Anybody using SQLite?

General
1

Interesting CVE-2019-5018 with high CVSSv3 Score 8.3. Proof of Concept shown here:
https://www.talosintelligence.com/vulnerability_reports/TALOS-2019-0777

2

Interesting. But patched already as far air says…

3

Not in Xojo:
http://documentation.xojo.com/resources/release_notes/2019r1.html

4

Considering that cve came out last week and 2019r1 has been out a month, I’m not sure what you’re asking.

We have a policy now that a SQLite release must be stable for 6 weeks before it can appear in Xojo because we’ve been bitten by quick release bugs too.

5

No blame intended, was just an answer to Christian. The SQLite bug is very interesting and bites my apps aswell.

6

If needed I can of course offer a rebuilt MBS Xojo SQL Plugin with the fixed SQLite.

7

[quote=436135:@Greg O’Lone]Considering that cve came out last week and 2019r1 has been out a month, I’m not sure what you’re asking.

We have a policy now that a SQLite release must be stable for 6 weeks before it can appear in Xojo because we’ve been bitten by quick release bugs too.[/quote]
isn’t it possible to make sqlite an external plugin like other databases, so that each one can use the version he wants, and eventually return to an older version if the current has a bug that prevents him to build his apps ?

8

Not always. There are times when plugins are tied to particular ide versions because of other prerequisites.