Security Advisories (3)
CVE-2018-3906 (2018-09-21)

An exploitable stack-based buffer overflow vulnerability exists in the retrieval of a database field in video-core's HTTP server of Samsung SmartThings Hub. The video-core process insecurely extracts the shard.videoHostURL field from its SQLite database, leading to a buffer overflow on the stack. An attacker can send an HTTP request to trigger this vulnerability.

CVE-2021-20227 (2021-03-23)

A flaw was found in SQLite's SELECT query functionality (src/select.c). This flaw allows an attacker who is capable of running SQL queries locally on the SQLite database to cause a denial of service or possible code execution by triggering a use-after-free. The highest threat from this vulnerability is to system availability.

CVE-2019-19242 (2019-11-27)

SQLite 3.30.1 mishandles pExpr->y.pTab, as demonstrated by the TK_COLUMN case in sqlite3ExprCodeTarget in expr.c.

Changes for version 1.68 - 2021-07-22

  • Switched to a production version

Changes for version 1.67_07 - 2021-06-19

  • Upgraded SQLite to 3.36.0

Changes for version 1.67_06 - 2021-06-14

  • Experiment with another quadmath patch to see if it works with an older version of FreeBSD

Changes for version 1.67_05 - 2021-06-13

  • Made DBD_SQLITE_STRING_MODE constants exportable

Changes for version 1.67_04 - 2021-05-31

  • Upgraded SQLite to 3.35.5
  • Stop setting THREADSAFE=0 if perl has pthread (ie. 5.20+) (Bjoern Hoehrmann++, GH#69, #72)
  • Fixed a memory leak in ::VirtualTable
  • Introduced "string_mode" handle attribute (Felipe Gasper++) to fix long-standing issues of sqlite_unicode (GH#78, #68)
  • Added a dependency from dbdimp.o to the *.inc files included into dbdimp.c (Laurent Dami++, GH#74)
  • Fixed an offset issue of VirtualTable (Laurent Dami++, GH#75)

Changes for version 1.67_03 - 2021-03-31

  • Upgraded SQLite to 3.35.3
  • Enabled math functions introduced in SQLite 3.35
  • Fix quadmath issues (Tux++, leont++)

Changes for version 1.67_02 - 2020-12-06

  • Upgraded SQLite to 3.34.0
  • Added a few new constants
  • Added sqlite_txn_state method to see internal state of the backend

Changes for version 1.67_01 - 2020-11-24

  • Switched to XSLoader (GH#63; toddr++)
  • Use quadmath_snprintf if USE_QUADMATH is defined
  • Use av_fetch instead of av_shift (norimy++)

Documentation

The DBD::SQLite Cookbook
Using fulltext searches with DBD::SQLite

Modules

Self-contained RDBMS in a DBI Driver
common SQLite constants
SQLite virtual tables implemented in Perl
virtual table for viewing file contents
virtual table hooked to Perl data

Provides

in lib/DBD/SQLite/GetInfo.pm
in lib/DBD/SQLite/VirtualTable.pm
in lib/DBD/SQLite/VirtualTable/FileContent.pm
in lib/DBD/SQLite/VirtualTable/PerlData.pm