From owner-freebsd-security@freebsd.org  Mon Dec 17 12:09:52 2018
Return-Path: <owner-freebsd-security@freebsd.org>
Delivered-To: freebsd-security@mailman.ysv.freebsd.org
Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1])
 by mailman.ysv.freebsd.org (Postfix) with ESMTP id 4965A133CFE0
 for <freebsd-security@mailman.ysv.freebsd.org>;
 Mon, 17 Dec 2018 12:09:52 +0000 (UTC)
 (envelope-from pkubaj@anongoth.pl)
Received: from mail.anongoth.pl (mail.anongoth.pl [46.248.190.61])
 (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits)
 server-signature RSA-PSS (4096 bits)
 client-signature RSA-PSS (4096 bits) client-digest SHA256)
 (Client CN "mail.anongoth.pl",
 Issuer "Let's Encrypt Authority X3" (verified OK))
 by mx1.freebsd.org (Postfix) with ESMTPS id 2945B6AD42
 for <freebsd-security@freebsd.org>; Mon, 17 Dec 2018 12:09:49 +0000 (UTC)
 (envelope-from pkubaj@anongoth.pl)
Received: from anongoth.pl (unknown [10.8.0.2])
 (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits))
 (Client CN "pkubaj", Issuer "anongoth.pl" (not verified))
 (Authenticated sender: pkubaj@anongoth.pl)
 by mail.anongoth.pl (Postfix) with ESMTPSA id B28B3302F1
 for <freebsd-security@freebsd.org>; Mon, 17 Dec 2018 13:09:37 +0100 (CET)
Date: Mon, 17 Dec 2018 13:09:37 +0100
From: Piotr Kubaj <pkubaj@anongoth.pl>
To: freebsd-security@freebsd.org
Subject: Re: SQLite vulnerability
Message-ID: <20181217120937.GC78044@smtp.iq.pl>
Mail-Followup-To: freebsd-security@freebsd.org
MIME-Version: 1.0
Content-Type: multipart/signed; micalg=pgp-sha512;
 protocol="application/pgp-signature"; boundary="XMCwj5IQnwKtuyBG"
Content-Disposition: inline
User-Agent: Mutt/1.11.1 (2018-12-01)
X-Rspamd-Queue-Id: 2945B6AD42
X-Spamd-Bar: /
X-Spamd-Result: default: False [0.73 / 15.00]; RCVD_VIA_SMTP_AUTH(0.00)[];
 R_SPF_ALLOW(-0.20)[+ip4:46.248.190.61]; TO_DN_NONE(0.00)[];
 DKIM_TRACE(0.00)[anongoth.pl:+];
 DMARC_POLICY_ALLOW(-0.50)[anongoth.pl,reject];
 MX_GOOD(-0.01)[mail.anongoth.pl]; SIGNED_PGP(-2.00)[];
 NEURAL_HAM_SHORT(-0.83)[-0.829,0]; FROM_EQ_ENVFROM(0.00)[];
 MIME_TRACE(0.00)[0:+,1:+];
 IP_SCORE(-0.33)[asn: 47544(-1.69), country: PL(0.03)];
 ASN(0.00)[asn:47544, ipnet:46.248.160.0/19, country:PL];
 ARC_NA(0.00)[]; FAKE_REPLY(1.00)[];
 R_DKIM_ALLOW(-0.20)[anongoth.pl:s=ANONGOTH];
 NEURAL_HAM_MEDIUM(-1.00)[-1.000,0]; FAKE_REPLY_C(6.00)[];
 FROM_HAS_DN(0.00)[]; TO_MATCH_ENVRCPT_ALL(0.00)[];
 NEURAL_HAM_LONG(-1.00)[-1.000,0];
 MIME_GOOD(-0.20)[multipart/signed,text/plain];
 PREVIOUSLY_DELIVERED(0.00)[freebsd-security@freebsd.org];
 RCPT_COUNT_ONE(0.00)[1]; RCVD_COUNT_TWO(0.00)[2];
 RCVD_TLS_ALL(0.00)[]
X-BeenThere: freebsd-security@freebsd.org
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: "Security issues \[members-only posting\]"
 <freebsd-security.freebsd.org>
List-Unsubscribe: <https://lists.freebsd.org/mailman/options/freebsd-security>, 
 <mailto:freebsd-security-request@freebsd.org?subject=unsubscribe>
List-Archive: <http://lists.freebsd.org/pipermail/freebsd-security/>
List-Post: <mailto:freebsd-security@freebsd.org>
List-Help: <mailto:freebsd-security-request@freebsd.org?subject=help>
List-Subscribe: <https://lists.freebsd.org/mailman/listinfo/freebsd-security>, 
 <mailto:freebsd-security-request@freebsd.org?subject=subscribe>
X-List-Received-Date: Mon, 17 Dec 2018 12:09:52 -0000


--XMCwj5IQnwKtuyBG
Content-Type: text/plain; charset=utf-8; format=flowed
Content-Disposition: inline
Content-Transfer-Encoding: quoted-printable

Doesn't base also need to be patched?

AFAIK pkg uses sqlite database.

--=20
 _________________________________________=20
/ Drew's Law of Highway Biology:          \
|                                         |
| The first bug to hit a clean windshield |
|                                         |
\ lands directly in front of your eyes.   /
 -----------------------------------------=20
        \   ^__^
         \  (oo)\_______
            (__)\       )\/\
                ||----w |
                ||     ||

--XMCwj5IQnwKtuyBG
Content-Type: application/pgp-signature; name="signature.asc"

-----BEGIN PGP SIGNATURE-----
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=RmWj
-----END PGP SIGNATURE-----

--XMCwj5IQnwKtuyBG--