Skip to content

v4.9.0

Choose a tag to compare

@sjlombardo sjlombardo released this 15 May 18:38
· 60 commits to master since this release
  • Updates baseline to upstream SQLite 3.49.2 - Updates the SQLite baseline to SQLite 3.49.2 to address a security issue in the upstream SQLite library.
  • Removes use of static mutex in sqlcipher_extra_shutdown() - Fixes a small resource leak related to library cleanup when compiling with SQLITE_OMIT_AUTOINIT defined.

Additional Context: The SQLite 3.49.2 update fixes a bug that could allow someone with access to run arbitrary CREATE TABLE statements to trigger a memory error and process crash. The issue was introduced along with NOT NULL optimizations in SQLite 3.40.0 and subsequently incorporated into SQLCipher 4.5.4.