mattn/go-sqlite3

Upgrade Amalgamation Code to 3.40.1

jonyoder opened this issue · 4 comments

jonyoder commented

3.39 introduced a performance regression that seriously affected our product. Fortunately, we were able to work around it, but it has been fixed as of 3.40.0. Are you planning to update the amalgamation code soon?

Regression thread is at https://sqlite.org/forum/info/96b9e5709cf47cda.

credativ-dar commented

I'm also interested in this as 3.40.1 is the first version fixing CVE-2022-46908. This is probably not exploitable through go-sqlite3 but still generates false positives in security scanners which we would like to reduce to a minimum.

  • 👍5
joncfoo commented

I've created #1154 that updates to 3.41.2 🤞🏽

  • 👍2
credativ-dar commented

Upgrade to sqlite 3.42 has been merged in #1166, but there has been no release yet.

rittneje commented

Closing because the latest release (v1.14.22) is bundling SQLite 3.45.1.