Skip to content

fix(persistence-sqlite): upgrade rusqlite to 0.41 for RUSTSEC-2026-0459 - #448

Merged
lxsaah merged 1 commit into
mainfrom
claude/amazing-cerf-taf6p1
Nov 9, 2026
Merged

lxsaah merged 1 commit into
mainfrom
claude/amazing-cerf-taf6p1

Conversation

@lxsaah

@lxsaah lxsaah commented Nov 9, 2026

Copy link
Copy Markdown
Member

libsqlite3-sys 0.30.1 bundled SQLite < 3.54.0, which is affected by
CVE-2026-119375 (uninitialized page-cache memory returned when a database
is opened with a crafted -wal file of a different page size). rusqlite 0.41
pulls libsqlite3-sys 0.39.1 (SQLite 3.54.1). No API changes were needed.

Co-Authored-By: Claude Opus 5.5 [email protected]
Claude-Session: https://claude.ai/code/session_01WGkDJ6tqiYA5CQxweGDvVJ

libsqlite3-sys 0.30.1 bundled SQLite < 3.54.0, which is affected by
CVE-2026-119375 (uninitialized page-cache memory returned when a database
is opened with a crafted -wal file of a different page size). rusqlite 0.41
pulls libsqlite3-sys 0.39.1 (SQLite 3.54.1). No API changes were needed.

Co-Authored-By: Claude Opus 5.5 <[email protected]>
Claude-Session: https://claude.ai/code/session_01WGkDJ6tqiYA5CQxweGDvVJ
@lxsaah
lxsaah merged commit 51310f9 into main Nov 9, 2026
13 checks passed
@lxsaah
lxsaah deleted the claude/amazing-cerf-taf6p1 branch November 9, 2026 20:14
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants