[OE-core] [PATCH v2] sqlite3: upgrade 3.30.1 -> 3.31.1

Mikko.Rapeli at bmw.de Mikko.Rapeli at bmw.de
Tue Feb 4 09:21:26 UTC 2020


Hi,

slightly off topic but I was checking CVEs for sqlite3 and noticed
this recipe uses the merged source tree format. This makes it very
hard to cherry-pick CVE and other patches from Debian, Ubuntu,
OpenSUSE etc.

Why use sqlite sources in "amalgamation" format?

https://sqlite.org/amalgamation.html

Cheers,

-Mikko


More information about the Openembedded-core mailing list