>
Date: Mon, 16 Mar 2020 18:58:23 -0500
Subject: system/sqlite: [CVE] bump to 3.31.1 (#200)

Also add options=!check since the test suite wasn't being run anyway -
it requires tcl (which is a circular dependency :/) and is in the "src"
distribution, not the "autoconf" one.
---
 system/sqlite/APKBUILD | 23 ++++++++++++++++++++---
 1 file changed, 20 insertions(+), 3 deletions(-)

(limited to 'system/sqlite')

diff --git a/system/sqlite/APKBUILD b/system/sqlite/APKBUILD
index 0a3e367c1..e8db13ba0 100644
--- a/system/sqlite/APKBUILD
+++ b/system/sqlite/APKBUILD
@@ -1,20 +1,37 @@
 # Contributor: Łukasz Jendrysik <scadu@yandex.com>
 # Maintainer: A. Wilcox <awilfox@adelielinux.org>
 pkgname=sqlite
-pkgver=3.30.1
+pkgver=3.31.1
 _pkgver=${pkgver%.*}0${pkgver#*.*.}00
 _pkgver=${_pkgver%.*}${_pkgver#*.}
 pkgrel=0
 pkgdesc="C library that implements an SQL database engine"
 url="https://sqlite.org/"
 arch="all"
+options="!check"  # Test suite requires tcl - circular dependency
 license="Public-Domain"
 depends=""
 makedepends="libedit-dev zlib-dev"
-source="https://sqlite.org/2019/$pkgname-autoconf-$_pkgver.tar.gz"
+source="https://sqlite.org/2020/$pkgname-autoconf-$_pkgver.tar.gz"
 subpackages="$pkgname-doc $pkgname-dev $pkgname-libs"
 builddir="$srcdir/$pkgname-autoconf-$_pkgver"
 
+# secfixes:
+#   3.31.1-r0:
+#     - CVE-2019-19242
+#     - CVE-2019-19244
+#     - CVE-2019-19317
+#     - CVE-2019-19603
+#     - CVE-2019-19645
+#     - CVE-2019-19646
+#     - CVE-2019-19880
+#     - CVE-2019-19923
+#     - CVE-2019-19924
+#     - CVE-2019-19925
+#     - CVE-2019-19926
+#     - CVE-2019-19959
+#     - CVE-2019-20218
+
 build() {
 	local _amalgamation="-DSQLITE_ENABLE_FTS4 \
 	-DSQLITE_ENABLE_FTS3 \
@@ -61,4 +78,4 @@ libs() {
 	mv "$pkgdir"/usr/lib "$subpkgdir"/usr/
 }
 
-sha512sums="9ec0283c417fb0323b0e43550af2a49e9a63988e4212c27ea62cc9da3534caa6faf5bdc7e051b6772c4ce61560a433b3d3288b68e05e9ba8495f61a3bcebda3e  sqlite-autoconf-3300100.tar.gz"
+sha512sums="d85250ba5f78f0c918880f663741709aba662192f04888b2324a0df17affdf5b8540e8428c6c7315119806e7adad758ea281c9b403c0ad94ac6a9bd1b93fd617  sqlite-autoconf-3310100.tar.gz"
-- 
cgit v1.2.3-70-g09d2