Skip to content

Fix potential vulnerable cloned function - #140

Open
Phuc-Thanh Nguyen (npt-1707) wants to merge 1 commit into
microsoft:mainfrom
npt-1707:fix_CVE-2020-35527
Open

Fix potential vulnerable cloned function#140
Phuc-Thanh Nguyen (npt-1707) wants to merge 1 commit into
microsoft:mainfrom
npt-1707:fix_CVE-2020-35527

Conversation

@npt-1707

Copy link
Copy Markdown
Contributor

Hi again,

Our tool identified another potential vulnerability in a clone function selectExpander() in vendor/sqlite3/sqlite3.c sourced from sqlite/sqlite. These issues, originally reported in CVE-2020-35527, were resolved in the repository via this commit sqlite/sqlite@0990c41.

This PR applies the corresponding patch to fix the vulnerabilities in this codebase.

Please review at your convenience.

@MarioHewardt

Copy link
Copy Markdown
Collaborator

We have updated our dependency on sqlite to the latest.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants