BSD PortsVulnerable: version 1.4.2 is affected by 20 known vulnerabilities. See below.
wip/ruby-sqlite3 1.4.2 NetBSD
Ruby bindings for the SQLite3 embedded database
- System
- NetBSD
- Repository
- pkgsrc-wip
- Maintainer
- [email protected]
- License
- modified-bsd
- Categories
- wip, databases
Description
This module allows Ruby programs to interface with the SQLite3 database engine (www.sqlite.org). You must have the SQLite engine installed in order to build this module.
Note that this module is only compatible with SQLite 3.6.16 or newer.
In the other systems
| System | Port | Version |
|---|---|---|
| NetBSD | wip/ruby-sqlite3 | 1.4.2 |
| FreeBSD | databases/sqlite3 | 3.53.4,1 |
| OpenBSD | databases/sqlite3 | 3.53.2 |
| DragonFly | databases/sqlite3 | 3.46.1_1,1 |
| HardenedBSD | databases/sqlite3 | 3.53.4,1 |
| GhostBSD | databases/sqlite3 | 3.53.4,1 |
| OPNsense | databases/sqlite3 | 3.53.1,1 |
Install
From pkgsrc-wip (no binary package):
cd /usr/pkgsrc/wip/ruby-sqlite3 && make install cleanDependencies
No port depends on this one.
Known vulnerabilities 20
- sqlite3: multiple-vulnerabilities
- sqlite3: stack-overflow (CVE-2015-3416)
- sqlite3: heap-overflow (CVE-2017-10989)
- sqlite3: denial-of-service (CVE-2017-13685)
- sqlite3: null-dereference (CVE-2017-15286)
- sqlite3: remote-code-execution (CVE-2018-20346)
- sqlite3: denial-of-service (CVE-2018-20505)
- sqlite3: arbitrary-code-execution (CVE-2018-20506)
- sqlite3: null-pointer-dereference (CVE-2018-8740)
- sqlite3: denial-of-service (CVE-2019-19242)
- sqlite3: arbitrary-code-execution (CVE-2019-19244)
- sqlite3: denial-of-service (CVE-2019-19317)
- sqlite3: invalid-validation (CVE-2019-19603)
- sqlite3: denial-of-service (CVE-2019-19645)
- sqlite3: invalid-validation (CVE-2019-19646)
- sqlite3: denial-of-service (CVE-2019-19880)
- sqlite3: null-pointer-dereference (CVE-2019-19923)
- sqlite3: unspecified (CVE-2019-19924)
- sqlite3: unspecified (CVE-2019-19925)
- sqlite3: null-pointer-dereference (CVE-2019-19926)